last executing test programs:

30.064738463s ago: executing program 1 (id=49):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/173)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x80000400, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0xe, 0x0, &(0x7f0000000180))
socket(0x18, 0x2, 0x0)

29.971594733s ago: executing program 1 (id=51):
r0 = socket$inet6(0xa, 0x80002, 0x100)
getsockopt$inet6_mreq(r0, 0x88, 0xe, 0x0, &(0x7f0000000600)=0xfffffffffffffddd)
setitimer(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x42, 0x1ff)
recvfrom$inet6(r1, &(0x7f0000000000)=""/100, 0x64, 0x40000000, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x100000d, 0x12, r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./tracing\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r2, &(0x7f00000007c0)='p:s/p ./file0:0', 0xf)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r3, &(0x7f0000000840)='1', 0x1)

29.880605772s ago: executing program 1 (id=54):
socket$inet6(0xa, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x62020600) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x505, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040081}, 0x40c0) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x49, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x44805}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r6, 0x29, 0x3a, 0x0, &(0x7f0000000080))
r7 = dup(r5)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000000)={0x2, 0x1, 0xffff, 0x8af, 0x802}) (async)
syz_ublk_setup_queues(r7, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b00, 0x4000, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4007bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x2, 0x1, 0x230}}], 0x1, 0x0, 0x0) (async)
socket$packet(0x11, 0x2, 0x300)

29.820682858s ago: executing program 1 (id=56):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2010000, &(0x7f0000000340)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000380)='./file0\x00')
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x80)
getdents64(r1, &(0x7f0000000480)=""/4096, 0x1000)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/mtrr\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl(r2, 0x400c4d09, 0x0)
link(&(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440)='./cgroup/file0\x00')

29.674032593s ago: executing program 1 (id=57):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000004f80)='./dev\x00', &(0x7f0000004fc0)='devtmpfs\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dbg\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dbg\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg/bluetooth/l2cap\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x4070bd28, 0x1}, 0x14}}, 0x18)
read(r0, &(0x7f0000000340)=""/1024, 0x400)
mkdirat(0xffffffffffffff9c, &(0x7f0000005000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000005040)=@filename='./dev/sda1\x00', &(0x7f0000005080)='./mnt\x00', &(0x7f00000050c0)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000005100)='./mnt\x00')
r1 = open(&(0x7f0000005140)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f0000005180)='./bus\x00', 0x141042, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x48080)
execve(0x0, 0x0, &(0x7f0000002440))
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'lo\x00', 0x0})
fallocate(r2, 0x20, 0x0, 0x10000)

24.405270152s ago: executing program 1 (id=80):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0)
fcntl$getflags(r0, 0x403)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x2})
ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000040))
syz_extract_tcp_res(0x0, 0x9, 0x4)
write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="01031c000300140006006fff9eec034b0601fe8000000000000000000000000000bb00000000000000000000ffffe0"], 0x37d)

24.373789235s ago: executing program 32 (id=80):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0)
fcntl$getflags(r0, 0x403)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x2})
ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000040))
syz_extract_tcp_res(0x0, 0x9, 0x4)
write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="01031c000300140006006fff9eec034b0601fe8000000000000000000000000000bb00000000000000000000ffffe0"], 0x37d)

5.394576488s ago: executing program 2 (id=212):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x4, 0x0, [{0xf88e470f, 0xed, 0x8}, {0x920, 0x0, 0x3ff}, {0xb81, 0x0, 0x5a5}, {0x4c1, 0x0, 0x100}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffff9, 0x6, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap$KVM_DIRTY_RING(&(0x7f0000ffc000/0x1000)=nil, 0x6000, 0xb, 0x1010, r2, 0x40000)
r3 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)

5.297264467s ago: executing program 2 (id=213):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.force_empty\x00', 0x401, 0x26)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00')
fchdir(r1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
exit(0xfffffffffffffffd)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
pwrite64(r0, &(0x7f0000000280)="9f1390a950", 0x5, 0x2)
unshare(0x60000600)
r2 = socket(0x10, 0x803, 0x0)
write(r2, &(0x7f00000000c0)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c)

4.497466349s ago: executing program 2 (id=219):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000340)="2300000022003521bb0000409b849ac00a374e296ecb2ccf9ad66c3236de721025e005", 0x23, 0x26048082, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000003c0), 0x2d, 0x20040040)
dup3(r2, r3, 0x0)
connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x120, 0x2, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0xb4, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0xffffff74, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x88015)
r4 = syz_create_resource$binfmt(&(0x7f0000000240)='./file1\x00')
r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file1', [{}]}, 0xc)
close(r5)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2000)
syz_usb_connect$uac2(0x0, 0xe0, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x763, 0x1015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x3, 0x30, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x7, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa3, 0x9, 0x1c, 0x1}, [@feature_unit={0x7, 0x24, 0x6, 0xfe, 0x5, [0x5]}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x300, 0x7, 0x4, 0x6, 0x6386, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x0, 0x4, 0x3, 0x9a}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x68}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x4, 0xe8, 0x2, "f59a521c8221"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf1, 0x1}, @as_header={0x10, 0x24, 0x1, 0x1, 0x2, 0x2, 0x1, 0x1, 0x100, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0x1, 0x6, {0x8, 0x25, 0x1, 0x2, 0x3c, 0xab, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x72, 0xa, 0xc, '5'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x36, 0x0, 0x1e, 0x0, 0x9}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf, 0x4, 0x0, 0x3, "cd4c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x2, 0x5, {0x8, 0x25, 0x1, 0x3, 0xf, 0xd, 0x5}}}}}}}}]}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket$inet6(0x10, 0x3, 0x0) (async)
sendto$inet6(r1, &(0x7f0000000340)="2300000022003521bb0000409b849ac00a374e296ecb2ccf9ad66c3236de721025e005", 0x23, 0x26048082, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async)
sendmmsg$unix(r3, &(0x7f00000003c0), 0x2d, 0x20040040) (async)
dup3(r2, r3, 0x0) (async)
connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x120, 0x2, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0xb4, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0xffffff74, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x88015) (async)
syz_create_resource$binfmt(&(0x7f0000000240)='./file1\x00') (async)
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) (async)
write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file1', [{}]}, 0xc) (async)
close(r5) (async)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) (async)
ioprio_set$pid(0x2, 0x0, 0x2000) (async)
syz_usb_connect$uac2(0x0, 0xe0, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x763, 0x1015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x3, 0x30, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x7, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa3, 0x9, 0x1c, 0x1}, [@feature_unit={0x7, 0x24, 0x6, 0xfe, 0x5, [0x5]}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x300, 0x7, 0x4, 0x6, 0x6386, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x0, 0x4, 0x3, 0x9a}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x68}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x4, 0xe8, 0x2, "f59a521c8221"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf1, 0x1}, @as_header={0x10, 0x24, 0x1, 0x1, 0x2, 0x2, 0x1, 0x1, 0x100, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0x1, 0x6, {0x8, 0x25, 0x1, 0x2, 0x3c, 0xab, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x72, 0xa, 0xc, '5'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x36, 0x0, 0x1e, 0x0, 0x9}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf, 0x4, 0x0, 0x3, "cd4c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x2, 0x5, {0x8, 0x25, 0x1, 0x3, 0xf, 0xd, 0x5}}}}}}}}]}}, 0x0) (async)

3.705988621s ago: executing program 3 (id=223):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1})
syz_extract_tcp_res(0x0, 0x9, 0x4)
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="01031c000300140011006fff9eec034b0601fe8000000000000000000000000000bb00000000000000000000ffffe0"], 0x37d)

3.605155851s ago: executing program 3 (id=224):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0)
sendfile(r0, r0, &(0x7f0000000540)=0x1, 0x81)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905818b24"], 0x0)
write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './sys/class/net/bridge0/bridge/group_addr', [{0x20, '#)/}]^\xaf%*:@'}, {0x20, 'sysfs\x00'}], 0xa, "9efeed04e138ac22ccdc510faa8d34bd33796483b296128a7fd898cb3d4f13e9fef62021ff05770617d197217d4e481bc10c8b0c2709f51dd79d7e1f68ede38e38bd88daf3988d313735082654"}, 0x8d)
syz_usb_connect$uac2(0x4, 0xf1, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x4a, 0x40, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0x8, 0x20, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xd6, 0x1, 0x27, 0x7}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0x8, '\x00'}, @sample_rate={0x11, 0x24, 0xd, 0x6, 0x1, 0x4, [0x2, 0x0, 0x3, 0x0, 0x0]}, @selector_unit={0x7, 0x24, 0xb, 0xc0, 0x2, "cf40"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xb17, 0x5, 0x8, "0bf369a4f8301fc27f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf7, 0x2, 0x3, 0x92, 0x80}, @as_header={0x10, 0x24, 0x1, 0x2, 0x10, 0x0, 0x3, 0xa, 0x0, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x4, 0xeb, 0x5, "cf5c58"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x1, 0x4, 0x1, "5c423a58c1"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x6, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x5ff, 0xe, 0x4, 0x6, {0x8, 0x25, 0x1, 0x1, 0x30, 0x50, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x10, 0xcd, 'j>'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xee, 0xb, 0x3, {0x8, 0x25, 0x1, 0x83, 0x1b, 0x5}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x6, 0x0, 0x2, 0x8, 0x3}, 0x3d, &(0x7f00000001c0)={0x5, 0xf, 0x3d, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x400, 0xf, 0x4, [0xffc0ff, 0x3f00]}, @ssp_cap={0x10, 0x10, 0xa, 0xfa, 0x1, 0x7ff, 0x11f00, 0xd, [0xff3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "c02660a79a74bd865c35f2cf660634ce"}]}, 0x3, [{0xf8, &(0x7f0000000200)=ANY=[@ANYBLOB="f8036d9ac6d00e7081a1386b771d0a7a798e25d562bdc3f994412eb1afc08a92e160a59e166aa317f44ce9fa00ad7b16b8514c43443f14af00a2c6c0c5169cbfcfba948c9c038bb7b4775bc2028c25991af455070293ee7e182abaca993d927cf0e9f18e46b2ce7ec3f2fd5bade43a7dec4a9848ea9e2c0e4af0bf5a07680595072f7b3a6e2560a1f8d1ff1036ffd84f9f62068a92df24c298fbafa776338b0abc30a7db027a420fcc0c767a3f4645814d30a956d6bd488e6f9df11ef0770345ce1e42fc04b8b4f866d1c1e5c916730709530d71062f585be503452eaa4702a76a0518e0ba430cbf8dc3e75362874b1cf6e8ba155f0a6c64"]}, {0xaf, &(0x7f0000000300)=@string={0xaf, 0x3, "9dba6139cdea26376494c467daabc42bfaa37090c3905865c4e3040d8543785c34156f13329387f041a98f88f9176dcf96348511d71c7f4977188faa1dfc77fff3e8b30829c0fdf8a4dd5f4cbdc9f934b112fd8007d5dc864365139d924ea857b8c743463e71bf464b4120408a03da9fc21d74acd801761e913c51edb57bc9c52f5cb6d79ecb63fec508a71e3396001a563a239a6c3eb2c69dd1ef9869f04e7468953f6ca9cfca3704d9a3a34f"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x140c}}]})

3.383614343s ago: executing program 2 (id=225):
socket$inet6(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1) (async)
socket(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000780)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0x9bb, 0x0, 0x0, 0x1000, 0x90000000, 0x0, 0x0, 0x144}}}, &(0x7f0000000800)=<r2=>0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x20000004)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}, 0x80) (async)
pipe2(0x0, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0xff0a, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2000, 0x1, 0xcd}}], 0x1, 0x0, 0x0)

3.31308165s ago: executing program 2 (id=226):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a4400001361c928c02640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c09000df397fb9467908acccb33f7c5b955d900000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000f00), 0x100000000006, 0x105700)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/kernel/address_bits', 0x143, 0x136)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000f80)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0xd, 0x1c, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b06606000000000000162e43ac61b7ad3300", [0x2, 0xa]}})
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000001100)=""/4120, 0x1018}, {0x0}], 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002180)='oom_adj\x00')
write$cgroup_int(r2, 0x0, 0x2b)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x75, {0x9, 0x10, 0xe, 0x10, 0x10, 0x10, 0x10, 0x80010, 0x4010, 0x101, 0x106, 0x18}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ncm(0x2, 0x95, &(0x7f0000002280)=ANY=[@ANYBLOB="12017ee8b7195a00b15794ac0181000000082505a1a440000102030109028300020106a0040904000001020d0000774ebcb5b7059431195d311e2a130b24066f8262d9cce3191cff4cddfaa32746945505240000000d240f01cd0000000000fdff0406241a08000008241c0b000c11000c241b88005b0056fe060007052401000708241cff030d0010090581030002ecab020904010000020d0000090401010202000000012e0ff92b8a17fd0eb80d000009058202000408080bc856b5f5faa47492dd063139fb30b1c38311e0a8bfcfb948f37dfa74832fbdd74e6ec955b2e20890f2ec56e7c20ff1d5"], &(0x7f00000005c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x6, 0x2, 0x9b, 0x20, 0x81}, 0xef, &(0x7f0000002380)={0x5, 0xf, 0xef, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x5, 0x7800, 0x5, [0xffffc0, 0xf, 0xc0, 0xff3fc0, 0xc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x54, 0x7, 0x86, 0x0, 0x7f}, @generic={0xbb, 0x10, 0x2, "aeaf1af851822062c0d8577294669c0e56d0256b6368bfc69be3dd1c7eb4e4657d50a3c5a04188a11c54a87a44f9ea4e014640c882c94e3ca1acc86683fbb7d4cb7afa99808c1f6a6a1be896ef474fa4078937479298513904a66dbc44ef9a89c2ee010a3ad16e4862322a9cc16aae14f19221061535570448c3ebe4e807e59bb36f17f9151429c38e84e8f8ab3fe8b0a0eb128c87aba22119a441fa66fd4d8f189aec9e0df2c71034895cfb75575f4bda964707ffef5baf"}]}, 0x2, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x83e}}, {0x17, &(0x7f0000000580)=@string={0x17, 0x3, "936b9eb63d59bd1bdefd656eda64d112174992e27b"}}]})
syz_usb_connect$cdc_ncm(0x1, 0x95, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x0, 0x50, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, ',j'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0xa, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x5b7, 0x15}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x86, 0x16, 0x0, 0x9, 0x3}, @acm={0x4, 0x24, 0x2, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x3, 0x16}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0xb}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x7, 0x3, 0x2, 0x0, 0x3}, 0x2e, &(0x7f0000000700)={0x5, 0xf, 0x2e, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x9, 0xf0f, 0x9, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xd, 0xa, 0x40}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0xe0, 0x2, 0xd8}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x4, 0x6}]}, 0x1, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x443}}]})
r3 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a"], 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r5 = socket(0x10, 0x2, 0x0)
r6 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000002180), 0x318, 0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000021c0)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000002200)={0xa0000001})
epoll_pwait(r8, &(0x7f0000002240)=[{}], 0x1, 0xff, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
pread64(r4, &(0x7f0000000300)=""/145, 0x91, 0x611)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x80, 0x1c, {0x10, 0x3, 0x8, 0x7fff, 0x0, 0x10, 0x10, 0x10, 0x4, 0xc, 0x7, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
r9 = syz_usb_connect$midi(0x2, 0x53, &(0x7f0000000800)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x3, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x20, [@ms_header={0x7, 0x24, 0x1, 0xfff, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x4, 0x7, 0x2, [{0x3a, 0x78}, {0x2, 0x3}], 0x7}], [{{0x9, 0x5, 0x3, 0x3, 0x200, 0x3, 0x7, 0x3, {0x14, 0x25, 0x1, 0x10, "08839fafbf6e0635cbc5e86c8b191e3a"}}}]}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x250, 0xc, 0x9}, 0xfa, &(0x7f00000008c0)={0x5, 0xf, 0xfa, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x9, 0x5, 0x5, 0x1}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x6, 0xff0f, 0x2, [0xf, 0xc00f, 0xfe7f30, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "040c848d5f5f44b78f677574ccb9e6c2"}, @generic={0xba, 0x10, 0x1, "ba143c931a338921d8d08dbb4b05d2f0ec9e42ce935ec3b272e9d24a4354a09dc6730018dfc76a45dcfddc1f6f2e4a60275e77b41483156424010c63aa88134a225c2ca05900638cdf5afb5c751165470686185885bbd349706140b8c2cd74d0b422b37d3d6a1848bb4c80dc380b5a70bfe6e19cebdede6b66ebfb04851d0b168b4cadfa06144c6dfd3261f12bcfc2371ebd5ccc6c3a5b4a3766ea7c58576ab250a60587931a108c0cc5ee334b2742e2aa7ffeab19e3aa"}]}, 0x7, [{0x101, &(0x7f0000002480)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x413}}, {0x33, &(0x7f0000000bc0)=ANY=[@ANYBLOB="3303327c30759b084c21b2fb12cd396d734309ade7776963dea33b1804e2b0991a0ed66efee269852037e771aea69e"]}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x41c}}, {0xc9, &(0x7f0000000c40)=@string={0xc9, 0x3, "543b3e55362d6ba2dc9d82fd24ed523edecb2ab94787bc5dea6e88dda9c641f2928feee1e3941b189fac232a017c0305f7ab1210486c561264b1d175692f3a8cc4b5ae76c08b3290cc43710e3796d9a0fa0a807eeae4f55264a9ba442c632895159f6a783e6943a5e55f85cabda71c9e0bff567e765875097cfb0c5ea1258c84845377ca7b70b163737c727b31b549e2736f4e4348b98703363652b350a543eac859cb3f4c6a973e86326230693f93b19a035c20d46c078b9b1b3c1630883a0554cc1372704c02"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x30, &(0x7f0000000d80)=@string={0x30, 0x3, "4a8bf2a6b7692b30594fe5c953ad491073c6e2bcbb97dc437ad6ee92c0329ac5907ffd3c7b90c20b957684e7d445"}}]})
syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0)

2.532076881s ago: executing program 3 (id=228):
lsetxattr$security_selinux(0x0, 0x0, &(0x7f00000000c0)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./mydev/ttyS0\x00', &(0x7f0000000100)={0x200, 0x161, 0x22}, 0x18)
openat(r0, &(0x7f00000001c0)='./mydev/ttyS0\x00', 0x2, 0xc0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='27', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x48040, 0x0)
finit_module(r2, 0x0, 0x2)

2.524012222s ago: executing program 3 (id=229):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./tracefs_dir\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs_dir/free_buffer\x00', 0x1, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000580), &(0x7f00000005c0)='./tracefs_dir\x00', 0xe, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2c41, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(r3, &(0x7f0000007580)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/142, 0x8e}, {&(0x7f0000000e80)=""/95, 0x5f}, {&(0x7f0000000f00)=""/10, 0xa}, {&(0x7f0000000f40)=""/156, 0x9c}, {&(0x7f0000001000)=""/21, 0x15}], 0x5}, 0x1}, {{&(0x7f00000010c0)=@ax25={{0x3, @rose}, [@remote, @null, @netrom, @default, @bcast, @null, @netrom, @null]}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001140)=""/251, 0xfb}, {&(0x7f0000001240)=""/243, 0xf3}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/36, 0x24}], 0x4, &(0x7f00000031c0)=""/230, 0xe6}, 0x842}, {{&(0x7f00000032c0)=@generic, 0x80, &(0x7f0000004440)=[{&(0x7f0000003340)=""/114, 0x72}, {&(0x7f00000033c0)=""/123, 0x7b}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x3, &(0x7f0000004480)=""/16, 0x10}, 0x7}, {{&(0x7f00000044c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004540)=""/146, 0x92}, {&(0x7f0000004600)=""/251, 0xfb}], 0x2, &(0x7f0000004740)=""/2, 0x2}, 0x5}, {{&(0x7f0000004780)=@ax25={{}, [@rose, @rose, @rose, @remote, @remote, @bcast, @default]}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004800)}, {&(0x7f0000004840)=""/176, 0xb0}, {&(0x7f0000004900)=""/208, 0xd0}], 0x3, &(0x7f0000004a40)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000005a40)=@hci, 0x80, &(0x7f0000006c00)=[{&(0x7f0000005ac0)=""/30, 0x1e}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/221, 0xdd}], 0x3, &(0x7f0000006c40)=""/49, 0x31}, 0xfff}, {{&(0x7f0000006c80)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000006fc0)=[{&(0x7f0000006d00)=""/3, 0x3}, {&(0x7f0000006d40)=""/158, 0x9e}, {&(0x7f0000006e00)=""/216, 0xd8}, {&(0x7f0000006f00)=""/135, 0x87}], 0x4, &(0x7f0000007000)=""/74, 0x4a}, 0x8}, {{&(0x7f0000007080)=@qipcrtr, 0x80, &(0x7f0000007180)=[{&(0x7f0000007100)=""/106, 0x6a}], 0x1, &(0x7f00000071c0)=""/193, 0xc1}}, {{&(0x7f00000072c0)=@phonet, 0x80, &(0x7f0000007500)=[{&(0x7f0000007340)=""/249, 0xf9}, {&(0x7f0000007440)=""/42, 0x2a}, {&(0x7f0000007480)=""/128, 0x80}], 0x3, &(0x7f0000007540)=""/4, 0x4}, 0x8}], 0x9, 0x2, 0x0) (async)
r4 = landlock_create_ruleset(&(0x7f0000000180)={0x1000, 0x2, 0x3}, 0x30, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async)
r5 = add_key(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r6 = dup2(r2, r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000c40)={'wg2\x00', <r7=>0x0})
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000c80)={0x0, 0x0, 0x9a, r7, 0x9}, 0xc)
add_key(&(0x7f0000000680)='asymmetric\x00', 0x0, &(0x7f00000006c0)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b0a9fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189040011a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403022a80301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62512e876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f564239", 0x559, r5) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0xc, &(0x7f0000000cc0)=0x4, 0x4) (async)
sendmsg$netlink(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000002000)=ANY=[@ANYBLOB="1001000012000100000000000000000000010000f900c78008003300", @ANYRES32=0x0, @ANYBLOB="4d006c80040050800400a88004004880437928b853e7c08502f62f0c86d4d39ac30c002300621bb949000000000400340014003900fe8000000000000000000000000000bb08001300050000000000000800f800", @ANYRES32=r10, @ANYBLOB="dbb07465ce00ce7f41c05614d6d0993fa4cc230a83e6c323fdaf7b5c58b9712b42f213d3efe3b6f5dc71318d87c5ded9de158021378d666a8a4f1d4bb726fcb15b60ba0d687d5a55b4dca8029a8f02bf5a21b4a5db0c9ef7bc59d593674844a09ee4c60180f69bdba5eb1a4bcf00053704417fd4d8fc7d359a9950de1434d5b165382f3e7e7a87a3f3c7fd00d8b29b2ff9da3ead7a3db6de891ce8dfe04696d08c000000"], 0x110}], 0x1}, 0x20000000)
setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000240)=0x6, 0x4) (async)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000280)=0xf3f, 0x4) (async)
sendto$packet(r8, &(0x7f00000002c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000340)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
landlock_restrict_self(r4, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c)

2.465213928s ago: executing program 3 (id=230):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000080)={0x6, 0x0, [{0x295, 0x0, 0xb}, {0x373, 0x0, 0x4db}, {0xbe5, 0x0, 0x4}, {0x8aa, 0x0, 0xe7f}, {0x8bf, 0x0, 0x400}, {0x981, 0x0, 0x96f6}]})
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6ea045434453412073656c662d74657374696e67206b65793059301306070000000000000000082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479aa5a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffc)

2.464924388s ago: executing program 3 (id=231):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x4010, 0x0) (async)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x4010, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ttyUSB0\x00', 0x12df00, 0x0)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x20a02, 0x0) (async)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') (async)
syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x140)
write(r1, &(0x7f00000001c0)='6', 0x1) (async)
write(r1, &(0x7f00000001c0)='6', 0x1)
llistxattr(&(0x7f0000000380)='./proc/thread-self/fail-nth\x00', &(0x7f00000003c0)=""/42, 0x2a)

1.397277587s ago: executing program 4 (id=237):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8d32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f00000000c0)={@val={0x0, 0x888e}, @void, @eth={@random="61f85f8df675", @random="000000000104", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x3a, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x5, '\x00', {0x0, 0x6, "8ba6ed", 0x9, 0x33, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0xd}, [@hopopts={0x2b}], "73a9"}}}}}}}}, 0x74)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000380)='wg2\x00', 0x4)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)

1.379534968s ago: executing program 4 (id=238):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f9, &(0x7f0000000100)={'ip6gre0\x00', 0x0})
sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/217, 0xd9}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/164, 0xa4}, {&(0x7f00000017c0)=""/160, 0xa0}, {&(0x7f0000001880)=""/142, 0x8e}, {&(0x7f0000001940)=""/128, 0x80}, {&(0x7f00000019c0)=""/276, 0x114}, {&(0x7f0000001b00)=""/101, 0x65}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0xfffffff6}, {{0x0, 0xffffffffffffff44, 0x0}, 0xf7ffffff}, {{0x0, 0x0, 0x0}, 0xffffffde}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0)
lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:apt_exec_t:s0\x00', 0x20, 0x2)

1.37012024s ago: executing program 4 (id=239):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1a7)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x40, 0x0)
r1 = open$dir(&(0x7f0000000240)='./mnt\x00', 0x0, 0x2)
renameat2(r1, &(0x7f0000000280)='./mnt\x00', r1, &(0x7f00000002c0)='./dev\x00', 0x4)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000380)=@vmx={0x109, 0x0, 0x2080, {0xd000, 0xffc, {0x2}, 0x0, 0x8}, {"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", "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"}})
r2 = memfd_create(&(0x7f0000002400)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x3)
ftruncate(r2, 0x7)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

334.164976ms ago: executing program 0 (id=244):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0)='all', 0x200, 0x0, 0x1000, 0x0, 0x0})
r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x6, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0x91, 0x4)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0), 0x171}}], 0x400000000000172, 0x4001c00)
write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x31)

325.303216ms ago: executing program 0 (id=245):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.force_empty\x00', 0x401, 0x26)
pwrite64(r0, &(0x7f0000000280)="9f1390a950", 0x5, 0x2)
write(r0, &(0x7f0000000440)="0f", 0x1)

272.341342ms ago: executing program 2 (id=246):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x6004, 0x1) (async)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x6004, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2f01, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x38, 0x68, 0x4000, 0xf, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x4, 0x6, 0x65, 0x1, 0x8, 0x6, 0xf, @empty, @dev={0xac, 0x14, 0x14, 0xf}}, "ec07f50000000000"}}}}}}, 0x4a)
openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r3, &(0x7f0000000600)={0x2020, 0x0, <r4=>0x0}, 0x203a)
r5 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x40c8000, &(0x7f0000000000)={0xa, 0x4e23, 0x200000, @mcast2, 0xa}, 0x1c)
setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000040), 0x4)
write$FUSE_INIT(r3, &(0x7f0000002640)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x300d2140, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000026c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004780)={0x20, 0x0, 0x200003, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r3, &(0x7f00000026c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004780)={0x20, 0x0, 0x200003, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f00000047c0)='./file0\x00', 0x40042, 0x0)
read$FUSE(r6, &(0x7f0000006940)={0x2020}, 0x2020)

271.344442ms ago: executing program 0 (id=247):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000380)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0) (async)
socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x8, @loopback, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="547eb4ea6b", 0x5}, {&(0x7f00000000c0)="0bb88b3c054049519a549115af46b36691469d186b845c2f3e282313b67ff26479e21e462622f01617bbefa2f863022b32ec2550795aef9c2ee480643464d09aea39c560be15eab68b379da4ee0f5c16453c7bd4c75a404ae6a51acfc14b5c9aab91803ac1a494e48f", 0x69}], 0x2, &(0x7f0000000400)=[{0xe0, 0x116, 0x9, "ee210a40d88169aa131aea0a6f3ac11892a1726f0ca6261a5708df7c4d9a456605914f910d4224dab5adb630612fa355d9b647693f09932de0b53c4df20f16cd25840ea6bf25abd4756a0a93e632a087c6371f5e96e2b3fb3b5366fcc799808d4836c0c74b169bee7c629a6a67252b85012030e229b5c1f095c98b8222230d56ae5577f65d44462e27b241879fab7e99c1deddedc4f790fe45fc492e6c15e8af93db45b499c02c5eed5e6cf84db6b54545526b2e91e964a0c5f50fab963d3ff7c6a1ef02092717f46959406fc98f"}, {0x90, 0x10c, 0xd46, "eac5cbcce7109b120de0292fe1a1b740f629049bc62539f2ff54de38a893c51ab3df8eca7d1c142c139b8c26991d7ca1be0b6e9b3013e42430ce2c288ea47eea5e5c736698c62addf8a477ee8f2ae7c04a10681307044fbc53021950d82686ee913a54659d300ab3ef84b5dcc15801acbe6f63ededc7cee7556f"}, {0x50, 0xff, 0x7, "4fc0e8e899f27e2a718c68352945004ad2aac857b26ff9d730bdb3c7cf78b292bef2155dc46a2b8dd4cc53015928734a2f6f76026743837ec7ee08"}, {0xb0, 0x116, 0x3, "b2b3a9d2be39c74180bdaf2e81404716e4febb59116502aca2507293271a9059de1a223f7cc01ef353a3b5c0f8524a9d31554f84d2bc6acbee06e921d2408d02f5fb8cfe92a17d0627ca0c1638abefa323906fe24732fedd0e9589f8f5646215120b5e2a0d0ca839f906b0ba9334cf1bb694f029c45069c70f85c98acd42c8a4950390f9298eb7b0be1a89514e52617b9c93874aa56f243c1fd8c35351eb"}, {0x80, 0x10e, 0x1, "cbfbf8f981bfc6f791442985dcd0cdb5249132dc0fd10ebfd6d88fcdf7f01073782bebcef13258f5401899827a6ce483c48a664f63fa5a65f593d48dde73e428ff1b076c75397f9ccefe586d8908a0f3683e4070b37d1cc18cef57f332f99b179e95c2cb1ba504eb8166afe42524"}], 0x2f0}, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r1, &(0x7f0000000180)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) (async)
sendto$inet6(r1, &(0x7f0000000180)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f00000003c0)={0xa, 0xe23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000800)

197.19679ms ago: executing program 0 (id=248):
r0 = openat$kvm(0x0, &(0x7f0000000380), 0x200040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x1}, [{0x2, 0x3, 0xee00}], {0x4, 0x5}, [], {0x10, 0x6}}, 0x2c, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
pipe2(&(0x7f0000000580), 0x4800)
r3 = userfaultfd(0x80001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000005c0)={0xaa, 0x8})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000600)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
mkdir(&(0x7f0000000100)='./bus\x00', 0x1f1)
capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0x8000000})
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000003c0)={0x0, &(0x7f00000015c0)})
r6 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000440)={{0x2, 0x0, @broadcast}, {0x307, @local}, 0x48, {0x2, 0x0, @local}, 'bridge_slave_1\x00'})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r8, 0x0, 0x0)
wait4(r8, 0x0, 0x40000000, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0x889}]})
writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000500)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0009000d0000000005000000", 0x29}], 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x4000)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r9, 0x6, 0x1, 0x0, &(0x7f00000000c0))
ioctl$KVM_RUN(r5, 0xae80, 0x0)

76.527292ms ago: executing program 0 (id=249):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r1, 0x407, 0x4000004)
capset(&(0x7f0000000580)={0x20080522}, &(0x7f00000005c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
pipe2(&(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r2, 0x407, 0x100000)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000640), 0x1c1b02, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xa098)
ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r3, 0x697e4000)
ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, 0x0)
r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80a00, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848f7ff22290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0x109, 0x0, 0x0, 0x0, @binary="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"/261}, @generic="d83bea4ae74b4d194feb3f8d8b6d"]}]}, 0x184}}, 0x0)
ioctl$DM_TABLE_DEPS(r4, 0xc138fd0b, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x140, 0x138, 0x0, 0x0, 0x1011, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '1\x00'}}, "e508000000"})

70.137043ms ago: executing program 4 (id=250):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1})
syz_extract_tcp_res(0x0, 0x9, 0x4)
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="01031c000300140033006fff9eec034b0601fe8000000000000000000000000000bb00000000000000000000ffffe0"], 0x37d)

21.317128ms ago: executing program 0 (id=251):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x103802, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x2284, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (rerun: 64)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r5, 0x0)
write$selinux_load(r4, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "c0485b7a76e6b0a2101df8a6d640e944b41c12da7b04d4a4052f5b7f8931b6200bf17886ea1b66c9"}, 0x38)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x3f, 0x0, 0x0) (async, rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000340)="0f01dac744240000000000c74424020c000000c7442406000000000f011c2464440f01c548b865000000000000000f23d80f21f835400000800f23f866ba2000b80e000000ef0f060fc76ccfb4a7c744240084000000c744240231000000ff1c24b8010000000f01c1", 0x69}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

18.844998ms ago: executing program 4 (id=252):
modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) (async)
modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
r0 = landlock_create_ruleset(&(0x7f00000006c0)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r1, &(0x7f0000000700)={0x2, 0x4e23, @private=0xa010100}, 0x4)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9a10d366", @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002004e227f00000100000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000000c0)={0x0, 0xa1, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
mkdir(&(0x7f0000000440)='./bus\x00', 0x0) (async)
mkdir(&(0x7f0000000440)='./bus\x00', 0x0)
mount$incfs(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0xc002, 0x0) (async)
mount$incfs(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0xc002, 0x0)
chdir(&(0x7f0000000540)='./bus\x00') (async)
chdir(&(0x7f0000000540)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0)
sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004104}, 0x90)
syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) (async)
syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=253):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.force_empty\x00', 0x401, 0x26)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00')
fchdir(r0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x60000600)
r1 = socket(0x10, 0x803, 0x0)
write(r1, &(0x7f00000000c0)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts.
[   21.952337][   T36] audit: type=1400 audit(1794602492.429:64): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.975363][   T36] audit: type=1400 audit(1794602492.449:65): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.976246][  T286] cgroup: Unknown subsys name 'net'
[   22.003120][   T36] audit: type=1400 audit(1794602492.479:66): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.003229][  T286] cgroup: Unknown subsys name 'devices'
[   22.111063][  T286] cgroup: Unknown subsys name 'hugetlb'
[   22.116670][  T286] cgroup: Unknown subsys name 'rlimit'
[   22.278505][   T36] audit: type=1400 audit(1794602492.749:67): avc:  denied  { setattr } for  pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.301728][   T36] audit: type=1400 audit(1794602492.749:68): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   22.326599][   T36] audit: type=1400 audit(1794602492.749:69): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.333467][  T288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   22.358431][   T36] audit: type=1400 audit(1794602492.829:70): avc:  denied  { relabelto } for  pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.383874][   T36] audit: type=1400 audit(1794602492.829:71): avc:  denied  { write } for  pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.403495][  T286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.409425][   T36] audit: type=1400 audit(1794602492.879:72): avc:  denied  { read } for  pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.443672][   T36] audit: type=1400 audit(1794602492.879:73): avc:  denied  { open } for  pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.232139][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.239199][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.246323][  T294] bridge_slave_0: entered allmulticast mode
[   23.252743][  T294] bridge_slave_0: entered promiscuous mode
[   23.260337][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.267366][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.274485][  T294] bridge_slave_1: entered allmulticast mode
[   23.280695][  T294] bridge_slave_1: entered promiscuous mode
[   23.301495][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.308539][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.315654][  T293] bridge_slave_0: entered allmulticast mode
[   23.321845][  T293] bridge_slave_0: entered promiscuous mode
[   23.338396][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.345462][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.352566][  T293] bridge_slave_1: entered allmulticast mode
[   23.358700][  T293] bridge_slave_1: entered promiscuous mode
[   23.383317][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.390422][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.397469][  T295] bridge_slave_0: entered allmulticast mode
[   23.403863][  T295] bridge_slave_0: entered promiscuous mode
[   23.415259][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.422316][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.429412][  T295] bridge_slave_1: entered allmulticast mode
[   23.435537][  T295] bridge_slave_1: entered promiscuous mode
[   23.457060][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.464183][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.471303][  T296] bridge_slave_0: entered allmulticast mode
[   23.477462][  T296] bridge_slave_0: entered promiscuous mode
[   23.486300][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.493370][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.500466][  T296] bridge_slave_1: entered allmulticast mode
[   23.506603][  T296] bridge_slave_1: entered promiscuous mode
[   23.625764][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.632844][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.640169][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.647180][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.659917][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.666959][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.674239][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.681271][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.690093][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.697119][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.704383][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.711431][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.741487][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.748527][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.755791][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.762819][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.791853][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.799204][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.806573][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.814291][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.821509][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.828649][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.836001][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.843226][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.862833][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.869888][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.877389][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.884444][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.892479][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.899528][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.906926][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.913952][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.937315][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.944363][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.961661][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.968680][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.976776][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.983824][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.991772][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.998784][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.014373][  T294] veth0_vlan: entered promiscuous mode
[   24.041355][  T296] veth0_vlan: entered promiscuous mode
[   24.050930][  T294] veth1_macvtap: entered promiscuous mode
[   24.064992][  T293] veth0_vlan: entered promiscuous mode
[   24.076491][  T295] veth0_vlan: entered promiscuous mode
[   24.090602][  T296] veth1_macvtap: entered promiscuous mode
[   24.097840][  T293] veth1_macvtap: entered promiscuous mode
[   24.125608][  T295] veth1_macvtap: entered promiscuous mode
[   24.138475][  T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   24.320382][  T331] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   24.569404][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   24.577126][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   24.740804][    T9] usb 2-1: config 1 has an invalid interface number: 188 but max is 0
[   24.749158][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   24.759479][    T9] usb 2-1: config 1 has no interface number 0
[   24.765702][    T9] usb 2-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   24.779401][    T9] usb 2-1: config 1 interface 188 has no altsetting 0
[   24.786417][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[   24.793646][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00
[   24.804469][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.813143][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b
[   24.822781][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   24.831073][   T10] usb 3-1: config 0 descriptor??
[   24.836159][    T9] usb 2-1: Product: syz
[   24.840512][    T9] usb 2-1: Manufacturer: syz
[   24.846415][    T9] usb 2-1: SerialNumber: syz
[   24.929356][  T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   25.079360][  T312] usb 4-1: Using ep0 maxpacket: 8
[   25.100840][  T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   25.121365][  T312] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   25.139687][  T312] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   25.170700][  T312] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[   25.189803][  T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.197860][  T312] usb 4-1: Product: syz
[   25.202089][  T312] usb 4-1: Manufacturer: syz
[   25.206789][  T312] usb 4-1: SerialNumber: syz
[   25.249930][   T10] apple 0003:05AC:024E.0001: unexpected long global item
[   25.257133][   T10] apple 0003:05AC:024E.0001: parse failed
[   25.279436][   T10] apple 0003:05AC:024E.0001: probe with driver apple failed with error -22
[   25.420464][  T312] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[   25.428700][  T312] usb 4-1: 0:2 : does not exist
[   25.443870][  T312] usb 4-1: USB disconnect, device number 2
[   25.470223][   T31] usb 3-1: USB disconnect, device number 2
[   25.955473][  T351] FAULT_INJECTION: forcing a failure.
[   25.955473][  T351] name fail_futex, interval 1, probability 0, space 0, times 1
[   25.972157][  T354] netlink: 'syz.3.12': attribute type 20 has an invalid length.
[   25.980632][  T351] CPU: 0 UID: 0 PID: 351 Comm: syz.0.11 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be
[   25.980664][  T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   25.980688][  T351] Call Trace:
[   25.980694][  T351]  <TASK>
[   25.980701][  T351]  __dump_stack+0x21/0x30
[   25.980727][  T351]  dump_stack_lvl+0x140/0x1c0
[   25.980745][  T351]  ? __cfi_dump_stack_lvl+0x10/0x10
[   25.980764][  T351]  dump_stack+0x19/0x20
[   25.980781][  T351]  should_fail_ex+0x3c2/0x510
[   25.980798][  T351]  should_fail+0xf/0x20
[   25.980812][  T351]  get_futex_key+0x178/0x940
[   25.980831][  T351]  ? __cfi_get_futex_key+0x10/0x10
[   25.980846][  T351]  ? kernel_text_address+0xa9/0xe0
[   25.980869][  T351]  ? unwind_get_return_address+0x51/0x90
[   25.980893][  T351]  futex_wait_setup+0xae/0x260
[   25.980916][  T351]  ? __cfi_futex_wait_setup+0x10/0x10
[   25.980938][  T351]  ? __asan_memcpy+0x5a/0x80
[   25.980963][  T351]  __futex_wait+0x12c/0x3d0
[   25.980986][  T351]  ? __cfi___futex_wait+0x10/0x10
[   25.981007][  T351]  ? __cfi_futex_wake_mark+0x10/0x10
[   25.981029][  T351]  ? __kasan_check_read+0x15/0x20
[   25.981052][  T351]  ? futex_wake+0x627/0x950
[   25.981074][  T351]  futex_wait+0x128/0x7c0
[   25.981095][  T351]  ? __cfi_futex_wait+0x10/0x10
[   25.981119][  T351]  do_futex+0x32a/0x510
[   25.981138][  T351]  ? __cfi_do_futex+0x10/0x10
[   25.981156][  T351]  __se_sys_futex+0x13c/0x320
[   25.981175][  T351]  ? __x64_sys_futex+0x110/0x110
[   25.981195][  T351]  __x64_sys_futex+0xe9/0x110
[   25.981212][  T351]  x64_sys_call+0x227f/0x2ee0
[   25.981227][  T351]  do_syscall_64+0x57/0xf0
[   25.981244][  T351]  ? clear_bhb_loop+0x50/0xa0
[   25.981265][  T351]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   25.981286][  T351] RIP: 0033:0x7f2752fa94d9
[   25.981310][  T351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   25.981323][  T351] RSP: 002b:00007f27519f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   25.981346][  T351] RAX: ffffffffffffffda RBX: 00007f2753225fa8 RCX: 00007f2752fa94d9
[   25.981358][  T351] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2753225fa8
[   25.981378][  T351] RBP: 00007f2753225fa0 R08: 0000000000000000 R09: 0000000000000000
[   25.981390][  T351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   25.981402][  T351] R13: 00007f2753226038 R14: 00007ffca0fe8090 R15: 00007ffca0fe8178
[   25.981417][  T351]  </TASK>
[   25.989285][  T355] FAULT_INJECTION: forcing a failure.
[   25.989285][  T355] name failslab, interval 1, probability 0, space 0, times 0
[   26.243817][  T355] CPU: 0 UID: 0 PID: 355 Comm: syz.3.12 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be
[   26.243845][  T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   26.243862][  T355] Call Trace:
[   26.243867][  T355]  <TASK>
[   26.243875][  T355]  __dump_stack+0x21/0x30
[   26.243895][  T355]  dump_stack_lvl+0x140/0x1c0
[   26.243909][  T355]  ? __cfi_dump_stack_lvl+0x10/0x10
[   26.243924][  T355]  dump_stack+0x19/0x20
[   26.243936][  T355]  should_fail_ex+0x3c2/0x510
[   26.243953][  T355]  should_failslab+0xac/0x100
[   26.243970][  T355]  kmem_cache_alloc_noprof+0x42/0x410
[   26.243994][  T355]  ? security_inode_alloc+0x51/0x230
[   26.244013][  T355]  ? __cfi_make_kgid+0x10/0x10
[   26.244029][  T355]  ? kasan_save_alloc_info+0x3a/0x50
[   26.244051][  T355]  security_inode_alloc+0x51/0x230
[   26.244070][  T355]  inode_init_always_gfp+0x756/0x9e0
[   26.244087][  T355]  alloc_inode+0xc5/0x270
[   26.244105][  T355]  new_inode+0x25/0x1e0
[   26.244121][  T355]  ? start_creating+0x1fb/0x310
[   26.244138][  T355]  __debugfs_create_file+0x14c/0x4b0
[   26.244154][  T355]  debugfs_create_file+0x4e/0x70
[   26.244169][  T355]  kvm_arch_create_vcpu_debugfs+0x42/0x140
[   26.244193][  T355]  kvm_create_vcpu_debugfs+0x144/0x1d0
[   26.244211][  T355]  ? create_vcpu_fd+0x150/0x150
[   26.244227][  T355]  ? mutex_unlock+0x90/0x240
[   26.244250][  T355]  ? kvm_arch_vcpu_postcreate+0x12a/0x160
[   26.244267][  T355]  kvm_vm_ioctl_create_vcpu+0x661/0xab0
[   26.244282][  T355]  kvm_vm_ioctl+0x7bd/0xc40
[   26.244298][  T355]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[   26.244313][  T355]  ? ioctl_has_perm+0x1bc/0x500
[   26.244329][  T355]  ? __asan_memcpy+0x5a/0x80
[   26.244352][  T355]  ? ioctl_has_perm+0x408/0x500
[   26.244368][  T355]  ? has_cap_mac_admin+0xd0/0xd0
[   26.244384][  T355]  ? futex_wait+0x2b8/0x7c0
[   26.244407][  T355]  ? __cfi_futex_wait+0x10/0x10
[   26.244428][  T355]  ? xskq_create+0x106/0x290
[   26.244450][  T355]  ? selinux_file_ioctl+0x732/0x1480
[   26.244471][  T355]  ? xsk_setsockopt+0x567/0x760
[   26.244488][  T355]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   26.244512][  T355]  ? hook_file_ioctl+0x1ef/0x590
[   26.244535][  T355]  ? errseq_sample+0x48/0x70
[   26.244551][  T355]  ? __cfi_hook_file_ioctl+0x10/0x10
[   26.244571][  T355]  ? __cfi_do_futex+0x10/0x10
[   26.244590][  T355]  ? __fget_files+0x2bc/0x330
[   26.244608][  T355]  ? bpf_lsm_file_ioctl+0xd/0x20
[   26.244627][  T355]  ? security_file_ioctl+0x3e/0x110
[   26.244651][  T355]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[   26.244667][  T355]  __se_sys_ioctl+0x123/0x1b0
[   26.244687][  T355]  __x64_sys_ioctl+0x7f/0xa0
[   26.244705][  T355]  x64_sys_call+0x1878/0x2ee0
[   26.244723][  T355]  do_syscall_64+0x57/0xf0
[   26.244741][  T355]  ? clear_bhb_loop+0x50/0xa0
[   26.244764][  T355]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   26.244787][  T355] RIP: 0033:0x7f29761a94d9
[   26.244802][  T355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   26.244815][  T355] RSP: 002b:00007f2976fc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   26.244834][  T355] RAX: ffffffffffffffda RBX: 00007f2976426090 RCX: 00007f29761a94d9
[   26.244855][  T355] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 000000000000000b
[   26.244867][  T355] RBP: 00007f297623804e R08: 0000000000000000 R09: 0000000000000000
[   26.244878][  T355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   26.244887][  T355] R13: 00007f2976426128 R14: 00007f2976426090 R15: 00007ffd893e4bc8
[   26.244896][  T355]  </TASK>
[   26.245263][  T355] debugfs: out of free dentries, can not create file 'guest_mode'
[   26.778288][  T392] netlink: 48 bytes leftover after parsing attributes in process `syz.3.20'.
[   26.788728][  T392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'.
[   26.826132][  T396] bridge0: entered allmulticast mode
[   26.833177][  T396] bridge0: left allmulticast mode
[   26.844919][  T400] Bluetooth: ISO socket layer initialized
[   26.962653][  T426] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   27.065444][   T36] kauditd_printk_skb: 107 callbacks suppressed
[   27.065460][   T36] audit: type=1400 audit(1794602497.539:179): avc:  denied  { unmount } for  pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   27.140347][   T36] audit: type=1400 audit(1794602497.619:180): avc:  denied  { read write } for  pid=440 comm="syz.3.33" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   27.142452][  T312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   27.179184][  T312] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   27.200992][  T443] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   27.207754][   T36] audit: type=1400 audit(1794602497.619:181): avc:  denied  { open } for  pid=440 comm="syz.3.33" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   27.237148][    T9] usb 2-1: unknown interface protocol 0xc1, assuming v1
[   27.244818][    T9] usb 2-1: 188:0 : does not exist
[   27.258852][  T447] rust_binder: 446:447 error while translating object: EINVAL
[   27.267039][   T36] audit: type=1400 audit(1794602497.649:182): avc:  denied  { read write } for  pid=440 comm="syz.3.33" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   27.292703][    T9] usb 2-1: USB disconnect, device number 2
[   27.298927][  T447] rust_binder: 446:447 transaction async to 446:0 failed EINVAL, code 4294967295 size 96-24 line thread.rs:1000
[   27.329421][  T335] rust_binder: 446: undelivered TRANSACTION_ERROR: 29201
[   27.335524][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.188/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   27.336699][   T36] audit: type=1400 audit(1794602497.649:183): avc:  denied  { open } for  pid=440 comm="syz.3.33" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   27.378634][   T36] audit: type=1400 audit(1794602497.719:184): avc:  denied  { write } for  pid=440 comm="syz.3.33" name="hidraw0" dev="devtmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   27.406285][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   27.416491][   T36] audit: type=1400 audit(1794602497.729:185): avc:  denied  { call } for  pid=446 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   27.437963][   T36] audit: type=1400 audit(1794602497.779:186): avc:  denied  { setopt } for  pid=442 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   27.457518][   T36] audit: type=1400 audit(1794602497.899:187): avc:  denied  { mount } for  pid=449 comm="syz.1.36" name="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   27.508633][   T36] audit: type=1400 audit(1794602497.899:188): avc:  denied  { search } for  pid=449 comm="syz.1.36" name="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   27.574828][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   27.576997][  T456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=456 comm=syz.3.39
[   27.583543][   T10] usb 1-1: config 1 has an invalid descriptor of length 42, skipping remainder of the config
[   27.605531][   T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[   27.616533][   T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 205, changing to 7
[   27.628733][   T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 57855, setting to 1024
[   27.641800][   T10] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[   27.650989][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2
[   27.658982][   T10] usb 1-1: Product: ๠ᚱ丄્潼楈ﮒ絮舩陉쭘칑㻱ớ쿅辠䇵除䵺ᤈꏇͣ韴齹吏뇩톭퉉뇀떊ﰑ똍㓯喂룼ܖ⪆轙ꁧਜ਼嵳⡗퐪힞퉝⒞펾ꓪ撼촸骚᫟莂븛ኍ峥唂ቐ諘
[   27.682324][   T10] usb 1-1: Manufacturer: Е
[   27.686885][   T10] usb 1-1: SerialNumber: ๠ᚱ丄્潼楈ﮒ絮舩陉쭘칑㻱ớ쿅辠䇵除䵺ᤈꏇͣ韴齹吏뇩톭퉉뇀떊ﰑ똍㓯喂룼ܖ⪆轙ꁧਜ਼嵳⡗퐪힞퉝⒞펾ꓪ撼촸骚᫟莂븛ኍ峥唂ቐ諘
[   27.939443][   T10] usb 1-1: USB disconnect, device number 2
[   27.985896][    T9] rust_binder: 468: undelivered TRANSACTION_ERROR: 29189
[   28.035759][  T474] syzkaller1: entered promiscuous mode
[   28.041274][  T474] syzkaller1: entered allmulticast mode
[   28.049280][  T474] FAULT_INJECTION: forcing a failure.
[   28.049280][  T474] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   28.062773][  T474] CPU: 0 UID: 0 PID: 474 Comm: syz.2.45 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be
[   28.062803][  T474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   28.062816][  T474] Call Trace:
[   28.062822][  T474]  <TASK>
[   28.062829][  T474]  __dump_stack+0x21/0x30
[   28.062854][  T474]  dump_stack_lvl+0x140/0x1c0
[   28.062872][  T474]  ? __cfi_dump_stack_lvl+0x10/0x10
[   28.062891][  T474]  ? __cfi_cgroup_rstat_updated+0x10/0x10
[   28.062920][  T474]  dump_stack+0x19/0x20
[   28.062936][  T474]  should_fail_ex+0x3c2/0x510
[   28.062956][  T474]  should_fail_alloc_page+0xec/0x110
[   28.062977][  T474]  __alloc_pages_noprof+0x1c0/0x7e0
[   28.063001][  T474]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   28.063027][  T474]  ? folio_add_lru+0x116/0x400
[   28.063048][  T474]  ? __cfi_folio_add_lru+0x10/0x10
[   28.063069][  T474]  __folio_alloc_noprof+0x14/0x80
[   28.063092][  T474]  folio_prealloc+0x46/0x220
[   28.063114][  T474]  do_pte_missing+0x16af/0x4440
[   28.063149][  T474]  ? pte_marker_clear+0x1b0/0x1b0
[   28.063169][  T474]  ? cgroup_rstat_updated+0x144/0x800
[   28.063196][  T474]  ? kmem_cache_free+0x4b1/0x4f0
[   28.063224][  T474]  ? vm_area_free+0xee/0x140
[   28.063249][  T474]  ? pte_offset_map_rw_nolock+0x236/0x2c0
[   28.063276][  T474]  handle_mm_fault+0x1189/0x1ba0
[   28.063295][  T474]  ? __kasan_check_write+0x18/0x20
[   28.063324][  T474]  ? __cfi_handle_mm_fault+0x10/0x10
[   28.063343][  T474]  ? follow_page_pte+0x4b2/0xba0
[   28.063367][  T474]  ? gup_must_unshare+0x1e0/0x1e0
[   28.063387][  T474]  ? vma_is_secretmem+0x11/0x50
[   28.063410][  T474]  ? check_vma_flags+0x36d/0x3a0
[   28.063432][  T474]  __get_user_pages+0x114b/0x22d0
[   28.063457][  T474]  ? populate_vma_page_range+0x220/0x220
[   28.063478][  T474]  ? down_read+0x7f/0xe0
[   28.063503][  T474]  ? __cfi_down_read+0x10/0x10
[   28.063527][  T474]  ? __cfi_do_mmap+0x10/0x10
[   28.063553][  T474]  __mm_populate+0x300/0x440
[   28.063574][  T474]  vm_mmap_pgoff+0x426/0x4b0
[   28.063600][  T474]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[   28.063625][  T474]  ? xfd_validate_state+0x68/0x140
[   28.063643][  T474]  ksys_mmap_pgoff+0xfa/0x1e0
[   28.063669][  T474]  ? __kasan_check_write+0x18/0x20
[   28.063695][  T474]  __x64_sys_mmap+0x121/0x140
[   28.063717][  T474]  x64_sys_call+0x13bf/0x2ee0
[   28.063737][  T474]  do_syscall_64+0x57/0xf0
[   28.063756][  T474]  ? clear_bhb_loop+0x50/0xa0
[   28.063781][  T474]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   28.063805][  T474] RIP: 0033:0x7fb69c5a94d9
[   28.063822][  T474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   28.063837][  T474] RSP: 002b:00007fb69d3a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   28.063858][  T474] RAX: ffffffffffffffda RBX: 00007fb69c825fa0 RCX: 00007fb69c5a94d9
[   28.063873][  T474] RDX: 000000000000000b RSI: 0000000000b36000 RDI: 0000200000000000
[   28.063886][  T474] RBP: 00007fb69c63804e R08: ffffffffffffffff R09: 00000000cd0b3000
[   28.063901][  T474] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000
[   28.063913][  T474] R13: 00007fb69c826038 R14: 00007fb69c825fa0 R15: 00007fff7b8e6a08
[   28.063928][  T474]  </TASK>
[   28.458521][  T480] IPv4: Oversized IP packet from 127.202.26.0
[   28.639769][  T492] syz.1.51 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   28.669672][  T492] event trace: Could not enable event p
[   28.689040][  T497] netlink: 80 bytes leftover after parsing attributes in process `syz.1.54'.
[   28.772447][  T510] =======================================================
[   28.772447][  T510] WARNING: The mand mount option has been deprecated and
[   28.772447][  T510]          and is ignored by this kernel. Remove the mand
[   28.772447][  T510]          option from the mount to silence this warning.
[   28.772447][  T510] =======================================================
[   28.810564][  T510] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   28.874581][  T510] MTRR 1 not used
[   28.879750][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   29.039350][   T10] usb 4-1: Using ep0 maxpacket: 16
[   29.049371][  T309] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   29.057728][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.079333][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.089073][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   29.101886][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   29.111548][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.120448][   T10] usb 4-1: config 0 descriptor??
[   29.159360][  T312] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   29.200831][  T309] usb 1-1: unable to get BOS descriptor or descriptor too short
[   29.209577][  T309] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   29.220103][  T309] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   29.230607][  T309] usb 1-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40
[   29.239702][  T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.247781][  T309] usb 1-1: Product: syz
[   29.252146][  T309] usb 1-1: Manufacturer: syz
[   29.256753][  T309] usb 1-1: SerialNumber: syz
[   29.320461][  T312] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.337558][  T312] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[   29.354994][  T312] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   29.367984][  T312] usb 3-1: config 0 interface 0 has no altsetting 0
[   29.379414][  T312] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[   29.388491][  T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.400429][  T312] usb 3-1: config 0 descriptor??
[   29.405694][  T513] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   29.550823][   T10] usbhid 4-1:0.0: can't add hid device: -71
[   29.556797][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   29.570184][   T10] usb 4-1: USB disconnect, device number 3
[   29.816402][  T312] dragonrise 0003:0079:0006.0003: unknown main item tag 0x2
[   29.824132][  T312] dragonrise 0003:0079:0006.0003: unknown main item tag 0x5
[   29.832258][  T312] dragonrise 0003:0079:0006.0003: unknown main item tag 0x2
[   29.839854][  T312] dragonrise 0003:0079:0006.0003: item fetching failed at offset 23/24
[   29.848384][  T312] dragonrise 0003:0079:0006.0003: parse failed
[   29.855785][  T312] dragonrise 0003:0079:0006.0003: probe with driver dragonrise failed with error -22
[   30.016184][  T513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.026629][  T513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.449362][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   30.620372][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.640684][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[   30.659342][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.667363][   T10] usb 4-1: Product: syz
[   30.671563][   T10] usb 4-1: Manufacturer: syz
[   30.676247][   T10] usb 4-1: SerialNumber: syz
[   30.690878][   T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[   30.696827][   T10] cdc_wdm 4-1:1.0: Unknown control protocol
[   30.892241][   T31] usb 4-1: USB disconnect, device number 4
[   31.756570][  T309] usb 1-1: USB disconnect, device number 3
[   31.769872][  T534] capability: warning: `syz.0.62' uses 32-bit capabilities (legacy support in use)
[   31.783666][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   31.819736][  T538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'.
[   31.829738][  T538] FAULT_INJECTION: forcing a failure.
[   31.829738][  T538] name fail_futex, interval 1, probability 0, space 0, times 0
[   31.852704][  T538] CPU: 1 UID: 0 PID: 538 Comm: syz.0.63 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be
[   31.852738][  T538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   31.852750][  T538] Call Trace:
[   31.852757][  T538]  <TASK>
[   31.852765][  T538]  __dump_stack+0x21/0x30
[   31.852798][  T538]  dump_stack_lvl+0x140/0x1c0
[   31.852817][  T538]  ? __cfi_dump_stack_lvl+0x10/0x10
[   31.852837][  T538]  ? unwind_get_return_address+0x51/0x90
[   31.852863][  T538]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   31.852880][  T538]  dump_stack+0x19/0x20
[   31.852894][  T538]  should_fail_ex+0x3c2/0x510
[   31.852910][  T538]  should_fail+0xf/0x20
[   31.852923][  T538]  get_futex_key+0x178/0x940
[   31.852941][  T538]  ? __cfi_get_futex_key+0x10/0x10
[   31.852960][  T538]  futex_wake+0x150/0x950
[   31.852981][  T538]  ? __cfi_futex_wake+0x10/0x10
[   31.853003][  T538]  do_futex+0x37d/0x510
[   31.853022][  T538]  ? __cfi_do_futex+0x10/0x10
[   31.853038][  T538]  ? __kasan_slab_free+0x6a/0x80
[   31.853058][  T538]  __se_sys_futex+0x13c/0x320
[   31.853079][  T538]  ? __x64_sys_futex+0x110/0x110
[   31.853099][  T538]  ? do_symlinkat+0x3b0/0x400
[   31.853125][  T538]  ? __cfi_do_symlinkat+0x10/0x10
[   31.853148][  T538]  __x64_sys_futex+0xe9/0x110
[   31.853167][  T538]  x64_sys_call+0x227f/0x2ee0
[   31.853187][  T538]  do_syscall_64+0x57/0xf0
[   31.853206][  T538]  ? clear_bhb_loop+0x50/0xa0
[   31.853231][  T538]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   31.853255][  T538] RIP: 0033:0x7f2752fa94d9
[   31.853271][  T538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   31.853286][  T538] RSP: 002b:00007f27519f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   31.853308][  T538] RAX: ffffffffffffffda RBX: 00007f2753225fa8 RCX: 00007f2752fa94d9
[   31.853323][  T538] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2753225fac
[   31.853336][  T538] RBP: 00007f2753225fa0 R08: 4000000000000000 R09: 0000000000000000
[   31.853350][  T538] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[   31.853364][  T538] R13: 00007f2753226038 R14: 00007ffca0fe8090 R15: 00007ffca0fe8178
[   31.853381][  T538]  </TASK>
[   32.114894][  T312] usb 3-1: USB disconnect, device number 3
[   32.193057][   T36] kauditd_printk_skb: 43 callbacks suppressed
[   32.193073][   T36] audit: type=1400 audit(1794602502.669:232): avc:  denied  { write } for  pid=547 comm="syz.3.68" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   32.226273][  T546] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   32.244471][  T548] device-mapper: table: 252:1: striped: Couldn't parse stripe destination (-EACCES)
[   32.254196][  T548] device-mapper: ioctl: error adding target to table
[   32.479354][  T312] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   32.529356][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   32.639358][  T312] usb 3-1: Using ep0 maxpacket: 16
[   32.646000][  T312] usb 3-1: unable to get BOS descriptor or descriptor too short
[   32.654678][  T312] usb 3-1: config 3 interface 1 has no altsetting 0
[   32.662128][  T312] usb 3-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00
[   32.671432][  T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   32.679647][  T312] usb 3-1: SerialNumber: syz
[   32.700356][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   32.730790][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[   32.739957][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.747998][   T10] usb 4-1: Product: syz
[   32.752226][   T10] usb 4-1: Manufacturer: syz
[   32.756863][   T10] usb 4-1: SerialNumber: syz
[   32.779636][   T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[   32.785567][   T10] cdc_wdm 4-1:1.0: Unknown control protocol
[   32.901375][  T312] usb 3-1: selecting invalid altsetting 0
[   32.907484][  T312] rndis_host 3-1:3.0: probe with driver rndis_host failed with error -22
[   32.918489][  T312] usb 3-1: USB disconnect, device number 4
[   32.971282][   T36] audit: type=1400 audit(1794602503.449:233): avc:  denied  { read write } for  pid=551 comm="syz.3.69" name="cdc-wdm0" dev="devtmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   32.994878][   T36] audit: type=1400 audit(1794602503.449:234): avc:  denied  { open } for  pid=551 comm="syz.3.69" path="/dev/cdc-wdm0" dev="devtmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   33.029978][   T46] bridge_slave_1: left allmulticast mode
[   33.035670][   T46] bridge_slave_1: left promiscuous mode
[   33.049525][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.057205][   T46] bridge_slave_0: left allmulticast mode
[   33.063121][   T46] bridge_slave_0: left promiscuous mode
[   33.068782][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.217790][   T46] veth1_macvtap: left promiscuous mode
[   33.224511][  T559] FAULT_INJECTION: forcing a failure.
[   33.224511][  T559] name failslab, interval 1, probability 0, space 0, times 0
[   33.229394][   T46] veth0_vlan: left promiscuous mode
[   33.269257][  T559] CPU: 0 UID: 0 PID: 559 Comm: syz.0.71 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be
[   33.269295][  T559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   33.269306][  T559] Call Trace:
[   33.269311][  T559]  <TASK>
[   33.269319][  T559]  __dump_stack+0x21/0x30
[   33.269342][  T559]  dump_stack_lvl+0x140/0x1c0
[   33.269360][  T559]  ? __cfi_dump_stack_lvl+0x10/0x10
[   33.269378][  T559]  ? cred_has_capability+0x296/0x3a0
[   33.269406][  T559]  dump_stack+0x19/0x20
[   33.269422][  T559]  should_fail_ex+0x3c2/0x510
[   33.269440][  T559]  should_failslab+0xac/0x100
[   33.269460][  T559]  __kmalloc_cache_noprof+0x41/0x470
[   33.269487][  T559]  ? single_open+0x6b/0x3d0
[   33.269507][  T559]  ? selinux_capable+0x38/0x50
[   33.269529][  T559]  ? __cfi_proc_setgroups_show+0x10/0x10
[   33.269549][  T559]  single_open+0x6b/0x3d0
[   33.269570][  T559]  ? ns_capable+0x90/0xf0
[   33.269589][  T559]  proc_setgroups_open+0x1ea/0x300
[   33.269613][  T559]  ? __cfi_proc_setgroups_open+0x10/0x10
[   33.269635][  T559]  do_dentry_open+0x97f/0x1510
[   33.269659][  T559]  vfs_open+0x86/0x240
[   33.269688][  T559]  ? __cfi_vfs_open+0x10/0x10
[   33.269709][  T559]  ? may_open+0x352/0x430
[   33.269731][  T559]  path_openat+0x2c49/0x35a0
[   33.269758][  T559]  ? do_filp_open+0x440/0x440
[   33.269781][  T559]  do_filp_open+0x1f2/0x440
[   33.269803][  T559]  ? __cfi_do_filp_open+0x10/0x10
[   33.269827][  T559]  ? __cfi_kfree_link+0x10/0x10
[   33.269851][  T559]  ? alloc_fd+0x4c1/0x570
[   33.269870][  T559]  do_sys_openat2+0x134/0x1d0
[   33.269892][  T559]  ? do_sys_open+0x100/0x100
[   33.269915][  T559]  ? is_dma_buf_file+0x11/0x50
[   33.269938][  T559]  __x64_sys_openat+0x13a/0x170
[   33.269961][  T559]  x64_sys_call+0xe69/0x2ee0
[   33.269980][  T559]  do_syscall_64+0x57/0xf0
[   33.269999][  T559]  ? clear_bhb_loop+0x50/0xa0
[   33.270024][  T559]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   33.270048][  T559] RIP: 0033:0x7f2752f69d0e
[   33.270064][  T559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   33.270079][  T559] RSP: 002b:00007f27519f6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   33.270100][  T559] RAX: ffffffffffffffda RBX: 00007f27519f76c0 RCX: 00007f2752f69d0e
[   33.270114][  T559] RDX: 0000000000000002 RSI: 00007f27519f6f90 RDI: ffffffffffffff9c
[   33.270128][  T559] RBP: 00007f275303804e R08: 0000000000000000 R09: 0000000000000000
[   33.270140][  T559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   33.270152][  T559] R13: 00007f2753226038 R14: 00007f2753225fa0 R15: 00007ffca0fe8178
[   33.270169][  T559]  </TASK>
[   33.658344][   T36] audit: type=1400 audit(1794602504.129:235): avc:  denied  { ioctl } for  pid=562 comm="syz.2.73" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   33.883681][  T576] SELinux: security_context_str_to_sid () failed with errno=-22
[   33.891448][  T309] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   33.898970][   T36] audit: type=1400 audit(1794602504.359:236): avc:  denied  { mounton } for  pid=575 comm="syz.0.78" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   33.943326][   T36] audit: type=1400 audit(1794602504.409:237): avc:  denied  { create } for  pid=575 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   33.983265][   T36] audit: type=1400 audit(1794602504.409:238): avc:  denied  { create } for  pid=575 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   33.987228][  T578] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   34.016459][   T36] audit: type=1400 audit(1794602504.409:239): avc:  denied  { getopt } for  pid=575 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   34.039627][  T578] overlayfs: conflicting lowerdir path
[   34.043295][   T36] audit: type=1400 audit(1794602504.459:240): avc:  denied  { read } for  pid=577 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   34.064407][  T579] FAULT_INJECTION: forcing a failure.
[   34.064407][  T579] name failslab, interval 1, probability 0, space 0, times 0
[   34.089371][  T579] CPU: 1 UID: 0 PID: 579 Comm: syz.0.79 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be
[   34.089405][  T579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   34.089416][  T579] Call Trace:
[   34.089423][  T579]  <TASK>
[   34.089429][  T579]  __dump_stack+0x21/0x30
[   34.089454][  T579]  dump_stack_lvl+0x140/0x1c0
[   34.089471][  T579]  ? __cfi_dump_stack_lvl+0x10/0x10
[   34.089490][  T579]  ? futex_wait+0x2b8/0x7c0
[   34.089515][  T579]  ? __cfi_futex_wait+0x10/0x10
[   34.089539][  T579]  dump_stack+0x19/0x20
[   34.089556][  T579]  should_fail_ex+0x3c2/0x510
[   34.089574][  T579]  should_failslab+0xac/0x100
[   34.089595][  T579]  __kmalloc_cache_noprof+0x41/0x470
[   34.089629][  T579]  ? __kasan_check_write+0x18/0x20
[   34.089656][  T579]  ? alloc_ldt_struct+0x7e/0x2f0
[   34.089681][  T579]  ? down_write_killable+0xee/0x2d0
[   34.089708][  T579]  ? __cfi_down_write_killable+0x10/0x10
[   34.089733][  T579]  alloc_ldt_struct+0x7e/0x2f0
[   34.089756][  T579]  ? __kasan_check_write+0x18/0x20
[   34.089782][  T579]  write_ldt+0x43d/0x760
[   34.089804][  T579]  ? __se_sys_futex+0x13c/0x320
[   34.089824][  T579]  ? native_write_gdt_entry+0x40/0x40
[   34.089848][  T579]  ? xfd_validate_state+0x68/0x140
[   34.089867][  T579]  __se_sys_modify_ldt+0x70/0x2e0
[   34.089891][  T579]  __x64_sys_modify_ldt+0x7f/0xa0
[   34.089914][  T579]  x64_sys_call+0x143d/0x2ee0
[   34.089933][  T579]  do_syscall_64+0x57/0xf0
[   34.089951][  T579]  ? clear_bhb_loop+0x50/0xa0
[   34.089976][  T579]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   34.089999][  T579] RIP: 0033:0x7f2752fa94d9
[   34.090015][  T579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   34.090030][  T579] RSP: 002b:00007f27519d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[   34.090050][  T579] RAX: ffffffffffffffda RBX: 00007f2753226090 RCX: 00007f2752fa94d9
[   34.090065][  T579] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000001
[   34.090077][  T579] RBP: 00007f275303804e R08: 0000000000000000 R09: 0000000000000000
[   34.090089][  T579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   34.090101][  T579] R13: 00007f2753226128 R14: 00007f2753226090 R15: 00007ffca0fe8178
[   34.090117][  T579]  </TASK>
[   34.324130][   T36] audit: type=1400 audit(1794602504.459:241): avc:  denied  { unlink } for  pid=577 comm="syz.0.79" name="#3" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   34.351390][  T581] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.358522][  T581] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.366005][  T581] bridge_slave_0: entered allmulticast mode
[   34.366734][  T309] usb 3-1: Using ep0 maxpacket: 16
[   34.372948][  T581] bridge_slave_0: entered promiscuous mode
[   34.384861][  T581] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.392074][  T581] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.394132][  T309] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[   34.399247][  T581] bridge_slave_1: entered allmulticast mode
[   34.409067][  T309] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   34.414257][  T581] bridge_slave_1: entered promiscuous mode
[   34.422699][  T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.436212][  T309] usb 3-1: Product: syz
[   34.440415][  T309] usb 3-1: Manufacturer: syz
[   34.445007][  T309] usb 3-1: SerialNumber: syz
[   34.454371][  T309] r8152-cfgselector 3-1: Unknown version 0x0000
[   34.460660][  T309] r8152-cfgselector 3-1: config 0 descriptor??
[   34.487872][  T581] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.494962][  T581] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.502280][  T581] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.509329][  T581] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.535823][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.543351][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.553609][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.560676][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.570199][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.577236][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.608745][  T581] veth0_vlan: entered promiscuous mode
[   34.622236][  T581] veth1_macvtap: entered promiscuous mode
[   34.669025][  T309] r8152-cfgselector 3-1: Needed 1 retries to read version
[   34.676641][  T309] r8152-cfgselector 3-1: Unknown version 0x18f0
[   34.683183][  T309] r8152-cfgselector 3-1: bad CDC descriptors
[   35.211197][  T612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37139 sclass=netlink_route_socket pid=612 comm=syz.0.89
[   35.239421][   T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   35.264832][  T620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'.
[   35.284485][    T9] usb 4-1: USB disconnect, device number 5
[   35.371573][  T635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.98'.
[   35.390677][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[   35.398932][  T644] 9pnet: Could not find request transport: xen
[   35.402845][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[   35.414450][   T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[   35.426968][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   35.436569][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.444618][   T10] usb 5-1: Product: syz
[   35.448821][   T10] usb 5-1: Manufacturer: syz
[   35.453495][   T10] usb 5-1: SerialNumber: syz
[   35.660855][   T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   35.860474][   T10] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[   35.869027][   T10] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[   36.193825][  T649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'.
[   36.244315][  T654] FAULT_INJECTION: forcing a failure.
[   36.244315][  T654] name failslab, interval 1, probability 0, space 0, times 0
[   36.257538][  T654] CPU: 0 UID: 0 PID: 654 Comm: syz.3.103 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be
[   36.257572][  T654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   36.257583][  T654] Call Trace:
[   36.257589][  T654]  <TASK>
[   36.257595][  T654]  __dump_stack+0x21/0x30
[   36.257626][  T654]  dump_stack_lvl+0x140/0x1c0
[   36.257640][  T654]  ? __cfi_dump_stack_lvl+0x10/0x10
[   36.257657][  T654]  ? release_sock+0x171/0x1f0
[   36.257677][  T654]  dump_stack+0x19/0x20
[   36.257691][  T654]  should_fail_ex+0x3c2/0x510
[   36.257709][  T654]  should_failslab+0xac/0x100
[   36.257726][  T654]  kmem_cache_alloc_node_noprof+0x45/0x420
[   36.257748][  T654]  ? netlink_data_ready+0x20/0x20
[   36.257768][  T654]  ? __alloc_skb+0x10c/0x360
[   36.257786][  T654]  __alloc_skb+0x10c/0x360
[   36.257804][  T654]  netlink_alloc_large_skb+0xf7/0x1b0
[   36.257826][  T654]  netlink_sendmsg+0x576/0xad0
[   36.257850][  T654]  ? __cfi_netlink_sendmsg+0x10/0x10
[   36.257874][  T654]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[   36.257891][  T654]  ? security_socket_sendmsg+0x3d/0x100
[   36.257914][  T654]  ____sys_sendmsg+0x9a1/0xa00
[   36.257938][  T654]  ? __import_iovec+0x5b9/0x7d0
[   36.257958][  T654]  ? __sys_sendmsg_sock+0x50/0x50
[   36.257982][  T654]  ? import_iovec+0x80/0xb0
[   36.258002][  T654]  ___sys_sendmsg+0x2a6/0x370
[   36.258025][  T654]  ? __sys_sendmsg+0x260/0x260
[   36.258051][  T654]  ? __fget_files+0x2bc/0x330
[   36.258070][  T654]  __x64_sys_sendmsg+0x1be/0x2a0
[   36.258094][  T654]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   36.258117][  T654]  ? __kasan_check_read+0x15/0x20
[   36.258141][  T654]  x64_sys_call+0x2a4c/0x2ee0
[   36.258159][  T654]  do_syscall_64+0x57/0xf0
[   36.258178][  T654]  ? clear_bhb_loop+0x50/0xa0
[   36.258202][  T654]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   36.258225][  T654] RIP: 0033:0x7f29761a94d9
[   36.258240][  T654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.258254][  T654] RSP: 002b:00007f2976fc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   36.258273][  T654] RAX: ffffffffffffffda RBX: 00007f2976426090 RCX: 00007f29761a94d9
[   36.258285][  T654] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000009
[   36.258294][  T654] RBP: 00007f297623804e R08: 0000000000000000 R09: 0000000000000000
[   36.258304][  T654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.258319][  T654] R13: 00007f2976426128 R14: 00007f2976426090 R15: 00007ffd893e4bc8
[   36.258335][  T654]  </TASK>
[   36.509011][   T10] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[   36.517487][   T10] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[   36.540560][  T663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'.
[   36.550226][  T663] tipc: Started in network mode
[   36.555155][  T663] tipc: Node identity , cluster identity 4711
[   36.561309][  T663] tipc: Failed to obtain node identity
[   36.566837][  T663] tipc: Enabling of bearer <eth:wg2> rejected, failed to enable media
[   36.586286][  T665] bridge_slave_0: default FDB implementation only supports local addresses
[   36.603645][  T670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.612740][  T670] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.614382][  T671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.629035][  T671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.682004][  T369] r8152-cfgselector 3-1: USB disconnect, device number 5
[   36.750718][   T10] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[   36.764721][   T10] usb 5-1: USB disconnect, device number 2
[   36.774223][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   36.809376][  T309] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   36.849346][    T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   36.970396][  T309] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   36.981883][  T309] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[   36.990983][  T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.998960][  T309] usb 1-1: Product: syz
[   37.003153][  T309] usb 1-1: Manufacturer: syz
[   37.007736][  T309] usb 1-1: SerialNumber: syz
[   37.010039][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[   37.013338][  T309] usb 1-1: config 0 descriptor??
[   37.025839][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   37.026008][  T309] plusb 1-1:0.0: probe with driver plusb failed with error -22
[   37.036977][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   37.054262][    T9] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[   37.063412][    T9] usb 4-1: New USB device strings: Mfr=245, Product=194, SerialNumber=0
[   37.071772][    T9] usb 4-1: Product: syz
[   37.075984][    T9] usb 4-1: Manufacturer: syz
[   37.082714][    T9] usb 4-1: Found UVC 1.00 device syz (225a:e1d4)
[   37.089157][    T9] usb 4-1: Failed to create links for entity 1
[   37.095334][    T9] usb 4-1: Failed to register entities (-22).
[   37.231763][  T309] usb 1-1: USB disconnect, device number 4
[   37.282222][   T45] usb 4-1: USB disconnect, device number 6
[   37.499350][  T587] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   37.539645][   T36] kauditd_printk_skb: 16 callbacks suppressed
[   37.539661][   T36] audit: type=1400 audit(1794602508.020:258): avc:  granted  { setsecparam } for  pid=678 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   37.650373][  T587] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   37.660563][  T587] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   37.675029][  T587] usb 5-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00
[   37.684100][  T587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.692102][  T587] usb 5-1: Product: syz
[   37.696252][  T587] usb 5-1: Manufacturer: syz
[   37.700852][  T587] usb 5-1: SerialNumber: syz
[   37.706746][  T587] usb 5-1: unsupported MDLM descriptors
[   37.849598][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   37.908359][   T36] audit: type=1400 audit(1794602508.380:259): avc:  denied  { read } for  pid=676 comm="syz.4.109" name="failed_transaction_log" dev="binder" ino=1048651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   37.932829][   T36] audit: type=1400 audit(1794602508.380:260): avc:  denied  { open } for  pid=676 comm="syz.4.109" path="/dev/binderfs/binder_logs/failed_transaction_log" dev="binder" ino=1048651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   37.960177][   T36] audit: type=1400 audit(1794602508.380:261): avc:  denied  { map } for  pid=676 comm="syz.4.109" path="/dev/binderfs/binder_logs/failed_transaction_log" dev="binder" ino=1048651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.019354][  T369] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   38.026871][    T9] usb 3-1: device descriptor read/64, error -71
[   38.180596][  T369] usb 1-1: unable to get BOS descriptor or descriptor too short
[   38.190233][  T369] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[   38.199266][  T369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.207270][  T369] usb 1-1: Product: syz
[   38.211534][  T369] usb 1-1: Manufacturer: syz
[   38.216142][  T369] usb 1-1: SerialNumber: syz
[   38.279338][    T9] usb 3-1: device descriptor read/64, error -71
[   38.429163][   T36] audit: type=1400 audit(1794602508.900:262): avc:  denied  { mount } for  pid=682 comm="syz.0.112" name="/" dev="ramfs" ino=6797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   38.495008][  T369] usb 1-1: MIDIStreaming interface descriptor not found
[   38.504922][  T369] usb 1-1: USB disconnect, device number 5
[   38.513131][  T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   38.531590][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   38.669514][    T9] usb 3-1: device descriptor read/64, error -71
[   38.697152][  T690] capability: warning: `syz.3.114' uses deprecated v2 capabilities in a way that may be insecure
[   38.722763][   T36] audit: type=1400 audit(1794602509.200:263): avc:  denied  { mounton } for  pid=697 comm="syz.3.116" path="/31/file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   38.724826][  T700] rust_binder: 697:700 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   38.754514][  T369] rust_binder: 697: undelivered TRANSACTION_COMPLETE
[   38.767715][   T36] audit: type=1400 audit(1794602509.240:264): avc:  denied  { read write } for  pid=701 comm="syz.3.117" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   38.769213][  T702] input: syz1 as /devices/virtual/input/input4
[   38.794163][   T36] audit: type=1400 audit(1794602509.240:265): avc:  denied  { open } for  pid=701 comm="syz.3.117" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   38.820702][   T36] audit: type=1400 audit(1794602509.240:266): avc:  denied  { ioctl } for  pid=701 comm="syz.3.117" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   38.939348][    T9] usb 3-1: device descriptor read/64, error -71
[   39.049432][    T9] usb usb3-port1: attempt power cycle
[   39.389350][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   39.410292][    T9] usb 3-1: device descriptor read/8, error -71
[   39.540330][    T9] usb 3-1: device descriptor read/8, error -71
[   39.579356][  T587] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   39.730371][  T587] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   39.740549][  T587] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   39.749865][  T587] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[   39.758945][  T587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.767554][  T587] usb 4-1: config 0 descriptor??
[   39.779342][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   39.800323][    T9] usb 3-1: device descriptor read/8, error -71
[   39.931464][    T9] usb 3-1: device descriptor read/8, error -71
[   40.039424][    T9] usb usb3-port1: unable to enumerate USB device
[   40.275281][    T9] usb 5-1: USB disconnect, device number 3
[   40.355940][  T730] device-mapper: table: 252:2: crypt: Error decoding and setting key (-EINVAL)
[   40.364992][  T730] device-mapper: ioctl: error adding target to table
[   40.452076][   T36] audit: type=1400 audit(1794602510.930:267): avc:  denied  { mount } for  pid=735 comm="syz.0.126" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   40.616402][  T742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'.
[   40.625565][  T742] veth1_macvtap: left promiscuous mode
[   40.661038][  T744] FAULT_INJECTION: forcing a failure.
[   40.661038][  T744] name failslab, interval 1, probability 0, space 0, times 0
[   40.673787][  T744] CPU: 1 UID: 0 PID: 744 Comm: syz.4.129 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be
[   40.673816][  T744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   40.673827][  T744] Call Trace:
[   40.673834][  T744]  <TASK>
[   40.673841][  T744]  __dump_stack+0x21/0x30
[   40.673864][  T744]  dump_stack_lvl+0x140/0x1c0
[   40.673881][  T744]  ? __cfi_dump_stack_lvl+0x10/0x10
[   40.673901][  T744]  dump_stack+0x19/0x20
[   40.673918][  T744]  should_fail_ex+0x3c2/0x510
[   40.673937][  T744]  should_failslab+0xac/0x100
[   40.673958][  T744]  kmem_cache_alloc_node_noprof+0x45/0x420
[   40.673985][  T744]  ? alloc_workqueue+0xb2c/0x1ca0
[   40.674003][  T744]  ? __kasan_check_write+0x18/0x20
[   40.674028][  T744]  alloc_workqueue+0xb2c/0x1ca0
[   40.674048][  T744]  ? __cfi_alloc_workqueue+0x10/0x10
[   40.674067][  T744]  ? init_srcu_struct_fields+0x74f/0xac0
[   40.674092][  T744]  dm_create+0xa1b/0xf10
[   40.674114][  T744]  dev_create+0x1f8/0x400
[   40.674138][  T744]  ? __cfi_dev_create+0x10/0x10
[   40.674161][  T744]  ? __cfi_dev_create+0x10/0x10
[   40.674184][  T744]  ? __cfi_dev_create+0x10/0x10
[   40.674207][  T744]  ? __kasan_check_write+0x18/0x20
[   40.674231][  T744]  ? __cfi_dev_create+0x10/0x10
[   40.674254][  T744]  dm_ctl_ioctl+0x8f3/0xde0
[   40.674280][  T744]  ? __cfi_dm_ctl_ioctl+0x10/0x10
[   40.674318][  T744]  ? __fget_files+0x2bc/0x330
[   40.674339][  T744]  ? bpf_lsm_file_ioctl+0xd/0x20
[   40.674360][  T744]  ? security_file_ioctl+0x3e/0x110
[   40.674387][  T744]  ? __cfi_dm_ctl_ioctl+0x10/0x10
[   40.674411][  T744]  __se_sys_ioctl+0x123/0x1b0
[   40.674431][  T744]  __x64_sys_ioctl+0x7f/0xa0
[   40.674449][  T744]  x64_sys_call+0x1878/0x2ee0
[   40.674467][  T744]  do_syscall_64+0x57/0xf0
[   40.674486][  T744]  ? clear_bhb_loop+0x50/0xa0
[   40.674511][  T744]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   40.674536][  T744] RIP: 0033:0x7f11c5fa94d9
[   40.674551][  T744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.674566][  T744] RSP: 002b:00007f11c6f0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   40.674586][  T744] RAX: ffffffffffffffda RBX: 00007f11c6225fa0 RCX: 00007f11c5fa94d9
[   40.674601][  T744] RDX: 0000200000000180 RSI: 00000000c138fd03 RDI: 0000000000000003
[   40.674615][  T744] RBP: 00007f11c603804e R08: 0000000000000000 R09: 0000000000000000
[   40.674628][  T744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   40.674640][  T744] R13: 00007f11c6226038 R14: 00007f11c6225fa0 R15: 00007ffc8bc9d7a8
[   40.674656][  T744]  </TASK>
[   40.689359][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   40.947387][  T748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'.
[   40.956273][  T748] bridge_slave_1: left allmulticast mode
[   40.961931][  T748] bridge_slave_1: left promiscuous mode
[   40.967908][  T748] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.975569][  T748] bridge_slave_0: left allmulticast mode
[   40.981278][  T748] bridge_slave_0: left promiscuous mode
[   40.986848][  T748] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.082499][  T751] loop2: detected capacity change from 0 to 8
[   41.089137][  T753] loop3: detected capacity change from 0 to 4
[   41.095321][    T9] usb 1-1: Using ep0 maxpacket: 8
[   41.106465][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[   41.115139][    T9] usb 1-1: config 4 has an invalid interface number: 147 but max is 0
[   41.125707][    T9] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[   41.141199][    T9] usb 1-1: config 4 has no interface number 0
[   41.148878][    T9] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[   41.182514][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.193121][    T9] usb 1-1: Product: syz
[   41.197348][    T9] usb 1-1: Manufacturer: syz
[   41.202175][    T9] usb 1-1: SerialNumber: syz
[   41.414012][    T9] usb 1-1: Found UVC 0.02 device syz (04f2:b746)
[   41.420592][    T9] usb 1-1: No valid video chain found.
[   41.427836][    T9] usb 1-1: USB disconnect, device number 6
[   41.790525][  T757] device-mapper: table: 252:3: crypt: Bad cipher specification (-EINVAL)
[   41.800115][  T757] device-mapper: ioctl: error adding target to table
[   42.004356][  T776] process 'syz.0.137' launched '/dev/fd/4' with NULL argv: empty string added
[   42.063995][  T791] device-mapper: verity: sha1 using ahash "sha1-avx2"
[   42.084339][  T793] kvm: pic: level sensitive irq not supported
[   42.084399][  T793] kvm: pic: non byte read
[   42.095497][  T793] kvm: pic: non byte read
[   42.174857][  T791] device-mapper: table: 252:4: verity: Hash device is too small (-E2BIG)
[   42.183581][  T791] device-mapper: ioctl: error adding target to table
[   42.309364][  T369] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   42.430015][    T9] usb 4-1: USB disconnect, device number 7
[   42.470788][  T369] usb 5-1: unable to get BOS descriptor or descriptor too short
[   42.478954][  T369] usb 5-1: not running at top speed; connect to a high speed hub
[   42.487675][  T369] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[   42.498766][  T369] usb 5-1: config 1 interface 0 has no altsetting 0
[   42.508758][  T369] usb 5-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.40
[   42.518124][  T369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.526291][  T369] usb 5-1: Product: syz
[   42.530671][  T369] usb 5-1: Manufacturer: syz
[   42.535538][  T369] usb 5-1: SerialNumber: syz
[   42.543147][  T789] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   42.566827][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   42.566843][   T36] audit: type=1400 audit(1794602513.040:278): avc:  denied  { execute } for  pid=821 comm="syz.3.148" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   42.649397][  T587] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[   42.754505][  T369] usbhid 5-1:1.0: can't add hid device: -71
[   42.763444][  T369] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[   42.780336][  T369] usb 5-1: USB disconnect, device number 4
[   42.789428][  T587] usb 1-1: device descriptor read/64, error -71
[   43.029361][  T587] usb 1-1: device descriptor read/64, error -71
[   43.129347][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   43.269359][  T587] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[   43.279357][    T9] usb 4-1: Using ep0 maxpacket: 16
[   43.285461][    T9] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.296571][    T9] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   43.306505][    T9] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   43.319536][  T335] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   43.327291][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[   43.334258][    T9] usb 4-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00
[   43.343798][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.352915][    T9] usb 4-1: config 0 descriptor??
[   43.370791][   T36] audit: type=1400 audit(1794602513.850:279): avc:  denied  { getopt } for  pid=861 comm="syz.4.158" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   43.373806][  T866] tipc: Started in network mode
[   43.390943][   T36] audit: type=1400 audit(1794602513.850:280): avc:  denied  { connect } for  pid=861 comm="syz.4.158" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   43.406151][  T866] tipc: Node identity ac1414aa, cluster identity 4711
[   43.423515][  T587] usb 1-1: device descriptor read/64, error -71
[   43.423600][  T866] tipc: New replicast peer: 172.20.20.187
[   43.435756][  T866] tipc: Enabled bearer <udp:syz0>, priority 10
[   43.471678][   T36] audit: type=1400 audit(1794602513.950:281): avc:  denied  { setopt } for  pid=869 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   43.494745][  T335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.510683][  T335] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[   43.520171][  T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.528406][  T335] usb 3-1: Product: syz
[   43.539357][  T335] usb 3-1: Manufacturer: syz
[   43.544109][  T335] usb 3-1: SerialNumber: syz
[   43.679342][  T587] usb 1-1: device descriptor read/64, error -71
[   43.799419][  T587] usb usb1-port1: attempt power cycle
[   43.915891][   T36] audit: type=1400 audit(1794602514.390:282): avc:  denied  { create } for  pid=881 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   44.159345][  T587] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[   44.180355][  T587] usb 1-1: device descriptor read/8, error -71
[   44.201351][    T9] usbhid 4-1:0.0: can't add hid device: -71
[   44.207351][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   44.216075][    T9] usb 4-1: USB disconnect, device number 8
[   44.309879][  T335] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   44.310353][  T587] usb 1-1: device descriptor read/8, error -71
[   44.460665][  T335] usb 5-1: unable to get BOS descriptor or descriptor too short
[   44.468671][  T335] usb 5-1: not running at top speed; connect to a high speed hub
[   44.477145][  T335] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[   44.487355][  T335] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 4
[   44.499698][  T335] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   44.508749][  T335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.516754][  T335] usb 5-1: Product: syz
[   44.520939][  T335] usb 5-1: Manufacturer: syz
[   44.525510][  T335] usb 5-1: SerialNumber: syz
[   44.549354][    T9] tipc: Node number set to 2886997162
[   44.559487][  T587] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[   44.580378][  T587] usb 1-1: device descriptor read/8, error -71
[   44.720389][  T587] usb 1-1: device descriptor read/8, error -71
[   44.735001][  T335] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   44.742915][  T335] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[   44.745499][   T36] audit: type=1400 audit(1794602515.220:283): avc:  denied  { ioctl } for  pid=885 comm="syz.3.163" path="socket:[9158]" dev="sockfs" ino=9158 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.750752][  T335] usb 5-1: 2:1 : format type 12 is not supported yet
[   44.789839][  T335] usb 5-1: USB disconnect, device number 5
[   44.802762][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   44.839448][  T587] usb usb1-port1: unable to enumerate USB device
[   45.039355][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   45.199342][    T9] usb 4-1: Using ep0 maxpacket: 8
[   45.206803][    T9] usb 4-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40
[   45.215875][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.223884][    T9] usb 4-1: Product: syz
[   45.228030][    T9] usb 4-1: Manufacturer: syz
[   45.232641][    T9] usb 4-1: SerialNumber: syz
[   45.319105][   T36] audit: type=1400 audit(1794602515.790:284): avc:  denied  { getopt } for  pid=894 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   45.338731][   T36] audit: type=1400 audit(1794602515.810:285): avc:  denied  { name_bind } for  pid=894 comm="syz.4.167" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   45.340491][  T895] FAULT_INJECTION: forcing a failure.
[   45.340491][  T895] name failslab, interval 1, probability 0, space 0, times 0
[   45.373273][  T895] CPU: 1 UID: 0 PID: 895 Comm: syz.4.167 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be
[   45.373304][  T895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   45.373317][  T895] Call Trace:
[   45.373323][  T895]  <TASK>
[   45.373331][  T895]  __dump_stack+0x21/0x30
[   45.373354][  T895]  dump_stack_lvl+0x140/0x1c0
[   45.373373][  T895]  ? __cfi_dump_stack_lvl+0x10/0x10
[   45.373391][  T895]  ? stack_depot_save_flags+0x399/0x800
[   45.373413][  T895]  dump_stack+0x19/0x20
[   45.373429][  T895]  should_fail_ex+0x3c2/0x510
[   45.373454][  T895]  should_failslab+0xac/0x100
[   45.373475][  T895]  __kmalloc_cache_noprof+0x41/0x470
[   45.373502][  T895]  ? netlink_sendmsg+0x7d1/0xad0
[   45.373521][  T895]  ? ____sys_sendmsg+0x9a1/0xa00
[   45.373536][  T895]  ? __kthread_create_on_node+0x13c/0x4d0
[   45.373551][  T895]  ? __cfi_cryptomgr_probe+0x10/0x10
[   45.373573][  T895]  __kthread_create_on_node+0x13c/0x4d0
[   45.373598][  T895]  ? kthread_create_on_node+0x160/0x160
[   45.373619][  T895]  ? __cfi_cryptomgr_probe+0x10/0x10
[   45.373641][  T895]  ? __cfi_cryptomgr_probe+0x10/0x10
[   45.373663][  T895]  kthread_create_on_node+0xec/0x160
[   45.373686][  T895]  ? __cfi_kthread_create_on_node+0x10/0x10
[   45.373709][  T895]  ? __kasan_kmalloc+0x96/0xb0
[   45.373729][  T895]  ? __kmalloc_cache_noprof+0x23c/0x470
[   45.373757][  T895]  ? downgrade_write+0x470/0x470
[   45.373778][  T895]  ? cryptomgr_notify+0x44f/0xa80
[   45.373792][  T895]  cryptomgr_notify+0x7ad/0xa80
[   45.373809][  T895]  ? __cfi_cryptomgr_notify+0x10/0x10
[   45.373822][  T895]  notifier_call_chain+0x106/0x2b0
[   45.373834][  T895]  blocking_notifier_call_chain+0x6a/0x90
[   45.373854][  T895]  crypto_alg_mod_lookup+0x3aa/0x5a0
[   45.373883][  T895]  crypto_alloc_tfm_node+0x13f/0x350
[   45.373902][  T895]  crypto_alloc_aead+0x34/0x40
[   45.373925][  T895]  esp6_init_state+0x3b7/0x1280
[   45.373941][  T895]  ? x64_sys_call+0x2a4c/0x2ee0
[   45.373952][  T895]  ? do_syscall_64+0x57/0xf0
[   45.373963][  T895]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   45.373978][  T895]  ? __cfi_esp6_init_state+0x10/0x10
[   45.374000][  T895]  ? __cfi_esp6_init_state+0x10/0x10
[   45.374024][  T895]  __xfrm_init_state+0xaf6/0xf70
[   45.374047][  T895]  xfrm_add_sa+0x2560/0x37b0
[   45.374071][  T895]  ? __cfi_xfrm_add_sa+0x10/0x10
[   45.374086][  T895]  xfrm_user_rcv_msg+0x696/0x900
[   45.374101][  T895]  ? __cfi_xfrm_user_rcv_msg+0x10/0x10
[   45.374118][  T895]  ? __asan_memcpy+0x5a/0x80
[   45.374136][  T895]  ? avc_has_perm_noaudit+0x289/0x360
[   45.374159][  T895]  ? avc_has_perm+0x155/0x240
[   45.374179][  T895]  netlink_rcv_skb+0x24a/0x4e0
[   45.374201][  T895]  ? __cfi_xfrm_user_rcv_msg+0x10/0x10
[   45.374226][  T895]  ? __cfi_netlink_rcv_skb+0x10/0x10
[   45.374249][  T895]  ? __kasan_check_write+0x18/0x20
[   45.374273][  T895]  ? mutex_lock+0x97/0x1d0
[   45.374298][  T895]  ? __cfi_mutex_lock+0x10/0x10
[   45.374317][  T895]  ? netlink_autobind+0x1c0/0x1c0
[   45.374341][  T895]  xfrm_netlink_rcv+0x76/0x90
[   45.374366][  T895]  netlink_unicast+0x8bf/0xa70
[   45.374391][  T895]  netlink_sendmsg+0x7d1/0xad0
[   45.374417][  T895]  ? __cfi_netlink_sendmsg+0x10/0x10
[   45.374450][  T895]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[   45.374468][  T895]  ? security_socket_sendmsg+0x3d/0x100
[   45.374493][  T895]  ____sys_sendmsg+0x9a1/0xa00
[   45.374519][  T895]  ? __import_iovec+0x5b9/0x7d0
[   45.374541][  T895]  ? __sys_sendmsg_sock+0x50/0x50
[   45.374568][  T895]  ? import_iovec+0x80/0xb0
[   45.374591][  T895]  ___sys_sendmsg+0x2a6/0x370
[   45.374617][  T895]  ? __sys_sendmsg+0x260/0x260
[   45.374645][  T895]  ? __fget_files+0x2bc/0x330
[   45.374669][  T895]  __x64_sys_sendmsg+0x1be/0x2a0
[   45.374695][  T895]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   45.374718][  T895]  ? __kasan_check_write+0x18/0x20
[   45.374733][  T895]  ? fpregs_restore_userregs+0x11c/0x260
[   45.374748][  T895]  ? switch_fpu_return+0x12/0x20
[   45.374762][  T895]  x64_sys_call+0x2a4c/0x2ee0
[   45.374776][  T895]  do_syscall_64+0x57/0xf0
[   45.374796][  T895]  ? clear_bhb_loop+0x50/0xa0
[   45.374822][  T895]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   45.374848][  T895] RIP: 0033:0x7f11c5fa94d9
[   45.374862][  T895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.374872][  T895] RSP: 002b:00007f11c6f0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   45.374885][  T895] RAX: ffffffffffffffda RBX: 00007f11c6225fa0 RCX: 00007f11c5fa94d9
[   45.374893][  T895] RDX: 0000000000044050 RSI: 0000200000000140 RDI: 0000000000000007
[   45.374901][  T895] RBP: 00007f11c603804e R08: 0000000000000000 R09: 0000000000000000
[   45.374908][  T895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   45.374915][  T895] R13: 00007f11c6226038 R14: 00007f11c6225fa0 R15: 00007ffc8bc9d7a8
[   45.374931][  T895]  </TASK>
[   45.859557][    T9] usb 4-1: USB disconnect, device number 9
[   45.879869][  T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   46.057703][    T9] usb 3-1: USB disconnect, device number 10
[   46.109355][  T335] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   46.259359][  T335] usb 5-1: Using ep0 maxpacket: 32
[   46.265571][  T335] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   46.273629][  T335] usb 5-1: config 0 has no interface number 0
[   46.279726][  T335] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.290588][  T335] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.300350][  T335] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[   46.309385][  T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.317799][  T335] usb 5-1: config 0 descriptor??
[   46.374887][   T36] audit: type=1400 audit(1794602516.850:286): avc:  denied  { write } for  pid=912 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   46.390077][    T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[   46.403165][  T917] sock: sock_timestamping_bind_phc: sock not bind to device
[   46.510124][  T919] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[   46.521291][   T36] audit: type=1400 audit(1794602517.000:287): avc:  denied  { ioctl } for  pid=918 comm="syz.3.174" path="socket:[9543]" dev="sockfs" ino=9543 ioctlcmd=0x6e8a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   46.560315][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   46.571515][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   46.582421][    T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[   46.593382][    T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[   46.604812][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   46.614189][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.616002][  T927] netlink: 'syz.3.175': attribute type 46 has an invalid length.
[   46.622547][    T9] usb 3-1: Product: syz
[   46.634204][    T9] usb 3-1: Manufacturer: syz
[   46.638859][    T9] usb 3-1: SerialNumber: syz
[   46.646328][  T909] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   46.657543][    T9] cdc_mbim 3-1:1.0: skipping garbage
[   46.859768][  T907] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   46.947264][  T335] uclogic 0003:28BD:0094.0004: pen parameters not found
[   46.959489][  T335] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring
[   46.972596][  T335] usb 5-1: USB disconnect, device number 6
[   46.981476][  T947] kvm: MWAIT instruction emulated as NOP!
[   47.076556][  T954] printk: legacy console [ttyS0] disabled