last executing test programs:

7.06443225s ago: executing program 2 (id=33):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448e1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4})
ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000200)={0xa000000000000000})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000080)={0x6, 'bond_slave_0\x00', {0x2}, 0x8000})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000140)={0x0, 'erspan0\x00', {0x4}, 0x5})
ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000180)={&(0x7f0000000080)=[{0x9, 0x1, 0x0, {0x437, 0x100}}, {0x8c, 0x0, 0x0, {0x8000000000000000, 0x80, 0x2}}, {0x8, 0x0, 0x0, {0x0, 0xddde, 0x2}}, {0x8, 0x1, 0x0, {0xffffffffffff7fff, 0x4, 0x1}}, {0xb4, 0x0, 0x0, {0x3, 0x5, 0x1}}, {0x7, 0x0, 0x0, {0x8, 0x2, 0x2}}], 0x6, 0x20, 0x7, 0x8000})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
ioctl$EVIOCGABS3F(r8, 0x8018457f, &(0x7f0000000440)=""/145)
mkdir(&(0x7f0000000180)='./config\x00', 0x1ff)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
preadv(r9, &(0x7f0000000400)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, 0xb73, 0x4)

6.149623824s ago: executing program 2 (id=35):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="00009e00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000680)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66ba2e9e66b8795966ef402500000000c44239a882060000000f00d02e0f005ffa0f01c92e640fc71f", 0x5f}], 0x1, 0xe8, 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000000)={0x40, 0x9, 0x1, 0x1, 0x0, [0x9a5, 0x2, 0xf, 0xaac]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.691825106s ago: executing program 0 (id=37):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="000400000000000000000d001d"], 0x24}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x10001}})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x2300})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="014097bd7000fbdbdf2515000000140001800d0001007517c0e4bc52f8474c000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4040)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
fcntl$lock(r5, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x100000000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@cpuset_v2_mode}, {@xattr}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x800)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000740)={[0xffe, 0x9, 0x742d, 0x5, 0x6, 0x5, 0x1, 0x9, 0x6, 0xc6f, 0x80000001, 0x8, 0x2, 0xfffffffffffffffe, 0x5, 0x401], 0x100000, 0x20000})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r6, r7, 0x80000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000240)={0x3})
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x36, 0xefffffffffffffff, 0x0, 0x187, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901})

5.649187664s ago: executing program 0 (id=38):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
write$binfmt_elf32(r0, &(0x7f0000001340)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x9e, 0xd, 0xffffffffffffffff, 0x2, 0x3, 0x9, 0x2ca, 0x38, 0x425c, 0x20000007, 0xfffb, 0x20, 0x1, 0xfff8, 0x41e, 0xfff4}, [{0x6474e551, 0x4, 0xfffffffa, 0x3, 0x9, 0xfffffe01, 0x101}]}, 0x58)

5.634023717s ago: executing program 0 (id=39):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r5 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x3, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0xfffffffd}}, 0xe8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.47306016s ago: executing program 0 (id=42):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x@K-^{', 0x3a, './file0'}, 0x30)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x0, 0x3, 0x101}, @TCA_IPT_TARG={0x0, 0x6, {0xba15, 'security\x00', 0xdb, 0x4, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x0, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x0, 0x3, 0x2}, @TCA_IPT_TABLE={0x0, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080)
unshare(0x62020600)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
pread64(r2, 0x0, 0x0, 0x9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x4, 0x7}]}, 0x10)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc286, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150095ff0904a10109e981882b0000000000009102c0"], 0x0}, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)={0x10, 0x15, 0x1, 0x70bd25, 0x25dfdbff}, 0x10}, {&(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x1114}, {&(0x7f0000001380)={0x144, 0x1c, 0x8, 0x70bd29, 0x25dfdbfc, "", [@typed={0xc, 0xb7, 0x0, 0x0, @u64=0x200}, @typed={0xe1, 0x83, 0x0, 0x0, @binary="f7b341ec6686984dc3f8558268ffbba730d9d3b7cd1728c34476b8dbfa84588081a424e2c48c6eb574fb2c17a5997acd2211ec6c7791ec80ce4bcd5e7ad2bf1bc091c2bd68c35e096c9aac9cdacb6c0d7cbc750a4000e857e3faf27d66ef04190feed0249c1538e2adc58ce4c55cd493b88d478b7a1f88fb3d18a421fc5311c4de079ba13da4f4cd81bba4b1ad505b19a82f969f86feaaceeaeac102c90389305b27c0a78f26193c3c839c798d8cbc0df632bd620d4b5ab7f82ae0826bca43709eba8f09137437564bf545da9bdfcb0f39a1c302e7ba62a376435ce0cd"}, @generic="4b33d5e041906cabfed868cae03429da5486d8f944ce6d5823cb93c786dc1d3493c7e6b2671b6623ac28c733967b0ebe833ff20db5cff99c0a95b55000d550696f199480"]}, 0x144}], 0x3, 0x0, 0x0, 0x20000080}, 0x4000)
r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$TIOCMBIC(r6, 0x5417, &(0x7f0000000040)=0x3)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2000)
setresuid(r8, r8, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, 0x0)
pipe2$9p(&(0x7f0000000080), 0x800)

3.840728878s ago: executing program 0 (id=54):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448e1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4})
ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000200)={0xa000000000000000})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000080)={0x6, 'bond_slave_0\x00', {0x2}, 0x8000})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000140)={0x0, 'erspan0\x00', {0x4}, 0x5})
ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000180)={&(0x7f0000000080)=[{0x9, 0x1, 0x0, {0x437, 0x100}}, {0x8c, 0x0, 0x0, {0x8000000000000000, 0x80, 0x2}}, {0x8, 0x0, 0x0, {0x0, 0xddde, 0x2}}, {0x8, 0x1, 0x0, {0xffffffffffff7fff, 0x4, 0x1}}, {0xb4, 0x0, 0x0, {0x3, 0x5, 0x1}}, {0x7, 0x0, 0x0, {0x8, 0x2, 0x2}}], 0x6, 0x20, 0x7, 0x8000})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
ioctl$EVIOCGABS3F(r8, 0x8018457f, &(0x7f0000000440)=""/145)
mkdir(&(0x7f0000000180)='./config\x00', 0x1ff)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
preadv(r9, &(0x7f0000000400)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, 0xb73, 0x4)

3.460104335s ago: executing program 2 (id=55):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) (async)
syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
write$FUSE_WRITE(r1, 0x0, 0x0) (async, rerun: 32)
r4 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff3, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x3, 0x13, 0x1, 0x7, 0x12005}, {0x1002, 0x7, 0xa, 0x2, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8}) (async, rerun: 32)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffb, 0x4002004c0, 0xffe, 0x0, 0x2a, 0x20000000014, 0xffff, 0x0, 0x0, 0x7f, 0x7], 0xeeee8000, 0x2}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) (async)
syz_fuse_handle_req(r1, &(0x7f0000004200)="7f5912d07634539c3b2e15a57b311187a3eb119eb4b279cacf0b94d44882da90bb8c7bf605806fd007bddf798e1fed05db9ef39d3dff16e6eb4e5e642774588b2020a414a4574d1e0aa3474184583a655385fb5e7e632304e818af022a134095ea51f1f77a9472dabe407b36f0c47e318bfdd7c6ecb5a5bc07f28701201245abe626ab4592fac5b1544570a665a5e559eecf9505a828f5b0199a5dc33934b75bebb03744f92918f93553eb072cd2a940a5931a5907f82fc99d519f02287cac4341c4637dd8110214e9634088fc6b5a77a5065c4798538f41b263c6329df4d668d018f7ac9634910969342c836d78c7baa9893cef90deb8cbaa8cac81c262016a8dac72fa5c3d5094a8b64abbf82594b8cb1dc876e01a39fc9a26874052c47ec3ed015bc85933a98a61bbc108292a6c7932421162c82ec64518ce13f0fda30adf97b5c0d70fb0c69398e78d9dabe99d3d408bfef6e2518c820217b4a1cee43704fa5b5c4d4013bb61f631b813b8272188d403821fafe0ee4b5e09671c177e34a2566939920fcda640007845e4d19e2ce3693cea27e7ec2482ee603589260503c567e3dd320923e651d2530afe927013724b1ccc22c390c9e53a47331789172fb44c442cf558f9990badcbf377b731aa3cbe587e13c5715ef16c9b96b59e0a6e262da754b1bba316a31fc262561d4628e33de9969794b879eb7ceee36abb30f5f977198bed19fbc4c4f13f32a3909fa76a3beef541a5dfff9ff8609fbfaba986e3a02b23dc0938e7e5b476f5b256a3e3333caea34de6410f75d1daedf4176f6e5a9fb915647bb65302b49895cfb699131513e1d7d937f8e452fe350a78783de31c96535c742b35edc7b117bc2fd2df6cdbef0cfa1000bade8a6c8a06019592b7dc144ffa88a01fb1f6093e82f63b05830f414a07779226b4928f5edc6d592a294c030d518f7e350b2e2536a2bae2616a574b63415c952c28cf6a82553411d305fdc33d1447b7356b8726b67d23dc0749bbb1230b18abfdb6a0fd35cc1489fcdd90aa83edcc613a77db36dd42fc5b83635df5c2acfddab054303e7c859c8bd5a21493742d8fc1adb1ae3f68f6103d65709a8d917292e648c5621691425a203de2e82e9e6bcd53a7f3e90238e89b2b05202ceafc72bb2f997a99487aa993a72d0cb44b345b3982784a78aafe5e5b6ddf2a17e4dca9a5433481fd8e60195832b704a1c186dc3317888c8c0849f1029d0df6af3a5fc93c8e643287ee38580ff450a259dc4bd45343aa453f462e92302c020ce91f26b1c2b66764cac41d2e809a46e51ac50121172759ba4c791cfc8856f7676ad8020433e00bb80e46d9d7709e196565b3a7b18270508d1e0023960e5b335bd901465dc328a581ca918dd295a110aa9f25ebb51ae5523eb619431a9db2b6e046cd94aae4b985bd663c6c6769015f49cb40d3f4b520c1022683487b170c9e47ed306097f1208a92ecf6727f7f276d19bcdfb987ca8b7f54732d0908f98ccac0ba9f6905e194da99608598ee87a6992c4dd33fad2e5e463c995babd0c7dad010499ee2cbf0f2fb63c7678d681a8b63d8a1316fcac3a107f8723dc004aaf7d9224090b6c78212172884eda7089cac24f196db5d3bd2747649e6fee4ebafb3d883df077f99bb945220161a3323aaa09a5caba3348a2d78096a18625aece41aad5cf9fc9cdb590f0cabb882839474c53a14fdbd34772f69cdd369260309a9500af55572adb7b23d4fdbfaa807242ba1130f7029fbcffde2da9b8a0814840e9b241febe92d6247419ae4cd15f5b073c7dc03e4541e24291ac5b4e29cde2649ca6cb7952e81308ae249906ca9d97d8ceb129b0b2b44a84e7f8b12b8a373965b877028cae0ead133c8422052a8f91d92f6695b6a3e9c36661c0cb6d03dc795490b09f62210803d88dfb3777b16e1485c9c7ce4a4becc718c9da4aaa32f5d9da57ffbfe6633a302b10c676a0e047f1b24e8dac251dffc841a2906002abdd64334a2cc50db924e196b6cee0f9261a87793dcbf8dcf1363b91b33dfcbca15798e9089cab241884ddacd61fa07f8797cb21f9c1f4f1d7fd8d0f2e19b99b40173853282bbe94e5c867006949b55c1a27e12fef9f264d2a14700fb5c828e21293b38502dadfd2e96dbbe866547a460a737951e55803fe5ed0b448aa1fbe65de9117d066b2f46dbe658510434d2d3fabc734fc5632fd16a3ddf04a0da7067908f3fe7d9c046ec9d528808d0f4a755a4467609386b31104db69605b78507f83995c297d049d6b028ffe981f0ecd972f23ca43096a955d437f604355e49e1d9fac491f955fae46a150555bd91173091a016aeddc51399b8dd20bb6e8e3060da97180d79a8eea89562bbe4dd19f5c36686c3ab5de9cdce1a241b407c78b2a8886b3e316f5163ec082bb1de53ac1797a633587d9319f3626ce3b052107cd55a6c44b97e27aaf9bf5fe0d4475ae2090920865b0a0f32567351c4ac9859e57cdd8254a58d2dc5d67dd16b513a02954d7c99a9544ce5d8ea8a59a06321083690cf6007bb941cafccb17a3b81c96453964cb469e07e854388bbd2073cf9fdc51c9fcf58854417f49141efb66b0f98b36b89eccfb616992286ebaa8f325eb9ca85a45d8b1dfa7a18dd46516ad40d2f46365fac4cbb044624139bb5a0bb0ed062edfa0260ea03b9268f18a7d94d83d4411ee46896ef955aada3e31d29e83414ac0a64353b6498c8f1ef37d051b38291369f6f124913d3fef14af925ab93a34d58f569f3c4f12aa458c85b2b29249e4c868e0bce4791c7f7226bf050c23ad590f6231315f1c9a087b3041ce33f6971c4d5a20f85bb103edd586184e90a34dd5c9e3eb1fea74fe413c503c5d48c70e3fc1d210985644cedc30d01a7ca8fd1ae22e3dd6fa39dcbe1ee3def6a3097c8d9836db3b9ce1bcff91451bc46ef3000b5dc66b007ff2ace898a81631c5728c9de7710c41691332a268b18f0eec37ed7944ad0049936e9fe4df157a8eb324ef0d9954ee8da259c700b05bea37e4238c7be1ead4ca18ef228a15d9828476e899b77821f27512ad3ca27e2bdc769890e6addc2bc1ade2a5434421d627d978b72ce2fab1ee5769646881a2ecea9743ec88b48442806e946c27213bd7fe137d3979dcf477eee9ebec8fbe72fd9b6123c0523e83045dc88ef385d961cb4b48320e16350846ebb36accdcfe95cf541347dbdd7817e3e7d91b71a1dcb23ba7156484f90f789ba880b8019cb6a248f3db56e5cf7af156c6e84f58e8ffdc322b76dcd1b4ca02cb6fdd1d210807c34febac4c49ddb8257aa18ad782efca3406f34c6500fb65cbfec98077b50ef7a21e366e0fad97c6f6ca5d69b93639f7c608dae3e6b5c282ce130a8ef23908a626ef98e38bb9255ab6db1fdb48ca0d8f2d469123acbf6a1a83ca4f08d21bbf638ffe553fb4faa83993d9fbff7a9af18e21c74ffb720f41e02912d4507aee16acd64a34d2727bed087fa30c34202b34003330c15fbde12d5ba8e7a88b23501c6b837d01b97d78ea66e323579f0ffa9cbb40ebef25deb8a88f82a4e29441fdfcdb743bf98d1ac091677fd8fd3f172116697db4b2d1186303f68b71eae90dbcbee1cbd6eb49702dbf2de4f7f247bd071446fc2edeb68df92fb4436a3773ccc865587202f13083008f1dd964fc912c29bb0072f381b9d042d0fa058faba9d68886cd9fba2f41dd084ed13fbfe9e97afca35024025a83a6c6bbd798c8dae5bffdf486e88b6c32357b20b4b0fbea04c8cef7178a05d64bfcf836cd919216accd05b99ed4390b0016accac7e0fedacefb7ef4580ba6202aa241989fba902b5502bd4d6a3fb0c62c236f78969d395c67cf1ad2f5c250d8f8076189766d6e20ae9de72be45c2d68b5733a6d1f467db1b16a55da3245160188a217306298e5a86a4c4cad1ae72d6287c6b56684ab4452d54995322eb19c15724447b39c196e2056937fb2b956684c06bda117908000000f4524ddfab9c9fa5872f9fab3a5c3e1de343cb59744978ff286e037b2b8a122c6774291d713cd5b233ea9359764c528676e092840cfd716d995bdbae8dded68c71b8865490946df93c6c617b77ce830a1fb17b3459917ddb1797641ad2e5fa12a4ea8fdd0c914024913ea45237010d8f725c0d6ca6775a22285dab06c48432cee3faccfeda5c7756001121286c6ba8f52740a76a66632142fd84a088f5a0809d49b4cb513630a94acd1f5f246a997c85e90c7b0f9e55b3454a13cbc30518d3979789b76492afd411574ed54f0e9858693dd29b96a20aa55c6835a40c44c84d523054dcaded22718e48708958f977f94cdb360421878f67e97fe2140233f15924071c78fe5ea27b7f9e7eb0cc08fe19703df61906177cb8377c16d50ede70d62f1d8c0f8068323cd5eab2f6fba57ab3574c4742e06031d5a75f3d000b56051f43f987472a5f582a83f4c99a4366ac8c66673da6a312fe4804fb185f3fcbf6f3ffda91f5ebf6467ce6baa992a850765d37de2b3f16fd3ca44854993082e987ca1f520e0c149cdf92f727566c4c5ebe3ecf376c67a5fa7d51942784ff35236a0940a5f275a9ab8c0c5caf68421a14834edc9c29fd3adaedf4cca2802aaa33283ac811d97ef4affbba7315ce7fa5dd2783a067f223a4a8235fd67c23fa535efb4547202d171b51050d508081be9fb6467ea00f00000000000034c440f9f22c8f3d763d89666046951fe85f977a7ad816fc42037adbbec0352ed2b3454fa433e31a30159b9a3d5777944258f01dfe9d38f67af3e85dbdf23e5bb841401b40afeaa708f0a06a2efa2289f9ebda77c2a1390b887bf4b3dd90e418955d05431fd524b481b8b51c523fb1a3d0339bc3999c0a14d643a6ea69346f46a554bd25be3263a3c5ac0848b152d3eed833e7f2a6ce3b0d4100e49319120d4c2b520205fa2a344ab087bec0f73968768d0188007603a77428f12026cf3b296823f3138315ff0f95f3c62c060acb1a11850b46d361ab41b7ad241e45246b091ee2d0c1d444290ff6669a34f1fd0020795fe89d4b67bf07f16c88c8987e7f72480ad42109b43f37e4c753495661b0514553532364638ca8152782b99804b6f9da69fb2b5b7f93acad94ccbadf6e6d9547852088945d3d8c4c5702b1323c47fdd4fc77fcfd61c7ea8b26cfd0954be063cca429cb9915b8a937833ff4c1f2bd620b08dc00ddaab4fa5e13a5f4f2127f0b63b7140dd14b1dee95f178d2bc33cef7e820e609aaa20a733931625227529c714530574bb8cb38e6baef0cefe9a9e3277a4e1534f249abed7f06c8470ff3723c9140f5ed466ba7b79ab2ed2e616d72a560c8cc6cf6a64fb9e70b1d15b80f22cd86bbd38b5c46741e054204476f63651f3cc9bce975600abb3133e104fe0145383d0d320367df2dd202daeb7b51b4a1e4e7d36fd1c847965efd71430b8bcef773163b1e378e1381f05083304ea41ee8d37ecd988cc671270101ad4800706cf0387bd038a7164d1586ef5e8791cd6bc3a91bdcf35982d46d841acc8342544d557d369cb4a84589082bf9503d45659791e522bec6a5f61f740ca5540787dc4a6a9f567bb6c0b13d618e80b2b348adde16fc63b2052f381eab8c120f14ab623a4110030847db00ed2d19c0101991f82a8671738b68b6e0efaa8f771de3cb6c2165298df69383b775fafb7c249fd78ad2ee46390c1b905b3853680a80a1849952a10e69fa64d680cdeaf5a451408c5b5d64e0f244ee362f21f37c66b795d73647964d12e297f7f6b760ee4e4b46ef502a54483d3838674e1767eb93f91454f1dfb629e45ed71646f139b685cdac6c73afc20bf62b3b2dcd81d9adf65b4f485f2a2a2fa7e079d944739546462519521e523db10cbff9489d7ce84a78ed5fa80b2d5361f4829bfa4bef5c351c984cf58a5f227687eadceb8c0cdc51825a008f8bb8ebb549864b6fba1da22da5aa0a0161464695fad60e636e45091b6dee20498f33ff9f91c1ef927c90215cbf4f5711805eb13e0e65cf326627bcfdaf0bf07d5e9c53520b884411ed632f9f5169db46d674fd660637ab8ee1ca1aefee8ea4ab3b41e6fc18842a0a254db125243e4e996db939aab80b04d70fb22f3c1cf7edb1d18cb5af99be7dd4f01e2ee265109abc51845dcb3f5c8e8477fd7fa8fe41bd83809120428ea9dfef010005964d66ef96c1648516f1b0cacebd95ab20c2a2e2647c967c48c6c9b7977441a0dfeffba2beaec54a66f863c9ef3a4e2fc77928291753648b7abf3fc26128cb4eea246468b05cac113b3464546442e14d5aa760a3d7c481d238b2a5226bfe0dfd2dd5b2a9a5ad738c6a83e21312e0e11ea3daedaa7a6e527ec166337d24b083ccf97af580edb453dc1a7b841b7266ea143b294291ac5ed5dce7dac20d14bb6e53b64eec515515ef817611d22d3a306170d4f358f0b890411454e1bdf85ccc42589ba1a1d75289523e4aae1eb46328d0dac43539eab1d3aeca3db300e605c53cccf04d3688e5db58fe283b01745dc39baea5ff49db07deb7adeac2d3df45fa72f9fccc9d1947556fd8594faa393a2854691016eeea88e96272ee1156874b9ba78a4f71022e020000006f8db400e6b967be079684d3d80645125c488f5bc0a69a3d7e12bf187a41a8acc9b2f7a610798fb6e2e438b85a9012d6f6990c7b9a557b98d32753cc1786868dc864edd3f0edd8bbf48924fd09d0d7a2334bfcbb5786752765c8f33fc8cdab048b81607b1ba098ce44e6d99d8b1b08b5d19d177f6661c32031d475381c0c804c63d2b7ae9a2198c0d6114e7bdd0e01a4cbfc5c41e858d28f157efe5a52ffd6d70f2bef2066a2d65ec68ac1ea678588f1cf0c9eb030f34a2d99138c4a6a0f85edd8a382324c2c823a7bfc3db3e6822faa0ab1801361c1f23aff0fdb8fb27cdc1db4226d62c0101561e78b704854893c6bf0de79b45f87da7a8e4f65875842230d2bfa152e96fecbe4a7465fb400cb7790102d0a89f105e84a23173141245d641051b8d614d3be26423bc0d042990c62ea3b7392e7a8117e250348d3cf79be1529c8a764da382f019b5a750ab848ad03cf53921c8548318db7aaef2be3acce1a3d9a9715ebf6a5b53da18ef20b932d5926c3cb44c1a4e6ef83f2a84f8afa382d44ea35f17bc147ae1dc792784cfd9edeb9fe09f422000000000000007f29509a6b27ad0f6e21c977756a022979c8a47d983d42a913d0ea6ecfd8bc0aaf9fba62a36d542710161a088656dca539a940ec6dc79ab197eebb803988674d93c8d604a5bcdcdeba44c331c72e58ff9320f39031fe711bca2e0269b1028862c2d2a6c8871a0f92dddd30629eafc739165a070c61c12be11bf3d3cabb31decf449059c99fcc12a1684d8cb48e496df33920dc0a4fd225981c0f45b7220fd9d9189808e4bb39e5accc10fd7a8f3cf1335cb9dc31043a1e2eaf75e0ba500d5ca4497b2924725c0892033eb0ef944e2fc204e9f1e177862af3d59190e2335061a76d4d3bd922d9bb72553a339dd1672b61a91a0d0e23ddf6b08bd13cdf82451b5e8fd3842ba71eebdde40f8563124fba86c3c500f2ceb7246967f497f1dd3e5e42f14774a909199dbec4a169b8b3b6b25a95caa86f334084d38d71d93a395acb14c145298c503f7f494bb9867c564ad7e32aa1ca7bcfa2181dc712165247462db25192f7cba05cee92826c0561303bc473c9485a989793b8bfc2d0285dfbb13c11a426dff4e404435e2e47760d45b76f91b6c7bf04d4504c2502293fc7b49d24fda5b5fcfabf714087582d25a69ead80222da1d574d599b39a0c54ea7709dea1798b9eddea5cff504cc5ae40c561976c11a514f2ba359f6791830926fa13ac7f71e7614d0233305d3ec694b7d31ef320a44079af2614956ba31a66b959a11a3bfbdb683037d6ca42d0e9bbd2d83af74fd4a73dd6537e393b7026169d3c0e017a9e3392e03e8d76cc0f5f0caad4926b3169d61ea09b6cd45e5f62aba4ecab5b053d54cdf8ec5a69320094d520f702cbd218125f24e38a5934a2f5f4d74c12df05cc0c7b3c36a37db2863e918a8cbc496fa77bf6109008e20602636ddbd53aec45741384aafd05ebbac9d6ddd8aeb3d75775bae5124cbc7fb5db4ce9c8af96ad05035a8dcb64c0b02f0669c65b07f60c9cb81e99462ef8318d0ab65b97d6a9271042f4d46a5d8ee42b90783db78827d018b8d392ab3eab88e06b409878fcf74067b1a1fede92874741cfde10bdb444819fb991c36c9dd458c8794e0b4bd9e3f7cd383c485e6a60fa4238b318e14896934d97b4b7993472f4f9f246ca7523e5979c984fd16248b087cc3eafd706328a3ec47f88247357c4b759a2a1f0efde24f4129fb612f8c3742847b39996487653d6bcaf5862dc1bca501abed2d0b5a23c1d2a62eb968acb01763718b27acdb605034f259b096d0bedc7e6197bd58267cb1a8c61eeef9f19aaa6a0cab7cc268e8bec46db3fbcf4de3e8abe483bb01811087fec18bbe471628c3bc80194d3661efa6d9130a524089b07d8cdc30f77bbbcc7116d9bda8a4e6c01f047a4ee60a09ab23a63e1bcdeb3869043efe60eb3b7a6beb366d11e786002b2e3d36d44f91ed87152697e456f8ebd2b0e15df21a773b1ea876319fada12bd340314944f8d9d90ea26380cd83692a2f634c241bfa0868fd7ba52a841ad418c97e818195047d6d11ade0aafabe0d627a68721f61f3758c40dd14498521966380d59e0cb621953f0ea908fd297178899b2e60c210479a4a9ef9a8cf1d2a0c2e909043ce75d2f4fb766eb166b995b714cfb71bad7462525aa15d3fc8462808f8a0cee080502765bb9d1e9912a9ba937a94e48708b531d5ba71bdddb97fe77dfc7fcbcc0ddbef56c1f78feff399eabe15aac18b95f0c88a40dd5ebbdcb3ae45ba66dc990e9267c5290f7b357e1ae5e354c72edab117bcc394e4e8a91d99ca2f000420ff9cb32f87c663c6bb9692cab44c5c26212dad70a5426ce7eee219cdeb6bcb65d9b1f957c3e495a1198a60dcf446f4b192fa50d8c4426b8ba3ef0e06be2d04d7e142e825718828617220349408bd313df2ae8f860058b169b7ec3416f4c73fbfe509b442b8332a7049e7dd59b77d199079c187f7afb9b869ddd27864fb1bd0ba7e0ff67ceefc88f86362540a3020b9a90d07b9634358142a4b095f3becfc810b2ca5d78361403cf09e59c3b747953ff3535bb9f99bfd20da8a64082fd8552739f622e5d24d2fee438083d839402aac872f3d98f394d56bb4564c8caac19ec4873ffd2dae20a0bd8f0781fb92984755014695ba1f3a2e01ce4fa33206b53348afdacf34c2be54b56cd76a9948013538c7ed8fa60055e9b60aafde90f50b4e0cc9b3009f45823f674f23ddd6cb2439c479e20ab975139055bc8ad72315c3c466093be1e06ad27f7601b9cfbce93f172143c6523e239fed636ece9407caa423db7e64d6ee1163976dd7f19c333d02d788111de7243b7dd6dba0a1d9957e758acd4ad9ceba61d0be6c2be89b65d18f1a7f1cee89f9fee5dc682e12e7801822f99f4b2a920c36d0650604c545b76c9e5755032a8ea94d0fb21d513a138b5a1ad86acdf0097d5f289a9629c7a3e570a96383980c067a702cdc198712adade467e0baf05595108dff0b342d1b1fe243cf8145d024b46f8008c20ded574da9f49b49163591a6cd2fcad74caad0e95dc5714a15cfa88ff11a7d30028326575217447100f4c5c97f0cc25d79960e39b94f0ab60f986fa3c919865f8e231bd77c2c759b166d8874728e9e131b9b3aa5cd166a9ae330ca439ea3ffb7581f1f4389ebf9334810d07981c5ea03b42ef5615ebc170e9a0c9c02478353c08f4cca0b6a2e98de3d51d3174ee8101387f52b12b699b57a4c50452a978eb43c3a101ae69213fe93f2606fc6bf7b771e3dea5e57895cbc23ce174a1ceec151703a226749176d42d72468d48f88012d18e0f2640c3018e08c8a2df197f273596ca5d48cf976b7ee051189b8081f086613258f267a5bcf30509c6285fc37c0d045c29c471b04f189cb3c69914ba0591cfba1c71ed909362aa8840be28e624e3a6b8393170e809231e10820326ecd03e23e11dfe29ae47adddf3d4f858d51f9ca33ee85a5077a1463caac5d034293bcacafe15b3e6cac7247a33ace000f164cf8a5243f89b89b8b11220b35a07679e7af900e540d965669fa23ca0d0d3b47d9b2cb0fa31a90c69e686d582f6c9c8c628875c002cc5e288a5e1b738842258569fe2a4de3dfd7dfd13b1fd7c8c29dfa4f58ea8d0c7e56222fb9b0d29c68c7cb8ba3fd79b04a14366f83bbef2531311a3f385bdad440ee85e2dd947f32a349f9d1eb750ceb0f7211980b0b970c7b81f16935d4d3e764869edae7a45cb45a0445e8c8ec27fac4edd6ea269563b6f12f394782fd970cbfc2752fc9f4892c731eaac8e3a315797b0449b2a9ae3d4bd25d0e8f1a43e29630b4e2e882ece16dc542fcbc1f165b2cefc4deb40c23bf61f3e51d5acbc81135d35f0c055d8a003e03c0625e83f95ab2349c222dbc6d62d34e0119938d0b384a86dbdfd00c1226d0ff1f834c3529361c9db6d5612009bc39a0d654de2940ee2b8a96bd3c297ecad0a3df1b2a85a400fab889648315415c4ddbd0c9752146496d3769b3c9148330a8324453d4431d19727ddd12493003bd7eaeb05b2f5c333a33cba442df3dc11dc23c80292a52b040f5e707784b5d29f4c46d3ac8ae0e159517c1a196103bfd6bf6d32afd687773bf224ef00c844f1f36365e7220c57a97aa0904219a0ab84def7095b280b971b554e0142d154c5422c918b4744bb3b9e61721a983f4d63cc79fd88295b67b24fec0ec1ce8a2e80a1ca4e97cdda6d2df44a571a74b941f049886355e2bb5ed908e646850d85095d099e3a189a4298f4a25c0798b4dc25cd630695561a04f43ff009e4f49177e01c11442593fbc23657a46f918a77231b3405d4931b6f2c01f0207d6933304bb2106c5dbce23378bc7ca66ff4f57550bbc36500f6c4ce21dc22a4575c315d2f4c4fb1fb8e12ebc2c037451611718d4371c6d0a00bab9f68a1dea6bd654d49232ab3c85e07a6ec8e2b19012c31d540f81d666d0a236e9e2a4b6d85c0974efa172d13003b63e94cd7a5652f4703d88712fb63521abaf0e2a0dd4b2e457e42d4a811db6a77310b1aff1b9055c9995ce9a0fe2e0c3657c52ae562738b6c12693cb2bffd1d3c41b6a73feec4008e63562bbc38a8c56c10efdb2b67fcef74f6a6f7e35baa4685f7764977348db378b242ac5f81a8a69c666c0247d1d326faf3b7dd4f07bfb16c08bb2703f6997e1a6cf042c0ff0fea0f00000000000000573e8dd86263de6ffcf3d26d45d8be7234da9f24f1a08ab16f3df9e85861fb1251933eb8982b81999234d6d56759acd528ffcaee5a300e711e0b7f0b208612caa6dfeddfe4557161933a1910ec4b35ed89760fb91de6c19f766845979e36855a11d7ba6b892a717b32e8e17b367c5fd11b940de937a975470bbf872f8a1cd637c76fe0a9aba5fb9e00", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0xfffffffffffffffe, 0x9, {{0x4, 0x96, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$lock(r7, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) (async)
syz_usb_connect(0x3, 0x32, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202"], 0x0)

3.159926175s ago: executing program 3 (id=59):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0xfffffffa)
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_type(r2, 0x0, 0x2, 0x0)
write$cgroup_type(r3, 0x0, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x737c, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x3, 0x28, 0x29, 0x0, @remote, @loopback}}}})
socket$inet(0x2, 0x5, 0x80)

3.119864253s ago: executing program 3 (id=60):
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x3}}, 0x10)
syz_usb_connect(0x2, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0xc6, 0x50, 0xa5, 0x20, 0xdf6, 0x4a, 0x3671, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x57, 0x2, 0xa0, 0xe0, "", [{{0x9, 0x4, 0x98, 0x36, 0x0, 0x2, 0x6, 0x0, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xce}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xd, 0x9, 0x8}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x5, 0xb1}, {0x6, 0x24, 0x1a, 0x7, 0x4a}}]}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0})

3.003343307s ago: executing program 1 (id=62):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)
writev(r0, &(0x7f0000001480)=[{&(0x7f0000000080)="0dd0e01841efce0fe00ef60b4c897e40f1cde3221f9fe16504113752657ccfdfbd75030ec0441ff1606472cef78003a744334c2bd01f3d3f82c26d908f425445599342ca8313ef69c877a2b5de320c64f1eb0300af7e68762ebf2a7e8bf096bb597564e5e3f8aa15b8632989568889681c987bf597cd09f01f99b1a3ff363468ebb0bcd5c40d082337ca51f71a880e4309c5409e91d77c9a2aa0e2de370b2ac4ecb9ab50f21d36811bc1235bff663806802e2ca1916a177b20938691bf0d77abbbe0b22e749073b281030dbf8e72fd0a1a76cf", 0xd3}, {&(0x7f0000000180)="e49a77b15e697d17aedce670d26e5b67e92dd589d4e861bc08496e722be4e624cecb523bd71872c0eef9603175e56609eb218371092a3462b12cd17a22b00d2db053e0fa5c27ac188f5123c8c4012dfde85f29ebe89123542f35c40a92c58ec5cce60ff4393a00af766cb17443015fe0deda0839fe9ef2c859bd42e099e68dfe43942ea6563b3bebf93d42ec7a1fd5606bdbe0f4", 0x94}, {&(0x7f0000000240)="c6aea4f31b09baf16592c67a9cc7036aeefa2d778a95dd7cff98fa0bb6b586baab450c9556dff90b5a507086d4b4aec14814339ff05487917713e06f76493ed6aeb4a5d71ba494697b399c820f2f38e15cdafda08fcc77f5a48c0258843a6f1ebc8160f31919f0d69448132a2db76580916537e7e6cc05d74892a3b0842b4d5566d855bf510cd0827140fb4663dbeb69472c27ee9358689683f6d253b57ffa96e36f0e5a171f6a325d998fb61810647f2a2ce6f26348b6e5eb177915b765c514a18d2793b148b6878e99398dfeaf0b84358da7261ef9ba0d20b4012db736bb51fe63993f6f009c42d933e6dd", 0xec}, {&(0x7f0000000340)="27eb9b678e22f9dbd65b0d24a225b1a3c5ba2ceb0a260e9abeb7c56fed1746552fbba66b1af729c9fe1056f22aed6bbf846e963e61c4b665fcb93e1bbd784645c80ff09e9fd821630cfac418e8288a93e0cdad061ea2f10306f9ed41a09a", 0x5e}, {&(0x7f00000003c0)="6c6a0e1b3b00888d1390f100ab9985c16ac4f6951c856345ff95ab9c09283aa653246d11afeedefddfb87fdd7c25d2", 0x2f}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="65ffc7e63e15e018a2c3e7b7f4693f4862f48166b948ef57da2d702854ded30b09305bbd352a6697551928eba1c2f186c48f0c67d4f52c692d67740496ff0838a118bea73ac276da89d393c921cba6a97bffdb8453981c43e9c8f810329f", 0x5e}], 0x7)
sync_file_range(r0, 0xffff, 0x2, 0x1)
r1 = dup(r0)
ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000001500)={0x7, 0x0, [{0x64a, 0x0, 0x8}, {0x258, 0x0, 0x8000}, {0x205, 0x0, 0x3}, {0x210, 0x0, 0x5}, {0xa49, 0x0, 0xc}, {0x9d2, 0x0, 0xffffffffffffffff}, {0x20d, 0x0, 0x400}]})
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000001580)={0x9, 0x4, 0x4, 0x6a6f}, 0x10)
r2 = accept$unix(r1, &(0x7f00000015c0), &(0x7f0000001640)=0x6e)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000001680)={{r1}, 0x0, 0x7, 0x17a0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000016c0), 0x101100, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x27)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/193})
ioctl(r0, 0x0, &(0x7f0000001880)="8a809539731ce8653f16661926c3473cb0e5662a9b913b1446ae6c1d951a812d3f0e74852d7ba03cf97f9e4c8d19b487f3e6c49704f93e24b179f25aee66be37fa1f253210f9902ee222e9dff912c8adc447e0b9a01155cac5bb052fda4b6bc455f764cb38dbe6c8d46f370b7d2eaeddc6ddce73e7f6d0eb599b182aa198e0bc2b3834e676126cbdbcf38850d7b95570ccb1aa45c31678cc9685e921933abe95ca556d163e3c")
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000001940)={0xfffffff8, 0x0, 0x195b, 0xb, 0x371, 0x8001})
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001980)='/dev/kvm\x00', 0x0, r5)
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000019c0)={0x0, 0x5, {0x0, @usage=0x200, <r6=>0x0, 0x0, 0x7b, 0x8, 0x9, 0x7fffffffffffffff, 0x80, @usage=0x10, 0x401, 0x1, [0xbad, 0x4, 0x9d3, 0x2, 0x6, 0x40]}, {0x9, @usage=0x3, <r7=>0x0, 0xffff, 0x1, 0x9, 0xffffffffffffffff, 0x9, 0x8, @struct={0x7, 0xf}, 0x3, 0x319, [0x4, 0x8, 0x1, 0x2b7e, 0x8, 0x8000]}, {0x2, @struct={0x2, 0x5}, 0x0, 0x6, 0x3, 0x10000, 0x1, 0x3000000000, 0xa2, @usage=0x5, 0x3ff, 0xa0, [0x3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x28]}, {0xff, 0x4, 0x1e2884e4}})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000001dc0)={{r0}, 0x0, 0x4, @unused=[0x7, 0xe83, 0x1, 0xffffffffffffffff], @devid=r6})
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000002dc0), &(0x7f0000002e00)=0xc)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000002e40)=0x6)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000002e80)={0xfff, 0x5, 0x9, 0x7ff, 0x14, "056b54db42fec338986f8db4932ff8a766ae23"})
connect$inet(r1, &(0x7f0000002ec0)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000002fc0)={'broute\x00', 0x0, 0x3, 0x39, [0x1, 0x9, 0x9, 0x7, 0x84, 0xf965], 0x5, &(0x7f0000002f00)=[{}, {}, {}, {}, {}], &(0x7f0000002f80)=""/57}, &(0x7f0000003040)=0x78)
setreuid(0x0, 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000030c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000031c0)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003180)={&(0x7f0000003100)={0x68, r8, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xffff, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4018011}, 0x8000)
r9 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000003200)={<r10=>r6, 0xf5, 0x1, [0x80000000, 0x9, 0x4, 0x6, 0x1], [0x7, 0x9, 0x101, 0xdb01, 0x2, 0x5, 0x8, 0x1, 0x4, 0x4, 0x3, 0x7, 0x3, 0x2, 0x6, 0x97d, 0x0, 0x1, 0x68, 0xa674, 0x3, 0x0, 0x1, 0x10000, 0x3, 0x6, 0x1, 0x8000000000000000, 0x8, 0x8, 0x4, 0x2cbb, 0x5, 0x0, 0x9, 0x5, 0x1beedfab, 0xfff, 0x9, 0x5, 0x100000001, 0x0, 0x224764e3, 0x4, 0xffffffffffffff65, 0x7, 0xede, 0x5, 0x1, 0x4ce63fbc, 0x2, 0xfffffffffffffffb, 0x3, 0x84fafc0, 0x2, 0x8, 0x8ed, 0x6, 0xffff, 0x2, 0x50, 0x1000, 0x1, 0x8000000000000000, 0x6, 0x9, 0xa97, 0x69, 0x3ff, 0xffff, 0xffffffff, 0x7, 0x9, 0x7, 0x6000000, 0x5, 0x9, 0x9, 0x77f4, 0x7f, 0xea5, 0x80000001, 0x7, 0x4, 0x1, 0xb3, 0x4, 0xffff, 0x5, 0x6, 0xd049, 0x6, 0x6, 0x7ff, 0x5, 0x400, 0x97a, 0x4, 0x7, 0x7ff, 0x1, 0x1, 0x7fffffff00000000, 0x0, 0x3, 0x8, 0x7, 0x5, 0x6, 0xffffffffffffe626, 0x9, 0x3, 0x401, 0x0, 0xd9, 0x4, 0x8, 0x7, 0x1ff, 0x4, 0x4]})
ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000003640)={0x5, 0x4, {0x6, @struct={0x3, 0xff}, r7, 0x8000000000000000, 0x80000000, 0x1c52, 0x7f, 0x6, 0x2, @usage=0x10001, 0x8, 0x3, [0x3, 0x5, 0x0, 0x6, 0xc0c]}, {0x314e2cef, @struct={0x80000000, 0x7}, r7, 0x6, 0x7, 0xffff, 0x5, 0x8, 0x0, @usage=0x9, 0xffff, 0x5, [0x9, 0x9, 0x2, 0x101, 0x1, 0x4c]}, {0x7, @usage=0xb, r10, 0x4f, 0x1, 0x2886, 0x2, 0x4, 0x0, @usage=0x8, 0x8, 0xf22c, [0x6, 0x8000000000000001, 0x2, 0x7, 0xfffffffffffffff8, 0xb41]}, {0x200000000000000, 0x8000000000000000, 0x3}})
r11 = open(&(0x7f0000003a40)='./file0\x00', 0x80000, 0x0)
syz_clone3(&(0x7f0000004c00)={0x4000, &(0x7f0000003a80), &(0x7f0000003ac0), &(0x7f0000003b00), {0x1b}, 0x0, 0x0, &(0x7f0000003b40)=""/4096, &(0x7f0000004bc0)=[0x0, 0x0], 0x2, {r11}}, 0x58)

2.964461564s ago: executing program 1 (id=63):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=<r5=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
mprotect(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x0)
syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x14df, 0x80, 0x40003, 0xaf}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x8, 0x0, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x920b, 0x10000, 0xfffffffe, 0x30d, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x40, 0x1, 0x35e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x80, 0x1, 0x38e, 0x0, r0}}], 0x4, &(0x7f0000000540)={0x2e, 0x19, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x2a, 0x0, 0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioprio_set$pid(0x2, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x41000004, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x14, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2.839272s ago: executing program 0 (id=64):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0x17, 0x2, "25b9"}, 0x0, 0x0, 0x0, 0x0})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0x10, 0x2, "7f87"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0x24, 0x6, {0x6, 0xe, "9d20fb11"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0x8, 0xee, "f4a4b3135854d70937d7a1ff25467f99ffbfe470317d48d85644d371f981eb98f7ba8c8efc0cba330dab0e3e4ea30489060ad971a8c688618f5d9c818efbd2fda8a6b59bb78fda01da3f912705582dcff83bcceaa6a7b0cd24d38ba31405042fa7c5cf47e0fa6d24b8c8e134a9f6bd0cc4efc76bf55bc75ff6e8d501b8d7a127c6bc6f53a990ca753d9303850f499fe9da97623cd7ba9a3f1c2ab3d8bbb3e74ae66ecc08a740ff7255f0564dfb1cb309cf194c605554e41f147577ae92a79fc60fc1bbda0d31343013c7a3da39a544a7a48c9c1216e6a5ef14a8d2bad2313a1d71c64756c86aea6b8c647195b491"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "36cbfb1fb88f6ebb52dfd63cea447ed82f48b93d99067c8e50304bc0f43db632f3f14192bc97e402fd258cb3b192dd"}})

1.873531094s ago: executing program 3 (id=65):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
pipe2$9p(&(0x7f0000000000)={<r1=>0x0, <r2=>0x0}, 0x0) (async)
pipe2$9p(&(0x7f0000000010)={0x0, <r3=>0x0}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x16c)
mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '#l%}[&(&$('}}, {@cache_loose}]}}) (async)
write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) (async)
write$P9_RGETATTR(r2, &(0x7f00000002c0)={0xa0, 0x19, 0x0, {0x23d6, {0x80}, 0x41ed, 0xee00, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x800, 0x1000, 0x8, 0x1000, 0x40000f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x700, 0xe4, 0x0, 0x10}}, 0xa0) (async)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4c20, @multicast1}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0xf, 0x1, 0x7, 0xfffff801}, {0x2, 0x12, 0x2, 0x7ff}]}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)

1.79204015s ago: executing program 3 (id=66):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000400)="b9800000c00f3235000800000f30b8010000000f01c1660f306626f226660f01380f689c9b0500000066baf80cb890518484ef66bafc0cb093ee0f01c3c4a269473066ba4300ed460faef4", 0x4b}], 0x1, 0x37, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.787779901s ago: executing program 3 (id=67):
socket(0x10, 0x3, 0x0)
r0 = syz_clone(0x42000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x2, &(0x7f0000000000)={0x0, 0xf, 0x1, @thr={0x0, 0x0}}, 0x0)
ptrace(0x10, r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="1015053da9dddd249ad99df72c7464f9", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000380))
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,use'])
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24e, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x1563, 0x10000006, 0x4, 0x4002dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x104002, 0xc3, 0x5d4, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x12, 0x8, 0x3, 0x3fe, 0x9, 0x405, 0x9e, 0xb69b, 0x9, 0xf9a2, 0x3, 0xff, 0x4, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x207ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x7], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffd, 0x4002004, 0x1c, 0x80000000, 0x5, 0xfffffffe, 0x80000003, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0x2, 0x18e, 0xc000000, 0x2, 0xc], [0x2, 0xfffffffe, 0x409, 0xc, 0x80000001, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x4, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x0, 0x200000d, 0x3, 0x10010, 0x7, 0x401, 0x1, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0x10a772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1009, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x7, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x80000001, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x8, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
write(0xffffffffffffffff, &(0x7f0000000400)="bb830db013311e70f4", 0x9)
pipe2(&(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x800)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x6, @mcast2}}}, 0x108)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xe6, 0x40000000000180, 0x3ff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000007, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x54, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)

1.764349266s ago: executing program 3 (id=68):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffff9, 0x12f382) (async)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0442, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r4=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f00000004c0)) (async)
io_setup(0x82, &(0x7f0000000240)) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_connect$midi(0x2, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1007}}]}) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_ep_write(r2, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") (async)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r5, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffff7ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x98, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0xf, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x3, 0x2, 0xffffffff, 0x40000000, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x3, 0x0, 0x0, 0x8, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x80000000, 0x9, 0x0, 0x0, 0x7, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r5, 0x5501)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000000)={0x2, {0xb, 0x6, 0x8, 0xfffffbff, 0x74, 0x5}}) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002de8) (async)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x1, 0x4, 0x14, "28f5c9bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07b159000000000000c41f00", [0x76, 0xb]})

1.636067921s ago: executing program 1 (id=69):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0)
write$cgroup_type(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
renameat2(r4, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r4, &(0x7f0000000240), 0x12)

1.538034211s ago: executing program 1 (id=70):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="12011003000000081e04003040000102030109026f0003010700070904000000010100000a24010600190002010209240301fd020105db04240505"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]})

274.612506ms ago: executing program 1 (id=71):
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x13, 0x6, 0x103, 0xff, "10120dfe0ef7f0220000ff490a0080002a0008"})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="67f2e00d64360fae8197530f00cf64f75dd72e3edb3b0f38f173882e64640f01c5baf80c66b866878a8566ef45fbfc83830fc72ff30fc7b30000", 0x3a}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000040)={0x10000, 0x7, 0x8, 0x45, 0x15, "c87b82712edc0ad65274252139763962717d19"})
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r6, 0x1000002, 0x13, r5, 0x0)
mmap$KVM_VCPU(&(0x7f0000a59000/0x4000)=nil, r6, 0x2000000, 0x4042010, r2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

203.90133ms ago: executing program 2 (id=72):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90)
write$cgroup_int(r4, &(0x7f0000000300)=0x4078c1d5, 0x12)
preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000680)=""/122, 0x7a}], 0x1, 0x3, 0x20)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="0f01c90f21c26744e68c65490fc71a450f01c92ef3400fae36c4a27d457a00430f8c3100000066470f3a20c900c4217d703d1600000029", 0x37}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

138.358132ms ago: executing program 2 (id=73):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
sendmmsg$inet(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001680)="a905000000017464000100000000000000e5c064", 0x14}, {&(0x7f0000000100)="ca65abd05ca5e7f705719952667e2a5019deb07a68a250e9", 0x18}], 0x2}}], 0x1, 0x24040000) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x280, 0x0, 0x40000000}]})
ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000200)={0x100000000000000, 0x1ffe, 0x80, 0x0, 0x10}) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async)
futex_waitv(&(0x7f0000001480)=[{0xe0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
rt_sigqueueinfo(0x0, 0x40, &(0x7f0000000080)={0x29, 0x1, 0x80}) (async)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x3, 0x0, 0x0, 0x0, 0xdddd0000})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x10, 0xfffffffc, 0x0, 0x0, "810000cc2b000000000000facc1fff00ffffff"}) (async)
r8 = syz_open_pts(r7, 0x141601) (async)
ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000180)={0x7fffffff, 0xd, 0x0, 0x2, 0xff, "f5a90f2c505900", 0x80, 0x78d1})
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65) (async)
write(r8, &(0x7f0000000000)="d5", 0xfffffedf)

101.113751ms ago: executing program 1 (id=74):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080))
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000000c0)={0x2e}, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
userfaultfd(0x80001)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="ae000000000000007f004e2200000009ff020000000000000000000000000001ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000574182f2042e98626fb54734b276524c77f8f4d94d82191e0b7c3d88e4cd8b15c078a116e7eb35e74bc9413837b2589d7afabd76831e01edac55134dc313548ef9145ef2f172ca07938e17fdc142eef20b7abf3b6bdfd2664e713c02fea11a85431f3c20a627344a7733306f3bd4"], 0x90)
add_key$fscrypt_v1(&(0x7f0000002280), &(0x7f00000022c0)={'fscrypt:', @desc2}, &(0x7f0000002300)={0x0, "2a4cea898139e0e0c019a74d3ea26dd02e4c241b97774cc682857eed746418339edb88181d7a65049884e401847aef386af7be95cb8e40e633ea34c59d08c962", 0x27}, 0x48, 0xffffffffffffffff)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000010, 0x0, 0x400006}]})

0s ago: executing program 2 (id=75):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, 0x0, &(0x7f00000001c0))
syz_usb_connect$uac1(0x3, 0x87, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1509, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x7a, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x4, 0xfc, 0x2, "715eb9483414"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x9, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x1, 0x81, {0x7, 0x25, 0x1, 0xe, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xc, 0xe9, {0x7, 0x25, 0x1, 0x0, 0x8, 0x3}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts.
[   30.084394][   T36] audit: type=1400 audit(1790671908.220:64): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   30.087829][  T286] cgroup: Unknown subsys name 'net'
[   30.107167][   T36] audit: type=1400 audit(1790671908.230:65): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.134500][   T36] audit: type=1400 audit(1790671908.260:66): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.135110][  T286] cgroup: Unknown subsys name 'devices'
[   30.257242][  T286] cgroup: Unknown subsys name 'hugetlb'
[   30.262871][  T286] cgroup: Unknown subsys name 'rlimit'
[   30.379262][   T36] audit: type=1400 audit(1790671908.520:67): avc:  denied  { setattr } for  pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   30.402548][   T36] audit: type=1400 audit(1790671908.520:68): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   30.427518][   T36] audit: type=1400 audit(1790671908.520:69): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   30.451570][  T288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   30.460368][   T36] audit: type=1400 audit(1790671908.600:70): avc:  denied  { relabelto } for  pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.485819][   T36] audit: type=1400 audit(1790671908.600:71): avc:  denied  { write } for  pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.526510][   T36] audit: type=1400 audit(1790671908.670:72): avc:  denied  { read } for  pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.552144][   T36] audit: type=1400 audit(1790671908.670:73): avc:  denied  { open } for  pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.552762][  T286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   31.919048][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.926213][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.933312][  T293] bridge_slave_0: entered allmulticast mode
[   31.939833][  T293] bridge_slave_0: entered promiscuous mode
[   31.946587][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.953642][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.960753][  T293] bridge_slave_1: entered allmulticast mode
[   31.967126][  T293] bridge_slave_1: entered promiscuous mode
[   32.008585][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.015680][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.022741][  T296] bridge_slave_0: entered allmulticast mode
[   32.029104][  T296] bridge_slave_0: entered promiscuous mode
[   32.038395][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.045469][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.052539][  T296] bridge_slave_1: entered allmulticast mode
[   32.058934][  T296] bridge_slave_1: entered promiscuous mode
[   32.086368][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.093461][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.100661][  T294] bridge_slave_0: entered allmulticast mode
[   32.107056][  T294] bridge_slave_0: entered promiscuous mode
[   32.114718][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.121826][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.128997][  T294] bridge_slave_1: entered allmulticast mode
[   32.135320][  T294] bridge_slave_1: entered promiscuous mode
[   32.207839][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.214908][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.222058][  T295] bridge_slave_0: entered allmulticast mode
[   32.228365][  T295] bridge_slave_0: entered promiscuous mode
[   32.234877][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.241959][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.249054][  T295] bridge_slave_1: entered allmulticast mode
[   32.255379][  T295] bridge_slave_1: entered promiscuous mode
[   32.330795][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.337917][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.345343][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.352410][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.370403][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.377524][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.384821][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.391914][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.419522][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.426699][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.434004][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.441081][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.472773][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.480580][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.487930][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.495715][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.502978][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.510433][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.533868][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.540962][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.556791][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.563839][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.603861][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.610963][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.622039][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.629125][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.636808][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.643878][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.660052][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.667120][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.686871][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.693932][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.706035][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.713111][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.726681][  T293] veth0_vlan: entered promiscuous mode
[   32.748609][  T293] veth1_macvtap: entered promiscuous mode
[   32.764525][  T294] veth0_vlan: entered promiscuous mode
[   32.789410][  T294] veth1_macvtap: entered promiscuous mode
[   32.802619][  T296] veth0_vlan: entered promiscuous mode
[   32.827192][  T295] veth0_vlan: entered promiscuous mode
[   32.840034][  T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.858066][  T296] veth1_macvtap: entered promiscuous mode
[   32.878210][  T295] veth1_macvtap: entered promiscuous mode
[   32.907287][  T313] batadv_slave_1: entered promiscuous mode
[   32.936160][  T316] Zero length message leads to an empty skb
[   32.960393][  T322] overlayfs: failed to resolve './bus': -2
[   32.990137][  T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   33.018959][  T330] cgroup: subsys name conflicts with all
[   33.040109][  T329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=329 comm=syz.3.4
[   33.166424][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   33.235094][   T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   33.325297][   T10] usb 1-1: Using ep0 maxpacket: 16
[   33.336879][   T10] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[   33.346652][   T10] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[   33.365237][   T10] usb 1-1: config 0 has no interface number 0
[   33.373149][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   33.382642][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.391733][   T10] usb 1-1: Product: syz
[   33.396852][   T10] usb 1-1: Manufacturer: syz
[   33.403365][   T10] usb 1-1: SerialNumber: syz
[   33.405866][   T65] usb 2-1: Using ep0 maxpacket: 32
[   33.412223][   T10] usb 1-1: config 0 descriptor??
[   33.422135][   T65] usb 2-1: unable to get BOS descriptor or descriptor too short
[   33.426945][   T10] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[   33.436122][   T65] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   33.436179][   T65] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   33.436201][   T65] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   33.440246][   T65] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   33.463104][   T10] usb 1-1: No valid video chain found.
[   33.489722][   T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.498039][  T362] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[   33.505261][   T65] usb 2-1: Product: syz
[   33.510190][   T65] usb 2-1: Manufacturer: syz
[   33.514810][   T65] usb 2-1: SerialNumber: syz
[   33.520685][  T362] FAULT_INJECTION: forcing a failure.
[   33.520685][  T362] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   33.542542][  T362] CPU: 0 UID: 0 PID: 362 Comm: syz.3.13 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534
[   33.542578][  T362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   33.542602][  T362] Call Trace:
[   33.542611][  T362]  <TASK>
[   33.542620][  T362]  __dump_stack+0x21/0x30
[   33.542684][  T362]  dump_stack_lvl+0x140/0x1c0
[   33.542719][  T362]  ? __cfi_dump_stack_lvl+0x10/0x10
[   33.542757][  T362]  dump_stack+0x19/0x20
[   33.542790][  T362]  should_fail_ex+0x3c2/0x510
[   33.542820][  T362]  should_fail_alloc_page+0xec/0x110
[   33.542854][  T362]  __alloc_pages_noprof+0x1c0/0x7e0
[   33.542891][  T362]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   33.542928][  T362]  ? __alloc_pages_noprof+0x35a/0x7e0
[   33.542967][  T362]  pte_alloc_one+0x92/0x530
[   33.542992][  T362]  ? __cfi_pte_alloc_one+0x10/0x10
[   33.543017][  T362]  ? _raw_spin_unlock+0x45/0x60
[   33.543040][  T362]  ? __pmd_alloc+0x5a6/0x9a0
[   33.543070][  T362]  __pte_alloc+0x79/0x440
[   33.543093][  T362]  ? __cfi___pte_alloc+0x10/0x10
[   33.543118][  T362]  copy_page_range+0x3347/0x3990
[   33.543143][  T362]  ? __cfi_mas_destroy+0x10/0x10
[   33.543173][  T362]  ? kasan_save_track+0x4f/0x80
[   33.543200][  T362]  ? kasan_save_track+0x3e/0x80
[   33.543228][  T362]  ? __kasan_slab_alloc+0x73/0x90
[   33.543255][  T362]  ? anon_vma_fork+0x1fc/0x610
[   33.543279][  T362]  ? copy_process+0x12a4/0x3350
[   33.543309][  T362]  ? kernel_clone+0x233/0x810
[   33.543345][  T362]  ? __cfi_copy_page_range+0x10/0x10
[   33.543370][  T362]  ? mas_store+0x897/0xcc0
[   33.543397][  T362]  ? __vma_enter_locked+0x24d/0x3c0
[   33.543427][  T362]  ? __cfi_mas_store+0x10/0x10
[   33.543457][  T362]  ? anon_vma_fork+0x45b/0x610
[   33.543484][  T362]  copy_mm+0x10cd/0x1da0
[   33.543518][  T362]  ? copy_signal+0x6a0/0x6a0
[   33.543547][  T362]  ? _raw_spin_lock+0x92/0x120
[   33.543570][  T362]  ? __asan_memset+0x39/0x50
[   33.543594][  T362]  ? __init_rwsem+0x110/0x1f0
[   33.543629][  T362]  ? copy_signal+0x4d5/0x6a0
[   33.543659][  T362]  copy_process+0x12a4/0x3350
[   33.543704][  T362]  ? __cfi_copy_process+0x10/0x10
[   33.543737][  T362]  kernel_clone+0x233/0x810
[   33.543769][  T362]  ? __cfi_kernel_clone+0x10/0x10
[   33.543800][  T362]  ? do_futex+0x32a/0x510
[   33.543835][  T362]  __x64_sys_clone+0x1b7/0x230
[   33.543868][  T362]  ? __cfi___x64_sys_clone+0x10/0x10
[   33.543914][  T362]  ? __kasan_check_write+0x18/0x20
[   33.543938][  T362]  ? fpregs_restore_userregs+0x11c/0x260
[   33.543967][  T362]  ? switch_fpu_return+0x12/0x20
[   33.543996][  T362]  x64_sys_call+0x2b3c/0x2ee0
[   33.544018][  T362]  do_syscall_64+0x57/0xf0
[   33.544040][  T362]  ? clear_bhb_loop+0x50/0xa0
[   33.544071][  T362]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   33.544100][  T362] RIP: 0033:0x7f8e2af9e159
[   33.544128][  T362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   33.544148][  T362] RSP: 002b:00007f8e2bf21fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[   33.544182][  T362] RAX: ffffffffffffffda RBX: 00007f8e2b225fa0 RCX: 00007f8e2af9e159
[   33.544200][  T362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002080
[   33.544215][  T362] RBP: 00007f8e2b03506b R08: 0000000000000000 R09: 0000000000000000
[   33.544229][  T362] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[   33.544243][  T362] R13: 00007f8e2b226038 R14: 00007f8e2b225fa0 R15: 00007ffc8d03c328
[   33.544264][  T362]  </TASK>
[   33.856644][  T367] =======================================================
[   33.856644][  T367] WARNING: The mand mount option has been deprecated and
[   33.856644][  T367]          and is ignored by this kernel. Remove the mand
[   33.856644][  T367]          option from the mount to silence this warning.
[   33.856644][  T367] =======================================================
[   33.917917][  T315] usb 1-1: USB disconnect, device number 2
[   33.918754][  T311] batadv_slave_1: left promiscuous mode
[   34.345128][   T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   34.480516][  T388] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   34.518544][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   34.535760][   T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   34.555450][   T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   34.575130][   T31] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   34.593044][   T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   34.612500][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.625048][   T31] usb 3-1: Product: syz
[   34.629281][   T31] usb 3-1: Manufacturer: syz
[   34.640400][   T31] usb 3-1: SerialNumber: syz
[   34.671245][  T377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   34.785109][  T315] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   34.936180][  T315] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   34.947755][  T315] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[   34.953446][   T31] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[   34.961890][  T315] usb 1-1: config 0 interface 0 has no altsetting 0
[   34.974342][  T315] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[   34.976173][   T31] cdc_ncm 3-1:1.0: bind() failure
[   34.984107][  T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.992692][   T31] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   35.000558][  T315] usb 1-1: config 0 descriptor??
[   35.009053][   T31] cdc_ncm 3-1:1.1: bind() failure
[   35.017095][   T31] usb 3-1: USB disconnect, device number 2
[   35.522452][   T36] kauditd_printk_skb: 73 callbacks suppressed
[   35.522471][   T36] audit: type=1400 audit(1790671913.660:147): avc:  denied  { mount } for  pid=402 comm="syz.3.23" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   35.551255][   T36] audit: type=1400 audit(1790671913.660:148): avc:  denied  { read write } for  pid=402 comm="syz.3.23" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[   35.581872][   T36] audit: type=1400 audit(1790671913.660:149): avc:  denied  { open } for  pid=402 comm="syz.3.23" path="/10/dev/cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[   35.606664][   T36] audit: type=1400 audit(1790671913.680:150): avc:  denied  { unmount } for  pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   35.627062][   T36] audit: type=1400 audit(1790671913.750:151): avc:  denied  { read } for  pid=404 comm="syz.3.24" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   35.652414][   T36] audit: type=1400 audit(1790671913.750:152): avc:  denied  { open } for  pid=404 comm="syz.3.24" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   35.676367][   T36] audit: type=1400 audit(1790671913.770:153): avc:  denied  { map } for  pid=404 comm="syz.3.24" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   35.703734][   T36] audit: type=1400 audit(1790671913.800:154): avc:  denied  { read } for  pid=404 comm="syz.3.24" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   35.726818][   T36] audit: type=1400 audit(1790671913.800:155): avc:  denied  { open } for  pid=404 comm="syz.3.24" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   35.750890][   T36] audit: type=1400 audit(1790671913.820:156): avc:  denied  { ioctl } for  pid=404 comm="syz.3.24" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   35.828703][  T315] usbhid 1-1:0.0: can't add hid device: -71
[   35.834726][  T315] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   35.856405][  T315] usb 1-1: USB disconnect, device number 3
[   36.079399][   T65] usb 2-1: unit 0 not found!
[   36.088317][   T65] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   36.106587][   T65] usb 2-1: unit 0 not found!
[   36.128381][   T65] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22
[   36.142610][  T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   36.143139][   T65] usb 2-1: USB disconnect, device number 2
[   36.356131][  T437] fuse: Bad value for 'user_id'
[   36.364494][  T437] fuse: Bad value for 'user_id'
[   36.465439][   T65] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   36.645074][   T45] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   36.653680][   T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   36.696994][   T65] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   36.706646][   T65] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 251, using maximum allowed: 30
[   36.717937][   T65] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251
[   36.731199][   T65] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   36.758487][   T65] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40
[   36.773038][   T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.783262][   T65] usb 2-1: Product: syz
[   36.787649][   T65] usb 2-1: Manufacturer: syz
[   36.792380][   T65] usb 2-1: SerialNumber: syz
[   36.798804][   T65] usb 2-1: Interface #1 referenced by multiple IADs
[   36.856315][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   36.867429][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.877674][   T45] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   36.886806][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.896512][   T45] usb 1-1: config 0 descriptor??
[   37.010190][  T435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.018816][  T435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.029327][   T65] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[   37.040525][   T65] usb 2-1: USB disconnect, device number 3
[   37.075083][  T319] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   37.226159][  T319] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[   37.234278][  T319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   37.244420][  T319] usb 4-1: config 1 has no interface number 0
[   37.250544][  T319] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10
[   37.261436][  T319] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[   37.272601][  T319] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40
[   37.281974][  T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2
[   37.290308][  T319] usb 4-1: Product: syz
[   37.294485][  T319] usb 4-1: Manufacturer: syz
[   37.299153][  T319] usb 4-1: SerialNumber: syz
[   37.307171][  T439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.315805][  T439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.326640][  T439] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   37.359928][   T45] usbhid 1-1:0.0: can't add hid device: -71
[   37.366033][   T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   37.374911][   T45] usb 1-1: USB disconnect, device number 4
[   37.509972][  T319] usb 4-1: USB disconnect, device number 2
[   37.523077][  T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   37.705092][  T462] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   37.855151][  T462] usb 3-1: Using ep0 maxpacket: 32
[   37.861574][  T462] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   37.869757][  T462] usb 3-1: config 0 has no interface number 0
[   37.877959][  T462] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   37.892096][  T462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.901734][  T462] usb 3-1: Product: syz
[   37.906026][  T462] usb 3-1: Manufacturer: syz
[   37.910746][  T462] usb 3-1: SerialNumber: syz
[   37.919524][  T462] usb 3-1: config 0 descriptor??
[   37.927797][  T462] smsc95xx v2.0.0
[   38.053522][  T478] syzkaller1: entered promiscuous mode
[   38.061365][  T478] syzkaller1: entered allmulticast mode
[   38.146353][  T483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.42'.
[   38.180959][  T484] x_tables: unsorted underflow at hook 1
[   38.333023][  T462] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   38.344184][  T462] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   38.425088][  T315] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   38.576417][  T315] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.587536][  T315] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   38.600376][  T315] usb 1-1: config 0 interface 0 has no altsetting 0
[   38.607055][  T315] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[   38.616156][  T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.624955][  T315] usb 1-1: config 0 descriptor??
[   39.032910][  T315] logitech 0003:046D:C286.0001: unknown main item tag 0x0
[   39.040297][  T315] logitech 0003:046D:C286.0001: unknown main item tag 0x0
[   39.049106][  T315] input: HID 046d:c286 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C286.0001/input/input4
[   39.070783][  T315] logitech 0003:046D:C286.0001: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c286] on usb-dummy_hcd.0-1/input0
[   39.082872][  T315] logitech 0003:046D:C286.0001: not enough fields in HID_OUTPUT_REPORT 0
[   39.162117][  T503] No source specified
[   39.234534][  T483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=483 comm=syz.0.42
[   39.329084][  T515] binder: Unknown parameter '0x0000000000000000'
[   39.385110][  T319] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   39.547363][  T319] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   39.556543][  T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.564588][  T319] usb 2-1: Product: syz
[   39.568823][  T319] usb 2-1: Manufacturer: syz
[   39.573456][  T319] usb 2-1: SerialNumber: syz
[   39.586129][  T319] usb 2-1: UAS is ignored for this device, using usb-storage instead
[   39.595682][  T462] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   39.607793][  T319] usb 2-1: UAS is ignored for this device, using usb-storage instead
[   39.615989][  T462] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[   39.625099][  T319] usb-storage 2-1:1.0: USB Mass Storage device detected
[   39.632207][  T462] usb 3-1: USB disconnect, device number 3
[   39.639552][  T319] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   39.648557][  T319] scsi host1: usb-storage 2-1:1.0
[   39.762743][  T319] usb 1-1: USB disconnect, device number 5
[   39.787019][   T45] usb 2-1: USB disconnect, device number 4
[   40.455094][   T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   40.572022][   T36] kauditd_printk_skb: 58 callbacks suppressed
[   40.572040][   T36] audit: type=1400 audit(1790671918.710:215): avc:  denied  { create } for  pid=550 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   40.597883][   T36] audit: type=1400 audit(1790671918.710:216): avc:  denied  { ioctl } for  pid=550 comm="syz.1.62" path="socket:[6275]" dev="sockfs" ino=6275 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   40.624217][   T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   40.634172][   T45] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   40.645938][   T45] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[   40.669263][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.677537][   T45] usb 3-1: Product: syz
[   40.681770][   T45] usb 3-1: Manufacturer: syz
[   40.686809][   T45] usb 3-1: SerialNumber: syz
[   40.765108][   T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   40.936418][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[   40.946793][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[   40.955449][   T10] usb 4-1: config 87 has an invalid interface number: 152 but max is 0
[   40.963789][   T10] usb 4-1: config 87 has no interface number 0
[   40.971196][   T10] usb 4-1: config 87 interface 152 has no altsetting 0
[   40.981790][   T10] usb 4-1: New USB device found, idVendor=0df6, idProduct=004a, bcdDevice=36.71
[   40.991004][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.999097][   T10] usb 4-1: Product: syz
[   41.004449][   T10] usb 4-1: Manufacturer: syz
[   41.011330][   T10] usb 4-1: SerialNumber: syz
[   41.165120][  T315] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   41.226057][   T10] cdc_ether 4-1:87.152: More than one union descriptor, skipping ...
[   41.235050][   T10] usb 4-1: bad CDC descriptors
[   41.243867][   T10] usb 4-1: USB disconnect, device number 3
[   41.346182][  T315] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   41.360452][  T315] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   41.376559][  T315] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   41.385896][  T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.393964][  T315] usb 1-1: Product: syz
[   41.398239][  T315] usb 1-1: Manufacturer: syz
[   41.402930][  T315] usb 1-1: SerialNumber: syz
[   41.411886][  T315] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[   41.426716][  T315] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   41.426716][  T315]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   41.745687][   T36] audit: type=1400 audit(1790671919.890:217): avc:  denied  { name_bind } for  pid=571 comm="syz.3.65" src=19488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   42.085079][   T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   42.236446][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   42.247464][   T45] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   42.256629][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.265563][   T45] usb 4-1: config 0 descriptor??
[   42.325062][  T319] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   42.415369][  T315] scsi host1: usb-storage 1-1:1.0
[   42.472136][   T45] usbhid 4-1:0.0: can't add hid device: -71
[   42.478140][  T319] usb 2-1: Using ep0 maxpacket: 8
[   42.483290][   T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   42.492086][   T45] usb 4-1: USB disconnect, device number 4
[   42.499841][  T319] usb 2-1: unable to get BOS descriptor or descriptor too short
[   42.508370][  T319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   42.518506][  T319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   42.528927][  T319] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   42.538008][  T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.546094][  T319] usb 2-1: Product: syz
[   42.550272][  T319] usb 2-1: Manufacturer: syz
[   42.554883][  T319] usb 2-1: SerialNumber: syz
[   42.762536][   T36] audit: type=1400 audit(1790671920.900:218): avc:  denied  { unlink } for  pid=634 comm="syz.1.70" name="#3" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   42.763331][  T635] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   42.784590][   T36] audit: type=1400 audit(1790671920.900:219): avc:  denied  { getattr } for  pid=634 comm="syz.1.70" name="/" dev="incremental-fs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   42.813091][  T319] usb 2-1: 0:1 : does not exist
[   42.820026][   T36] audit: type=1400 audit(1790671920.940:220): avc:  denied  { mount } for  pid=634 comm="syz.1.70" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   42.824742][  T319] usb 2-1: 0:2 : does not exist
[   42.853616][  T319] usb 2-1: USB disconnect, device number 5
[   42.862490][  T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   42.925088][   T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   43.076159][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.087170][   T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[   43.096277][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.104971][   T45] usb 4-1: config 0 descriptor??
[   43.270533][  T315] usb 3-1: USB disconnect, device number 4
[   43.317402][  T639] input: syz0 as /devices/virtual/input/input6
[   43.326050][  T640] loop9: detected capacity change from 0 to 16384
[   43.336542][   T36] audit: type=1400 audit(1790671921.480:221): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   43.375819][   T36] audit: type=1400 audit(1790671921.480:222): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   43.396539][  T640] loop9: detected capacity change from 16384 to 0
[   43.524031][   T36] audit: type=1400 audit(1790671921.660:223): avc:  denied  { create } for  pid=653 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   43.715459][   T45] aiptek 4-1:0.0: Aiptek using 400 ms programming speed
[   43.723047][   T45] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5
[   43.755249][  T315] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   43.778328][    C0] ------------[ cut here ]------------
[   43.783835][    C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31
[   43.792442][    C0] index 21369 is out of range for type 'const int[34]'
[   43.799289][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534
[   43.799311][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   43.799322][    C0] Call Trace:
[   43.799327][    C0]  <IRQ>
[   43.799334][    C0]  __dump_stack+0x21/0x30
[   43.799362][    C0]  dump_stack_lvl+0x140/0x1c0
[   43.799386][    C0]  ? __cfi_dump_stack_lvl+0x10/0x10
[   43.799410][    C0]  ? start_kernel+0x462/0x4bb
[   43.799435][    C0]  dump_stack+0x19/0x20
[   43.799458][    C0]  ubsan_epilogue+0xe/0x40
[   43.799472][    C0]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[   43.799499][    C0]  aiptek_irq+0x208d/0x2a00
[   43.799525][    C0]  ? _raw_spin_unlock+0x45/0x60
[   43.799542][    C0]  ? kcov_remote_start+0x1d2/0x3c0
[   43.799561][    C0]  __usb_hcd_giveback_urb+0x371/0x530
[   43.799580][    C0]  usb_hcd_giveback_urb+0x12b/0x400
[   43.799596][    C0]  dummy_timer+0xa3f/0x4900
[   43.799622][    C0]  ? __cfi_dummy_timer+0x10/0x10
[   43.799639][    C0]  ? _raw_spin_lock_irq+0x93/0x120
[   43.799661][    C0]  ? timerqueue_del+0xd7/0x130
[   43.799685][    C0]  ? __hrtimer_run_queues+0x2bd/0x8e0
[   43.799710][    C0]  ? __cfi_dummy_timer+0x10/0x10
[   43.799728][    C0]  __hrtimer_run_queues+0x3ae/0x8e0
[   43.799755][    C0]  ? hrtimer_interrupt+0xf30/0xf30
[   43.799779][    C0]  ? read_tsc+0xd/0x20
[   43.799801][    C0]  ? ktime_get_update_offsets_now+0x3c0/0x3e0
[   43.799823][    C0]  hrtimer_run_softirq+0x159/0x560
[   43.799857][    C0]  ? irqtime_account_irq+0x51/0x1c0
[   43.799901][    C0]  handle_softirqs+0x1aa/0x620
[   43.799921][    C0]  __irq_exit_rcu+0x47/0xb0
[   43.799937][    C0]  irq_exit_rcu+0xd/0x30
[   43.799954][    C0]  sysvec_apic_timer_interrupt+0x82/0x90
[   43.799976][    C0]  </IRQ>
[   43.799981][    C0]  <TASK>
[   43.799987][    C0]  asm_sysvec_apic_timer_interrupt+0x1f/0x30
[   43.800008][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[   43.800033][    C0] Code: cc cc cc cc cc cc cc b8 ac 9c 3a fc 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 f7 41 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
[   43.800046][    C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2
[   43.800061][    C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a5653d
[   43.800075][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000004f804
[   43.800085][    C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd
[   43.800097][    C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000
[   43.800109][    C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87eceae8
[   43.800123][    C0]  ? ct_kernel_exit+0x7d/0xb0
[   43.800148][    C0]  default_idle+0x17/0x30
[   43.800173][    C0]  arch_cpu_idle+0xd/0x20
[   43.800196][    C0]  default_idle_call+0x3e/0x80
[   43.800221][    C0]  do_idle+0x2fc/0x570
[   43.800239][    C0]  ? idle_inject_timer_fn+0x80/0x80
[   43.800259][    C0]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[   43.800278][    C0]  ? radix_tree_lookup+0x250/0x2a0
[   43.800296][    C0]  cpu_startup_entry+0x47/0x60
[   43.800314][    C0]  rest_init+0x10b/0x130
[   43.800329][    C0]  ? __cfi_x86_late_time_init+0x10/0x10
[   43.800345][    C0]  start_kernel+0x462/0x4bb
[   43.800368][    C0]  x86_64_start_reservations+0x2e/0x30
[   43.800384][    C0]  x86_64_start_kernel+0x6a/0x7b
[   43.800409][    C0]  common_startup_64+0x13b/0x157
[   43.800435][    C0]  </TASK>
[   43.800441][    C0] ---[ end trace ]---
[   44.128316][    C0] ==================================================================
[   44.136385][    C0] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x2a00
[   44.143947][    C0] Read of size 4 at addr ffffffff8671aa84 by task swapper/0/0
[   44.151440][    C0] 
[   44.153799][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534
[   44.153832][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   44.153849][    C0] Call Trace:
[   44.153858][    C0]  <IRQ>
[   44.153869][    C0]  __dump_stack+0x21/0x30
[   44.153910][    C0]  dump_stack_lvl+0x140/0x1c0
[   44.153945][    C0]  ? __cfi_dump_stack_lvl+0x10/0x10
[   44.153980][    C0]  ? __cfi__printk+0x10/0x10
[   44.154014][    C0]  print_address_description+0x71/0x210
[   44.154050][    C0]  print_report+0x4a/0x70
[   44.154096][    C0]  kasan_report+0x162/0x1a0
[   44.154130][    C0]  ? aiptek_irq+0x20ab/0x2a00
[   44.154167][    C0]  ? aiptek_irq+0x20ab/0x2a00
[   44.154203][    C0]  __asan_report_load4_noabort+0x18/0x20
[   44.154229][    C0]  aiptek_irq+0x20ab/0x2a00
[   44.154265][    C0]  ? _raw_spin_unlock+0x45/0x60
[   44.154289][    C0]  ? kcov_remote_start+0x1d2/0x3c0
[   44.154317][    C0]  __usb_hcd_giveback_urb+0x371/0x530
[   44.154345][    C0]  usb_hcd_giveback_urb+0x12b/0x400
[   44.154369][    C0]  dummy_timer+0xa3f/0x4900
[   44.154407][    C0]  ? __cfi_dummy_timer+0x10/0x10
[   44.154451][    C0]  ? _raw_spin_lock_irq+0x93/0x120
[   44.154472][    C0]  ? timerqueue_del+0xd7/0x130
[   44.154507][    C0]  ? __hrtimer_run_queues+0x2bd/0x8e0
[   44.154544][    C0]  ? __cfi_dummy_timer+0x10/0x10
[   44.154570][    C0]  __hrtimer_run_queues+0x3ae/0x8e0
[   44.154628][    C0]  ? hrtimer_interrupt+0xf30/0xf30
[   44.154683][    C0]  ? read_tsc+0xd/0x20
[   44.154717][    C0]  ? ktime_get_update_offsets_now+0x3c0/0x3e0
[   44.154750][    C0]  hrtimer_run_softirq+0x159/0x560
[   44.154785][    C0]  ? irqtime_account_irq+0x51/0x1c0
[   44.154821][    C0]  handle_softirqs+0x1aa/0x620
[   44.154848][    C0]  __irq_exit_rcu+0x47/0xb0
[   44.154872][    C0]  irq_exit_rcu+0xd/0x30
[   44.154895][    C0]  sysvec_apic_timer_interrupt+0x82/0x90
[   44.154928][    C0]  </IRQ>
[   44.154936][    C0]  <TASK>
[   44.154944][    C0]  asm_sysvec_apic_timer_interrupt+0x1f/0x30
[   44.154976][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[   44.155012][    C0] Code: cc cc cc cc cc cc cc b8 ac 9c 3a fc 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 f7 41 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
[   44.155031][    C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2
[   44.155053][    C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a5653d
[   44.155073][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000004f804
[   44.155089][    C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd
[   44.155107][    C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000
[   44.155123][    C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87eceae8
[   44.155145][    C0]  ? ct_kernel_exit+0x7d/0xb0
[   44.155182][    C0]  default_idle+0x17/0x30
[   44.155216][    C0]  arch_cpu_idle+0xd/0x20
[   44.155249][    C0]  default_idle_call+0x3e/0x80
[   44.155283][    C0]  do_idle+0x2fc/0x570
[   44.155310][    C0]  ? idle_inject_timer_fn+0x80/0x80
[   44.155337][    C0]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[   44.155364][    C0]  ? radix_tree_lookup+0x250/0x2a0
[   44.155390][    C0]  cpu_startup_entry+0x47/0x60
[   44.155417][    C0]  rest_init+0x10b/0x130
[   44.155437][    C0]  ? __cfi_x86_late_time_init+0x10/0x10
[   44.155462][    C0]  start_kernel+0x462/0x4bb
[   44.155495][    C0]  x86_64_start_reservations+0x2e/0x30
[   44.155518][    C0]  x86_64_start_kernel+0x6a/0x7b
[   44.155554][    C0]  common_startup_64+0x13b/0x157
[   44.155592][    C0]  </TASK>
[   44.155601][    C0] 
[   44.496404][    C0] The buggy address belongs to the variable:
[   44.502391][    C0]  .str.2+0x4/0x20
[   44.506149][    C0] 
[   44.508503][    C0] The buggy address belongs to the physical page:
[   44.515106][    C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x671a
[   44.523820][    C0] flags: 0x4000(reserved|zone=0)
[   44.528768][    C0] raw: 0000000000004000 ffffea000019c688 ffffea000019c688 0000000000000000
[   44.537368][    C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   44.545946][    C0] page dumped because: kasan: bad access detected
[   44.552366][    C0] page_owner info is not present (never set?)
[   44.558423][    C0] 
[   44.560748][    C0] Memory state around the buggy address:
[   44.566392][    C0]  ffffffff8671a980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   44.574456][    C0]  ffffffff8671aa00: 00 00 00 00 01 f9 f9 f9 00 00 00 00 f9 f9 f9 f9
[   44.582522][    C0] >ffffffff8671aa80: 02 f9 f9 f9 02 f9 f9 f9 00 00 00 00 00 00 01 f9
[   44.590593][    C0]                    ^
[   44.594684][    C0]  ffffffff8671ab00: f9 f9 f9 f9 02 f9 f9 f9 02 f9 f9 f9 00 00 00 00
[   44.602742][    C0]  ffffffff8671ab80: 00 07 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 04
[   44.610801][    C0] ==================================================================
[   44.618855][    C0] Disabling lock debugging due to kernel taint
[   44.624998][    C0] ------------[ cut here ]------------
[   44.630472][    C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30
[   44.639055][    C0] index 21370 is out of range for type 'const int[34]'
[   44.645920][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G    B              syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534
[   44.645945][    C0] Tainted: [B]=BAD_PAGE
[   44.645951][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   44.645960][    C0] Call Trace:
[   44.645968][    C0]  <IRQ>
[   44.645974][    C0]  __dump_stack+0x21/0x30
[   44.646002][    C0]  dump_stack_lvl+0x140/0x1c0
[   44.646025][    C0]  ? __cfi_dump_stack_lvl+0x10/0x10
[   44.646048][    C0]  ? _raw_spin_lock_irqsave+0xc1/0x160
[   44.646067][    C0]  dump_stack+0x19/0x20
[   44.646088][    C0]  ubsan_epilogue+0xe/0x40
[   44.646102][    C0]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[   44.646129][    C0]  aiptek_irq+0x1f3c/0x2a00
[   44.646154][    C0]  ? _raw_spin_unlock+0x45/0x60
[   44.646169][    C0]  ? kcov_remote_start+0x1d2/0x3c0
[   44.646187][    C0]  __usb_hcd_giveback_urb+0x371/0x530
[   44.646206][    C0]  usb_hcd_giveback_urb+0x12b/0x400
[   44.646222][    C0]  dummy_timer+0xa3f/0x4900
[   44.646247][    C0]  ? __cfi_dummy_timer+0x10/0x10
[   44.646263][    C0]  ? _raw_spin_lock_irq+0x93/0x120
[   44.646279][    C0]  ? timerqueue_del+0xd7/0x130
[   44.646303][    C0]  ? __hrtimer_run_queues+0x2bd/0x8e0
[   44.646328][    C0]  ? __cfi_dummy_timer+0x10/0x10
[   44.646357][    C0]  __hrtimer_run_queues+0x3ae/0x8e0
[   44.646381][    C0]  ? hrtimer_interrupt+0xf30/0xf30
[   44.646402][    C0]  ? read_tsc+0xd/0x20
[   44.646422][    C0]  ? ktime_get_update_offsets_now+0x3c0/0x3e0
[   44.646442][    C0]  hrtimer_run_softirq+0x159/0x560
[   44.646456][    C0]  ? irqtime_account_irq+0x51/0x1c0
[   44.646483][    C0]  handle_softirqs+0x1aa/0x620
[   44.646500][    C0]  __irq_exit_rcu+0x47/0xb0
[   44.646533][    C0]  irq_exit_rcu+0xd/0x30
[   44.646547][    C0]  sysvec_apic_timer_interrupt+0x82/0x90
[   44.646568][    C0]  </IRQ>
[   44.646573][    C0]  <TASK>
[   44.646578][    C0]  asm_sysvec_apic_timer_interrupt+0x1f/0x30
[   44.646600][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[   44.646623][    C0] Code: cc cc cc cc cc cc cc b8 ac 9c 3a fc 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 f7 41 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
[   44.646636][    C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2
[   44.646650][    C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a5653d
[   44.646663][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000004f804
[   44.646672][    C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd
[   44.646685][    C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000
[   44.646696][    C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87eceae8
[   44.646709][    C0]  ? ct_kernel_exit+0x7d/0xb0
[   44.646733][    C0]  default_idle+0x17/0x30
[   44.646756][    C0]  arch_cpu_idle+0xd/0x20
[   44.646778][    C0]  default_idle_call+0x3e/0x80
[   44.646802][    C0]  do_idle+0x2fc/0x570
[   44.646820][    C0]  ? idle_inject_timer_fn+0x80/0x80
[   44.646864][    C0]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[   44.646893][    C0]  ? radix_tree_lookup+0x250/0x2a0
[   44.646910][    C0]  cpu_startup_entry+0x47/0x60
[   44.646928][    C0]  rest_init+0x10b/0x130
[   44.646954][    C0]  ? __cfi_x86_late_time_init+0x10/0x10
[   44.646971][    C0]  start_kernel+0x462/0x4bb
[   44.646992][    C0]  x86_64_start_reservations+0x2e/0x30
[   44.647005][    C0]  x86_64_start_kernel+0x6a/0x7b
[   44.647028][    C0]  common_startup_64+0x13b/0x157
[   44.647051][    C0]  </TASK>
[   44.647056][    C0] ---[ end trace ]---
[   44.982902][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   44.999549][   T36] audit: type=1400 audit(1790671923.140:224): avc:  denied  { read } for  pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   45.053591][  T319] usb 4-1: USB disconnect, device number 5
[   45.053609][    C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[   45.067824][  T315] usb 2-1: Using ep0 maxpacket: 16
[   45.075318][  T315] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.085663][  T315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   45.103565][  T315] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   45.112842][  T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.120948][  T315] usb 2-1: Product: syz
[   45.125222][  T315] usb 2-1: Manufacturer: syz
[   45.129863][  T315] usb 2-1: SerialNumber: syz
[   45.155102][   T10] usb 3-1: Using ep0 maxpacket: 8
[   45.161678][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[   45.172424][   T10] usb 3-1: string descriptor 0 read error: -22
[   45.178705][   T10] usb 3-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40
[   45.187802][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.338325][  T315] usb 2-1: 0:2 : does not exist
[   45.345403][  T315] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   45.356164][   T10] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[   45.365003][  T315] usb 2-1: USB disconnect, device number 6
[   45.371016][   T10] usb 3-1: 1:1 : sample bitwidth 252 in over sample bytes 4
[   45.399217][   T10] usb 3-1: failed to enable PITCH for EP 0x1
[   45.405567][  T320] usb 1-1: USB disconnect, device number 6
[   45.411899][   T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   45.424122][  T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   45.443692][   T10] usb 3-1: USB disconnect, device number 5