last executing test programs:

5.536212929s ago: executing program 1 (id=25):
syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000040))
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x633, 0xffffffffffffffff}, 0x0)
mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xa)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x201, 0x5, 0x200, 0xffeffff9, 0x0, 0x0, 0x2, 0x800}}, 0x50)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x401}, 0x1c)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r3, 0x0)
r5 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$nfc_llcp(r3, 0x0, 0x0, 0x0)
sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4014}, 0x8804)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0x40000001, 0xffffff6f, 0x3, 0x31237648, 0x7, 0x2, 0x5}]})
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe0000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)

5.331659542s ago: executing program 1 (id=26):
unshare(0x60040000)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @mcast1, 0xfffffe01}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000000b00000000000000000000001000030076657468300000000000000024001200080001007665746818000200140001000000000000000081000000000000000010000300766574683100000000000000", 0x64}], 0x1}, 0x0)

5.317302662s ago: executing program 1 (id=27):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = epoll_create1(0x80000)
r3 = fcntl$dupfd(r1, 0x0, r1) (async)
fsopen(&(0x7f0000000680)='sockfs\x00', 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="ec000000230001"], 0xec}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, <r9=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=<r10=>0x0) (async)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x30, r2, 0x684fe000) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', <r11=>0x0, 0x4, 0x0, 0x5, 0x7ff, 0x2c, @mcast1, @dev={0xfe, 0x80, '\x00', 0xe}, 0x40, 0x8000, 0x1c, 0x1}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'syztnl1\x00', <r12=>r11, 0x1, 0x40, 0x7, 0x2, {{0xc, 0x4, 0x3, 0x2c, 0x30, 0x65, 0x0, 0xd3, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x1c, 0x1, 0xf, [{@rand_addr=0x64010101, 0x100}, {@rand_addr=0x64010101, 0x7ff}]}, @ra={0x94, 0x4}]}}}}}) (async)
r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) (async)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x80000000, 0x1, 0x20010, r3, 0x0) (async)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r15, 0xae03, 0xc) (async)
socket$packet(0x11, 0x3, 0x300)
sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r11, @ANYRES8=r12], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x46098) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async)
r16 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x4200, 0x0)
write(r16, &(0x7f0000000000)='3', 0x4e) (async)
lsetxattr(0x0, &(0x7f00000006c0)=@known='system.advise\x00', &(0x7f0000000700)='\x00', 0x1, 0x1) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
syz_ublk_setup_queues(r13, r10, &(0x7f0000000480)={0x0, 0x18c2, 0x2000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x43}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x200019b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x4000, 0x0, 0x252, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeafc, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r9, '\x00', {0x1, 0xd55, 0x0, 0x0}}, 0x0) (async)
syz_ublk_setup_queues(r5, r10, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r5}}], 0x16, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r9, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)

4.909967708s ago: executing program 1 (id=30):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
syz_usb_connect(0x3, 0xa1, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1) (async)
syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000200)=ANY=[@ANYBLOB="120110010000004099040f804000010203010902"], 0x0) (async)
ioctl$EVIOCRMFF(r1, 0x41015500, &(0x7f0000000500)=0xfffffffb) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0x5)
setreuid(0x0, r4) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) (async)
socket(0x21, 0x1, 0x1)
socket(0x10, 0x3, 0x0) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) (async)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async)
chdir(&(0x7f0000000140)='./file0\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) (async)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc)
r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4d359558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc2102030100f9a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r7)

2.931650097s ago: executing program 2 (id=45):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000004c0)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x92e7ffd, 0x1, '\x00', 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.907351197s ago: executing program 2 (id=46):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x2})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x101100, 0x96)
ppoll(&(0x7f0000000180)=[{r2, 0x800c}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil})
r3 = getpid()
syz_open_procfs(r3, &(0x7f0000000080)='projid_map\x00')
r4 = socket$inet(0x2, 0x80006, 0x3)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000100)={0x2, 0x4, 0x6, 0xce})
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000540)=0x4)
ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000340)={0x29, 0x3})
r6 = gettid()
syz_open_procfs$pagemap(r6, &(0x7f0000000140))
ioctl$int_out(r4, 0x0, &(0x7f0000000000))
syz_usb_connect(0x1, 0x3d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0xb3, 0x5d, 0x6b, 0x8, 0x13d3, 0x5103, 0xc828, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x3, 0x7, 0x60, 0x1, "", [{{0x9, 0x4, 0x43, 0x1, 0x0, 0xe, 0x1, 0x0, 0x6, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x2, 0x5, 0x7}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x2}]}, @hid_hid={0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xf46}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

1.934814772s ago: executing program 3 (id=52):
r0 = dup(0xffffffffffffffff)
ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000000)={0x4, 0x4})
ioctl$RTC_PIE_OFF(r0, 0x7006)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x101, 0x18, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]})
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000140)=[@ip_retopts={{0xdc, 0x0, 0x7, {[@cipso={0x86, 0x3e, 0x1266509df2be0d, [{0x1, 0xc, "c4c293458756fd0dbf91"}, {0x2, 0xb, "b5770dacd1713fdbc8"}, {0x1, 0x3, "cb"}, {0x7, 0x12, "8fac62e91b88f7493fecdfe1926a5c3f"}, {0x2, 0xc, "5cf19943eee9ebe37428"}]}, @timestamp_prespec={0x44, 0xc, 0x90, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp={0x44, 0x1c, 0x80, 0x0, 0x1, [0x1, 0x6, 0x5, 0xcac9, 0x2, 0x660aec7d]}, @cipso={0x86, 0x64, 0x0, [{0x2, 0x11, "5ffe6f5fd9e18e63b331afb7b4f355"}, {0x1, 0x7, "5884a0f781"}, {0x0, 0x3, "18"}, {0x6, 0xf, "578b9e3caea7cb908ccc02927f"}, {0x6, 0xa, "b369cf1be2b3a753"}, {0x0, 0xb, "131d1e9840bd416a27"}, {0x1, 0x9, "5024711617d86b"}, {0x6, 0xb, "e88a17e5b903185d5c"}, {0x7, 0xb, "e35011bc087e22b99d"}]}, @end]}}}], 0xe0}, 0x8000)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x8)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = openat(r0, &(0x7f00000002c0)='./file0\x00', 0x40000, 0x14)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
clock_gettime(0x0, &(0x7f00000005c0)={<r5=>0x0, <r6=>0x0})
recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000300)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)=""/117, 0x75}], 0x2, &(0x7f00000004c0)=""/148, 0x94}, 0xffffff00}], 0x1, 0x2002, &(0x7f0000000600)={r5, r6+10000000})
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
fdatasync(r7)
ioctl$XFS_IOC_FSGETXATTRA(r7, 0x801c582d, &(0x7f0000000640))
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001700)={&(0x7f00000006c0)={0x1018, 0x14, 0x400, 0x70bd29, 0x25dfdbfb, {0x11, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "01b5e33c49a4d3c6435c8d32432ac7bba7489548d4754649e359a751882708cb1a753b1f0f837067c224ca6585b6a3c8403b25078f1e34afe6f5af220921d53e2e2c0543a67c7bf9c9494354dd58841220e9594b0121f07233ce2d19ecb90104b3f8e71714bd63a41efb14e70f414943f595d4282e958f2973d1c4d2dbdb387457fa66a5e0c5005faa130138ded16d5dcaa6a0225834c396dfb59e0c630ad08df4b526200b05b29f9fcc5bf924660b68397d5fad90fb768e0053592270081da99abb71f67c7a3155e527ef63e3361e67713b87e95f84fe4e6e9efda215398bfbc25da97d63f12d2fc2c1ecaf37a57193438261f98f061ba6802e2a27de874912ea1f13a057ec55315d38ba2e3d716cd485c453c27be448cfe1d19f5479f93b6bbf730ba48a33bd108c425817b06208972fcea7ead7c477c61fe97959acbf99fc4de133a73fbf783ca4a9f5c85332db402518e95ccf44b82aa094dad021dfeb03160b5c8a74f44fa3dc03e910cc940d28dd9f9fefd57bd081c3b63bd1297968a4c3624111c34ae5b39a89e99d3e0c52828f3590f88d6bdce518ae2b5f94a880f639fc1e1006a945809f5ed858a96b8abb9e41111e5405bdd02d984b097cf14455c4b715f9b2adf6f2d282b525dc4a92b6839d7d713447dfbc0120f8013f6ca562f18217aaf87f56071b09c22cabf5eb9188e8278f63ab308e7b8ccd622cf27c05d8681b133031288e6d3842f358afc6941d3ac331e0128e8e37d5387b250525d4985630ae451fd66d103b0869c5455c13dea3af47465b67a042144c97937316edbad7aa527bf79fbce77e333e55cb0c6c2955e566755bca062e039180e1fa8dddf508553300a20afc872dc71dfae89b924cab5431ffbb3e32fd83547237d560279d18bfaf7346e393a58d1cc188cd41a9dfe86ad030f7f9cba84aacf2be144b80ae947936750964a62f5c0209b719baa1df93471f31f61b794fcd78c512aa703eb4865926dbb8aadbcb417f5b4bc5353aea99df438e41d66ac39755900114bfeab1e9425e3735a78acf0358d7d3acca700892a570debc1536bcba1525377c83df46af083295154bcf5ad685f1c8385bb6833815ab0fa7c028e1c75ab2fb755960508f303fab116873b527391bb1436d96101f409033436d450b0ede1ea251401f7187201339748a2a612fc4833c0407596f1bd13a59979e1fea12a511c69eddf78b3cf53c52ca8d283ee931cff24dcf12a248cbd0174971ebce2781401636545b06574fde65bdcccb75559b05d5406d8ff645039673ea0d037c1fe7c88021c98e8a128fa98fa8339e759d1200249a54709998f0487b2e34043b092d23e9a21dd0ac3c1dbc14819af77c38dd455a1fd24dde54752fa2ac396d910713a9d4b46af89c2caaa38d74f571f3ac34939c53964e1f41e2d0c9141ac038fb62ed7f53a2036c26a2ab19243db5949512bf91c238222158ce5d3852e67867a6e001e30d8d1f6d9831c759069992ab96ec36fd8d2cddfdce0064878ace6993ae29798757a65e1828ca390f894a894fce3a8a138de2c907991784bf690206b62f91f076b90adfc28a2f026b81250b582d05fec18c33fb314f6ed64fe058c5fe766457d517226769d2f611f0eeb78227d6904786734933feb69f9639cc5d0ee0c1ec2e78eb2d2866a0987e8e13a7f481b05d3c948d8ef3e4707804055aae62a1071ef3fbb1774979eecbf1eb852bbb320226280c8435697b006e1d7753b4977bd0ab141aba4770669d03e876853fdffbadc89b77165d49e106fcdb9a87409dbba09ff3a7e8d445e3997858da2eba491c3b041a073af58297b346d4a2359d8c830d5b24690100eca87b7ea915e32eb2bae7012bc7184778b84ddbc00930705d290027ed4bbc78ddc7402c389a2f159e6deb85fc2651c7aff0be98a9f525bf074364f37206976d297810ccad9a0a385cdc3c205a29d16f8d17d7363faa2baa07d3b3df00741bec838a618f19e7b8530eed3791169b42ad3287aa6229545d34c29006f43298c693bbbb1fc9d80ac4f7be3ea444293380459c4338dbf2162c33910627c223db71841a30daaccbcf9382ed4bd3d61041cbc41a9145bee33b5d71f9e3b4433d5e60df3bc1cbdfd3da441e29ed16d5815488493db6693476d28388bbfee37648bd40a5e85c71b08c83ce25b53bcda1c38dfb596dddd4e1f3870e32f5524a5feebd240aa1bfb4705b563c2c19c56052b5443c4fdf401eaa20554e51c0b9ce91d6e03211e4a463f06935fea1640a5e93c341e10a971faa11f64cb4ef4d9acfd90550c95533d69369b2cd32da549d552385343eba8f81476d04ff8083a003bd3e0468b6f1dc26499f904544be559ec0eadc8ea0f9ea518bc617a4b622e7bc17b1196e41a0c65a52e372b39fe78390cb9108c07b909a55d2a389420ccaaeeecf95bbe23d5f0727733a46733b388bbf0b2583af0f6db66a9eb0fcab27598063b02aab2764332dec8856afd2f2e099cf73fcc9b1a894def2606218a03852feebd9454e6d81b0b0de4ee8c2897a780a6b5b200ad64c348a58d576b5e63231c7bc5ac19c750544d25ba9c6cc79b2ca65f879726c72f28e86a22dd2e7ae0ad3a7ea70756d6f8badb57d430720a6942e4d6e816a08ed3e7cf3eba03e8bf0759c5c05a9513bac1527ed319702eb2406fe0c899fe9e03f464cece71d670ce76bbe5d61f87a8d87352b630a00f083e82e323e8705e9061db02eaa2a020aa9c0b6a1e855c5ae3599067ec02a7ec36046b9548fd24214d76b35f19184f3fbd89773a62ae8843d979f2da409ab217f3e937a69a6ea0e2abe8c51cb77df5eb2e4721e430b3e9e0c9a9f9b92f818f9b898b4ff3646b8f5c7c5edd597bbd74fb2aa0c06b570a0c4a6959044644ffdbc396cdd97f791a3300378ceb21ef4e8b940ffefbc0c7f312d7efb7c5b66646405a1454869207c9b936a0368391fd6181a8c012aebacad1a3bb7d1cd512e4f528101ad2bcc34c0bebff2c9f5b8c9631fb2badaa42f502c30e4ca27489226d8649b2dc259162bd82aa66cdf36058204c2128b8af957fc5156e88da60549e70ba15778bd48148484beb4adbecad6156c81b52146d239eeeb0c18dbc9382e94d20d1b6c3fa8611bab46e988ef17a39e9e6a3b7510153507ee5eac4764a0c169c725eea6c80b71c843800c0a72d659bd265018267fbe171a6c64281393757d2ef1c17feef8283174e1cc287b9a3a9885e483df115c4ed6e6f25d690f35078e9bf10dbac1664af38a463c31cc661020dfb922a1457b79a745e56138ebe6b52eba46672200b43a2748cb8b57b12d0bea11d00315024c6da2ea842dc63e92679b670c5f6ec95ef40a847c2016046979612f20b0b49aa1e57ecb209a030e5f4ba568a7b2087443541c39bb8750efa0747d1c7faeda5014f58adee832eb43e2e47bd7dead88df043cc4bdf4cbc954ff9993d08a39733f26c81cbc6ef433211c4a778b92af88d5c8db00865d6d7620c807b4217f734ca65cb544bd2055982435043e91cf356d269a171441908e488c86aaecae50e48cfa8e33cacf2a3bfa9991a802bcc727409c0eaef155a2724d2e3043a32759f4cc28aeafca19c9a67a5e14a1b959b06347405815a365b93471407b6af82020e5089358d9f01e72cb7ac96c94b4298adaa2dfd9f6e24e30f48bf7773880a69aa51a0772d27d33866997f151c99ee22acabbadb64ca3e8a279f48b2c67fe563f5b1219d665a97b2540c6ab95aeddb02ddce9207739dc0f6e509e7bdc126a995161f2076400609b6be9064c6cfbdae181854f1f997d1607797b9deeab1c0452eff93a890aefe971d730839a2151c7e2220c3a216bf3fddd7a2ee7fd17d513dbab4469627af72b2cb642389e695b2e8d851ba00f0073e01de8c7c2775b3a874354e2c0f720f2136598791bef92d092f850a85c4a42a2b84e8edee9b96367bd6e3e7c48876e479ddd62ba4d16665fd8763574600cd110ca7660b32f6976b83f57c4ebd957568d1d92c4657cd6e13cd3c0450e8bd09ecaa1349e7ed5eca0c651db7aa300219df0104fb259071f6cf56672681993132fa3475fffafe5322cea4f826509dc18fc8d3396460c892a93bb03f063fa1c7863caeff0b7560d2dbbb58d96d2ce21649a1f7fc171a63b84300bccb1017461a7428b482b26c29b3457560dabe596879c8c3b679a3540ba2f56478310b15ec2987e14746591ed34ec148381e892d6a7dc06eabe1d787d3c4649bd3ebb8db3b9adb79631e7b40731d812e678ae3b606cb4058a52c84fd40ba45cd61265f0dcc1c534e4af083161ce1a8825a01d31c4e783135f5e2743c1000504dbf34f1dc75211626fcefa4ad8db161e1b8158ea821bbdc115ceebcbf8d7646eb44a0f8d3112736f6acfad200cf20281cdeb24a4d2091904689acb6f99186695a2831802bb3f0fd08f46b3c2ff8737620f1cc067344242c2fabd10057a0efad3e543ffe6ad4a342ea0f2eccbb84d04958cdc24d56b8d755254e962bb311f7ac170df177174adfb5a7d6dafb5fc9eb3bcb1b267561b7bd47ac0bfcf95beb3ecfdf5383875a0433ee930240a142acce697549dc26bc37899fe288f99a65899ca9af133aec47cf71f15e2fa2c6e16f81959b3578f1c80bb1dae17329cd1ba549ed4edc8f9348b7f06321b92cc44ecc3b6c06029025e2a65cbb41d558638b4fcf06c5008c22a6ce55277103cd8552abf17db18b69e94872acc088e9c853c827745724ca807738a911b31a232b6b28d70329ef5f79ef14e29336583d068273cfb84d314c53bcc011d4bbbbdb628aa58537bce5210c2954b42ae576d6ca86e1016ee973b865235c74013538d701dc434e484b2133d07ebbf05a0c24b32b652478f2e41684c2232613c2c40f38888e0911ec040134b5abb72964beb6bcd2008bd1c0aa823241a81ea2fab78c11fbf7e7af0dfd64d789e4151b940cb1cc66b179d545fa29b4401bc883cdb64ed1847f0b48555802888067ce6e0913e94a46bd3aa9b2924256458037d27fda9f642585e6cefacf5e298ae8fbc280c429ab5c70cfe1c19fe4470da6021c3e4e02983e7746da11073ed389b99d148eb3c362eb455917108d419d343514d35e1623975508c6d5b892beafbe467df3f97a6836b828abe32cc09b05be87ab3135d18158b01c9f55784aa7332f7ffb48530ab1ae4f9eaaa5e5756c1a22e89e75ca51e2567b78049263409189370d45085022921783c169c995239fd22ca39fe33740a91f953c3444a10fb2c8df0f43b7a4194dabff721f8f7b362c42c4e15fb8166da311e8f1f90f57e1ac5e38b4fc32df1a535d2243a8d74c4c51a4c5f4c8c86e7e0bd08912364a1e9eb7ebf1a6d4afe8e2f4d4fd4790f2e47c55f3ffa7a2ae13b0fac435968715d57dad68cbb747f52a2bd69c5d8161158eda22d1a0e4ed3fa113d66a5c9f1d8e5b36d9b06dc9ed8bac10c70c229400d373b02a79bfc1790f05dce36639dca4eabcabc2ba9efc30c6ae3f994d6460be10c3076f4e32f6fe7e572b23950af6e4d74f22c32b2b913e07ec87b6d9cc4b5c6e6c3d4b2365c63e407fc41e7f23924a9c13a6f0c5f36b5b3b46533baaaa339f78e9980b21f06fb666cb6a45cd72bc986ce3748309c1319623199f7dafa2090bfc91d25c16759f2118736fe4b0369507574c6067286c19957aad8d346d98d9f367f8cb9a017185390d7807e165396591e1127d70222381e512c483213745bd8b292e25237a0f27baa763e81b7d5306597d06f5a11b9fb6c1175cca6dccc4c17847c057bfef10ea5"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000001780))
ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f00000017c0))
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000002840)={&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/4096, 0x1000, 0x1, &(0x7f0000002800)=""/32, 0x20}, &(0x7f0000002880)=0x40)
r8 = openat$full(0xffffffffffffff9c, &(0x7f00000028c0), 0x428000, 0x0)
r9 = openat(r8, &(0x7f0000002900)='./file0\x00', 0x80000, 0x8)
syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000002940))
ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000002980)={0x8, 0xaba5, 0x10000, 0x5, 0xd})
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000029c0)={0x7, 0x7f, 0x2}, 0x7)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000003d00)={{<r10=>r9, &(0x7f0000002a00)='\x00', 0x1, &(0x7f0000002a40)={@_ha_fsid={[0x6, 0x6]}, {0x1, 0x4, 0x3, 0x3}}, 0x1ff, &(0x7f0000002a80), &(0x7f0000002ac0)=0x2}, 0x3, &(0x7f0000003c80)=[{0x2, 0x7, &(0x7f0000002b00)='\x00', &(0x7f0000002b40)='b', 0x1, 0x22}, {0x2, 0xe, &(0x7f0000002b80)=':(]\x00', &(0x7f0000002bc0)="c43431db35cc0aa8a4bd51a67cdcf82cbf8dc77d9f1404460be8302f2d1df146e6a9318eb131f335933ed40e3d79acec9598d1cfb428961e6992d9014b09665f1f09", 0x42, 0x12}, {0x1, 0xd382, &(0x7f0000002c40)='\x00', &(0x7f0000002c80)="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", 0x1000, 0x2}]})
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000003e80)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003e40)={&(0x7f0000003dc0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x44044)
write$cgroup_freezer_state(r8, &(0x7f0000003ec0)='THAWED\x00', 0x7)
unshare(0x10000c80)

1.934054522s ago: executing program 3 (id=53):
r0 = dup(0xffffffffffffffff)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000100)=0x6, 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2060)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae03, 0x21)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r9, r9, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="2e0f785c7f06660fc7b503000000b9ec0200000f320f300f784e0026660fc7b69edf0000b8010000000f01c1ea53000000be00660f303e0fc75fab"}], 0x0, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
r10 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"})
ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1})
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000701, r12, &(0x7f0000000380))
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x1, 0x7, 0x0, 0x7}, {0x2, 0x2, 0xe2, 0x3}, {0x6, 0x7, 0x0, 0x1}, {0x2, 0x8e, 0xd5, 0x79}]})
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="02120002009880a08b745aa47c69300100000000000000d0745a6889555218bbceb75d5097af3feaf50dfe84f33023067b4cb82fd2a98c97268a46c562bc9d15c20d000000ee09abcedc9b37d3fd060c705972e33e758f98ba4a8ac77b2c9a077464a3157682610d9cc2f4a45846dc1e8e8e7d14691444e3aef56ee13995abf0b6a91b5a1395a57509f66d77b22b43000000bae2633d7790e395e65f6cd902b8f6"], 0x10}}, 0x0)

1.855446593s ago: executing program 1 (id=54):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000080001050700ffff80"], 0x96)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)={0x31, 0x4, 0x0, {0x3, 0x2, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="66b91306000066b80000008066ba000000000f3064660f38802566b9800000c00f326635004000000f3066b9800000c00f326635002000000f30660f28c12e0f980f65f4660f092ef081270cae66b9800000c00f326635010000000f30", 0x5d}], 0x1, 0x54, &(0x7f0000000340)=[@efer={0x2, 0x8401}, @cr0={0x0, 0x40001}], 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
write$tun(r5, &(0x7f00000006c0)={@val={0xa, 0x1}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, '\b\x00', 0x50, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x5, '\x00', {0x3, 0x6, "91004e", 0x10, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, [@srh={0x11, 0x0, 0x4, 0x0, 0x9, 0x50, 0x10}, @srh={0x87, 0x2, 0x4, 0x1, 0xff, 0x20, 0x9, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}]}}}}}}}}, 0x8a)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @uid=r2}]}, 0x20}}, 0x0)

1.614693517s ago: executing program 1 (id=55):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
syz_clone(0xc881300, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0xc)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x6, 0x3, &(0x7f0000000080)=0x2})
r3 = syz_open_procfs(0x0, &(0x7f0000000040))
sendfile(r3, r3, &(0x7f0000000280)=0xfff7fffffffdfffc, 0x7)
write$input_event(r3, &(0x7f0000000000)={{}, 0x3, 0xa}, 0x18)

1.567596157s ago: executing program 2 (id=56):
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = syz_ublk_setup_io_uring(0xd, 0x0, 0x0, 0x0, 0x0)
syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304, 0x3a}, "0f6b01fa00a30c00", "9e8ecc7bb535247672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "0002d900", "a1014200000102a0"}, 0x38)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800110060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe)

1.471586109s ago: executing program 2 (id=58):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540)={0x2, 0x41ae, 0x6, 0x4, 0x8, 0x90, 0x8}, 0xc)
bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe)
listen(r1, 0x10000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x12)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540)={0x2, 0x41ae, 0x6, 0x4, 0x8, 0x90, 0x8}, 0xc) (async)
bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) (async)
listen(r1, 0x10000) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async)
creat(&(0x7f0000000000)='./file0\x00', 0x12) (async)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) (async)

1.462240529s ago: executing program 2 (id=60):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)=<r1=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/virtio/drivers/virtio_net/uevent\x00', 0x1, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/virtio/drivers/virtio_net/uevent\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='add', 0x3) (async)
write(r2, &(0x7f0000000200)='add', 0x3)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x700007c) (async)
fcntl$setpipe(r3, 0x407, 0x700007c)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
fcntl$setpipe(r4, 0x407, 0x100000)
socket(0x1e, 0x4, 0x0) (async)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r6, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x9e, 0xd, 0x0, 0x2, 0x3, 0x9, 0x2ca, 0x38, 0x25e, 0x406, 0xffff, 0x20, 0x1, 0xfff8, 0x41e, 0x200}, [{0x6474e551, 0x2714, 0xf20c, 0x1, 0x9ce6, 0x6, 0x3, 0x8}]}, 0x58) (async)
write$binfmt_elf32(r6, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x9e, 0xd, 0x0, 0x2, 0x3, 0x9, 0x2ca, 0x38, 0x25e, 0x406, 0xffff, 0x20, 0x1, 0xfff8, 0x41e, 0x200}, [{0x6474e551, 0x2714, 0xf20c, 0x1, 0x9ce6, 0x6, 0x3, 0x8}]}, 0x58)
close(r6)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvfrom$unix(r5, 0xffffffffffffffff, 0x0, 0x12040, 0x0, 0x0) (async)
recvfrom$unix(r5, 0xffffffffffffffff, 0x0, 0x12040, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000003240)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000)
recvmmsg$unix(r5, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x2042, 0x0) (async)
recvmmsg$unix(r5, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x2042, 0x0)

1.406287339s ago: executing program 0 (id=61):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0xa})
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200))
close(r1)
r2 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1)
r3 = socket$netlink(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x41f4, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380))
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x1007f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x6, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x4003, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x402, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x3, 0x4, 0x0, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x1086, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x8, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x3, 0x4, 0x3fffffff, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x8, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./sys\x00', 0xa7)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)="b760871c69342fe3c993087ea32860e08e5a3f46dca5139e2ca68e469f0b89", 0x1f)
ioctl$OCFS2_IOC_RESVSP64(r2, 0x4030582a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xa4, 0x80000000, 0x8001})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0xd2fc, 0x0, 0x0, 0x0, 0x28, 0x10, "fed1f8a0e91ddaaca7bd6447a4b400000000dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108010400005397bab22d0000b4a95c064c65179ed39e01157d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000180)={0xcf43, 0x4cb, 0x2, 0x9dff, 0xe, "3d52e3ff00"})
write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x1a)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r8 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x2)
ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000180)={0x7, 0x2, 0x561})

963.533276ms ago: executing program 3 (id=62):
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x600, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='fuseblk\x00', &(0x7f0000000d00)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x9b\x9bO\x88/\t\xcf\x9b\x9f\b\xb6\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcd\x89F\xd0#\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88\x1d\bn\x7f\x0e\x85\xa5\xb4\x05?_\xc9\xef\xe0Q\xdb\xb6\x935\xf1\x18\xac\xe0\x15\xf3\xde\xbd\xb5\xa1\x06\xfd7\x87\xe1\f\x0f\xf8\xc5\x8a\xdc!\x00\x00@\x00'/119, 0x0) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"3a4b31680fe17f1efe952c4fc062c071", 0x0, 0x0, {0xca, 0x400}, {0x5, 0x5}, 0xd1, [0x10, 0x6, 0xfffffffffffffff7, 0x10, 0x8, 0x8, 0x3, 0x4, 0x2, 0x8, 0x0, 0x1, 0x6, 0x0, 0x46000000, 0xcdb]})
read(r0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) (async)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2) (async)
ptrace$peeksig(0x4209, r2, &(0x7f0000000000)={0x2, 0x1}, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4) (async)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0x8}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) (async)
r4 = getuid() (async)
getresuid(&(0x7f0000000000), &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
setreuid(r4, r5)

957.209796ms ago: executing program 3 (id=63):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xc, 0x0, 0x0, 0x0, 0xc, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "0200000000000000000010000000000004b20000000000001100", [0x8, 0x5980]}})
fallocate(r0, 0x0, 0x1, 0x1)
r2 = inotify_init()
r3 = socket$tipc(0x1e, 0x5, 0x0)
listen(r3, 0x0)
syz_ublk_setup_io_uring(0x2e16, &(0x7f0000000040)={0x0, 0x40000, 0x4, 0x2, 0x158}, 0x0, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x80800)
close_range(r2, 0xffffffffffffffff, 0x0)

601.264761ms ago: executing program 2 (id=64):
mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
ioprio_set$pid(0x1, 0x0, 0x6000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x2, 0xa3f1, 0xfffffffffffffff9, 0x50ff, 0x9, 0x8})
syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0xd0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa, 0x5, 0x2d, 0x1}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x402, 0x6, 0x6, 0xc, 0xd, 0x9}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x401, 0x8b, 0x4, 0x8, 0xffff}, @output_terminal={0xc, 0x24, 0x3, 0x6, 0x401, 0x80, 0x1, 0x9, 0x5, 0xd7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x2, 0x2e, {0x8, 0x25, 0x1, 0x80, 0x0, 0xaa, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xb0, 0x80, 0xf7, {0x8, 0x25, 0x1, 0x1, 0x3, 0x5, 0x5}}}}}}}}]}}, 0x0)

557.817842ms ago: executing program 0 (id=65):
stat(0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)

327.585255ms ago: executing program 0 (id=66):
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = syz_ublk_setup_io_uring(0xd, 0x0, 0x0, 0x0, 0x0)
syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304, 0x3a}, "0f6b01fa00a30c00", "9e8ecc7bb535247672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "0002d900", "a1014200000102a0"}, 0x38)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800120060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe)

308.176296ms ago: executing program 0 (id=67):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0)
getdents(r2, 0x0, 0xfffffffffffffd96)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x4e21, 0x80, @mcast1, 0x7}}, {{0xa, 0x4e22, 0x3, @remote, 0xe}}}, 0x108)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
syz_open_procfs(r3, &(0x7f00000000c0)='syscall\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0)
write$binfmt_format(r4, &(0x7f0000000080)='-1\x00', 0x3)

279.059696ms ago: executing program 0 (id=68):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_ublk_setup_io_uring(0x600f, &(0x7f00000001c0)={0x0, 0xb3a6, 0x100, 0x1, 0x309}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000340), &(0x7f0000000380))
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f00000001c0)={0x20080522, r2}, 0x0)
syz_ublk_add_dev(r0, r1, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x29, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x40}}}, &(0x7f0000000300)) (async)
syz_ublk_add_dev(r0, r1, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x29, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, <r3=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x89a3, &(0x7f0000000380)={'bridge0\x00', @random="0c0000000988"})
syz_ublk_setup_queues(r6, r4, &(0x7f00000000c0)={0x0, 0x4871, 0x10000, 0x3, 0x11d, 0x0, r6}, 0x0, 0x4, &(0x7f00000020c0)={0x2e, 0x1, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6b}, 0x0, r3, '\x00', {0x0, 0x736, 0x0, 0x0}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x40, 0xd}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x108c4}, 0x4) (async)
sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x40, 0xd}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x108c4}, 0x4)

191.421257ms ago: executing program 0 (id=69):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x0, {{0x2, 0x4e24, @multicast2}}}, 0x88)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x2000})
r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x1000, 0x410080)
ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000380)={0x12, 0xc6, &(0x7f0000000280)="ff198348df49fb6be1bb27d8a33b08393600b9ab83b9213f3fe1b915de236f4001facfd96c4419a3eb9c129f16946af5d82c0e00cea7073fed07eed8aee6cd1cb583b9c407206fffb065f842b2d715098330e3c8324fa9434a9cc508c84a60ab46ddfa70b448b947ca679924e10d94d85d9e729da51c929532dbb52874f7c1da833f743f038b6ba451914a7601f00211a8998533e83668a300ee9a429d6a7d99a9d873b9bc012fc91f37995b409eaa036f736a824b1790741d6e8cf5882af7b2c79988c32583"})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x7, &(0x7f0000000100)=[{0x4}, {0x9, 0x7c, 0x81, 0x7fff0000}, {0x2d, 0x0, 0x1, 0xfffffffc}, {0xc, 0x4, 0x1, 0xe777}, {0xc6, 0x4, 0x8}, {0xc7f9, 0x6, 0x1, 0x2}, {0xc00, 0x5, 0x7, 0x10040}]})
fcntl$getownex(r2, 0x10, &(0x7f00000003c0)={0x0, <r5=>0x0})
ptrace$ARCH_SET_CPUID(0x1e, r5, 0x0, 0x1012)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000})
sendto$inet(r0, &(0x7f0000000440)="70ab2785aee439a14bf2629d1ba92a78dc3d1582abbc07ae774729ad983e0b8d3f490c1f7281cfbee883a138283ce589d9ea8f404e65d7c88fb08516b103b1f5df2dd798332c0a36730b56c9404769b647df72db4514da0dbef10e48ca111e7bb166ff98b113f22384a0b5c657c5367373aa6b169b008e832f56d65fa1593a801baf815148dc5b7eaa", 0x89, 0x20006844, &(0x7f0000000500)={0x2, 0x4e24, @empty}, 0x10)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0x40000, 0x115000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x0, {{0x2, 0x4e24, @multicast2}}}, 0x88) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x2000}) (async)
syz_open_dev$evdev(&(0x7f0000000200), 0x1000, 0x410080) (async)
ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000380)={0x12, 0xc6, &(0x7f0000000280)="ff198348df49fb6be1bb27d8a33b08393600b9ab83b9213f3fe1b915de236f4001facfd96c4419a3eb9c129f16946af5d82c0e00cea7073fed07eed8aee6cd1cb583b9c407206fffb065f842b2d715098330e3c8324fa9434a9cc508c84a60ab46ddfa70b448b947ca679924e10d94d85d9e729da51c929532dbb52874f7c1da833f743f038b6ba451914a7601f00211a8998533e83668a300ee9a429d6a7d99a9d873b9bc012fc91f37995b409eaa036f736a824b1790741d6e8cf5882af7b2c79988c32583"}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x7, &(0x7f0000000100)=[{0x4}, {0x9, 0x7c, 0x81, 0x7fff0000}, {0x2d, 0x0, 0x1, 0xfffffffc}, {0xc, 0x4, 0x1, 0xe777}, {0xc6, 0x4, 0x8}, {0xc7f9, 0x6, 0x1, 0x2}, {0xc00, 0x5, 0x7, 0x10040}]}) (async)
fcntl$getownex(r2, 0x10, &(0x7f00000003c0)) (async)
ptrace$ARCH_SET_CPUID(0x1e, r5, 0x0, 0x1012) (async)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) (async)
sendto$inet(r0, &(0x7f0000000440)="70ab2785aee439a14bf2629d1ba92a78dc3d1582abbc07ae774729ad983e0b8d3f490c1f7281cfbee883a138283ce589d9ea8f404e65d7c88fb08516b103b1f5df2dd798332c0a36730b56c9404769b647df72db4514da0dbef10e48ca111e7bb166ff98b113f22384a0b5c657c5367373aa6b169b008e832f56d65fa1593a801baf815148dc5b7eaa", 0x89, 0x20006844, &(0x7f0000000500)={0x2, 0x4e24, @empty}, 0x10) (async)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0x40000, 0x115000}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)

133.199418ms ago: executing program 3 (id=70):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="180000005500010000040000000000000700000002"], 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x810, 0xffffffffffffffff, 0x0)
setrlimit(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r2)
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x20, r3, 0x305, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7}}}}}, 0x20}}, 0x40804)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="68050000", @ANYRES16=r3, @ANYBLOB="20002dbd7000fbdbdf254b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x568}, 0x1, 0x0, 0x0, 0x14}, 0x0)
brk(0x600000000000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
brk(0x600000000000)
r5 = socket(0x80000000000000a, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x101, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="180000005500010000040000000000000700000002"], 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x810, 0xffffffffffffffff, 0x0) (async)
setrlimit(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r2) (async)
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x20, r3, 0x305, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7}}}}}, 0x20}}, 0x40804) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="68050000", @ANYRES16=r3, @ANYBLOB="20002dbd7000fbdbdf254b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x568}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async)
brk(0x600000000000) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async)
brk(0x600000000000) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x101, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) (async)

0s ago: executing program 3 (id=71):
unshare(0x28000600)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x6}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fadvise64(r2, 0xc2f, 0x5, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chroot(&(0x7f0000000a40)='./file0\x00')
setuid(0xee01)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r3 = creat(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r4, 0x28, 0x6, 0x0, &(0x7f0000000000))
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x24088045, &(0x7f0000000280)={0xa, 0x4e23, 0x200000, @mcast2, 0x7}, 0x1c)
setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080), 0x4)
write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040)={@local}, 0x14)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts.
[   29.560248][   T36] audit: type=1400 audit(1790241616.510:64): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   29.563571][  T286] cgroup: Unknown subsys name 'net'
[   29.583030][   T36] audit: type=1400 audit(1790241616.510:65): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   29.610591][   T36] audit: type=1400 audit(1790241616.540:66): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   29.611139][  T286] cgroup: Unknown subsys name 'devices'
[   29.731934][  T286] cgroup: Unknown subsys name 'hugetlb'
[   29.737629][  T286] cgroup: Unknown subsys name 'rlimit'
[   29.853283][   T36] audit: type=1400 audit(1790241616.800:67): avc:  denied  { setattr } for  pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   29.876712][   T36] audit: type=1400 audit(1790241616.800:68): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   29.902067][   T36] audit: type=1400 audit(1790241616.800:69): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   29.930598][  T288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   29.940315][   T36] audit: type=1400 audit(1790241616.890:70): avc:  denied  { relabelto } for  pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   29.966024][   T36] audit: type=1400 audit(1790241616.890:71): avc:  denied  { write } for  pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.001027][   T36] audit: type=1400 audit(1790241616.950:72): avc:  denied  { read } for  pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.026798][   T36] audit: type=1400 audit(1790241616.950:73): avc:  denied  { open } for  pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.027619][  T286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   31.433623][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.440740][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.447855][  T293] bridge_slave_0: entered allmulticast mode
[   31.454348][  T293] bridge_slave_0: entered promiscuous mode
[   31.476939][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.484101][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.491426][  T293] bridge_slave_1: entered allmulticast mode
[   31.497806][  T293] bridge_slave_1: entered promiscuous mode
[   31.523506][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.530662][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.537772][  T294] bridge_slave_0: entered allmulticast mode
[   31.544242][  T294] bridge_slave_0: entered promiscuous mode
[   31.552338][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.559431][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.566604][  T294] bridge_slave_1: entered allmulticast mode
[   31.573511][  T294] bridge_slave_1: entered promiscuous mode
[   31.589033][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.596348][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.603535][  T295] bridge_slave_0: entered allmulticast mode
[   31.609951][  T295] bridge_slave_0: entered promiscuous mode
[   31.621737][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.628988][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.636234][  T295] bridge_slave_1: entered allmulticast mode
[   31.642665][  T295] bridge_slave_1: entered promiscuous mode
[   31.686920][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.694130][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.701411][  T296] bridge_slave_0: entered allmulticast mode
[   31.707792][  T296] bridge_slave_0: entered promiscuous mode
[   31.717440][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.724785][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.731989][  T296] bridge_slave_1: entered allmulticast mode
[   31.738381][  T296] bridge_slave_1: entered promiscuous mode
[   31.874250][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.881362][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.888799][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.895899][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.905643][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.912743][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.920054][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.927109][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.952069][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.959227][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.966584][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.973668][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.989001][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.996132][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.003488][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.010553][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.042223][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.049706][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.057000][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.065182][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.072722][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.081078][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.088597][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.096129][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.133892][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.140984][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.149059][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.156176][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.164750][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.171946][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.180129][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.187182][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.209885][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.217130][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.225250][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.232478][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.247719][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.254835][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.262690][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.269774][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.305246][  T295] veth0_vlan: entered promiscuous mode
[   32.335356][  T295] veth1_macvtap: entered promiscuous mode
[   32.344123][  T296] veth0_vlan: entered promiscuous mode
[   32.378633][  T294] veth0_vlan: entered promiscuous mode
[   32.385289][  T293] veth0_vlan: entered promiscuous mode
[   32.392888][  T296] veth1_macvtap: entered promiscuous mode
[   32.405651][  T294] veth1_macvtap: entered promiscuous mode
[   32.433620][  T293] veth1_macvtap: entered promiscuous mode
[   32.434607][  T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.477934][  T312] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   32.584598][  T327] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.635506][  T331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5'.
[   32.809669][   T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   32.973794][  T352] netlink: 'syz.2.12': attribute type 27 has an invalid length.
[   32.979821][   T31] usb 1-1: Using ep0 maxpacket: 8
[   32.988552][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[   32.997439][   T31] usb 1-1: config 2 has an invalid interface number: 232 but max is 0
[   33.006046][   T31] usb 1-1: config 2 has no interface number 0
[   33.012324][   T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   33.020087][   T31] usb 1-1: config 2 interface 232 altsetting 128 endpoint 0x8 has invalid wMaxPacketSize 0
[   33.031078][   T31] usb 1-1: config 2 interface 232 altsetting 128 bulk endpoint 0x8 has invalid maxpacket 0
[   33.041798][   T31] usb 1-1: config 2 interface 232 has no altsetting 0
[   33.050910][   T31] usb 1-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd
[   33.062240][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.070817][   T31] usb 1-1: Product: syz
[   33.075153][   T31] usb 1-1: Manufacturer: syz
[   33.085211][   T31] usb 1-1: SerialNumber: syz
[   33.179803][   T45] usb 2-1: Using ep0 maxpacket: 16
[   33.187567][   T45] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[   33.197167][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.205497][   T45] usb 2-1: Product: syz
[   33.210101][   T45] usb 2-1: Manufacturer: syz
[   33.214775][   T45] usb 2-1: SerialNumber: syz
[   33.364441][  T369] FAULT_INJECTION: forcing a failure.
[   33.364441][  T369] name failslab, interval 1, probability 0, space 0, times 1
[   33.392787][  T369] CPU: 0 UID: 0 PID: 369 Comm: syz.0.1 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786
[   33.392830][  T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   33.392855][  T369] Call Trace:
[   33.392863][  T369]  <TASK>
[   33.392878][  T369]  __dump_stack+0x21/0x30
[   33.392940][  T369]  dump_stack_lvl+0x140/0x1c0
[   33.392974][  T369]  ? __cfi_dump_stack_lvl+0x10/0x10
[   33.393012][  T369]  dump_stack+0x19/0x20
[   33.393036][  T369]  should_fail_ex+0x3c2/0x510
[   33.393080][  T369]  should_failslab+0xac/0x100
[   33.393114][  T369]  kmem_cache_alloc_noprof+0x42/0x410
[   33.393140][  T369]  ? __kernfs_new_node+0xf1/0x740
[   33.393173][  T369]  __kernfs_new_node+0xf1/0x740
[   33.393196][  T369]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   33.393239][  T369]  ? kernfs_new_node+0x280/0x280
[   33.393272][  T369]  ? stack_depot_save_flags+0x38/0x800
[   33.393308][  T369]  kernfs_new_node+0x154/0x280
[   33.393332][  T369]  __kernfs_create_file+0x52/0x280
[   33.393375][  T369]  cgroup_addrm_files+0x775/0xac0
[   33.393414][  T369]  ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0
[   33.393458][  T369]  ? __kasan_check_write+0x18/0x20
[   33.393477][  T369]  ? _raw_spin_lock_irq+0x93/0x120
[   33.393494][  T369]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   33.393524][  T369]  css_populate_dir+0x1a4/0x3d0
[   33.393554][  T369]  cgroup_mkdir+0x124d/0x1600
[   33.393593][  T369]  ? __cfi_cgroup_mkdir+0x10/0x10
[   33.393623][  T369]  kernfs_iop_mkdir+0x1bb/0x2d0
[   33.393648][  T369]  vfs_mkdir+0x58e/0x810
[   33.393696][  T369]  do_mkdirat+0x240/0x530
[   33.393730][  T369]  ? __cfi_do_mkdirat+0x10/0x10
[   33.393766][  T369]  ? __kasan_check_write+0x18/0x20
[   33.393783][  T369]  ? getname_flags+0x203/0x6b0
[   33.393802][  T369]  ? __kasan_check_write+0x18/0x20
[   33.393839][  T369]  __x64_sys_mkdirat+0x8b/0xa0
[   33.393874][  T369]  x64_sys_call+0x2ba8/0x2ee0
[   33.393895][  T369]  do_syscall_64+0x57/0xf0
[   33.393920][  T369]  ? clear_bhb_loop+0x50/0xa0
[   33.393943][  T369]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   33.393979][  T369] RIP: 0033:0x7f0c0df9e159
[   33.394008][  T369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   33.394028][  T369] RSP: 002b:00007f0c0ee79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   33.394064][  T369] RAX: ffffffffffffffda RBX: 00007f0c0e226090 RCX: 00007f0c0df9e159
[   33.394078][  T369] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[   33.394090][  T369] RBP: 00007f0c0e03506b R08: 0000000000000000 R09: 0000000000000000
[   33.394102][  T369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   33.394112][  T369] R13: 00007f0c0e226128 R14: 00007f0c0e226090 R15: 00007fff88d37ee8
[   33.394149][  T369]  </TASK>
[   33.395304][  T369] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12
[   33.720336][  T379] netlink: 'syz.3.17': attribute type 4 has an invalid length.
[   33.731389][  T379] netlink: 17 bytes leftover after parsing attributes in process `syz.3.17'.
[   33.760488][  T378] netlink: 'syz.3.17': attribute type 4 has an invalid length.
[   33.768119][  T378] netlink: 17 bytes leftover after parsing attributes in process `syz.3.17'.
[   33.791823][  T379] Zero length message leads to an empty skb
[   33.791823][  T382] Zero length message leads to an empty skb
[   33.938767][  T397] tipc: Trying to set illegal importance in message
[   34.089642][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   34.209659][   T67] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   34.239770][    T9] usb 3-1: Using ep0 maxpacket: 32
[   34.246252][    T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.257406][    T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.268619][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   34.277763][    T9] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   34.286272][    T9] usb 3-1: Product: syz
[   34.290541][    T9] usb 3-1: Manufacturer: syz
[   34.298381][    T9] hub 3-1:4.0: USB hub found
[   34.371082][   T67] usb 4-1: unable to get BOS descriptor or descriptor too short
[   34.379888][   T67] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   34.392610][   T67] usb 4-1: string descriptor 0 read error: -22
[   34.398906][   T67] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   34.408168][   T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.498401][    T9] hub 3-1:4.0: config failed, can't read hub descriptor (err -22)
[   34.506194][   T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[   34.510978][   T45] usb 2-1: USB disconnect, device number 2
[   34.550771][    T9] usb 3-1: USB disconnect, device number 2
[   34.999650][    T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   35.049805][  T405] mmap: syz.1.25 (405): VmData 29040640 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data.
[   35.068254][   T36] kauditd_printk_skb: 82 callbacks suppressed
[   35.068274][   T36] audit: type=1400 audit(1790241622.010:156): avc:  denied  { listen } for  pid=404 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   35.094353][   T36] audit: type=1400 audit(1790241622.010:157): avc:  denied  { write } for  pid=404 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   35.113642][   T36] audit: type=1400 audit(1790241622.020:158): avc:  denied  { accept } for  pid=404 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   35.150792][    T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   35.161995][    T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.172994][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   35.183946][    T9] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   35.192465][    T9] usb 3-1: Product: syz
[   35.196966][    T9] usb 3-1: Manufacturer: syz
[   35.210097][    T9] hub 3-1:4.0: USB hub found
[   35.222621][  T310] usb 4-1: USB disconnect, device number 2
[   35.268662][   T36] audit: type=1400 audit(1790241622.210:159): avc:  denied  { nlmsg_read } for  pid=408 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   35.268676][  T409] netlink: 216 bytes leftover after parsing attributes in process `syz.1.27'.
[   35.305606][   T36] audit: type=1400 audit(1790241622.210:160): avc:  denied  { create } for  pid=408 comm="syz.1.27" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   35.328818][   T36] audit: type=1400 audit(1790241622.210:161): avc:  denied  { map } for  pid=408 comm="syz.1.27" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   35.353023][   T36] audit: type=1400 audit(1790241622.210:162): avc:  denied  { read write } for  pid=408 comm="syz.1.27" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   35.382918][   T36] audit: type=1400 audit(1790241622.210:163): avc:  denied  { read write } for  pid=408 comm="syz.1.27" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   35.406800][   T36] audit: type=1400 audit(1790241622.210:164): avc:  denied  { open } for  pid=408 comm="syz.1.27" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   35.430750][  T384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.441489][   T36] audit: type=1400 audit(1790241622.210:165): avc:  denied  { map } for  pid=408 comm="syz.1.27" path="socket:[4198]" dev="sockfs" ino=4198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   35.464648][  T399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.465151][  T384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.481793][  T399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.500230][    T9] hub 3-1:4.0: config failed, can't read hub descriptor (err -22)
[   35.520556][    T9] usb 3-1: USB disconnect, device number 3
[   35.572236][   T31] usb 1-1: USB disconnect, device number 2
[   35.588343][  T414] capability: warning: `syz.0.28' uses deprecated v2 capabilities in a way that may be insecure
[   35.605769][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.232/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   35.856229][  T494] netlink: 88 bytes leftover after parsing attributes in process `syz.0.35'.
[   35.865531][  T494] netlink: 393 bytes leftover after parsing attributes in process `syz.0.35'.
[   35.909718][  T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   35.931821][  T496] netlink: 337 bytes leftover after parsing attributes in process `syz.0.35'.
[   35.933157][  T497] netlink: 393 bytes leftover after parsing attributes in process `syz.0.35'.
[   36.007481][  T503] 9pnet_fd: Insufficient options for proto=fd
[   36.039609][   T67] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   36.049942][  T310] usb 2-1: device descriptor read/64, error -71
[   36.200782][   T67] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   36.211244][   T67] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   36.226286][   T67] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   36.235567][   T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.243679][   T67] usb 4-1: Product: syz
[   36.247877][   T67] usb 4-1: Manufacturer: syz
[   36.252572][   T67] usb 4-1: SerialNumber: syz
[   36.259087][   T67] usb-storage 4-1:1.0: USB Mass Storage device detected
[   36.266982][   T67] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   36.275242][   T67] scsi host1: usb-storage 4-1:1.0
[   36.289623][  T310] usb 2-1: device descriptor read/64, error -71
[   36.409660][   T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   36.461206][  T491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.469844][  T491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.478387][   T67] usb 4-1: USB disconnect, device number 3
[   36.549660][  T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   36.560752][   T31] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.572504][   T31] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   36.586276][   T31] usb 3-1: config 0 interface 0 has no altsetting 0
[   36.593015][   T31] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   36.602241][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.611125][   T31] usb 3-1: config 0 descriptor??
[   36.679658][  T310] usb 2-1: device descriptor read/64, error -71
[   36.858313][  T531] =======================================================
[   36.858313][  T531] WARNING: The mand mount option has been deprecated and
[   36.858313][  T531]          and is ignored by this kernel. Remove the mand
[   36.858313][  T531]          option from the mount to silence this warning.
[   36.858313][  T531] =======================================================
[   36.893917][  T531] ./dev/sda1: Can't lookup blockdev
[   36.949663][  T310] usb 2-1: device descriptor read/64, error -71
[   37.021943][   T31] usbhid 3-1:0.0: can't add hid device: -71
[   37.029287][   T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   37.040245][   T31] usb 3-1: USB disconnect, device number 4
[   37.069616][  T310] usb usb2-port1: attempt power cycle
[   37.139628][   T67] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   37.289610][   T67] usb 1-1: Using ep0 maxpacket: 32
[   37.296012][   T67] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   37.307906][   T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   37.318991][   T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   37.331903][   T67] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[   37.341653][   T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.349749][   T67] usb 1-1: Product: syz
[   37.350796][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   37.353935][   T67] usb 1-1: Manufacturer: syz
[   37.353954][   T67] usb 1-1: SerialNumber: syz
[   37.371416][   T67] usb 1-1: config 0 descriptor??
[   37.377009][  T531] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   37.386793][   T67] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4
[   37.439771][  T310] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   37.470752][  T310] usb 2-1: device descriptor read/8, error -71
[   37.532675][    T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[   37.541943][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.550169][    T9] usb 4-1: Product: syz
[   37.554448][    T9] usb 4-1: Manufacturer: syz
[   37.559080][    T9] usb 4-1: SerialNumber: syz
[   37.585964][  T403] usb 1-1: USB disconnect, device number 3
[   37.610891][  T310] usb 2-1: device descriptor read/8, error -71
[   37.781009][    T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   37.788145][    T9] usb 4-1: found format II with max.bitrate = 44931, frame size=8
[   37.796497][    T9] usb 4-1: found format II with max.bitrate = 44931, frame size=8
[   37.805305][    T9] usb 4-1: 2:1: cannot set freq 4584960 to ep 0x82
[   37.816232][    T9] usb 4-1: USB disconnect, device number 4
[   37.835305][  T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   37.849876][  T310] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   37.880933][  T310] usb 2-1: device descriptor read/8, error -71
[   37.969705][  T539] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[   38.010835][  T310] usb 2-1: device descriptor read/8, error -71
[   38.129865][  T310] usb usb2-port1: unable to enumerate USB device
[   38.137822][  T539] usb 3-1: unable to get BOS descriptor or descriptor too short
[   38.146785][  T539] usb 3-1: config 3 has an invalid interface number: 67 but max is 0
[   38.155438][  T539] usb 3-1: config 3 has no interface number 0
[   38.161629][  T539] usb 3-1: config 3 interface 67 has no altsetting 0
[   38.170545][  T539] usb 3-1: string descriptor 0 read error: -22
[   38.177100][  T539] usb 3-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=c8.28
[   38.186231][  T539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.198902][  T539] uvcvideo 3-1:3.67: Found multiple Units with ID 1
[   38.208526][  T539] usb 3-1: Found UVC 0.00 device <unnamed> (13d3:5103)
[   38.217665][  T539] usb 3-1: No valid video chain found.
[   38.408299][   T67] usb 3-1: USB disconnect, device number 5
[   38.689300][  T569] syzkaller1: entered promiscuous mode
[   38.695048][  T569] syzkaller1: entered allmulticast mode
[   39.113844][  T589] syzkaller1: entered promiscuous mode
[   39.119637][  T589] syzkaller1: entered allmulticast mode
[   39.137881][  T594] process 'syz.2.60' launched './file0' with NULL argv: empty string added
[   39.147042][  T594] Invalid argument reading file caps for ./file0
[   39.594553][  T608] loop6: detected capacity change from 0 to 6
[   39.983730][  T611] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1919252079 (only 8 groups)
[   40.279656][  T539] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   40.401369][   T36] kauditd_printk_skb: 51 callbacks suppressed
[   40.401389][   T36] audit: type=1400 audit(1790241627.350:217): avc:  denied  { setopt } for  pid=623 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   40.432154][  T539] usb 3-1: device descriptor read/64, error -71
[   40.452222][   T36] audit: type=1326 audit(1790241627.400:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.0.69" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c0df9e159 code=0x0
[   40.477921][  T627] __vm_enough_memory: pid: 627, comm: syz.3.70, bytes: 11727963987968 not enough memory for the allocation
[   40.489757][  T627] __vm_enough_memory: pid: 627, comm: syz.3.70, bytes: 11727963987968 not enough memory for the allocation
[   40.504455][   T36] audit: type=1400 audit(1790241627.450:219): avc:  denied  { write } for  pid=623 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   40.523938][  T627] __vm_enough_memory: pid: 627, comm: syz.3.70, bytes: 11727963987968 not enough memory for the allocation
[   40.540107][  T632] __vm_enough_memory: pid: 632, comm: syz.3.70, bytes: 11727963987968 not enough memory for the allocation
[   40.612319][   T36] audit: type=1326 audit(1790241627.560:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.0.69" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c0df9e159 code=0x0
[   40.613682][  T641] ------------[ cut here ]------------
[   40.642349][  T641] WARNING: CPU: 0 PID: 641 at arch/x86/kvm/../../../virt/kvm/dirty_ring.c:179 kvm_dirty_ring_push+0x22e/0x4b0
[   40.654202][  T641] Modules linked in:
[   40.658307][  T641] CPU: 0 UID: 0 PID: 641 Comm: syz.0.69 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786
[   40.669704][  T641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   40.679923][  T641] RIP: 0010:kvm_dirty_ring_push+0x22e/0x4b0
[   40.685884][  T641] Code: 7b 38 be 08 00 00 00 e8 80 10 ca 00 f0 80 4b 38 08 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e2 29 71 00 <0f> 0b e9 7c fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fe ff
[   40.705735][  T641] RSP: 0018:ffffc9000e7076f8 EFLAGS: 00010293
[   40.711975][  T641] RAX: ffffffff811650ae RBX: ffff888119f02180 RCX: ffff88811c639300
[   40.718933][   T36] audit: type=1400 audit(1790241627.660:221): avc:  denied  { mounton } for  pid=633 comm="syz.3.71" path="/19/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   40.720024][  T641] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000200
[   40.750067][  T641] RBP: ffffc9000e707740 R08: 0000000000000001 R09: 1ffff92001ccb469
[   40.758090][  T641] R10: dffffc0000000000 R11: fffff52001ccb46a R12: 0000000000000200
[   40.766243][  T641] R13: 0000000000000200 R14: ffff88811a212104 R15: 1ffff110233e0701
[   40.768532][   T36] audit: type=1400 audit(1790241627.700:222): avc:  denied  { getopt } for  pid=633 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   40.774289][  T641] FS:  00007f0c0c9d66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   40.774315][  T641] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   40.809611][  T641] CR2: 00007f0c0c9d5ff8 CR3: 0000000115640000 CR4: 00000000003526b0
[   40.817635][  T641] Call Trace:
[   40.821147][  T641]  <TASK>
[   40.824114][  T641]  mark_page_dirty_in_slot+0x1b8/0x2d0
[   40.829660][  T641]  make_spte+0x6ad/0x8b0
[   40.833973][  T641]  kvm_tdp_mmu_map+0xaa4/0x1250
[   40.838928][  T641]  ? __cfi_kvm_tdp_mmu_map+0x10/0x10
[   40.844332][  T641]  ? is_page_fault_stale+0x2b2/0x4c0
[   40.849769][  T641]  kvm_tdp_page_fault+0x285/0x320
[   40.854820][  T641]  kvm_mmu_do_page_fault+0x2bf/0x640
[   40.860191][  T641]  ? kvm_arch_async_page_ready+0x480/0x480
[   40.866040][  T641]  ? kvm_arch_vcpu_load+0x665/0x8d0
[   40.872061][  T641]  ? __asan_memcpy+0x5a/0x80
[   40.876716][  T641]  ? ioctl_has_perm+0x408/0x500
[   40.881642][  T641]  kvm_arch_vcpu_pre_fault_memory+0x256/0x480
[   40.887761][  T641]  kvm_vcpu_pre_fault_memory+0x241/0x450
[   40.893482][  T641]  kvm_vcpu_ioctl+0x89e/0x1000
[   40.898297][  T641]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   40.903571][  T641]  ? _raw_spin_lock_irq+0x93/0x120
[   40.908731][  T641]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   40.914345][  T641]  ? __kasan_check_write+0x18/0x20
[   40.919505][  T641]  ? recalc_sigpending+0x16c/0x1d0
[   40.924746][  T641]  ? _raw_spin_unlock_irq+0x45/0x70
[   40.930052][  T641]  ? __set_current_blocked+0x281/0x2d0
[   40.935581][  T641]  ? bpf_lsm_file_ioctl+0xd/0x20
[   40.940638][  T641]  ? security_file_ioctl+0x3e/0x110
[   40.945881][  T641]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   40.951152][  T641]  __se_sys_ioctl+0x126/0x1b0
[   40.955884][  T641]  __x64_sys_ioctl+0x7f/0xa0
[   40.960537][  T641]  x64_sys_call+0x1878/0x2ee0
[   40.965294][  T641]  do_syscall_64+0x57/0xf0
[   40.969769][  T641]  ? clear_bhb_loop+0x50/0xa0
[   40.974487][  T641]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   40.980613][  T641] RIP: 0033:0x7f0c0df9e159
[   40.985055][  T641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.004963][  T641] RSP: 002b:00007f0c0c9d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   41.013493][  T641] RAX: ffffffffffffffda RBX: 00007f0c0e226900 RCX: 00007f0c0df9e159
[   41.021623][  T641] RDX: 0000200000000240 RSI: 00000000c040aed5 RDI: 0000000000000006
[   41.029704][  T641] RBP: 00007f0c0e03506b R08: 0000000000000000 R09: 0000000000000000
[   41.037841][  T641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   41.045905][  T641] R13: 00007f0c0e226998 R14: 00007f0c0e226900 R15: 00007fff88d37ee8
[   41.053978][  T641]  </TASK>
[   41.057018][  T641] ---[ end trace 0000000000000000 ]---
[   41.119631][  T539] usb 3-1: device descriptor read/64, error -71
[   41.359665][  T539] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   41.489670][  T539] usb 3-1: device descriptor read/64, error -71
[   41.729649][  T539] usb 3-1: device descriptor read/64, error -71
[   41.839767][  T539] usb usb3-port1: attempt power cycle
[   41.883578][   T36] audit: type=1400 audit(1790241628.830:223): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   42.179654][  T539] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   42.200823][  T539] usb 3-1: device descriptor read/8, error -71
[   42.330826][  T539] usb 3-1: device descriptor read/8, error -71
[   42.569650][  T539] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   42.590714][  T539] usb 3-1: device descriptor read/8, error -71
[   42.720762][  T539] usb 3-1: device descriptor read/8, error -71
[   42.829760][  T539] usb usb3-port1: unable to enumerate USB device