last executing test programs:

10.109679079s ago: executing program 3 (id=47):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x158, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfffffffd}, @NL80211_ATTR_IE={0x10a, 0x2a, [@measure_req={0x26, 0xca, {0x2, 0x4, 0xff, "5bb4d4d3fb82a0a159705296887c47ba3a704fdcdca5b3a7b27dc0373b6bf96e1a43bdf05780b84777df32020b2314094313336dfd8de3cfe965a0ef142c134d498889a1577a7569355848f954f913f409423a06aa8c4020a409a73806dd64b10037a085774959482a01b81ed3f8a984d962fa037c5672e5f422ecba8f9fcea5b61f5c8fc6b67e80480837f50d8f831c7ea92cf488152412b39c30a7e51eeab0c7108e1111a87da0a3e6282df205eed4f0f2b6462197819701936ef72b9b45184c8c40794e4015"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0xe, 0x97, 0x9, 0x4}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0x3, 0x93, 0x8, 0x2}}, @mic={0x8c, 0x18, {0x147, "721d675b7e00", @long="62bb5d2333780e886f042a9585150f12"}}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x158}, 0x1, 0x0, 0x0, 0x8080}, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10.014014683s ago: executing program 3 (id=48):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x2, 0x0, 0x1, 0x0, 0x4}, 0x20)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}, 0x4}}, 0x10)
listen(r1, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000001780)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x20008000)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x2, 0x0, 0x1, 0x0, 0x4}, 0x20) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}, 0x4}}, 0x10) (async)
listen(r1, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
sendmsg$tipc(r2, &(0x7f0000001780)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x20008000) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) (async)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async)
accept4(r1, 0x0, 0x0, 0x0) (async)

9.130215805s ago: executing program 3 (id=49):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f0000000340)={0x1, 0x3})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000080)=0x203714e722813fa8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000000000/0x400000)=nil)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x80000, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0xffffffffffffffff, 0x8000], 0x1, 0x3c4210})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9.054699368s ago: executing program 3 (id=50):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (rerun: 64)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@textreal={0x8, &(0x7f0000000000)="bad104ec660f3a401f4d670f799630520000f2f20cfbbaa00016487f24815216487f248152000100000f22e0c4e385ce49b19666b9800000c00f326635000400000f30ba2000ec0f01c4", 0x4a}], 0x1, 0x43, 0x0, 0x0) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000540))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.972043312s ago: executing program 3 (id=51):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f00000001c0)="330520000a00160006007ef52f555f2ab34eb67eabe2dffebf30f8784f997bea54fefe7117599e7dae76f98691ffb71675553f", 0x33, 0x801, &(0x7f0000000000)={0x11, 0x19, r3, 0x1, 0x5f, 0x6, @local}, 0x14)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fcffffff8900000008000300", @ANYRES32, @ANYBLOB="18009d"], 0x34}, 0x1, 0x0, 0x0, 0x25e2906596869c9d}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) (async)
sendto$packet(r2, &(0x7f00000001c0)="330520000a00160006007ef52f555f2ab34eb67eabe2dffebf30f8784f997bea54fefe7117599e7dae76f98691ffb71675553f", 0x33, 0x801, &(0x7f0000000000)={0x11, 0x19, r3, 0x1, 0x5f, 0x6, @local}, 0x14) (async)
chdir(&(0x7f0000000140)='./file0\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) (async)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fcffffff8900000008000300", @ANYRES32, @ANYBLOB="18009d"], 0x34}, 0x1, 0x0, 0x0, 0x25e2906596869c9d}, 0x0) (async)

8.80218826s ago: executing program 3 (id=52):
getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c"], 0x110}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getrandom(&(0x7f0000000080)=""/140, 0x8c, 0x0)

8.661995217s ago: executing program 2 (id=55):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121843, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x229, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x4, 0x5, 0x3, 0x1}, {0x1, 0x2, 0x0, 0x1}, {0x2, 0x4f, 0x9, 0x4}, {0x7d, 0x6, 0x1}, {0xe5, 0x7, 0x9, 0x4}, {0x9, 0x6, 0x6, 0x7}, {0xb, 0x3, 0xf, 0xd657}, {0x4, 0x8, 0x2, 0x6}]})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f00000000c0)={0x19, 0x1, 0x32})
ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000080)={0x1500000000000000, 0x3000, 0x4, 0x0, 0x19})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0)

8.603856529s ago: executing program 2 (id=56):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40002, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38)
rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000001800)=0xff, 0x4)
write$binfmt_script(r1, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x101d)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000003bb11b0d4e1ae107cc98276f2fec19303d28694c7891dff506e5105d2c9dacccb53b60b9418c7e6ed4e3e8669e8da414e093196fb3c33d57222bf29654f4a6492f5db8c9592bc4bc3a1e1ad8cc152f6182630000000000000008c68d63aa9cd69dcee3515f6cce62dfa92187388d77340796ff486201e0b877ac7bdf925595a7630b21f9c9fc7d2aa47e799aac35728930f3712df9e185ee53b3e922d05a8473d654533b617ac3841df112a4f94989a4ecd240df3197353ed35033c7ddb2e8bd04e56ddaf7", @ANYRES16=r3, @ANYBLOB="5fa73dbd7000fbdbdf25010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x80a4)
lchown(&(0x7f0000000180)='./mnt\x00', 0x0, 0xee01)
truncate(&(0x7f0000000000)='./dev/sda1\x00', 0x1)

8.251003936s ago: executing program 2 (id=57):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000740)={0x7, {{0xa, 0x4e23, 0x81, @mcast1, 0x5}}}, 0x88)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x220ac3, 0x0)
ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000080)="be8ba6c8d51f2abe05ff681c3724c627d6c824daef7a302a065e5c1349afb1d62390b54e38870919a471f9a715a978db87e989")
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x26)
ioctl$BLKTRACESTART(r6, 0x1269, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28dda8dcd000000c182fd3f0000c8b9500200004d01000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc3010022", 0x61}], 0x1, 0x14, 0x0, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f00000002c0)={'filter\x00', 0x2, [{}, {}]}, 0x48)
ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x19, 0x4, 0x8})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.001990317s ago: executing program 2 (id=58):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa)
mkdir(&(0x7f0000000300)='./bus\x00', 0x63)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280))
recvmsg$unix(r1, &(0x7f0000001900)={&(0x7f0000000300), 0x6e, &(0x7f0000001740)=[{&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/57, 0x39}, {&(0x7f0000001540)=""/30, 0x1e}, {&(0x7f0000001640)=""/200, 0xc8}], 0x5, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x40000020)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
capset(&(0x7f0000000000)={0x20080522, r2}, &(0x7f00000002c0)={0x0, 0x3, 0x7ff, 0x81, 0x3, 0x5})
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000080001000d0c100000000000224e0000", 0x58}], 0x1)
setsockopt$sock_timeval(r3, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000180)='./dev/sda1\x00', &(0x7f00000001c0), 0x2000010, &(0x7f0000000200)=ANY=[@ANYBLOB="7461066e733d76697274696f2c63616368653d6e6f6e652c646f6e745f617070726169736501000000633d4250524d5f4376d81263624845434b2c66736d616770633d307830303030303030303030303030"])
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000015c0)={'xfrm0\x00', @broadcast})
llistxattr(&(0x7f00000017c0)='./dev/sda1\x00', &(0x7f0000001800)=""/11, 0xb)
setxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="020000000100010000000000040000000000000008000500", @ANYRES32=0x0, @ANYBLOB="10000000002fd2b45200050000000009"], 0x2c, 0x3)

7.73349155s ago: executing program 2 (id=59):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) (async)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x440, 0x888e2)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000003c0)={r2, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) (async)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x9, 0x12, 0x5, 0x4, "b2457fe0a2bb4b55eaea087c4e466e845e7ae5226a864610920034b9a71aaae39ea671f106bfd1a3474294abf8d39047413833f256c276acaeb80cc2ee05a0f8", "91afb9a08a67e7b030fb2599e054750e9c46e7088972a20000000000005a00", [0x3c, 0x7]})
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1000)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) (async)
sendto$inet6(r0, &(0x7f0000000140)="8b8eebd85e7fd44a6d0b3caa0cc375520bfadfa69cda0e2b410b82bff7eb980e18c8264ddbf50ad50f31ee0e2e4f5c04171e5077c1d0b189d627ee69b2f58dba8998625521c6dcb7c549f53eee9279c146c507e5bfe06f243ee817d62b9afbbdfec7ec564692ac899e1c57f15f142b9a8a1252aaee8cb16550df8821b1af1b4fec2675c52fc7ae2dff936d6b21a8a4e6989dd2a918de8c4891921db3344feefefa6c3550ebfc9da82227c66d61f117d9196f1bfef746fce551cebbef9302d672f21e09ea7825d20c4bfe14190de12db6534290a92f4ec0dd0ec0ed05b090e3e00b685b5e567f77a38f2e7055544bea2e52ca02847fcf5f1b9d6239", 0xfb, 0x24080881, &(0x7f0000000240)={0xa, 0x4e21, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, 0x1c) (async)
r3 = fcntl$dupfd(r0, 0x406, r0)
futex(&(0x7f0000000080), 0x5, 0x0, 0x0, 0x0, 0x14fffffd) (async, rerun: 64)
write$cgroup_pid(r3, &(0x7f0000000000)=0xffffffffffffffff, 0x12) (async, rerun: 64)
read$FUSE(r3, &(0x7f0000004580)={0x2020}, 0x2020)

7.550217508s ago: executing program 2 (id=61):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x1)
fchdir(r3)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r4, 0xc33e, 0x2)
getdents64(r4, 0xfffffffffffffffe, 0x29)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f00000000c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2e, 0x6, 0x0, {0x5, 0x4, 0x5, 0x0, '*]:*&'}}, 0x2e)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7.52368114s ago: executing program 32 (id=61):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x1)
fchdir(r3)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r4, 0xc33e, 0x2)
getdents64(r4, 0xfffffffffffffffe, 0x29)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f00000000c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2e, 0x6, 0x0, {0x5, 0x4, 0x5, 0x0, '*]:*&'}}, 0x2e)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7.51418602s ago: executing program 0 (id=63):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c9002004000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000004041f0000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000))

7.29008637s ago: executing program 0 (id=64):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=',,\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap')
syz_usb_connect(0x2, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c291492099042a102d8e0102030109024c0001000010000904100002e51de5000b240201030205febd9bfd052406000105240002000d00100000000000090007000806240398000109050602ff03000000090582029b"], 0x0)

5.959260303s ago: executing program 0 (id=68):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x6, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"})
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000100)="60ff9d33483a584846f2bb4a0dec4ec570d4251a12eab0284bd844b16df506")
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e14"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.139965571s ago: executing program 4 (id=62):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
mount$cgroup(0x0, 0x0, 0x0, 0x60812, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0xfa, @empty}, {0xa, 0x4e20, 0x1, @private2, 0x8}, 0x1, {[0x9, 0x3, 0x2, 0x5, 0x0, 0x1, 0x8, 0x4]}}, 0x5c)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x3, 0x6, 0x84, 0x42, 0xa, 0x1, 0x4, 0x2, 0x3, 0xa63}, {0x1, 0x9, 0x7, 0x0, 0x8, 0x7, 0x7, 0xff, 0x2, 0xfe, 0x9, 0xf, 0x20000000006}, {0x6, 0x6, 0x77, 0x85, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.322851069s ago: executing program 4 (id=62):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
mount$cgroup(0x0, 0x0, 0x0, 0x60812, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0xfa, @empty}, {0xa, 0x4e20, 0x1, @private2, 0x8}, 0x1, {[0x9, 0x3, 0x2, 0x5, 0x0, 0x1, 0x8, 0x4]}}, 0x5c)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x3, 0x6, 0x84, 0x42, 0xa, 0x1, 0x4, 0x2, 0x3, 0xa63}, {0x1, 0x9, 0x7, 0x0, 0x8, 0x7, 0x7, 0xff, 0x2, 0xfe, 0x9, 0xf, 0x20000000006}, {0x6, 0x6, 0x77, 0x85, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.491939707s ago: executing program 0 (id=70):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440)={0x202000, 0x4, 0x22}, 0x18)
r3 = socket(0x6, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000004a00010200000000000000000a000003382125a96cfd0bdea2bfde4987c4f14673aedaba2cb1edac239ea626e287eb70b6615a7acc43f2815b0b5c50f2ea96ad42bdb42fadc12eb7151ca44121d25034a3cc606d8720f842a71133d8bc1d1b7dde1eca071f8ad1a06298d0756745a4a791f3659779e084ebad6779e88383a36fb18cb25fcb62af613398fcc325bb7efa1e53bd1061af1e93612ce5074a9cecc03fe20e36edbc4c67fb4c95cb8972370f2876252036653516a04316bfecd3e852405c060921a43f84f38a9cd8d8caaefbb4e9a90de3d5529578e158f6e8339c9cb4b6bf24b08d8a5d"], 0x14}}, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000001480)={@desc={0x1, 0x0, @desc2}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000))
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f5389696baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x48}], 0x1, 0x74, 0x0, 0x0)
setrlimit(0x2, &(0x7f00000000c0)={0x47, 0xffff})
preadv(r4, &(0x7f0000002840)=[{&(0x7f0000000280)=""/65, 0x41}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/180, 0xb4}, {&(0x7f0000002580)=""/244, 0xf4}, {&(0x7f0000002680)=""/86, 0x56}, {&(0x7f0000002700)=""/210, 0xd2}, {&(0x7f0000002800)=""/2, 0x2}], 0x7, 0x80, 0x9)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x8)
ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x114})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440)={0x202000, 0x4, 0x22}, 0x18) (async)
socket(0x6, 0x3, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000004a00010200000000000000000a000003382125a96cfd0bdea2bfde4987c4f14673aedaba2cb1edac239ea626e287eb70b6615a7acc43f2815b0b5c50f2ea96ad42bdb42fadc12eb7151ca44121d25034a3cc606d8720f842a71133d8bc1d1b7dde1eca071f8ad1a06298d0756745a4a791f3659779e084ebad6779e88383a36fb18cb25fcb62af613398fcc325bb7efa1e53bd1061af1e93612ce5074a9cecc03fe20e36edbc4c67fb4c95cb8972370f2876252036653516a04316bfecd3e852405c060921a43f84f38a9cd8d8caaefbb4e9a90de3d5529578e158f6e8339c9cb4b6bf24b08d8a5d"], 0x14}}, 0x0) (async)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000001480)={@desc={0x1, 0x0, @desc2}}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f5389696baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x48}], 0x1, 0x74, 0x0, 0x0) (async)
setrlimit(0x2, &(0x7f00000000c0)={0x47, 0xffff}) (async)
preadv(r4, &(0x7f0000002840)=[{&(0x7f0000000280)=""/65, 0x41}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/180, 0xb4}, {&(0x7f0000002580)=""/244, 0xf4}, {&(0x7f0000002680)=""/86, 0x56}, {&(0x7f0000002700)=""/210, 0xd2}, {&(0x7f0000002800)=""/2, 0x2}], 0x7, 0x80, 0x9) (async)
fsmount(0xffffffffffffffff, 0x0, 0x8) (async)
ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x114}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)

3.491364258s ago: executing program 1 (id=71):
r0 = gettid()
process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80080, 0x0)
ioctl$TUNSETQUEUE(r1, 0x5450, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3.350167854s ago: executing program 1 (id=72):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x282, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x1c, 0x1e, 0x21, 0x0, 0x0, {0x9}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0)

3.349642464s ago: executing program 4 (id=62):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
mount$cgroup(0x0, 0x0, 0x0, 0x60812, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0xfa, @empty}, {0xa, 0x4e20, 0x1, @private2, 0x8}, 0x1, {[0x9, 0x3, 0x2, 0x5, 0x0, 0x1, 0x8, 0x4]}}, 0x5c)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x3, 0x6, 0x84, 0x42, 0xa, 0x1, 0x4, 0x2, 0x3, 0xa63}, {0x1, 0x9, 0x7, 0x0, 0x8, 0x7, 0x7, 0xff, 0x2, 0xfe, 0x9, 0xf, 0x20000000006}, {0x6, 0x6, 0x77, 0x85, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.349510124s ago: executing program 1 (id=73):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='wlan0\x00'})
ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"})
write$tun(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x5c2)

2.412914857s ago: executing program 0 (id=74):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xfffc, 0x4}, 0x2)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x208000, 0x108)
r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x81901)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000200)=<r6=>0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10)
listen(r7, 0x5)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4)
sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r8, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4)
io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8000, r5, 0x0, 0x0, 0x80000004}])
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f0000000880)=0x5, 0x4)
sendto$inet6(r9, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @empty, 0x6}, 0x1c)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x51c}], 0x1}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[], 0x54}}, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000000000000000000000fe88000000000000000000000000000100000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x40044)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x274)

2.411282988s ago: executing program 1 (id=75):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0xb01, @empty, 0x6}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="0dc785c4cb69d0b3d461ca5d", 0xc}], 0x1}}], 0x1, 0x48000)
r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
lseek(r3, 0xff, 0x3)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
creat(&(0x7f0000000280)='./file0\x00', 0x15)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.330951511s ago: executing program 4 (id=62):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
mount$cgroup(0x0, 0x0, 0x0, 0x60812, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0xfa, @empty}, {0xa, 0x4e20, 0x1, @private2, 0x8}, 0x1, {[0x9, 0x3, 0x2, 0x5, 0x0, 0x1, 0x8, 0x4]}}, 0x5c)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x3, 0x6, 0x84, 0x42, 0xa, 0x1, 0x4, 0x2, 0x3, 0xa63}, {0x1, 0x9, 0x7, 0x0, 0x8, 0x7, 0x7, 0xff, 0x2, 0xfe, 0x9, 0xf, 0x20000000006}, {0x6, 0x6, 0x77, 0x85, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.29392638s ago: executing program 1 (id=76):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000140)='virtiofs\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x7ff, 0x1, 0x405, 0x9f, 0xb698, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xb, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x2, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0xfffe, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x7, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x4}], 0x4)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000540)="0f789a060000008f482087bc419605ff3e71c74424001c660000c74424020b000000c74424e1000097c900c600c61c2466b83a008ec0c7442400a3000000c74424026e000000450f08c4c1e5f60478b8010000000f01c1440f01f866ba6100b8fa63a5afefc74424005dffffffc74424025fe9b9f066b800000f00d0160f07"}], 0x21, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r9)

1.220302553s ago: executing program 4 (id=62):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
mount$cgroup(0x0, 0x0, 0x0, 0x60812, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0xfa, @empty}, {0xa, 0x4e20, 0x1, @private2, 0x8}, 0x1, {[0x9, 0x3, 0x2, 0x5, 0x0, 0x1, 0x8, 0x4]}}, 0x5c)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x3, 0x6, 0x84, 0x42, 0xa, 0x1, 0x4, 0x2, 0x3, 0xa63}, {0x1, 0x9, 0x7, 0x0, 0x8, 0x7, 0x7, 0xff, 0x2, 0xfe, 0x9, 0xf, 0x20000000006}, {0x6, 0x6, 0x77, 0x85, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

80.856137ms ago: executing program 0 (id=77):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000001d00010000a002090400050203008400090104004001008015850000000000000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}], 0x1}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0x8, 0x11e, 0x0, 0x0, @fd}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x21, 0x18, {0x18, 0xc, "6c2188888494ea882fbc832a9e50a851da693ff28c88"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

78.124726ms ago: executing program 1 (id=78):
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)
r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x3f, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="20831a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x46, 0x11811fd873af7a70, 0x2f, "52ae08edfc568b4d234db20745061daf", "073011b6e97212e225859de80157311fae2d11fa64d6ef12095b38ece9f6c82bcf4bea0b9de1913aecd1ebf22dcb8c4eb7"}, 0x46, 0xaf933ee3768b437f)

0s ago: executing program 4 (id=62):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
mount$cgroup(0x0, 0x0, 0x0, 0x60812, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0xfa, @empty}, {0xa, 0x4e20, 0x1, @private2, 0x8}, 0x1, {[0x9, 0x3, 0x2, 0x5, 0x0, 0x1, 0x8, 0x4]}}, 0x5c)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x3, 0x6, 0x84, 0x42, 0xa, 0x1, 0x4, 0x2, 0x3, 0xa63}, {0x1, 0x9, 0x7, 0x0, 0x8, 0x7, 0x7, 0xff, 0x2, 0xfe, 0x9, 0xf, 0x20000000006}, {0x6, 0x6, 0x77, 0x85, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   14.342869][   T36] kauditd_printk_skb: 48 callbacks suppressed
[   14.342887][   T36] audit: type=1400 audit(1789979416.929:59): avc:  denied  { transition } for  pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   14.346930][   T36] audit: type=1400 audit(1789979416.929:60): avc:  denied  { noatsecure } for  pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   14.349726][   T36] audit: type=1400 audit(1789979416.929:61): avc:  denied  { write } for  pid=232 comm="sh" path="pipe:[2957]" dev="pipefs" ino=2957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   14.352696][   T36] audit: type=1400 audit(1789979416.929:62): avc:  denied  { rlimitinh } for  pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   14.355304][   T36] audit: type=1400 audit(1789979416.929:63): avc:  denied  { siginh } for  pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts.
[   21.541662][   T36] audit: type=1400 audit(1789979424.129:64): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.542714][  T286] cgroup: Unknown subsys name 'net'
[   21.564290][   T36] audit: type=1400 audit(1789979424.129:65): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.591690][   T36] audit: type=1400 audit(1789979424.159:66): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.591945][  T286] cgroup: Unknown subsys name 'devices'
[   21.699439][  T286] cgroup: Unknown subsys name 'hugetlb'
[   21.705073][  T286] cgroup: Unknown subsys name 'rlimit'
[   21.818243][   T36] audit: type=1400 audit(1789979424.409:67): avc:  denied  { setattr } for  pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.841407][   T36] audit: type=1400 audit(1789979424.409:68): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   21.858918][  T288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.866185][   T36] audit: type=1400 audit(1789979424.409:69): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.897918][   T36] audit: type=1400 audit(1789979424.469:70): avc:  denied  { relabelto } for  pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.898940][  T286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.923334][   T36] audit: type=1400 audit(1789979424.469:71): avc:  denied  { write } for  pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.957561][   T36] audit: type=1400 audit(1789979424.489:72): avc:  denied  { read } for  pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.983115][   T36] audit: type=1400 audit(1789979424.489:73): avc:  denied  { open } for  pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.479075][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.486133][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.493254][  T294] bridge_slave_0: entered allmulticast mode
[   23.499637][  T294] bridge_slave_0: entered promiscuous mode
[   23.513461][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.520665][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.527770][  T294] bridge_slave_1: entered allmulticast mode
[   23.533891][  T294] bridge_slave_1: entered promiscuous mode
[   23.541268][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.548314][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.555353][  T293] bridge_slave_0: entered allmulticast mode
[   23.561601][  T293] bridge_slave_0: entered promiscuous mode
[   23.570525][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.577548][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.584658][  T293] bridge_slave_1: entered allmulticast mode
[   23.591180][  T293] bridge_slave_1: entered promiscuous mode
[   23.615134][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.622201][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.629262][  T295] bridge_slave_0: entered allmulticast mode
[   23.635464][  T295] bridge_slave_0: entered promiscuous mode
[   23.641666][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.648871][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.655895][  T296] bridge_slave_0: entered allmulticast mode
[   23.662270][  T296] bridge_slave_0: entered promiscuous mode
[   23.668649][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.675694][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.682774][  T296] bridge_slave_1: entered allmulticast mode
[   23.689041][  T296] bridge_slave_1: entered promiscuous mode
[   23.697991][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.705016][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.712101][  T295] bridge_slave_1: entered allmulticast mode
[   23.718251][  T295] bridge_slave_1: entered promiscuous mode
[   23.860899][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.868001][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.875267][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.882327][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.893201][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.900262][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.907528][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.914560][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.945229][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.952308][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.959587][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.966954][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.992519][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.999585][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.006864][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.013911][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.040658][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.048419][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.055601][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.062915][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.070495][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.078171][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.085300][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.094497][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.101554][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.122821][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.129896][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.140071][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.147141][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.169208][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.176254][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.184048][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.191104][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.202850][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.209905][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.230960][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.238015][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.264714][  T295] veth0_vlan: entered promiscuous mode
[   24.282598][  T294] veth0_vlan: entered promiscuous mode
[   24.303067][  T293] veth0_vlan: entered promiscuous mode
[   24.311595][  T295] veth1_macvtap: entered promiscuous mode
[   24.319409][  T296] veth0_vlan: entered promiscuous mode
[   24.333363][  T294] veth1_macvtap: entered promiscuous mode
[   24.342400][  T293] veth1_macvtap: entered promiscuous mode
[   24.387630][  T296] veth1_macvtap: entered promiscuous mode
[   24.395569][  T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   24.466325][  T316] mmap: syz.3.4 (316): VmData 29261824 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[   24.491866][  T326] =======================================================
[   24.491866][  T326] WARNING: The mand mount option has been deprecated and
[   24.491866][  T326]          and is ignored by this kernel. Remove the mand
[   24.491866][  T326]          option from the mount to silence this warning.
[   24.491866][  T326] =======================================================
[   24.494058][  T328] FAULT_INJECTION: forcing a failure.
[   24.494058][  T328] name failslab, interval 1, probability 0, space 0, times 1
[   24.556328][  T328] CPU: 0 UID: 0 PID: 328 Comm: syz.3.5 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f
[   24.556360][  T328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   24.556379][  T328] Call Trace:
[   24.556386][  T328]  <TASK>
[   24.556394][  T328]  __dump_stack+0x21/0x30
[   24.556431][  T328]  dump_stack_lvl+0x140/0x1c0
[   24.556456][  T328]  ? __cfi_dump_stack_lvl+0x10/0x10
[   24.556483][  T328]  ? __kasan_check_write+0x18/0x20
[   24.556503][  T328]  ? _raw_spin_lock_irq+0x93/0x120
[   24.556523][  T328]  dump_stack+0x19/0x20
[   24.556547][  T328]  should_fail_ex+0x3c2/0x510
[   24.556570][  T328]  should_failslab+0xac/0x100
[   24.556598][  T328]  __kmalloc_cache_noprof+0x41/0x470
[   24.556626][  T328]  ? __kasan_check_write+0x18/0x20
[   24.556645][  T328]  ? alloc_mnt_ns+0xd3/0x4c0
[   24.556666][  T328]  ? inc_ucount+0x1c3/0x2c0
[   24.556685][  T328]  alloc_mnt_ns+0xd3/0x4c0
[   24.556705][  T328]  copy_mnt_ns+0xe3/0x8f0
[   24.556724][  T328]  ? kmem_cache_alloc_noprof+0x1e2/0x410
[   24.556744][  T328]  ? create_new_namespaces+0x48/0x6f0
[   24.556772][  T328]  create_new_namespaces+0xd9/0x6f0
[   24.556799][  T328]  unshare_nsproxy_namespaces+0x124/0x180
[   24.556827][  T328]  ksys_unshare+0x4f9/0x920
[   24.556853][  T328]  ? __cfi_ksys_unshare+0x10/0x10
[   24.556878][  T328]  ? __kasan_check_write+0x18/0x20
[   24.556899][  T328]  __x64_sys_unshare+0x3c/0x50
[   24.556924][  T328]  x64_sys_call+0x2998/0x2ee0
[   24.556942][  T328]  do_syscall_64+0x57/0xf0
[   24.556960][  T328]  ? clear_bhb_loop+0x50/0xa0
[   24.556984][  T328]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   24.557007][  T328] RIP: 0033:0x7f70c6d9e159
[   24.557028][  T328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   24.557044][  T328] RSP: 002b:00007f70c7cf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   24.557072][  T328] RAX: ffffffffffffffda RBX: 00007f70c7025fa0 RCX: 00007f70c6d9e159
[   24.557087][  T328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400
[   24.557100][  T328] RBP: 00007f70c6e3506b R08: 0000000000000000 R09: 0000000000000000
[   24.557113][  T328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   24.557125][  T328] R13: 00007f70c7026038 R14: 00007f70c7025fa0 R15: 00007ffccec7f8d8
[   24.557141][  T328]  </TASK>
[   24.728780][   T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   24.792116][  T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   24.860138][  T339] process 'syz.2.6' launched '/dev/fd/4' with NULL argv: empty string added
[   24.870651][  T339] can0: slcan on ttynull.
[   24.900901][  T338] can0 (unregistered): slcan off ttynull.
[   24.916830][  T343] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   24.925574][  T343] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   24.957929][  T311] usb 1-1: Using ep0 maxpacket: 16
[   24.964028][  T311] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   24.975230][  T311] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   24.978842][   T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   24.999656][  T311] usb 1-1: config 0 interface 0 has no altsetting 0
[   25.004867][   T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   25.014816][  T311] usb 1-1: New USB device found, idVendor=05ac, idProduct=021e, bcdDevice= 0.00
[   25.020932][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.026363][  T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.032373][   T45] usb 2-1: Product: syz
[   25.044484][   T45] usb 2-1: Manufacturer: syz
[   25.049084][   T45] usb 2-1: SerialNumber: syz
[   25.057569][  T311] usb 1-1: config 0 descriptor??
[   25.095740][  T346] Zero length message leads to an empty skb
[   25.257007][  T358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   25.266000][  T358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   25.275869][   T45] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[   25.282058][   T45] cdc_ncm 2-1:1.0: bind() failure
[   25.287997][   T45] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   25.294770][   T45] cdc_ncm 2-1:1.1: bind() failure
[   25.377758][  T318] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   25.476043][   T64] usb 2-1: USB disconnect, device number 2
[   25.507753][  T318] usb 3-1: device descriptor read/64, error -71
[   25.539296][  T311] apple 0003:05AC:021E.0001: unknown main item tag 0x0
[   25.546245][  T311] apple 0003:05AC:021E.0001: unknown main item tag 0x0
[   25.553275][  T311] apple 0003:05AC:021E.0001: unknown main item tag 0x0
[   25.561123][  T311] apple 0003:05AC:021E.0001: unknown main item tag 0x0
[   25.568031][  T311] apple 0003:05AC:021E.0001: unknown main item tag 0x0
[   25.576144][  T311] apple 0003:05AC:021E.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:021e] on usb-dummy_hcd.0-1/input0
[   25.767805][  T318] usb 3-1: device descriptor read/64, error -71
[   26.038868][  T318] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   26.187928][  T318] usb 3-1: device descriptor read/64, error -71
[   26.240741][  T379] No source specified
[   26.258325][   T45] usb 1-1: USB disconnect, device number 2
[   26.427945][  T318] usb 3-1: device descriptor read/64, error -71
[   26.537892][  T318] usb usb3-port1: attempt power cycle
[   26.821582][   T36] kauditd_printk_skb: 80 callbacks suppressed
[   26.821608][   T36] audit: type=1400 audit(1789979429.409:154): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   26.857154][  T391] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   26.861889][   T36] audit: type=1400 audit(1789979429.439:155): avc:  denied  { read } for  pid=390 comm="syz.0.21" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   26.866593][  T391] overlayfs: missing 'lowerdir'
[   26.887443][   T36] audit: type=1400 audit(1789979429.439:156): avc:  denied  { open } for  pid=390 comm="syz.0.21" path="net:[4026532389]" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   26.892178][  T318] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   26.921188][   T36] audit: type=1400 audit(1789979429.509:157): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   26.939215][  T318] usb 3-1: device descriptor read/8, error -71
[   26.985957][   T36] audit: type=1400 audit(1789979429.569:158): avc:  denied  { read write } for  pid=394 comm="syz.0.23" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   27.010531][   T36] audit: type=1400 audit(1789979429.569:159): avc:  denied  { open } for  pid=394 comm="syz.0.23" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   27.034488][   T36] audit: type=1400 audit(1789979429.569:160): avc:  denied  { ioctl } for  pid=394 comm="syz.0.23" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   27.059716][   T36] audit: type=1400 audit(1789979429.619:161): avc:  denied  { create } for  pid=394 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   27.078740][  T318] usb 3-1: device descriptor read/8, error -71
[   27.078980][   T36] audit: type=1400 audit(1789979429.619:162): avc:  denied  { connect } for  pid=394 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   27.104402][   T36] audit: type=1400 audit(1789979429.689:163): avc:  denied  { setopt } for  pid=394 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   27.187760][  T389] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   27.247767][  T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   27.317761][  T318] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   27.337731][  T389] usb 2-1: Using ep0 maxpacket: 32
[   27.343863][  T318] usb 3-1: device descriptor read/8, error -71
[   27.350094][  T389] usb 2-1: config 0 has an invalid interface number: 20 but max is 0
[   27.358436][  T389] usb 2-1: config 0 has no interface number 0
[   27.364504][  T389] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   27.374504][  T389] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   27.384369][  T389] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   27.395504][  T389] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[   27.404564][  T389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.412575][  T312] usb 4-1: Using ep0 maxpacket: 32
[   27.417719][  T389] usb 2-1: Product: syz
[   27.421867][  T389] usb 2-1: Manufacturer: syz
[   27.426432][  T389] usb 2-1: SerialNumber: syz
[   27.432209][  T389] usb 2-1: config 0 descriptor??
[   27.437518][  T393] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   27.437633][  T312] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 44, changing to 7
[   27.457141][  T312] usb 4-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40
[   27.466233][  T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.474247][  T312] usb 4-1: Product: 깡᜛疟㋤噢̢᤼俄붑鯣챡䦍ή呦偙꬈熦惥퍪鵍ã䳠젙⿹㛣꼚뙣쫋뗐귧੎浭쭡妳ి쬹ɡᇙ逩辿燘 씇鹉䒝㼯僊쾊蝊㆙⢑뢶徴㚮䋔ꘚ㺝㿙菖疩ᅒ骪ꫴ᠇းᖣ瘂ᴻ鱙灾㷈쩩럮游贴ꆉ護卌萑䥰喾暳䴠ற碩௰﷧裒嗪་模ᣞ懈毬᧋긱韐鞋杗֔
[   27.506717][  T312] usb 4-1: Manufacturer: ч
[   27.511274][  T312] usb 4-1: SerialNumber: 㰂낺挗鼍筺 袏턽鈇Ъ寓黚儓볆שׂඔ䙔莥㫲鹖졳㔘灴쟂ⅽ뗱庝續봬ꥥ홙疶クᚔ↧ힶ皶Ԁ䠥ᙧ沂龜㥢料婰샠㱝䏣䄌덊듴슇ⶤ潪㹤薻먚㛷쌑ԅ㋾㔇⸊۫烁䜇촩䔨䡀墨⬴ྜ﬛䄨젆瑈ᑚ쯴儿婠뻹铡ᕈ嵌賈﹥ﲚ붹墳≪
[   27.541516][  T318] usb 3-1: device descriptor read/8, error -71
[   27.647848][  T318] usb usb3-port1: unable to enumerate USB device
[   27.719982][  T389] usb-storage 2-1:0.20: USB Mass Storage device detected
[   27.731562][  T389] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[   27.739621][  T389] scsi host1: usb-storage 2-1:0.20
[   27.758205][  T312] usb 4-1: Audio class v2/v3 interfaces need an interface association
[   27.769955][  T389] usb 2-1: USB disconnect, device number 3
[   27.789268][  T312] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[   27.809170][  T312] usb 4-1: USB disconnect, device number 2
[   27.826101][  T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   28.106424][  T420] netlink: 104 bytes leftover after parsing attributes in process `syz.2.26'.
[   28.137797][  T389] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   28.321297][  T389] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40
[   28.330449][  T389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.338741][  T389] usb 2-1: Product: syz
[   28.342978][  T389] usb 2-1: Manufacturer: syz
[   28.347577][  T389] usb 2-1: SerialNumber: syz
[   28.467746][  T312] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   28.572617][  T389] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[   28.582226][  T389] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71
[   28.591911][  T389] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71
[   28.602926][  T389] usb 2-1: USB disconnect, device number 4
[   28.618798][  T312] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[   28.627062][  T312] usb 3-1: config 0 has no interface number 0
[   28.634617][  T312] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   28.643749][  T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.651824][  T312] usb 3-1: Product: syz
[   28.656951][  T312] usb 3-1: Manufacturer: syz
[   28.664284][  T312] usb 3-1: SerialNumber: syz
[   28.669636][  T312] usb 3-1: config 0 descriptor??
[   29.479832][  T312] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[   29.490027][  T312] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[   29.500524][  T312] asix 3-1:0.251: probe with driver asix failed with error -32
[   29.509005][  T312] usb 3-1: USB disconnect, device number 6
[   29.729814][  T461] ./dev/sda1: Can't lookup blockdev
[   29.997516][  T470] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1.
[   29.997772][  T311] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   30.148109][  T311] usb 1-1: device descriptor read/64, error -71
[   30.261898][  T312] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   30.387759][  T311] usb 1-1: device descriptor read/64, error -71
[   30.428772][  T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.439873][  T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.449625][  T312] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[   30.458693][  T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.467872][  T312] usb 3-1: config 0 descriptor??
[   30.627759][  T311] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[   30.757751][  T311] usb 1-1: device descriptor read/64, error -71
[   31.007750][  T311] usb 1-1: device descriptor read/64, error -71
[   31.076076][  T312] usbhid 3-1:0.0: can't add hid device: -71
[   31.082134][  T312] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   31.090806][  T312] usb 3-1: USB disconnect, device number 7
[   31.117841][  T311] usb usb1-port1: attempt power cycle
[   31.440925][  T497] netlink: 'syz.3.51': attribute type 11 has an invalid length.
[   31.452164][  T498] netlink: 'syz.3.51': attribute type 11 has an invalid length.
[   31.460051][  T311] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[   31.488801][  T311] usb 1-1: device descriptor read/8, error -71
[   31.619743][  T311] usb 1-1: device descriptor read/8, error -71
[   31.771175][  T521] FAULT_INJECTION: forcing a failure.
[   31.771175][  T521] name failslab, interval 1, probability 0, space 0, times 0
[   31.783869][  T521] CPU: 0 UID: 0 PID: 521 Comm: syz.2.56 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f
[   31.783900][  T521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   31.783913][  T521] Call Trace:
[   31.783919][  T521]  <TASK>
[   31.783927][  T521]  __dump_stack+0x21/0x30
[   31.783958][  T521]  dump_stack_lvl+0x140/0x1c0
[   31.783983][  T521]  ? __cfi_dump_stack_lvl+0x10/0x10
[   31.784009][  T521]  dump_stack+0x19/0x20
[   31.784031][  T521]  should_fail_ex+0x3c2/0x510
[   31.784054][  T521]  should_failslab+0xac/0x100
[   31.784077][  T521]  kmem_cache_alloc_noprof+0x42/0x410
[   31.784097][  T521]  ? sk_prot_alloc+0x69/0x3a0
[   31.784120][  T521]  ? __kasan_slab_alloc+0x73/0x90
[   31.784144][  T521]  sk_prot_alloc+0x69/0x3a0
[   31.784168][  T521]  sk_alloc+0x40/0x590
[   31.784188][  T521]  ? bpf_lsm_inode_alloc_security+0xd/0x20
[   31.784211][  T521]  unix_create1+0xb7/0x760
[   31.784231][  T521]  ? inode_init_always_gfp+0x76e/0x9e0
[   31.784253][  T521]  unix_create+0x15a/0x220
[   31.784274][  T521]  __sock_create+0x3a2/0x810
[   31.784295][  T521]  __sys_socketpair+0x221/0x5c0
[   31.784318][  T521]  __x64_sys_socketpair+0x9f/0xc0
[   31.784339][  T521]  x64_sys_call+0x2081/0x2ee0
[   31.784357][  T521]  do_syscall_64+0x57/0xf0
[   31.784374][  T521]  ? clear_bhb_loop+0x50/0xa0
[   31.784398][  T521]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   31.784420][  T521] RIP: 0033:0x7efca599e159
[   31.784436][  T521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   31.784452][  T521] RSP: 002b:00007efca6868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[   31.784475][  T521] RAX: ffffffffffffffda RBX: 00007efca5c25fa0 RCX: 00007efca599e159
[   31.784490][  T521] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001
[   31.784503][  T521] RBP: 00007efca5a3506b R08: 0000000000000000 R09: 0000000000000000
[   31.784516][  T521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   31.784528][  T521] R13: 00007efca5c26038 R14: 00007efca5c25fa0 R15: 00007fffcf938ca8
[   31.784545][  T521]  </TASK>
[   31.955176][  T521] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   32.017749][  T311] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[   32.129322][  T311] usb 1-1: device descriptor read/8, error -71
[   32.146112][   T36] kauditd_printk_skb: 47 callbacks suppressed
[   32.146127][   T36] audit: type=1400 audit(1789979434.729:211): avc:  denied  { create } for  pid=522 comm="syz.2.57" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   32.156459][  T523] kvm: kvm [522]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   32.172900][   T36] audit: type=1400 audit(1789979434.729:212): avc:  denied  { write } for  pid=522 comm="syz.2.57" name="file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   32.181692][  T523] kvm: kvm [522]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   32.205360][   T36] audit: type=1400 audit(1789979434.729:213): avc:  denied  { open } for  pid=522 comm="syz.2.57" path="/13/file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   32.234869][   T36] audit: type=1400 audit(1789979434.729:214): avc:  denied  { ioctl } for  pid=522 comm="syz.2.57" path="/13/file0" dev="tmpfs" ino=109 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   32.259999][  T311] usb 1-1: device descriptor read/8, error -71
[   32.275867][   T36] audit: type=1400 audit(1789979434.859:215): avc:  denied  { rmdir } for  pid=294 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   32.322037][   T36] audit: type=1400 audit(1789979434.909:216): avc:  denied  { unlink } for  pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   32.367853][  T311] usb usb1-port1: unable to enumerate USB device
[   32.519050][   T36] audit: type=1400 audit(1789979435.109:217): avc:  denied  { unlink } for  pid=525 comm="syz.2.58" name="#c" dev="sda1" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1
[   32.545484][   T36] audit: type=1400 audit(1789979435.129:218): avc:  denied  { mounton } for  pid=525 comm="syz.2.58" path="/14/mnt/dev/sda1" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   32.545513][  T526] 9pnet_virtio: no channels available for device syz
[   32.580102][  T526] /dev/nbd2: Can't lookup blockdev
[   32.766920][  T340] bridge_slave_1: left allmulticast mode
[   32.772685][  T340] bridge_slave_1: left promiscuous mode
[   32.774685][   T36] audit: type=1400 audit(1789979435.369:219): avc:  denied  { create } for  pid=528 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   32.778650][  T340] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.805670][  T340] bridge_slave_0: left allmulticast mode
[   32.811544][  T340] bridge_slave_0: left promiscuous mode
[   32.817329][  T340] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.817515][   T36] audit: type=1400 audit(1789979435.389:220): avc:  denied  { write } for  pid=528 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   32.955589][  T340] veth1_macvtap: left promiscuous mode
[   32.968114][  T340] veth0_vlan: left promiscuous mode
[   33.300042][  T311] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   33.468791][  T311] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[   33.476880][  T311] usb 1-1: config 0 has no interface number 0
[   33.483026][  T311] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   33.493901][  T311] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 155, setting to 64
[   33.506026][  T311] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=8e.2d
[   33.515096][  T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.523106][  T311] usb 1-1: Product: syz
[   33.527276][  T311] usb 1-1: Manufacturer: syz
[   33.531940][  T311] usb 1-1: SerialNumber: syz
[   33.537062][  T311] usb 1-1: config 0 descriptor??
[   33.542315][  T538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   33.549645][  T538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   33.758895][  T312] usb 1-1: USB disconnect, device number 7
[   34.413582][  T311] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   34.425671][  T311] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   34.647751][  T312] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   34.799657][  T312] usb 2-1: config 3 has an invalid interface number: 99 but max is 2
[   34.807878][  T312] usb 2-1: config 3 has an invalid interface number: 30 but max is 2
[   34.815974][  T312] usb 2-1: config 3 has an invalid interface number: 120 but max is 2
[   34.824191][  T312] usb 2-1: config 3 has no interface number 0
[   34.830364][  T312] usb 2-1: config 3 has no interface number 1
[   34.836483][  T312] usb 2-1: config 3 has no interface number 2
[   34.842628][  T312] usb 2-1: config 3 interface 99 altsetting 129 endpoint 0xE has invalid wMaxPacketSize 0
[   34.852612][  T312] usb 2-1: config 3 interface 30 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 256
[   34.857756][  T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   34.862681][  T312] usb 2-1: config 3 interface 30 altsetting 2 endpoint 0x1 has invalid maxpacket 1983, setting to 64
[   34.880898][  T312] usb 2-1: config 3 interface 30 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64
[   34.892464][  T312] usb 2-1: config 3 interface 120 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[   34.903303][  T312] usb 2-1: config 3 interface 120 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[   34.914103][  T312] usb 2-1: config 3 interface 120 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   34.925067][  T312] usb 2-1: config 3 interface 120 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[   34.935809][  T312] usb 2-1: config 3 interface 120 altsetting 0 endpoint 0xB has an invalid bInterval 244, changing to 11
[   34.947134][  T312] usb 2-1: config 3 interface 99 has no altsetting 0
[   34.953927][  T312] usb 2-1: config 3 interface 30 has no altsetting 0
[   34.962214][  T312] usb 2-1: Dual-Role OTG device on HNP port
[   34.968458][  T312] usb 2-1: New USB device found, idVendor=1546, idProduct=1010, bcdDevice=5b.f6
[   34.977858][  T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.985892][  T312] usb 2-1: Product: syz
[   34.990069][  T312] usb 2-1: Manufacturer: Ф
[   34.994568][  T312] usb 2-1: SerialNumber: syz
[   35.028886][  T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.039805][  T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.049579][  T311] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   35.058632][  T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.067215][  T311] usb 1-1: config 0 descriptor??
[   35.608430][  T312] usb 2-1: USB disconnect, device number 5
[   36.179704][  T311] usbhid 1-1:0.0: can't add hid device: -71
[   36.185700][  T311] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   36.206533][  T311] usb 1-1: USB disconnect, device number 8
[   37.971185][  T309] Bluetooth: hci0: Frame reassembly failed (-84)
[   40.037779][  T586] Bluetooth: hci0: command 0x1003 tx timeout
[   40.037816][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   40.292917][  T599] syz.1.78: attempt to access beyond end of device
[   40.292917][  T599] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[   40.306266][  T599] exFAT-fs (loop1): unable to read boot sector
[   40.312861][  T599] exFAT-fs (loop1): failed to read boot sector
[   40.319182][  T599] exFAT-fs (loop1): failed to recognize exfat type
[   40.527781][  T312] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[   40.567780][  T403] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   40.618692][   T36] kauditd_printk_skb: 6 callbacks suppressed
[   40.618708][   T36] audit: type=1400 audit(1789979443.209:227): avc:  denied  { setattr } for  pid=294 comm="syz-executor" path="/19/mnt/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   40.657755][  T312] usb 1-1: device descriptor read/64, error -71
[   40.728773][  T403] usb 2-1: not running at top speed; connect to a high speed hub
[   40.737389][  T403] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   40.747757][  T403] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   40.756993][  T403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.765776][  T110] udevd[110]: could not touch /run/udev/queue: No such file or directory
[   40.775567][  T403] usb 2-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   40.897827][  T312] usb 1-1: device descriptor read/64, error -71
[   41.137836][  T312] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[   41.267745][  T312] usb 1-1: device descriptor read/64, error -71
[   41.376499][  T403] uvcvideo 2-1:1.1: Failed to set UVC probe control : -71 (exp. 26).
[   41.385123][  T403] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[   41.395132][  T403] uvcvideo 2-1:1.1: Failed to initialize the device (-71).
[   41.403641][  T403] usb 2-1: USB disconnect, device number 6
[   41.537800][  T312] usb 1-1: device descriptor read/64, error -71
SYZFAIL: posix_spawnp failed
 (errno 2: No such file or directory)
[   41.600376][   T36] audit: type=1400 audit(1789979444.189:228): avc:  denied  { write } for  pid=286 comm="syz-executor" path="pipe:[1431]" dev="pipefs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   41.662837][  T312] usb usb1-port1: attempt power cycle
[   41.770037][  T309] bridge_slave_1: left allmulticast mode
[   41.775806][  T309] bridge_slave_1: left promiscuous mode
[   41.781520][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.789836][  T309] bridge_slave_0: left allmulticast mode
[   41.795476][  T309] bridge_slave_0: left promiscuous mode
[   41.808126][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.899742][  T309] veth1_macvtap: left promiscuous mode
[   41.905241][  T309] veth0_vlan: left promiscuous mode
[   42.109161][  T309] bridge_slave_1: left allmulticast mode
[   42.114822][  T309] bridge_slave_1: left promiscuous mode
[   42.120449][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.127874][  T309] bridge_slave_0: left allmulticast mode
[   42.133495][  T309] bridge_slave_0: left promiscuous mode
[   42.139102][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.146636][  T309] bridge_slave_1: left allmulticast mode
[   42.152341][  T309] bridge_slave_1: left promiscuous mode
[   42.157941][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.165286][  T309] bridge_slave_0: left allmulticast mode
[   42.170990][  T309] bridge_slave_0: left promiscuous mode
[   42.176565][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.340445][  T309] veth1_macvtap: left promiscuous mode
[   42.345944][  T309] veth0_vlan: left promiscuous mode
[   42.351455][  T309] veth1_macvtap: left promiscuous mode
[   42.356923][  T309] veth0_vlan: left promiscuous mode