last executing test programs:

6.10702892s ago: executing program 3 (id=519):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
write(r0, &(0x7f0000000480)="534287ac770767f7429748b7bad1a664a6cc00", 0x13)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket(0x11, 0xa, 0x5)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xb66c3409bf854d4a)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000540)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r8=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=<r9=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0)
syz_ublk_setup_queues(r4, r9, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xd1, 0x0, r4}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x400, 0x1, 0x3ab, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x0, 0x9, 0x1e8, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10, 0x3, 0x902c4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2030, 0x5200, 0x2, 0x9e, 0x0, r4}}], 0x16, &(0x7f0000001540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r8, '\x00', {0x3, 0x65c, 0x0, 0x0}}, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00')
read$FUSE(r10, 0x0, 0x0)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r11, 0x40046210, &(0x7f0000000380)=0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1b0b, 0x2})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1000, 0x2})
sendto$inet(r1, &(0x7f0000000140)="9c91d7798c7f1b4ca046b42f0c3d", 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r13 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', &(0x7f0000000080)={0x404800, 0x100, 0x9}, 0x18)
mkdirat(r13, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@verity_on}, {@userxattr}], [], 0x2c})

5.978237744s ago: executing program 3 (id=520):
chmod(&(0x7f0000000280)='./cgroup\x00', 0xea) (async)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002cc0), 0xffffffffffffffed)
syz_usb_connect$midi(0x4, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1235, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x18, 0x140, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6}}}}}]}}, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="280000000400"/16], 0x28)
syz_usb_connect$midi(0x1, 0x41, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x2, 0x80, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3d, [], [{{0x9, 0x5, 0xc, 0x2, 0x400, 0x6, 0x2, 0xf9, {0x14, 0x25, 0x1, 0x10, "99effeb5454df150f99cc8dd0c29ed0c"}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4e, [{0x0, &(0x7f0000000000)=@lang_id={0x0, 0x3, 0x439}}, {0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x380a}}, {0x0, &(0x7f0000000080)=@string={0x0, 0x3, "840ff6cc669c39822ad98fcb39215dd2d67d98ab0dc552cd48aad0e3e6353f40288f0d8ad366d707595317e6a3b7b13e95e560a67fd387998b138e68992beda250eb02784df4c0352c861a5138e925cb3140e780bd7cec6032b97d6025b00b13883d76e0a1b3e11f4fc2fce0ddeb730dee1f9ce3"}}]}) (async)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000140)=""/152, 0x98)

5.1381933s ago: executing program 2 (id=525):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000240)={'syz1\x00', {0x7f, 0x387d, 0x95d, 0x5}, 0x55, [0xa83, 0x4, 0x6, 0xb66165d5, 0x6, 0xa5, 0x7, 0xe5cb, 0x81, 0x80000001, 0xfff, 0x2, 0x6, 0x3, 0x8, 0x9b75, 0x9, 0x5, 0x7, 0xe, 0x4, 0x7f, 0x82, 0x0, 0x1, 0x5, 0x0, 0x4986, 0x1, 0x800, 0x8, 0x5, 0x8000, 0xf, 0x6cbf, 0x5, 0xc4b, 0x5, 0x7, 0xd, 0x4, 0x1, 0x6, 0x7, 0x3, 0x1b, 0x8, 0xfffffff8, 0xfee, 0xe, 0x8, 0x2, 0x101, 0x7, 0x1ea6e4d, 0x3062, 0x40, 0xffffff7f, 0x7, 0x824, 0x4, 0x70cc, 0xa8, 0x2], [0x10000, 0x5, 0x5, 0x10001, 0xc580, 0x200, 0x40, 0x10, 0x735, 0x80000000, 0x5, 0xfffffffd, 0x9, 0xffff, 0x7, 0x6, 0x5, 0x1ff, 0x7e, 0x4, 0x6, 0x9, 0x48000000, 0xfffffff9, 0xffff62fb, 0x80, 0x2548acc6, 0x400, 0x8, 0x8, 0x30, 0x51cf, 0x2, 0x8, 0x8, 0xf, 0x9, 0x3, 0x40, 0x0, 0x1b3, 0x5d622418, 0x1, 0x36, 0x200, 0xfffffffe, 0x4, 0x8, 0x40008, 0x76dfd8cf, 0xd0c, 0x2a87, 0x2, 0x8000, 0x80000001, 0x0, 0x1, 0x9, 0x1, 0x5, 0x3, 0x6, 0x80000000, 0x8], [0x4, 0x6, 0x8001, 0x0, 0xb2f6, 0x1, 0x2, 0x6, 0x89be, 0x7fff, 0xa0000, 0x9, 0x4, 0x0, 0xfffffffc, 0xce9, 0x1, 0x6, 0x7, 0xff, 0x0, 0x4, 0x0, 0x5000000, 0x4, 0x1, 0x2, 0xc, 0x2, 0xff, 0x0, 0xd, 0x9, 0x9, 0x0, 0xdce7, 0x401, 0x0, 0x2, 0x5, 0x8, 0x10000, 0x40, 0x0, 0xffff, 0xd, 0x7, 0xcf, 0xfffffff9, 0x80000000, 0xfffffffc, 0xcec, 0x4, 0x4, 0xffff6455, 0xfffffffb, 0xd6471202, 0x0, 0xfffffffe, 0xd5, 0x9, 0xc9, 0x2121, 0x5], [0x200, 0x0, 0x7933, 0x8, 0x8, 0x8, 0x9, 0x42aa3068, 0x8, 0xffff3300, 0x9, 0x1, 0xa8, 0x8, 0x3, 0xce, 0x8, 0xfffffff9, 0x4, 0x10000, 0x587806ba, 0x73, 0x3ff, 0xad64, 0x81, 0xffffffff, 0x9, 0x7, 0x9, 0x9, 0x0, 0x6, 0x9, 0xffffffff, 0xa, 0x3, 0xeccd, 0xe, 0x4, 0x1ff, 0xb9e, 0xfffffffa, 0x1ff, 0x41f4, 0x46, 0x800, 0x4ab4, 0x3, 0x9, 0x7e55, 0x8, 0x0, 0x7, 0x9, 0xc2, 0xf, 0x8, 0x6, 0x1, 0x7, 0x4, 0x6, 0x4, 0x2]}, 0x45c) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r4, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x2, 0x2, 0x0, 0x4, 0x4, 0x73, 0xe, 0x10, 0xee, 0x7, 0xa5, 0x80, 0x9, 0x3, 0x1, 0x5}}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6d, 0x3, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x2000009, 0x80000004400080, 0x1c00000, 0x6, 0xfffffffffffffffe, 0x4, 0x2, 0x8000], 0x5000, 0x3c4210})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', <r6=>0x0}) (async)
r7 = getuid() (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async, rerun: 32)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000740)={0x81, 0x0, 0x2}) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000180)={'gre0\x00', <r8=>0x0, 0x20, 0x8000, 0x3ff, 0x101, {{0x1b, 0x4, 0x1, 0x8, 0x6c, 0x68, 0x0, 0x6, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@noop, @timestamp_addr={0x44, 0x54, 0x8a, 0x1, 0x1, [{@loopback, 0x7}, {@multicast1, 0x1}, {@broadcast, 0x1000000}, {@multicast2, 0x43}, {@broadcast, 0x10000}, {@rand_addr=0x64010101, 0xa}, {@private=0xa010101, 0x3}, {@empty, 0x7}, {@multicast1, 0x4}, {@multicast1, 0xfffffffb}]}, @end]}}}}})
sendmsg$nl_xfrm(r5, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=@newsa={0x198, 0x10, 0x100, 0x2, 0x25dfdbfb, {{@in=@local, @in=@private=0xa010102, 0x4e22, 0x1, 0x4e23, 0x0, 0x2, 0x30, 0x0, 0x0, r6, r7}, {@in6=@remote, 0x4d6, 0x6c}, @in=@private=0xa010102, {0x8, 0x4e0b17a7, 0x3, 0x4, 0x9, 0x506, 0x10001, 0x7fff}, {0x7, 0x4, 0xd314, 0xfffffffffffffffb}, {0x9, 0x4, 0x8}, 0x70bd29, 0x3502, 0xa, 0x1, 0xc, 0x28}, [@algo_crypt={0x90, 0x2, {{'pcbc-aes-aesni\x00'}, 0x240, "eb5e13e7892c44ed687dd63eb9a7175e13cbb6dd837cdfed5d6d6c562035baff8ddaf44831f270a85e57a055c1008153533355f57a1bfc25c4353b5afd473335d643f760ccda7de1"}}, @offload={0xc, 0x1c, {r8, 0x6}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async)
write$tun(r10, &(0x7f0000000600)=ANY=[@ANYBLOB="760448000006"], 0xfdef)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) (async)
ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]})
fsopen(&(0x7f0000000000)='sockfs\x00', 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32)

4.846066649s ago: executing program 3 (id=531):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = open$dir(&(0x7f0000000140)='./file1\x00', 0x20000, 0x6a)
r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x200, 0x150)
pwrite64(r1, &(0x7f0000000200)='\x00', 0x1, 0x2e7a)
socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c7010201010902240001020010000904"], 0x0)
ftruncate(r2, 0x6000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

4.626559286s ago: executing program 2 (id=532):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0)
r1 = socket(0xa, 0x2400000001, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x3d, 0x0, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x8681e000)
syz_clone(0x80000800, &(0x7f0000000140)="8dc7481ea1810cc57f688cae61652899829d1357c14dbd37ad9d08d8eb91f40e178a08cc35f341d24c57fcbb32444413b288d45fd1027ab20acf2d7b3e0040d1afd0bd90c642e9a203c2336a94fd18bf86f53842492dd228488a6e27ca78d841d1e96c3e1da3549b36348ecd29d77a6b90e34c7db6c1fe122ba336d9cc46565368a7eb1f3accc5381a80bb220d9ad247184967512d0fbdf11e6ce9ee8dd475bc24bf4d0747203109a36c36594b0302c3fd799698bc6c5e74cdbefc089ab90ebba02b2fa2a764db", 0xc7, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="644694b3ae9c8da5929d4662333ccb63e11cbb3488e8aa21d2b1de409774c1fab284c49fb57cb0e5f8d90c4c50a70eccf4ca2f2fa6a11894744534c011339be5126afed1ff877429238f2a9a47babc7eeefd1ba8a52bb7fc9f89c1338ff6a39075ad5d70f03cea05d22886fd65ff304261a110a00f812b1d84542e39724471831d5933dfdd20c982a4f95a95cee5875ac99be34b42fcbb2e2fab737c77dfc5c092f44ddc7a5b95915ec164faace38ab4ce791a695db364b05bd74b14b96ffb147cf776e77d1b8c9385dbf2780e71242e65c7e1d8caea2ca8cb117f66e1ee750000750fc1746fd784fbc320a998ebce4d03fc94408230abac32")
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x43bad000)
futex(&(0x7f0000000000), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x3)

3.989249855s ago: executing program 1 (id=537):
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
syz_clone(0x400, &(0x7f0000000b80)="17565b8908363e2763169c8c6b336eb23fb98d63bd1e089d704a46484813dd770d7245373f4691065e2c7eb0ab8007cdb430f16671c30e96467d8a3c00049bf83105f6c080615945f513121442b146d71f475cbebb2420d03db2e0801af1dd963925ae59de0a82ecec8b01551872af8e8b05fe3cc9f4a321058654d1c3376991c15368e25812b6b02c4a2292845a12ea4e3e0140c82ad80de2b61ebc5e5d1c606333a8912647d9e8ee7d78f7d3b1b7f1cb825f78ba36fb573c07d5e85a0c8a905f2ce207aa5f5b8057f8759ac56f137783dd6fbebcf1d4ce68", 0xd9, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)="d14c347c60ac72ae060c02126613f0687b5b74986c5c4b4ae4795b6bdcbb7da4214fe476e4fcc90604cc3c8b26eb1283d46de0e477feb1f80bc3578815c6c9879b6358e0863d009805e3b3e1f76e0b35f330d76a0961fede3af409fa53b6330425f0b013ca8449faf0070c1b41000fdae43ee0740142c6381b793a582b81ae07ec696a238bd783f440835fa35bb5822eec6025f9ed62e68874825672c0a8cd86d760b41e6f2af14bc5fd37dcb26d750f4d7aa0f12f")
setns(r2, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', 0x0, 0x2984082, 0x0)
r3 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0)
socketpair(0xa, 0x5, 0x3, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
r5 = accept$packet(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x14)
ppoll(&(0x7f0000000300)=[{r4, 0x1484}, {r2, 0x2}, {r1, 0x40}, {r5, 0xb40}], 0x4, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={[0x7ff]}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0xa, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xd9a}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe, 0x85, 0xf3}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x6, 0x8, 0x3, 0x10, 0x21}, 0x123, &(0x7f0000000600)={0x5, 0xf, 0x123, 0x3, [@generic={0x100, 0x10, 0x4, "5641a0286deaa2386235369947b93c0df4f15a72d7c32b59f0eb732fe184de5081abba7f9a4111c97ed89696865653e470c3ad2453dcbbb7a9a5d1acdd3d6737190037b474450cea386fa9f6a62a53c4d4ed0397fa5f79a3446554e6b7e29f3edb6411efb6767893045df42c142a76d98f5e4f80cad30796581476237465d5ebf7ac1af4e68fa47e30c503db757f78d3e97348800795f7079c808ce18c4cefc42ac8af0fd9dcf8e9060e9c88daee5787308363d4bf4a99f613c7db2061c64297b9ec77e5ac686ad2916fc098666d90ed909b446375eded4afe925e36b8e4b0f1db80b4c39c5b8c8af7414efa465530226e4a27042fb9ba1864039e33fe"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x10, 0xfe, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "79991a27baf82f0db5fc7e3cb75c1cfb"}]}, 0x6, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x807}}, {0x4a, &(0x7f0000000940)=@string={0x4a, 0x3, "5bc724d6c68db1b93f0f8c8098ff57268006cc20a228f0d4842f25ff293c1b67f5a6a1ccaf9ddae6da1570ac28c3ece0525f5c961bc79ff462029c27388259a5e8e25f9993e3882d"}}, {0x43, &(0x7f00000009c0)=@string={0x43, 0x3, "d3d9e0a2e743fb4c06b8ba1ff562176f99c53b229303437bc4381b638f65a9d40213fb838ec0c7b38da96aff6a8634a6786e65b02693692cb582d05a15d72b18a4"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x380a}}, {0x73, &(0x7f0000000a80)=@string={0x73, 0x3, "9c95c9dd5d64d7c65428c31d8350b1d053332a2db2ce8916d47ce6217cde4f022767c0ea7f0a28303ef22ffe905a2965f30a80a0b0a44a6ebb79ed3f25416bb2bc25f46c824f0adb8c53dadfd97a837f65d7ad6c40dfae700c359abde1a6a08231a2a38e49a7a37d2fbfff1d97539ed3d6"}}]})
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x9daf, 0x4af401bf886bd721)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x118004, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x25000, 0xd, 0x8, 0x70, 0x81, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0xeeef0000, 0x8, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x10000, 0xf, 0x6, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0xfc, 0x10, 0x0, 0xe, 0x0, 0x2}, {0x0, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x0, 0x10, 0x1000000000000001, 0x0, 0x900, [0x0, 0x0, 0x2, 0x5]})
ioctl$KVM_SET_MSRS(r8, 0x4140aecd, &(0x7f0000000100))
syz_usb_control_io$uac2(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2d, 0x25dfdbfd, 0x715, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48091}, 0x8000)
syz_usb_control_io$uac2(r3, 0x0, 0x0)
syz_usb_control_io$uac2(r3, 0x0, 0x0)
syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000500)={0x20, 0x15, 0x2, '\vE'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00')
read$FUSE(r10, 0x0, 0x0)
mkdirat(r2, &(0x7f0000000440)='./file2\x00', 0x63)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@verity_on}, {@userxattr}], [], 0x2c})

3.772989813s ago: executing program 2 (id=538):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000018040103000400c400100045ae00280065000001069078ac1414aaac1414bb4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000000000000d9a46f1fbc5f2c179c35d9563494c542e248a270fedb6f2af3357f866a8be81fd3"], 0x36)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, <r1=>0x0})
ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x3, 0x5002)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfffffefd, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac5, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0xaf, 0x8, 0x6, 0x1, 0x2000005, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfffffefd, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac5, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0xaf, 0x8, 0x6, 0x1, 0x2000005, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x80000000000000a, 0x2, 0x0) (async)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x4e20, 0x0, @empty}}}, 0x108)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a00000002"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4f2, 0x418, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x5f, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xc1, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0) (async)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4f2, 0x418, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x5f, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xc1, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="2022280000000b21c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78808ce2a52973661d67a0c554438"], 0x0, 0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x250242, 0x0) (async)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x250242, 0x0)
ioctl$PPPIOCGIDLE64(r10, 0x8010743f, &(0x7f00000001c0))

3.692330815s ago: executing program 3 (id=539):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000040))
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r1, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x5e)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, &(0x7f0000000400)=""/4096, 0x1000)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x80004001, 0x325967a8660601d0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x9, 0xffffffff9673e35d]}})
ioctl$LOOP_SET_CAPACITY(r4, 0x4c07)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000), 0x4)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r7, 0x48}], 0x1, 0x0, 0x0, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r8, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r8, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001540)={0x2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

3.606067068s ago: executing program 3 (id=540):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c57, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x100008, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x5, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x1, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x40000200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x81, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xd1c, 0xb, 0x5, 0x4, 0x6, 0x6, 0x1, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0xfffffffe, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0x5e, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x6, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0x5]}, 0x45c)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, &(0x7f0000000400)={0x40, 0x30, 0x80, {0x80, 0x1, "9d7251a91916c2784bc29e6c63161941afcf02359edc0a4df857b66e261b99d9a5c26a8a1a0702b12638598c99916fd5df8dc8b28fdce16e5d1606bb00a71dc4d2ceda9823d8a64c55125eb80208c8fc76a025d14cc9b80fdb6bc793d94b8b87a2dc56a370c4feaa8cb00c4cdfc823cdf46b7b7a1ce1e366f027d6f5a8df"}}, &(0x7f0000000580)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "bf87e9deba5e9872ca007cb44e512b18e6bd6a50486ee5a86d1805560d99256d3884376438c3964ab335fb31a7dbdf7ade6bfc80e9ca0e7129b9904ac69d0137ad01385fb8ac91c2f14ecc7bd9f543b52cfb5ec6f2a7195069689a5c4eb70473036e890a5072d4fe524405c1d1153d4c4a796f1147f92ffa9e54882738c4b45090bb367d952af45507e04805c0f97850718062765080a1a7143097960ae2f7f7190e93bd32a9131fa6aff91f9ae771d177d59465819b07daedbdfbdc60ecfe439382049d0acfa60b85752055e99e546d98"}}, &(0x7f0000000680)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x4, "971c"}, @main=@item_012={0x1, 0x0, 0x9, "17"}, @main=@item_4={0x3, 0x0, 0x0, "dd06d86d"}, @global=@item_012={0x1, 0x1, 0x2, 'I'}, @global=@item_012={0x2, 0x1, 0x0, "0327"}, @main=@item_012={0x1, 0x0, 0x9, "9f"}, @local=@item_4={0x3, 0x2, 0x8, "be75a93f"}, @global=@item_012={0x1, 0x1, 0xb, ':'}, @local=@item_4={0x3, 0x2, 0x2, "7cdb9628"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xff8}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000740)={0x40, 0xc, 0xa, "425b4a685d658a0156e2"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xf6}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000a80)={0x20, 0x1, 0x3d, "e48788f8dc1017f0e2b8f5849524f4721b6e020774c29d1a583a918372c9b57befbaecff6ae94aad19651f8656a04d0cb5f814c72081358a50e03679e8"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x2}})
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001040)=[@text16={0x10, &(0x7f0000001000)="c700439566b9130400000f32baf80c66b8cea25f8666efbafc0cb8443beff20f008934000f015f170f230f0f08d9eb66b9260900000f32670f78ca", 0x3b}], 0x1, 0x30, &(0x7f0000001080)=[@efer={0x2, 0xc800}, @cstype0={0x4, 0xc}], 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x103, 0x2}, 0x20)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1, 0x0, 0x0, 0x4000844}, 0x0)
r3 = syz_ublk_setup_io_uring(0x358c, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x3, 0x1c3}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, <r7=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=<r8=>0x0)
syz_ublk_setup_queues(r3, r8, &(0x7f0000000380)={0x0, 0x1460, 0x800, 0xffffffff, 0x3be, 0x0, r3}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x0, 0x80000003, 0x3ad}}, {0x0, 0x0, <r9=>0xffffffffffffffff, {0x0, 0x7682, 0x8, 0x1, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x2000, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd8c1, 0x10, 0x3, 0x400218, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x0, 0x48b, 0x0, 0x0}}, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0xc400)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r11, 0x5522)
r12 = landlock_create_ruleset(&(0x7f00000000c0)={0x21, 0x1, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r12, 0x1, &(0x7f0000000100)={0xd05, r11}, 0x0)
close_range(r10, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f00000015c0)={{r9}, 0x0, 0x2, @inherit={0x80, &(0x7f0000000b80)={0x0, 0x7, 0x7ff, 0x8, {0x0, 0xe83, 0x3, 0x6, 0xfffffffffffff801}, [0x1, 0xd75, 0xc, 0x0, 0x800, 0x0, 0xfffffffffffffffc]}}, @subvolid=0xca69})
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x501c4814, &(0x7f0000000040)={0x3, 0x100, 0x80, 0xfffff803, 0x94d})

3.577697089s ago: executing program 3 (id=541):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x44, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x80000)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0x2, 0x4e21, 0x0, @mcast1, 0x4}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x16a, 0x3, 0x7f, 0x106c, 0xfffffffffffffffa, 0x8000000000000, 0x1000000003, 0x80000, 0x8, 0x0, 0x6, 0x0, 0x7ffe], 0x1, 0x2c4250})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000280)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffff000200000000", 0x4c}, {&(0x7f0000000300)="c1b5a686dcd58ab3f62929f65a25da1b5f86b475c868f0365fe7f0a4df1000f86422ef", 0x23}], 0x2)
write$binfmt_elf32(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c46000c0400010000000100000002003e0001000000dd0000003800000045030000080000000500200000000500090008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e00"/2616], 0xa38)
close(r1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r7, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1a, 0x3d}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c880}, 0x4)

3.555531429s ago: executing program 32 (id=541):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x44, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x80000)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0x2, 0x4e21, 0x0, @mcast1, 0x4}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x16a, 0x3, 0x7f, 0x106c, 0xfffffffffffffffa, 0x8000000000000, 0x1000000003, 0x80000, 0x8, 0x0, 0x6, 0x0, 0x7ffe], 0x1, 0x2c4250})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000280)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffff000200000000", 0x4c}, {&(0x7f0000000300)="c1b5a686dcd58ab3f62929f65a25da1b5f86b475c868f0365fe7f0a4df1000f86422ef", 0x23}], 0x2)
write$binfmt_elf32(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c46000c0400010000000100000002003e0001000000dd0000003800000045030000080000000500200000000500090008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e00"/2616], 0xa38)
close(r1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r7, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1a, 0x3d}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c880}, 0x4)

3.430305483s ago: executing program 1 (id=543):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xc4840, 0xa, 0x10}, 0x18) (async)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xc4840, 0xa, 0x10}, 0x18)
r2 = gettid()
fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x3, r2})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x10010, &(0x7f0000000280)=ANY=[])
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000003100)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xb0, 0xf}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x16, &(0x7f0000000040)=@string={0x16, 0x3, "c8d0a915b8dd00"/20}}, {0x0, 0x0}]})
recvfrom(r1, &(0x7f0000000380)=""/100, 0x64, 0x0, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010102}, 0x4, 0x4, 0x0, 0x3}}, 0x80)

2.24728425s ago: executing program 4 (id=546):
syz_usb_connect$cdc_ecm(0x6, 0x53, &(0x7f0000000400)=ANY=[], 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4014)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$igmp6(0xa, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$xdp(0x2c, 0x3, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=<r6=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async)
syz_ublk_setup_queues(r1, r6, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x4000, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0)
r7 = syz_open_dev$usbfs(0x0, 0x10000001d, 0x8041)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect)

2.212798362s ago: executing program 4 (id=547):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', <r2=>0x0, 0x4, 0x10, 0x6, 0x19, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8000, 0x40, 0x713c, 0x6ff}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x6, 0x5, 0x10001, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x1, 0x80, 0xfffffee4, 0x9}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl0\x00', <r5=>0x0, 0x4, 0xfc, 0xc, 0x93a, 0x50, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x4f, 0xfffffffe, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x12)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000480)={0x2, 'ip6gretap0\x00', {0xfffffffd}, 0x9})
socketpair(0x2a, 0x6, 0x7, &(0x7f00000004c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_user\x00', 0x0, 0x0)
r10 = fsopen(&(0x7f0000000540)='ext4\x00', 0x1)
ppoll(&(0x7f0000000580)=[{r9, 0x2001}, {r10, 0x1780}, {r9, 0x1768}, {0xffffffffffffffff, 0x100}, {r8}], 0x5, &(0x7f00000005c0)={0x0, 0x3938700}, &(0x7f0000000600)={[0x5]}, 0x8)
r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r9)
sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r11, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000804}, 0x40)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r7)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r12, &(0x7f0000000900)={&(0x7f00000007c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r13, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x20040845)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x220, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x24008801)
recvmmsg(r7, &(0x7f0000002680)=[{{&(0x7f0000000a80)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b00)=""/239, 0xef}, {&(0x7f0000000c00)=""/47, 0x2f}, {&(0x7f0000000c40)=""/211, 0xd3}, {&(0x7f0000000d40)=""/128, 0x80}, {&(0x7f0000000dc0)=""/225, 0xe1}], 0x5}, 0x5}, {{&(0x7f0000000f40)=@xdp, 0x80, &(0x7f0000001340)=[{&(0x7f0000000fc0)=""/130, 0x82}, {&(0x7f0000001080)=""/182, 0xb6}, {&(0x7f0000001140)=""/28, 0x1c}, {&(0x7f0000001180)=""/89, 0x59}, {&(0x7f0000001200)=""/109, 0x6d}, {&(0x7f0000001280)=""/129, 0x81}], 0x6, &(0x7f00000013c0)=""/213, 0xd5}, 0x5}, {{&(0x7f00000014c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001540)=""/104, 0x68}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002600)=""/127, 0x7f}, 0x3}], 0x3, 0x60, &(0x7f0000002740))
write$binfmt_misc(r0, &(0x7f0000002780)="c70540fe2bf6be68945e4318aca9598394f0581182d311ca6aa2e83cc8bb443e22443f73bc39535ef8314bfbe7ed961d76329917ed37fd839c1e8d026834a92348096d95186ba79466a57a56ef2227cb9ff25a9fde3ad99297537230a07d150817a6ae8717a967d58e1acce4447e4edab5d9a23aa01652d91abc155f56ab1fce23135fc035a1213660fdbf82", 0x8c)
r14 = socket(0x2a, 0x2, 0x3)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000002840)=0x800)
syz_genetlink_get_family_id$team(&(0x7f0000002880), r14)
r15 = openat$zero(0xffffffffffffff9c, &(0x7f00000028c0), 0x10042, 0x0)
r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002940), r14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000002980)={'batadv_slave_1\x00', <r17=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000029c0)={'wg1\x00', <r18=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r15, &(0x7f0000002cc0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002a00)={0x244, r16, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x170, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^]\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7a}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x666e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x20044040}, 0x4000)

2.154312033s ago: executing program 4 (id=548):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15)
pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x2e7a)
socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r1, 0x6000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x103841, 0x186)

2.153396613s ago: executing program 4 (id=549):
r0 = gettid()
tkill(r0, 0x12)
tkill(r0, 0x14)
capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000040)={0x200000, 0x200082, 0x2, 0x0, 0x1, 0x4})
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100))
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003d00), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003d80)={'gre0\x00', &(0x7f0000003d40)={'tunl0\x00', <r5=>0x0, 0x10, 0x10, 0x588, 0x400, {{0x8, 0x4, 0x1, 0x20, 0x20, 0x68, 0x0, 0x6, 0x4, 0x0, @multicast1, @remote, {[@generic={0x7, 0xc, "5a56f8127f536c17e4a5"}]}}}}})
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r8=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0x8, r8}, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003f40)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="70010000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="089ec681ffc790765c9ea8e14b000100", @ANYRES32=r8, @ANYBLOB], 0x170}, 0x1, 0x0, 0x0, 0x44040}, 0x4)
ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000003b40)={0x0, [{0x2, 0xd0, 0x1ff, &(0x7f0000000180)="84f6f86c0ba9e66680d25d679b3ab66a02c285cc34829d5e0d58"}, {0x3, 0x288, 0x8, &(0x7f0000000280)="6c1caab290f22b3014b533db1ca0635a831816c8294ef0fd80c251a50af60b0ed7294e102e74b43b29ddafdbbee38b76f5f75acc38f8692e9d20477bdb49f9e51ca744c5b8bde07408824c8f19b5702a67"}, {0x2, 0x8000, 0x8, &(0x7f0000000300)="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"}, {0x0, 0x7d8, 0x5, &(0x7f0000001300)="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"}, {0x6, 0x6a0, 0x4, &(0x7f0000001400)="5a1734c2c6c66ed9e447a3cbad0b4e5726a5fd73713235d7d4e0da4da3ba7b88250a051d2174893e3fd5de85e33e8c15b43cb0e0299f1b4aaefe1a652c1d729e10e49c1302d40f63cb7220d6da21ee42c53ddbe9546a3a8110747de0e307e9f05b26530d5779aa0c20fe85901cc995cff9f96bddadda562e94fac9f66733e594ebe6d8a7c745735d812af8905ed4469f609c7c5bd27fa503ef52422d59ea56b06f6b3ceae3f771d7a12f5ffdcd304fc7dc29851110c817a401abb66a5a6293ed9ae9a51424d06305cb6917354281312801600863"}, {0x2, 0x520, 0x3, &(0x7f0000001500)="e52796c65cf59a16e58599416da5c653fee3a28a28ea49de24e7652b77960b712894695ba4fd9385f15fcfed0a8db782ac1c49491c267334ca27f67a6195188b4cd957453f634117d3be7358558ebdac03f378d51a1ade03b080a8e29923f5e29c59a84fc37bf01f8b40583f4d5643a036c73b99d92601ec5fdd0a4af9383dad0576d2e226450b429b151796ca43af85f7d170340fd99cf110991a5ea843e85728ee6913"}, {0x3, 0x4c8, 0x6, &(0x7f00000015c0)="459f606bcf935993d281f963fa2d28d780c4b2a281c8f6e9f4056efca71bdf603bddd4b03fde78a8257113aaec6d04096a3a1da458850f67974c7ea1b2077d4d05455d89ba1e98f1ba7149f0346641acfd5cf8e5c05585f7dbebe36089d2a606c92a450026761e0e15fd583aa0b27ec551e9cbea626915e7fe81111e2813e4e85ab1f07ee29f9b40e5db19f6f3bc6e5c53a8ea0dfd036dc432"}, {0x0, 0x470, 0x10, &(0x7f0000003dc0)="fa6a75bcc99a4e773df378e6b8020dc73ea97a8faf9197aacb5a966c7160a13ae1fa2c9a658a0566fd35147d21cacc9a6b2b61719e35b11e37abaab6062058e655909fbbd548cda76c5baf73e5b721d44e253013e5f4c881c80ab3c2413e0074b490dd3a0b53caabe2f69365b8c03646f0819b59105de2b76567a9e8f441928688b1e7451a597b5320c6ec803963"}, {0x2, 0x348, 0xffffffff, &(0x7f0000001740)="f87bdbce303eeee78e64375257eda5c2b40c459c4f9f253fabac36664627cd4480447da8f98942cd57c6e5ea3f83694a68c923c6fc9f3644c5fc0281e8262643f977e9b4c3c826c063d0c34146e47ca575cfeb6ec4244a4e82646f088de3c310013c53a7680705a928"}, {0x1, 0x160, 0x3, &(0x7f00000017c0)="6a20109b21b92b1327fe9300f7520009cf04b951e83722b046523bf05594f490e58df7892a828a757deb0ef8"}, {0x1, 0x8000, 0x10001, &(0x7f0000001800)="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"}, {0x1, 0x8000, 0xc6f, &(0x7f0000002800)="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"}, {0x3, 0x788, 0x800, &(0x7f0000003800)="9e3f3d46b5b44d45ad6c8d27259b955d79a402ae48a4979389a721e3db87ac4ff4a5da893c223e4139bcb2b0f1bdd4fdee9b47164490601acd557957fa36746a0b1175c08adc4fd9f467a05c01781f44cf1710807f13be98bdebea2e8eac681719b99359cb160152a510cfbae0d0b549186420fba5360e1d3bbac4215cc7e5fae8bc3fbcd11cf1117743940a34bef78977917c01cfaa308e3df0b32efc7449ca37c752db1d4291bbac19444d48ea8aaf212c7dcbbafdf08125e75d4997fe692add2d11051b7420c52925d4466c6c20e2132d969ed0ecaac15e623ac5ebf9c7e07c7ac3eb336e165e235faa1fd54f35e286"}, {0x7, 0x478, 0x100, &(0x7f0000003900)="90d69984ca9e2490e669f4927b99d2a2e5e124633e9ef73d194f40e366201a2b8a4bc0ca41b0b5fd61f8a7ba0dce92e69b8ac9de2b2c33b3d649cddbae21a7a06ea2f5df6396438ae5f521fd314106758edcb23d35ff8e96fd2ed40be2043921cbdedd73d12494cbb6487d626e062a99a6f5ecb9538821a0b9416d7ee5fac8971ea77ac8533be980f45e6a009fa27b"}, {0x2, 0x730, 0x1, &(0x7f00000039c0)="e709ba9db9e6ccf605892ac17bbc3668d61479472d501ba1a2085243e39ae7c4e5c27f84596c264ddb64b032cc4da1b19904c58d46a0d529ac32bee03a86d105052388fd6ef7d8fa87f18570197a1b9102487afd86513f72bcf1aa999853a5b0725cb589b01bd9feac193461ad88e3f33d589028f56aaeef066342a6b20144563907dd78c1c1c58e8f6065d03402fefc2eda08e13e4dcec8c81e95c5cd2fa25e6006c66a9eeddad72531e0c6231ae8ae6ddbdc9f7647c7eb9e36f23528243368b3e58f4b22fa6ada62d095ec10a2318353869bccaa72ffc04f59d0e3c05c22079f91456cd362"}, {0x2, 0x320, 0x1000, &(0x7f0000003ac0)="7320d2c389b0548b06d32a8b7bf155b0fd356e10cfcaefbb368d4a65fac8535aa4d1fa84b2f242db34508f34ec16cced3e1fd68172be9c5c48bbe3691bd09dc0143148a9a34aab1a898c5e83b6f5d7048935df5d6a294857cb02d2d4af53163b5eab06f7"}]})
capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f00000000c0)={0x2, 0x401, 0xb, 0xd94, 0xfffff03e, 0x10001})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf4, 0x7fff7ffc}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
syz_open_procfs(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fffffff}]})
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a00150000000000fffffffe0a0000000202000000000000080010800400d00048d43f4a21e6120389221412d635c6490747aa377d8c2c17519d68bc9f023b1976a9609d4bd88b1a3a44cfcea907ec85e4481316fa8737b4"], 0x24}], 0x1e}, 0x800)
ioctl$sock_bt_hci(r9, 0x400448cc, 0x0)

1.637419819s ago: executing program 0 (id=554):
ioperm(0x1, 0x3, 0x163f)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r1, 0x0, 0x0)
ptrace$getregset(0x4204, r0, 0x201, &(0x7f00000001c0)={0x0, 0x300})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020}, 0x2020)
lstat(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioprio_set$uid(0x3, r2, 0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42b}}]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x80000a9}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x3)
r6 = fcntl$dupfd(r5, 0x0, r5)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "922cb9494200", "7d05dacec51d55ff3c13567ddffb04317d0256f6506fca0a5f49cc3c88081372", '\x00', "ffffff7f00"}, 0x38)
socket$netlink(0x10, 0x3, 0x0)

1.29422722s ago: executing program 4 (id=555):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.280942881s ago: executing program 4 (id=556):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8)
ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000980)={0x0, 0x300, 0x80, &(0x7f0000000580)=[0x7fff, 0x4, 0x8, 0x6, 0x3cb3, 0x7f, 0x1, 0x80000000000, 0x80000000, 0x3, 0x5, 0x537, 0x4, 0x4, 0x3eab, 0x1, 0x8d, 0x8f2, 0xf, 0x617, 0x0, 0x8, 0x5, 0x80000001, 0xff, 0x8000000000000000, 0x0, 0xb4d, 0xffffffff, 0xfffffffffffffff5, 0x6, 0x3, 0x59a, 0x3c, 0x8, 0x1, 0x100000001, 0x7f, 0x4, 0x79, 0x1, 0x8, 0xfff, 0x0, 0x2, 0x0, 0x7, 0x5, 0x18, 0xc8, 0x3, 0xffffffffcd0a46ba, 0x8000000000000001, 0xffffffffffffff80, 0x5, 0x9, 0x7, 0x5, 0x5a5a91dd, 0x4, 0x4, 0x8, 0xffffffffffff8391, 0x5, 0x7ff, 0x7fff, 0x7, 0x25, 0x4, 0x8, 0x2, 0x0, 0xb5, 0x5, 0x100000000, 0x1, 0xffffffffffffff01, 0x81, 0x9, 0x5748, 0x80000001, 0x3, 0x5, 0x7, 0xb63, 0xfffffffffffffffb, 0xfffffffffffffff8, 0xc, 0x400, 0xfffffffffffffffa, 0x3, 0x2d2, 0x7f, 0x100000000, 0x1, 0x8, 0x6, 0x80, 0x6, 0x81, 0x1, 0x3, 0x101, 0x9, 0x1, 0x4, 0x7fff, 0x4, 0x9, 0xffffffff, 0x1, 0x8, 0x1, 0x5c, 0x0, 0x2, 0x101, 0x9, 0x8, 0xfffffffffffffffe, 0x2, 0xfffffffffffffffb, 0x6, 0x9, 0x2, 0xc, 0x7, 0x8]})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000087d1ebe2d00000000000109022400010000002009040000040300055b30a908e71def284069ee3409703e4ace84899ee8a0c43f262e6703522c6f3bb2c22f2a000000000000"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000a00)=@attr_other={0x0, 0x80000001, 0x3, &(0x7f00000009c0)=0xffffffffffffffff})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000004c0)={{<r2=>0xffffffffffffffff, &(0x7f0000000000)='\xfe]-./\x00', 0x313242, &(0x7f0000000040)={@align=0x6, {0x3, 0x8, 0xf, 0x9}}, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x1}, 0x3, &(0x7f0000000440)=[{0x3, 0x6, &(0x7f0000000200)='#*+\x00', &(0x7f0000000240)="9f4306b5d3c4649e028c078f05c458263a801e7b5970acfdff62d02c6aee7c2d1a045c39a63ae5aa892f215065e0cfb22e52b252c455cf5e0fe82b02b535b00324d4c4cbada82a05e72f307c58b6f1864ebd008858dcab97724476d8484b5076fe9e94629812102121be88096e63115b139a3bd535a34d702a5355ba076aa8bfff673a558ac3a3a288402ba71666ef6123ce338e487efbe78fb4ee41e1f29e02eccdfa18418d732c", 0xa8, 0x2e}, {0x2, 0x2, &(0x7f0000000300)='\xd5#x\x00', &(0x7f0000000340)="b6e2cf5b0cebaa7a627e3f261260ceebb7634d481b967e96ac5e1ea3db94279ce4f300f377733fd53fe265ad333012391e9052a709683d1b8e1fe4e00622d07dfc3160047ecaa60df0857b9c2c7cea944403d72d4e044372f119b91105bc5e50c1f437275aba2b31a1ddd10de43d0ec40b2a", 0x72, 0x10}, {0x2, 0x80, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="b7e13b", 0x3}]})
write$UHID_DESTROY(r2, &(0x7f0000000540), 0x4)
ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000001a80)={0x2, 0x200, 0x9})
syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000080)={0x40, 0x21, 0x28, {0x28, 0x1, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000a40)={0x8, {"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", 0x1000}}, 0x1006)

761.497607ms ago: executing program 2 (id=557):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x1}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)

710.371268ms ago: executing program 2 (id=558):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15)
pwrite64(r1, &(0x7f0000000200)='\x00', 0x1, 0x2e7a)
socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000280)={&(0x7f0000000240)=[{&(0x7f0000000140)="4d2b9ba76fc3a2584bece454d6f5d3d26b6f0b405c94b3334e01528b0c123b34f6b26d692c3a516a4cbf7e881a65a55aa71ef0453badd220a092e016f63553f0c1e9ed5a5b4120f8a52d1f59b3d21e976f1cb895a63dbbf0f49a8e100fc79373feccb17cb95f37d1c133186524a2fc55c1ac949857354a031c2d8e55e986331a49dc55156506b79f7b715086a54fc759561ecd865e44fb126bc31cfd32ef048590e0a9f766dc4962f0df9cdc04dec1d484c834ef", 0xb4}], 0x1, 0x2, 0x0, 0x897, 0xfa7, 0xd, 0x1, 0xfffffffd})
ftruncate(r2, 0x6000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x103841, 0x186)
remap_file_pages(&(0x7f00003fa000/0x3000)=nil, 0x3000, 0x0, 0x6, 0x2)

710.010738ms ago: executing program 2 (id=559):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
syz_usb_connect(0x0, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060102ef050507240405"], 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x4bc9, 0x200, 0x1, 0x29}, &(0x7f0000c57000), 0x0, 0x0)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000967000/0x1000)=nil, &(0x7f0000a30000/0x2000)=nil, 0x1000, 0x2})

469.763466ms ago: executing program 0 (id=560):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001042086dd"], 0xfdef)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@verity_on}, {@userxattr}], [], 0x2c})

439.936087ms ago: executing program 1 (id=561):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$peeksig(0x4209, r4, &(0x7f0000000000)={0x2, 0x1}, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)=@svm={0xc, 0x1, 0x1080, {0x5000}, {"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"}})
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x40000101, 0x0, 0x80000002}]})
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e"], 0x1c}], 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0x10, r4) (async)
ptrace$peeksig(0x4209, r4, &(0x7f0000000000)={0x2, 0x1}, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)=@svm={0xc, 0x1, 0x1080, {0x5000}, {"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"}}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async)
ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x40000101, 0x0, 0x80000002}]}) (async)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e"], 0x1c}], 0x1}, 0x0) (async)

334.35604ms ago: executing program 0 (id=562):
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x0, &(0x7f0000000f00)})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0)
ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000100081000000000000803f0000000000", @ANYRES32=0x0, @ANYBLOB="1f"], 0x2c}], 0x1}, 0x0)

271.288542ms ago: executing program 1 (id=563):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x8000, 0x8, 0x7f, 0x800, 0x9a, "34e7c4090500"})

264.438012ms ago: executing program 1 (id=564):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0x9bb, 0x4) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setuid(0xee01) (async)
ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

191.478605ms ago: executing program 1 (id=565):
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/rt_cache\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)={0x8c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x24008010)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_usb_connect$uac1(0x0, 0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100030000004035121582400001020301090269000301a640010904000000010100080524010200"], &(0x7f0000000500)={0x0, 0x0, 0x5, 0x0})
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000100)={0x4, 0xffff8001})

185.572645ms ago: executing program 0 (id=566):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 32)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 32)
sendto$inet6(r0, &(0x7f00000002c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e5059bc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c144e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e4205ab5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xa9, 0x850, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/4104, 0x1008, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async, rerun: 32)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0)
shutdown(r1, 0x1)

162.607425ms ago: executing program 0 (id=567):
syz_io_uring_setup(0x1, &(0x7f0000002740)={0x0, 0xe8a8, 0x8, 0x3, 0x167}, &(0x7f00000027c0), &(0x7f0000002800), &(0x7f0000000000))
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000104010200000000000900000a0000050a000200000000ff05000000050001000100000008000340"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4044844)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011000100"], 0x30}], 0x1}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x73)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
rename(&(0x7f0000000380)='./file0\x00', &(0x7f0000000500)='./file1\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000160001d7a26bd005b8c3fd000a0000000c00ca8008000b"], 0x20}}, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=@srh={0x5c, 0x8, 0x4, 0x4, 0xfd, 0x30, 0x2aec, [@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @remote, @mcast2]}, 0x48)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

0s ago: executing program 0 (id=568):
socket$netlink(0x10, 0x3, 0x1c)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x0, 0x1, 0x10, 0xe1d}, {0xe844, 0x2, 0x8, 0x4}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000026c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0f16205f0bfdd3ab77f24e3383fcd971737e6f49d72566cb6ce674e7686b2c1677a35efab85906000000000000008417b691ce1b31132ac6b9e210a14459c790e19102fe5a60601f866de4162042626d80db57690c8e3db021e2c878f4f10227b67cc6c2272bee0c28644c99942144885ef631d5adccc6341db37b5c601fbd8d3550cfdc891a94749eab7b5f2590f33f007d1556be447774f8cbb35a7e268b8d5a03e323ccd983435f6ee60100e321bdc9899edfa15f62990000000000"]) (async)
open(&(0x7f0000000180)='./file0\x00', 0x20000, 0x2)
close_range(r1, 0xffffffffffffffff, 0x200000000000000) (async)
r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3) (async)
read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) (async)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x129402, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200400, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) (async, rerun: 64)
r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x12) (async, rerun: 64)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000280)=0xad, &(0x7f00000002c0)=0x1)
fcntl$setlease(r8, 0x400, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async, rerun: 32)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async, rerun: 32)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r9, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x80000000073ee, 0x9})
fcntl$lock(r9, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4d0, 0xec000000, 0xffd}]}) (async)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x1b) (async)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r10, 0xf503, 0x0) (rerun: 32)

kernel console output (not intermixed with test programs):

04][  T768] veth1_macvtap: entered promiscuous mode
[   35.595242][   T36] audit: type=1400 audit(1781352714.035:216): avc:  denied  { name_bind } for  pid=777 comm="syz.3.126" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   35.670782][  T783] fuse: Bad value for 'group_id'
[   35.681693][  T783] fuse: Bad value for 'group_id'
[   35.737788][  T791] netlink: 'syz.1.130': attribute type 16 has an invalid length.
[   35.971864][  T316] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   35.981900][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   36.142066][  T316] usb 1-1: Using ep0 maxpacket: 16
[   36.148333][  T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.159345][   T10] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[   36.172210][  T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.182575][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   36.192780][  T316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   36.205831][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   36.218779][  T316] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   36.228214][  T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.238265][   T10] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[   36.247383][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.255931][  T316] usb 1-1: config 0 descriptor??
[   36.262975][   T10] usb 2-1: Product: syz
[   36.267157][   T10] usb 2-1: Manufacturer: syz
[   36.275331][   T10] usb 2-1: SerialNumber: syz
[   36.283764][   T10] usb 2-1: config 0 descriptor??
[   36.292290][   T10] usb-storage 2-1:0.0: USB Mass Storage device detected
[   36.302462][   T10] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[   36.489955][  T791] netlink: 'syz.1.130': attribute type 16 has an invalid length.
[   36.504684][  T356] usb 2-1: USB disconnect, device number 11
[   36.542116][  T811] overlayfs: failed to resolve './file2': -2
[   36.552065][  T810] netlink: 'syz.3.135': attribute type 27 has an invalid length.
[   36.593189][  T810] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.600335][  T810] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.653898][  T810] veth0_vlan: left promiscuous mode
[   36.659357][  T810] veth0_vlan: entered promiscuous mode
[   36.665829][  T810] veth1_macvtap: left promiscuous mode
[   36.672128][  T810] veth1_macvtap: entered promiscuous mode
[   36.680704][  T428] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.687777][  T428] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.696355][  T316] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max
[   36.699403][  T428] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.710930][  T428] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.720142][  T316] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max
[   36.734492][  T316] microsoft 0003:045E:07DA.0002: No inputs registered, leaving
[   36.747984][  T316] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   36.760802][  T316] microsoft 0003:045E:07DA.0002: no inputs found
[   36.767357][  T316] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway
[   36.768538][  T824] capability: warning: `syz.3.140' uses 32-bit capabilities (legacy support in use)
[   36.821249][  T828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'.
[   36.851410][  T834] overlayfs: failed to resolve './file2': -2
[   36.881764][  T356] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   36.888287][  T316] usb 1-1: USB disconnect, device number 8
[   36.975371][  T839] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.982562][  T839] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.019989][  T839] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.027097][  T839] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.033122][  T356] usb 2-1: unable to get BOS descriptor or descriptor too short
[   37.035721][  T839] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.042992][  T356] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   37.048976][  T839] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.064035][  T356] usb 2-1: string descriptor 0 read error: -22
[   37.076071][  T356] usb 2-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[   37.079462][  T839] veth0_vlan: left promiscuous mode
[   37.085155][  T356] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3
[   37.090988][  T839] veth0_vlan: entered promiscuous mode
[   37.109220][  T839] veth1_macvtap: left promiscuous mode
[   37.115691][  T839] veth1_macvtap: entered promiscuous mode
[   37.163863][  T845] overlayfs: failed to resolve './bus': -2
[   37.181309][  T847] loop9: detected capacity change from 0 to 7
[   37.293892][  T848] Invalid logical block size (1050184017)
[   37.329694][  T356] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[   37.332437][  T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   37.344614][  T356] usb 2-1: USB disconnect, device number 12
[   37.384999][  T855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.153'.
[   37.404235][  T857] overlayfs: failed to resolve './file2': -2
[   37.521233][  T870] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.528461][  T870] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.652137][  T871] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.659212][  T871] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.684928][  T871] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.692022][  T871] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.708793][  T871] veth0_vlan: left promiscuous mode
[   37.722209][  T871] veth0_vlan: entered promiscuous mode
[   37.730077][  T871] veth1_macvtap: left promiscuous mode
[   37.736807][  T871] veth1_macvtap: entered promiscuous mode
[   37.806756][  T894] GUP no longer grows the stack in syz.3.159 (894): 200000005000-200000008000 (200000004000)
[   37.823362][  T896] overlayfs: failed to resolve './bus': -2
[   37.838136][  T894] CPU: 1 UID: 0 PID: 894 Comm: syz.3.159 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[   37.838168][  T894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   37.838187][  T894] Call Trace:
[   37.838192][  T894]  <TASK>
[   37.838199][  T894]  __dump_stack+0x21/0x30
[   37.838237][  T894]  dump_stack_lvl+0x140/0x1c0
[   37.838261][  T894]  ? __cfi_dump_stack_lvl+0x10/0x10
[   37.838283][  T894]  ? futex_lock_pi_atomic+0xe3/0xcd0
[   37.838310][  T894]  dump_stack+0x19/0x20
[   37.838333][  T894]  fixup_user_fault+0x62a/0x6b0
[   37.838356][  T894]  fault_in_user_writeable+0x75/0xe0
[   37.838381][  T894]  futex_lock_pi+0x2e0/0xa80
[   37.838398][  T894]  ? __cfi_futex_lock_pi+0x10/0x10
[   37.838416][  T894]  ? __cfi_futex_wake_mark+0x10/0x10
[   37.838436][  T894]  ? futex_setup_timer+0xb4/0xd0
[   37.838457][  T894]  ? __cfi_futex_wake_mark+0x10/0x10
[   37.838476][  T894]  ? __cfi_userfaultfd_unmap_complete+0x10/0x10
[   37.838495][  T894]  ? mas_find+0x358/0x5f0
[   37.838516][  T894]  do_futex+0x270/0x510
[   37.838539][  T894]  ? do_vmi_munmap+0x245/0x2e0
[   37.838560][  T894]  ? __cfi_do_futex+0x10/0x10
[   37.838582][  T894]  ? __vm_munmap+0x2de/0x390
[   37.838601][  T894]  __se_sys_futex+0x13c/0x320
[   37.838636][  T894]  ? __x64_sys_futex+0x110/0x110
[   37.838663][  T894]  ? __kasan_check_write+0x18/0x20
[   37.838683][  T894]  __x64_sys_futex+0xe9/0x110
[   37.838707][  T894]  x64_sys_call+0x227f/0x2ee0
[   37.838726][  T894]  do_syscall_64+0x57/0xf0
[   37.838751][  T894]  ? clear_bhb_loop+0x50/0xa0
[   37.838768][  T894]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   37.838793][  T894] RIP: 0033:0x7fa216d9ce59
[   37.838820][  T894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   37.838835][  T894] RSP: 002b:00007fa217c0e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   37.838863][  T894] RAX: ffffffffffffffda RBX: 00007fa217015fa0 RCX: 00007fa216d9ce59
[   37.838878][  T894] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000
[   37.838891][  T894] RBP: 00007fa216e32d6f R08: 0000000000000000 R09: 0000000000000001
[   37.838903][  T894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   37.838915][  T894] R13: 00007fa217016038 R14: 00007fa217015fa0 R15: 00007fff327b2118
[   37.838932][  T894]  </TASK>
[   38.100083][  T904] input: syz1 as /devices/virtual/input/input5
[   38.159083][  T911] validate_nla: 5 callbacks suppressed
[   38.159103][  T911] netlink: 'syz.2.166': attribute type 27 has an invalid length.
[   38.179585][  T911] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.186812][  T911] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.221015][  T912] netlink: 'syz.2.166': attribute type 27 has an invalid length.
[   38.239977][  T912] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.247043][  T912] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.255545][  T912] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.262650][  T912] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.278899][  T912] veth0_vlan: left promiscuous mode
[   38.284963][  T912] veth0_vlan: entered promiscuous mode
[   38.291596][  T912] veth1_macvtap: left promiscuous mode
[   38.298093][  T912] veth1_macvtap: entered promiscuous mode
[   38.381652][  T878] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   38.382490][  T919] /dev/nullb0: Can't lookup blockdev
[   38.389290][  T879] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   38.508081][  T924] overlayfs: failed to resolve './bus': -2
[   38.521828][  T926] syz.3.171 uses obsolete (PF_INET,SOCK_PACKET)
[   38.543861][  T927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'.
[   38.553534][  T927] bridge_slave_1: left allmulticast mode
[   38.559178][  T927] bridge_slave_1: left promiscuous mode
[   38.564849][  T879] usb 1-1: Using ep0 maxpacket: 32
[   38.565213][  T927] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.570046][  T878] usb 2-1: Using ep0 maxpacket: 32
[   38.582605][  T927] bridge_slave_0: left allmulticast mode
[   38.583849][  T879] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[   38.588423][  T927] bridge_slave_0: left promiscuous mode
[   38.601573][  T879] usb 1-1: config 0 has no interface number 0
[   38.603049][  T927] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.608400][  T878] usb 2-1: unable to get BOS descriptor or descriptor too short
[   38.622969][  T879] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[   38.633497][  T879] usb 1-1: config 0 interface 196 has no altsetting 0
[   38.640609][  T878] usb 2-1: config 8 has an invalid interface number: 131 but max is 0
[   38.648905][  T878] usb 2-1: config 8 has no interface number 0
[   38.656318][  T879] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[   38.665470][  T879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.673500][  T879] usb 1-1: Product: syz
[   38.677878][  T878] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=37.6a
[   38.686973][  T879] usb 1-1: Manufacturer: syz
[   38.691625][  T878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.699654][  T879] usb 1-1: SerialNumber: syz
[   38.704704][  T878] usb 2-1: Product: syz
[   38.709069][  T879] usb 1-1: config 0 descriptor??
[   38.714292][  T878] usb 2-1: Manufacturer: syz
[   38.718894][  T878] usb 2-1: SerialNumber: syz
[   38.723799][  T905] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   38.771495][  T877] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   38.939804][  T878] usb_ehset_test 2-1:8.131: probe with driver usb_ehset_test failed with error -32
[   38.949232][  T877] usb 4-1: Using ep0 maxpacket: 8
[   38.958384][  T878] usb 2-1: USB disconnect, device number 13
[   38.965579][  T877] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[   38.975168][  T877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.983203][  T877] usb 4-1: Product: syz
[   38.987371][  T877] usb 4-1: Manufacturer: syz
[   38.991980][  T877] usb 4-1: SerialNumber: syz
[   39.176010][  T905] 9pnet_fd: p9_fd_create_tcp (905): problem connecting socket to 127.0.0.1
[   39.200740][  T877] usb 4-1: MIDIStreaming interface descriptor not found
[   39.210161][  T877] usb 4-1: USB disconnect, device number 8
[   39.261249][  T934] netlink: 148 bytes leftover after parsing attributes in process `syz.2.174'.
[   39.353595][  T879] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[   39.361093][  T879] ipheth 1-1:0.196: probe with driver ipheth failed with error -71
[   39.371401][  T879] usb 1-1: USB disconnect, device number 9
[   39.455750][  T937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=937 comm=syz.1.175
[   39.477828][  T939] netlink: 'syz.1.176': attribute type 27 has an invalid length.
[   39.491108][  T939] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.498289][  T939] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.520014][  T939] macsec0: left allmulticast mode
[   39.530445][  T939] netlink: 'syz.1.176': attribute type 27 has an invalid length.
[   39.548480][  T939] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.555544][  T939] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.564339][  T939] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.571392][  T939] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.584322][  T939] veth0_vlan: left promiscuous mode
[   39.589791][  T939] veth0_vlan: entered promiscuous mode
[   39.596924][  T939] veth1_macvtap: entered promiscuous mode
[   39.871468][  T876] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   39.876678][  T945] rust_binder: Write failure EFAULT in pid:142
[   39.951461][  T879] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   40.041337][  T876] usb 2-1: Using ep0 maxpacket: 16
[   40.048140][  T876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 196, changing to 11
[   40.059835][  T876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   40.074721][  T876] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   40.084110][  T876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.093551][  T876] usb 2-1: config 0 descriptor??
[   40.115492][  T960] netlink: 'syz.2.185': attribute type 27 has an invalid length.
[   40.123513][  T879] usb 4-1: Using ep0 maxpacket: 16
[   40.130269][  T879] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   40.143446][  T879] usb 4-1: config 0 interface 0 has no altsetting 0
[   40.150109][  T879] usb 4-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00
[   40.159472][  T879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.168618][  T879] usb 4-1: config 0 descriptor??
[   40.197612][  T961] netlink: 'syz.2.185': attribute type 27 has an invalid length.
[   40.201558][  T877] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[   40.227383][  T961] veth0_vlan: left promiscuous mode
[   40.233829][  T961] veth0_vlan: entered promiscuous mode
[   40.240528][  T961] veth1_macvtap: left promiscuous mode
[   40.247201][  T961] veth1_macvtap: entered promiscuous mode
[   40.341304][  T877] usb 1-1: device descriptor read/64, error -71
[   40.377522][  T879] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x7
[   40.388131][  T879] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x0
[   40.396976][  T879] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x1
[   40.405587][  T879] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0xd
[   40.418858][  T879] logitech-hidpp-device 0003:046D:0A87.0003: hidraw0: USB HID v0.77 Device [HID 046d:0a87] on usb-dummy_hcd.3-1/input0
[   40.502880][  T876] usb 2-1: string descriptor 0 read error: -71
[   40.510606][  T876] usbhid 2-1:0.0: can't add hid device: -71
[   40.516777][  T876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   40.525695][  T876] usb 2-1: USB disconnect, device number 14
[   40.576978][   T66] usb 4-1: USB disconnect, device number 9
[   40.583270][  T877] usb 1-1: device descriptor read/64, error -71
[   40.821269][  T877] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[   40.951343][  T877] usb 1-1: device descriptor read/64, error -71
[   41.082792][  T990] rust_binder: 107: no such ref 0
[   41.088018][  T990] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[   41.095415][  T990] rust_binder: Write failure EINVAL in pid:107
[   41.097493][   T36] kauditd_printk_skb: 22 callbacks suppressed
[   41.097509][   T36] audit: type=1400 audit(1781352719.535:239): avc:  denied  { read write } for  pid=989 comm="syz.1.194" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   41.133354][   T36] audit: type=1400 audit(1781352719.535:240): avc:  denied  { open } for  pid=989 comm="syz.1.194" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   41.156160][   T36] audit: type=1400 audit(1781352719.545:241): avc:  denied  { ioctl } for  pid=989 comm="syz.1.194" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   41.187955][  T992] netlink: 'syz.3.195': attribute type 27 has an invalid length.
[   41.200942][  T992] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.208148][  T992] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.215619][  T877] usb 1-1: device descriptor read/64, error -71
[   41.239356][  T992] netlink: 'syz.3.195': attribute type 27 has an invalid length.
[   41.256098][  T992] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.263175][  T992] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.272619][  T992] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.279670][  T992] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.292650][  T992] veth0_vlan: left promiscuous mode
[   41.298185][  T992] veth0_vlan: entered promiscuous mode
[   41.304840][  T992] veth1_macvtap: left promiscuous mode
[   41.310858][  T992] veth1_macvtap: entered promiscuous mode
[   41.332053][  T877] usb usb1-port1: attempt power cycle
[   41.341494][  T876] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   41.471213][  T876] usb 2-1: device descriptor read/64, error -71
[   41.601472][  T490] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   41.671206][  T877] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[   41.692247][  T877] usb 1-1: device descriptor read/8, error -71
[   41.711196][  T876] usb 2-1: device descriptor read/64, error -71
[   41.761280][  T490] usb 4-1: Using ep0 maxpacket: 16
[   41.767700][  T490] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   41.780787][  T490] usb 4-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00
[   41.789846][  T490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.798490][  T490] usb 4-1: config 0 descriptor??
[   41.822597][  T877] usb 1-1: device descriptor read/8, error -71
[   41.951310][  T876] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   42.007179][   T36] audit: type=1400 audit(1781352720.445:242): avc:  denied  { append } for  pid=995 comm="syz.3.197" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   42.030235][   T36] audit: type=1400 audit(1781352720.455:243): avc:  denied  { ioctl } for  pid=995 comm="syz.3.197" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   42.061103][  T877] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[   42.081225][  T876] usb 2-1: device descriptor read/64, error -71
[   42.088394][  T877] usb 1-1: device descriptor read/8, error -71
[   42.222072][  T877] usb 1-1: device descriptor read/8, error -71
[   42.231168][  T490] chicony 0003:04F2:1123.0004: ignoring exceeding usage max
[   42.239512][  T490] chicony 0003:04F2:1123.0004: unknown main item tag 0x4
[   42.246588][  T490] chicony 0003:04F2:1123.0004: collection stack underflow
[   42.253910][  T490] chicony 0003:04F2:1123.0004: item 0 0 0 12 parsing failed
[   42.261400][  T490] chicony 0003:04F2:1123.0004: Chicony hid parse failed: -22
[   42.268835][  T490] chicony 0003:04F2:1123.0004: probe with driver chicony failed with error -22
[   42.321070][  T876] usb 2-1: device descriptor read/64, error -71
[   42.331202][  T877] usb usb1-port1: unable to enumerate USB device
[   42.431304][  T876] usb usb2-port1: attempt power cycle
[   42.433420][  T490] usb 4-1: USB disconnect, device number 10
[   42.771018][  T876] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   42.792454][  T876] usb 2-1: device descriptor read/8, error -71
[   42.922158][  T876] usb 2-1: device descriptor read/8, error -71
[   42.965228][ T1005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'.
[   42.974714][   T36] audit: type=1400 audit(1781352721.415:244): avc:  denied  { read } for  pid=1004 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   43.019088][   T36] audit: type=1400 audit(1781352721.455:245): avc:  denied  { read } for  pid=1010 comm="syz.3.203" dev="sockfs" ino=8098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   43.027327][ T1016] netlink: 'syz.0.204': attribute type 27 has an invalid length.
[   43.087291][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.094561][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.147168][ T1019] netlink: 'syz.0.204': attribute type 27 has an invalid length.
[   43.180972][  T876] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   43.196841][ T1019] veth0_vlan: left promiscuous mode
[   43.203213][ T1019] veth0_vlan: entered promiscuous mode
[   43.222266][ T1019] veth1_macvtap: left promiscuous mode
[   43.228562][ T1019] veth1_macvtap: entered promiscuous mode
[   43.231894][  T876] usb 2-1: device descriptor read/8, error -71
[   43.241207][  T438] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.248241][  T438] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.258593][  T438] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.266018][  T438] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.279115][ T1030] netlink: 'syz.3.207': attribute type 11 has an invalid length.
[   43.392640][  T876] usb 2-1: device descriptor read/8, error -71
[   43.501059][  T876] usb usb2-port1: unable to enumerate USB device
[   43.513418][ T1042] fuse: Unknown parameter '000000000000000000000030x0000000000000003'
[   43.560986][  T873] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   43.712074][  T873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.723136][  T873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   43.732951][  T873] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[   43.742149][  T873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.750687][  T873] usb 4-1: config 0 descriptor??
[   43.957798][ T1047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.958762][  T873] arvo 0003:1E7D:30D4.0005: item fetching failed at offset 5/7
[   43.966902][ T1047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.975236][  T873] arvo 0003:1E7D:30D4.0005: parse failed
[   43.987726][  T873] arvo 0003:1E7D:30D4.0005: probe with driver arvo failed with error -22
[   44.172780][ T1055] netlink: 'syz.0.217': attribute type 27 has an invalid length.
[   44.176453][  T873] usb 4-1: USB disconnect, device number 11
[   44.210394][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.217645][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.266850][ T1060] netlink: 'syz.0.217': attribute type 27 has an invalid length.
[   44.296620][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.303736][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.321834][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.328932][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.341695][ T1060] veth0_vlan: left promiscuous mode
[   44.347232][ T1060] veth0_vlan: entered promiscuous mode
[   44.354102][ T1060] veth1_macvtap: left promiscuous mode
[   44.360212][ T1060] veth1_macvtap: entered promiscuous mode
[   44.397994][ T1069] overlayfs: missing 'lowerdir'
[   44.470949][  T490] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[   44.621872][  T490] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[   44.630183][  T490] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[   44.638599][  T490] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[   44.647507][  T490] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[   44.658340][  T490] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[   44.669380][  T888] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   44.676996][  T490] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8
[   44.687827][  T490] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[   44.703919][  T490] usb 2-1: string descriptor 0 read error: -22
[   44.710157][  T490] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[   44.719620][  T490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.728553][  T490] usb 2-1: config 0 descriptor??
[   44.736738][ T1059] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   44.746742][  T490] hub 2-1:0.0: bad descriptor, ignoring hub
[   44.752764][  T490] hub 2-1:0.0: probe with driver hub failed with error -5
[   44.768081][  T490] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6
[   44.781021][    C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1
[   44.853490][  T888] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   44.862613][  T888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.870606][  T888] usb 1-1: Product: syz
[   44.874825][  T888] usb 1-1: Manufacturer: syz
[   44.879419][  T888] usb 1-1: SerialNumber: syz
[   44.950618][  T873] usb 2-1: USB disconnect, device number 19
[   45.010738][ T1062] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   45.104300][  T888] rtl8150 1-1:1.0: couldn't reset the device
[   45.110481][  T888] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[   45.119709][  T888] usb 1-1: USB disconnect, device number 14
[   45.182445][ T1062] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00
[   45.192462][ T1062] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[   45.200559][ T1062] usb 4-1: Product: syz
[   45.207474][ T1062] ftdi_sio 4-1:5.0: FTDI USB Serial Device converter detected
[   45.215823][ T1062] usb 4-1: Detected FT4233HP
[   45.409931][ T1062] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   45.417089][ T1062] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   45.424488][ T1062] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   45.434611][ T1062] usb 4-1: USB disconnect, device number 12
[   45.446530][ T1062] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   45.456175][ T1062] ftdi_sio 4-1:5.0: device disconnected
[   45.614730][ T1086] netlink: 'syz.0.229': attribute type 27 has an invalid length.
[   45.631989][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.639152][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.682726][ T1089] netlink: 'syz.0.229': attribute type 27 has an invalid length.
[   45.714322][ T1089] veth0_vlan: left promiscuous mode
[   45.719897][ T1089] veth0_vlan: entered promiscuous mode
[   45.728442][ T1089] veth1_macvtap: left promiscuous mode
[   45.739401][ T1089] veth1_macvtap: entered promiscuous mode
[   45.748659][  T438] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.755744][  T438] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.763935][  T438] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.771008][  T438] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.787094][   T36] audit: type=1400 audit(1781352724.226:246): avc:  denied  { sqpoll } for  pid=1090 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   45.807106][   T36] audit: type=1400 audit(1781352724.246:247): avc:  denied  { bind } for  pid=1090 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   45.846479][ T1097] overlayfs: missing 'lowerdir'
[   45.871231][   T36] audit: type=1400 audit(1781352724.316:248): avc:  denied  { create } for  pid=1098 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   46.061630][ T1112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1112 comm=syz.0.234
[   46.134107][ T1116] overlayfs: missing 'lowerdir'
[   46.177741][ T1118] netlink: 'syz.0.238': attribute type 27 has an invalid length.
[   46.200697][ T1062] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   46.244482][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.251733][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.260653][ T1088] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[   46.320280][ T1119] netlink: 'syz.0.238': attribute type 27 has an invalid length.
[   46.350583][ T1062] usb 4-1: Using ep0 maxpacket: 32
[   46.356865][ T1062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.380341][ T1062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.395650][ T1062] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   46.397208][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.415590][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.421657][ T1062] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   46.424167][ T1088] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   46.442648][ T1062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.443116][ T1088] usb 2-1: config 0 interface 0 has no altsetting 0
[   46.459228][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.466313][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.474496][ T1088] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[   46.474727][ T1062] usb 4-1: config 0 descriptor??
[   46.488656][ T1088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.497628][ T1088] usb 2-1: config 0 descriptor??
[   46.501469][ T1119] veth0_vlan: left promiscuous mode
[   46.508316][ T1119] veth0_vlan: entered promiscuous mode
[   46.515388][ T1119] veth1_macvtap: left promiscuous mode
[   46.521879][ T1119] veth1_macvtap: entered promiscuous mode
[   46.552181][ T1121] overlayfs: missing 'lowerdir'
[   46.573835][   T36] kauditd_printk_skb: 1 callbacks suppressed
[   46.573851][   T36] audit: type=1400 audit(1781352725.016:250): avc:  denied  { cmd } for  pid=1124 comm="iou-wrk-1125" path="socket:[8772]" dev="sockfs" ino=8772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   46.625088][   T36] audit: type=1400 audit(1781352725.066:251): avc:  denied  { mount } for  pid=1124 comm="syz.2.241" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   46.654245][   T36] audit: type=1400 audit(1781352725.096:252): avc:  denied  { remount } for  pid=1124 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   46.695174][ T1105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.708610][ T1105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.737330][ T1142] netlink: 55 bytes leftover after parsing attributes in process `syz.2.244'.
[   46.770667][   T36] audit: type=1400 audit(1781352725.206:253): avc:  denied  { ioctl } for  pid=1109 comm="syz.1.236" path="net:[4026532297]" dev="nsfs" ino=4026532297 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   46.810530][   T66] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   46.820673][ T1149] overlayfs: missing 'lowerdir'
[   46.856266][ T1154] netlink: 'syz.2.248': attribute type 27 has an invalid length.
[   46.910076][ T1154] netlink: 'syz.2.248': attribute type 27 has an invalid length.
[   46.943508][ T1154] veth0_vlan: left promiscuous mode
[   46.949393][ T1154] veth0_vlan: entered promiscuous mode
[   46.960489][   T66] usb 1-1: Using ep0 maxpacket: 8
[   46.961388][ T1154] veth1_macvtap: left promiscuous mode
[   46.966680][   T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.974300][ T1154] veth1_macvtap: entered promiscuous mode
[   46.988594][   T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   47.008481][ T1088] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.0006/input/input7
[   47.024275][ T1088] uclogic 0003:28BD:0909.0006: input,hidraw0: USB HID v0.04 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0
[   47.036210][   T66] usb 1-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.00
[   47.056722][   T36] audit: type=1400 audit(1781352725.486:254): avc:  denied  { ioctl } for  pid=1104 comm="syz.3.235" path="socket:[10404]" dev="sockfs" ino=10404 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   47.088158][   T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.100691][   T66] usb 1-1: config 0 descriptor??
[   47.108176][ T1160] overlayfs: missing 'lowerdir'
[   47.308077][ T1168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.319007][ T1168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.320285][   T66] hid-generic 0003:0596:0506.0007: unknown main item tag 0x0
[   47.335657][   T66] hid-generic 0003:0596:0506.0007: unknown main item tag 0x0
[   47.347525][   T66] hid-generic 0003:0596:0506.0007: unknown main item tag 0x0
[   47.360476][   T66] hid-generic 0003:0596:0506.0007: unknown main item tag 0x0
[   47.368071][   T66] hid-generic 0003:0596:0506.0007: unknown main item tag 0x0
[   47.375684][   T66] hid-generic 0003:0596:0506.0007: unknown main item tag 0x0
[   47.383307][   T66] hid-generic 0003:0596:0506.0007: unknown main item tag 0x0
[   47.397272][   T66] hid-generic 0003:0596:0506.0007: unknown main item tag 0x0
[   47.409938][   T66] hid-generic 0003:0596:0506.0007: hidraw1: USB HID v0.00 Device [HID 0596:0506] on usb-dummy_hcd.0-1/input0
[   47.519977][   T66] usb 1-1: USB disconnect, device number 15
[   47.791461][  T873] usb 2-1: USB disconnect, device number 20
[   47.808305][   T36] audit: type=1400 audit(1781352726.246:255): avc:  denied  { ioctl } for  pid=1173 comm="syz.1.254" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   48.045926][ T1178] overlayfs: missing 'lowerdir'
[   48.180333][  T873] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   48.332057][  T873] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00
[   48.341253][  T873] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[   48.349379][  T873] usb 2-1: Product: syz
[   48.355924][  T873] ftdi_sio 2-1:5.0: FTDI USB Serial Device converter detected
[   48.363810][  T873] usb 2-1: Detected FT4233HP
[   48.556618][   T36] audit: type=1400 audit(1781352726.996:256): avc:  denied  { set_context_mgr } for  pid=1173 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   48.567245][ T1174] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   48.576510][   T36] audit: type=1400 audit(1781352727.006:257): avc:  denied  { map } for  pid=1173 comm="syz.1.254" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   48.576512][ T1174] rust_binder: 1173:1174 transaction to 1173 failed: BR_DEAD_REPLY
[   48.576542][   T36] audit: type=1400 audit(1781352727.006:258): avc:  denied  { call } for  pid=1173 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   48.588942][  T873] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   48.648635][  T873] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   48.652058][ T1183] netlink: 'syz.0.257': attribute type 27 has an invalid length.
[   48.670816][  T873] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   48.693027][  T873] usb 2-1: USB disconnect, device number 21
[   48.708833][  T873] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   48.718980][ T1183] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.726204][ T1183] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.738557][  T873] ftdi_sio 2-1:5.0: device disconnected
[   48.794928][ T1186] netlink: 'syz.0.257': attribute type 27 has an invalid length.
[   48.832833][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.839950][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.869732][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.876845][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.901194][ T1186] veth0_vlan: left promiscuous mode
[   48.907095][ T1186] veth0_vlan: entered promiscuous mode
[   48.914621][ T1186] veth1_macvtap: left promiscuous mode
[   48.921896][ T1186] veth1_macvtap: entered promiscuous mode
[   49.002363][ T1062] usbhid 4-1:0.0: can't add hid device: -71
[   49.008575][ T1062] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   49.012769][ T1191] overlayfs: missing 'lowerdir'
[   49.020452][ T1062] usb 4-1: USB disconnect, device number 13
[   49.296848][ T1195] netlink: 'syz.1.261': attribute type 4 has an invalid length.
[   49.296883][   T36] audit: type=1400 audit(1781352727.736:259): avc:  denied  { ioctl } for  pid=1194 comm="syz.1.261" path="socket:[10751]" dev="sockfs" ino=10751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   49.342776][  T466] Bluetooth: hci0: Frame reassembly failed (-84)
[   49.360209][ T1062] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[   49.490214][ T1062] usb 4-1: device descriptor read/64, error -71
[   49.740163][ T1062] usb 4-1: device descriptor read/64, error -71
[   49.882715][ T1207] overlayfs: missing 'lowerdir'
[   49.966211][ T1215] netlink: 'syz.1.267': attribute type 27 has an invalid length.
[   49.980134][ T1062] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[   49.993543][ T1215] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.000738][ T1215] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.036119][ T1217] netlink: 'syz.1.267': attribute type 27 has an invalid length.
[   50.065512][ T1217] veth0_vlan: left promiscuous mode
[   50.071110][ T1217] veth0_vlan: entered promiscuous mode
[   50.078012][ T1217] veth1_macvtap: left promiscuous mode
[   50.085141][ T1217] veth1_macvtap: entered promiscuous mode
[   50.092003][  T455] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.099072][  T455] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.107797][  T455] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.114899][  T455] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.122468][ T1062] usb 4-1: device descriptor read/64, error -71
[   50.138811][ T1219] overlayfs: missing 'lowerdir'
[   50.156624][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.163712][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.163736][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.170495][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.177230][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.183646][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.189809][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.196788][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.204527][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.210242][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.216112][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.223211][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.229180][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.240127][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.242977][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.249355][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.370101][ T1062] usb 4-1: device descriptor read/64, error -71
[   50.455953][ T1228] IPv6: Can't replace route, no match found
[   50.480747][ T1062] usb usb4-port1: attempt power cycle
[   50.493728][ T1236] overlayfs: missing 'lowerdir'
[   50.508197][ T1238] mmap: syz.2.275 (1238): VmData 29069312 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[   50.520661][  T885] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[   50.533786][ T1240] netlink: 'syz.2.276': attribute type 27 has an invalid length.
[   50.566625][ T1240] netlink: 'syz.2.276': attribute type 27 has an invalid length.
[   50.587743][ T1240] veth0_vlan: left promiscuous mode
[   50.593454][ T1240] veth0_vlan: entered promiscuous mode
[   50.600114][ T1240] veth1_macvtap: left promiscuous mode
[   50.606241][ T1240] veth1_macvtap: entered promiscuous mode
[   50.627437][ T1242] overlayfs: failed to clone upperpath
[   50.650042][  T885] usb 2-1: device descriptor read/64, error -71
[   50.830093][ T1062] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[   50.851376][ T1062] usb 4-1: device descriptor read/8, error -71
[   50.890091][  T885] usb 2-1: device descriptor read/64, error -71
[   50.954732][ T1260] netlink: 84 bytes leftover after parsing attributes in process `syz.2.282'.
[   50.964191][ T1260] netlink: 64 bytes leftover after parsing attributes in process `syz.2.282'.
[   50.970114][    T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[   50.991124][ T1062] usb 4-1: device descriptor read/8, error -71
[   51.130081][  T885] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   51.138707][    T9] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[   51.151877][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   51.158502][    T9] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[   51.167684][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.176211][    T9] usb 1-1: config 0 descriptor??
[   51.239985][ T1062] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[   51.261021][ T1062] usb 4-1: device descriptor read/8, error -71
[   51.290037][  T885] usb 2-1: device descriptor read/64, error -71
[   51.350020][ T1198] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   51.351862][ T1199] Bluetooth: hci0: command 0x1003 tx timeout
[   51.391033][ T1062] usb 4-1: device descriptor read/8, error -71
[   51.500054][ T1062] usb usb4-port1: unable to enumerate USB device
[   51.529956][  T885] usb 2-1: device descriptor read/64, error -71
[   51.639996][  T885] usb usb2-port1: attempt power cycle
[   51.783462][ T1256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.792072][ T1256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.803795][    T9] usb 1-1: string descriptor 0 read error: -71
[   51.816709][    T9] uclogic 0003:5543:0045.0008: failed retrieving string descriptor #200: -71
[   51.825012][ T1268] overlayfs: missing 'lowerdir'
[   51.832074][    T9] uclogic 0003:5543:0045.0008: failed retrieving pen parameters: -71
[   51.840321][    T9] uclogic 0003:5543:0045.0008: failed probing pen v2 parameters: -71
[   51.853566][    T9] uclogic 0003:5543:0045.0008: failed probing parameters: -71
[   51.861132][    T9] uclogic 0003:5543:0045.0008: probe with driver uclogic failed with error -71
[   51.874353][    T9] usb 1-1: USB disconnect, device number 16
[   51.979963][  T885] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   52.001058][  T885] usb 2-1: device descriptor read/8, error -71
[   52.058378][ T1272] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   52.076520][ T1274] netlink: 'syz.3.287': attribute type 27 has an invalid length.
[   52.089192][ T1274] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.096413][ T1274] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.122872][ T1274] netlink: 'syz.3.287': attribute type 27 has an invalid length.
[   52.137858][  T885] usb 2-1: device descriptor read/8, error -71
[   52.151701][ T1274] veth0_vlan: left promiscuous mode
[   52.157105][ T1274] veth0_vlan: entered promiscuous mode
[   52.163802][ T1274] veth1_macvtap: left promiscuous mode
[   52.169722][ T1274] veth1_macvtap: entered promiscuous mode
[   52.176429][  T455] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.183505][  T455] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.191971][  T455] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.199032][  T455] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.389923][  T885] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   52.410857][  T885] usb 2-1: device descriptor read/8, error -71
[   52.459878][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   52.541165][  T885] usb 2-1: device descriptor read/8, error -71
[   52.599866][  T889] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   52.621072][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.632303][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.642257][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   52.655264][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   52.664389][  T885] usb usb2-port1: unable to enumerate USB device
[   52.671336][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.679845][    T9] usb 4-1: config 0 descriptor??
[   52.759843][  T889] usb 1-1: Using ep0 maxpacket: 32
[   52.766073][  T889] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   52.774218][  T889] usb 1-1: config 0 has no interface number 0
[   52.781657][  T889] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   52.790778][  T889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.798901][  T889] usb 1-1: Product: syz
[   52.803084][  T889] usb 1-1: Manufacturer: syz
[   52.807683][  T889] usb 1-1: SerialNumber: syz
[   52.812873][  T889] usb 1-1: config 0 descriptor??
[   52.818543][  T889] smsc95xx v2.0.0
[   53.088709][    T9] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[   53.097635][    T9] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   53.342169][  T885] usb 4-1: USB disconnect, device number 18
[   53.407535][ T1290] ������: renamed from bond_slave_0 (while UP)
[   53.497206][ T1298] overlayfs: missing 'workdir'
[   53.512145][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   53.512164][   T36] audit: type=1400 audit(1781352731.957:264): avc:  denied  { remount } for  pid=1299 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   53.534182][ T1302] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   53.615245][ T1306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'.
[   53.620989][  T889] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   53.635818][ T1306] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.644313][ T1306] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   53.749676][  T885] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[   53.822238][  T889] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   53.833158][  T889] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[   53.842518][  T889] usb 1-1: USB disconnect, device number 17
[   53.900760][  T885] usb 4-1: config 162 has an invalid interface number: 79 but max is 1
[   53.909047][  T885] usb 4-1: config 162 has an invalid interface number: 183 but max is 1
[   53.918294][  T885] usb 4-1: config 162 has no interface number 0
[   53.925155][  T885] usb 4-1: config 162 has no interface number 1
[   53.929568][ T1309] netlink: 'syz.2.298': attribute type 27 has an invalid length.
[   53.931747][  T885] usb 4-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   53.952225][  T885] usb 4-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[   53.963150][  T885] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   53.974359][  T885] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[   53.985551][  T885] usb 4-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[   53.997432][  T885] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64
[   54.008870][  T885] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10
[   54.020495][  T885] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[   54.030652][  T885] usb 4-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[   54.043960][  T885] usb 4-1: config 162 interface 79 has no altsetting 0
[   54.050869][  T885] usb 4-1: config 162 interface 183 has no altsetting 0
[   54.059538][  T885] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1
[   54.068682][  T885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.077004][  T885] usb 4-1: Product: syz
[   54.081288][  T885] usb 4-1: Manufacturer: syz
[   54.085965][  T885] usb 4-1: SerialNumber: syz
[   54.107186][ T1310] netlink: 'syz.2.298': attribute type 27 has an invalid length.
[   54.131392][ T1310] veth0_vlan: left promiscuous mode
[   54.136972][ T1310] veth0_vlan: entered promiscuous mode
[   54.144475][ T1310] veth1_macvtap: left promiscuous mode
[   54.151323][ T1310] veth1_macvtap: entered promiscuous mode
[   54.175992][ T1312] overlayfs: failed to clone lowerpath
[   54.195742][ T1314] netlink: 9 bytes leftover after parsing attributes in process `syz.2.300'.
[   54.205096][ T1314] gretap0: entered promiscuous mode
[   54.244566][ T1320] overlayfs: missing 'workdir'
[   54.287690][   T36] audit: type=1400 audit(1781352732.727:265): avc:  denied  { mount } for  pid=1323 comm="syz.1.305" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   54.290400][ T1324] overlay: Unknown parameter 'subj_user'
[   54.315708][   T36] audit: type=1400 audit(1781352732.727:266): avc:  denied  { mounton } for  pid=1323 comm="syz.1.305" path="/60/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   54.349468][   T36] audit: type=1400 audit(1781352732.787:267): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   54.355315][ T1300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.378824][ T1329] overlayfs: conflicting options: userxattr,verity=on
[   54.396508][ T1334] netlink: 'syz.2.307': attribute type 27 has an invalid length.
[   54.400405][ T1300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.416481][ T1334] gretap0: left promiscuous mode
[   54.433237][   T36] audit: type=1400 audit(1781352732.867:268): avc:  denied  { setcheckreqprot } for  pid=1337 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   54.453975][   T36] audit: type=1400 audit(1781352732.867:269): avc:  denied  { create } for  pid=1337 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   54.474028][   T36] audit: type=1400 audit(1781352732.877:270): avc:  denied  { read } for  pid=1337 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   54.513225][ T1342] netlink: 'syz.2.307': attribute type 27 has an invalid length.
[   54.543943][ T1342] veth0_vlan: left promiscuous mode
[   54.549371][ T1342] veth0_vlan: entered promiscuous mode
[   54.556529][ T1342] veth1_macvtap: left promiscuous mode
[   54.563345][ T1342] veth1_macvtap: entered promiscuous mode
[   54.606737][ T1348] overlayfs: missing 'workdir'
[   54.625930][ T1352] fuse: Unknown parameter 'euid<00000000000000032768'
[   54.711779][ T1359] fuse: Invalid rootmode
[   54.849550][ T1062] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   54.999559][ T1062] usb 1-1: Using ep0 maxpacket: 32
[   55.008777][ T1350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.018088][ T1350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.032148][ T1062] usb 1-1: unable to get BOS descriptor or descriptor too short
[   55.041097][ T1062] usb 1-1: unable to read config index 0 descriptor/start: -71
[   55.048832][ T1062] usb 1-1: can't read configurations, error -71
[   55.048929][ T1365] overlayfs: conflicting options: userxattr,verity=on
[   55.078063][ T1367] random: crng reseeded on system resumption
[   55.078063][   T36] audit: type=1400 audit(1781352733.517:271): avc:  denied  { append } for  pid=1366 comm="syz.0.319" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   55.271063][ T1370] netlink: 'syz.1.320': attribute type 27 has an invalid length.
[   55.285114][ T1370] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.315699][ T1370] netlink: 'syz.1.320': attribute type 27 has an invalid length.
[   55.334747][ T1370] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.341818][ T1370] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.355352][ T1370] veth0_vlan: left promiscuous mode
[   55.361064][ T1370] veth0_vlan: entered promiscuous mode
[   55.367688][ T1370] veth1_macvtap: left promiscuous mode
[   55.373979][ T1370] veth1_macvtap: entered promiscuous mode
[   55.384977][  T438] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.392073][  T438] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.459510][ T1062] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   55.516339][ T1383] netlink: 'syz.1.322': attribute type 27 has an invalid length.
[   55.539705][   T36] audit: type=1400 audit(1781352733.977:272): avc:  denied  { create } for  pid=1382 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   55.610491][ T1062] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[   55.622885][ T1062] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   55.633435][ T1062] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   55.647741][ T1062] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[   55.656860][ T1062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.664927][ T1062] usb 1-1: Product: syz
[   55.669160][ T1062] usb 1-1: Manufacturer: syz
[   55.674198][ T1062] usb 1-1: SerialNumber: syz
[   55.681701][ T1062] usb 1-1: config 0 descriptor??
[   55.687558][ T1062] usb-storage 1-1:0.0: USB Mass Storage device detected
[   55.696943][ T1387] overlayfs: missing 'lowerdir'
[   55.702601][ T1062] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[   55.731145][   T36] audit: type=1400 audit(1781352734.167:273): avc:  denied  { name_bind } for  pid=1392 comm="syz.1.325" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   55.969446][ T1063] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[   56.119378][ T1063] usb 2-1: Using ep0 maxpacket: 32
[   56.125668][ T1063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.136915][ T1063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.146716][ T1063] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   56.156094][ T1063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.164814][ T1063] usb 2-1: config 0 descriptor??
[   56.171046][ T1063] hub 2-1:0.0: USB hub found
[   56.551818][  T885] pl2303 4-1:162.79: required endpoints missing
[   56.559923][  T885] pl2303 4-1:162.183: pl2303 converter detected
[   56.562915][ T1395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'.
[   56.566578][  T885] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[   56.576818][ T1395] tipc: Failed to remove unknown binding: 66,0,0/0:841674077/841674079
[   56.583960][  T885] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71
[   56.591606][ T1395] tipc: Failed to remove unknown binding: 66,0,0/0:841674077/841674078
[   56.600940][  T885] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[   56.616738][  T885] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71
[   56.625169][  T885] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[   56.635010][  T885] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71
[   56.643609][  T885] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[   56.652254][  T885] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71
[   56.660707][  T885] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0000]: -71
[   56.669550][  T885] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0001]: -71
[   56.678112][  T885] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0002]: -71
[   56.687362][  T885] usb 4-1: pl2303 converter now attached to ttyUSB0
[   56.697572][  T885] usb 4-1: USB disconnect, device number 19
[   56.705906][  T885] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[   56.714904][  T885] pl2303 4-1:162.183: device disconnected
[   57.416257][ T1398] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   57.450389][ T1402] netlink: 'syz.3.329': attribute type 27 has an invalid length.
[   57.466075][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.473293][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.505687][ T1402] netlink: 'syz.3.329': attribute type 27 has an invalid length.
[   57.530443][ T1402] veth0_vlan: left promiscuous mode
[   57.536120][ T1402] veth0_vlan: entered promiscuous mode
[   57.542996][ T1402] veth1_macvtap: left promiscuous mode
[   57.549296][ T1402] veth1_macvtap: entered promiscuous mode
[   57.556095][  T461] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.563205][  T461] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.571997][  T461] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.579059][  T461] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.727548][ T1411] overlayfs: missing 'lowerdir'
[   57.747537][ T1414] overlayfs: failed to resolve './cgroup': -2
[   58.339101][ T1062] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[   58.482013][ T1063] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[   58.491083][ T1063] usbhid 2-1:0.0: can't add hid device: -71
[   58.497024][ T1063] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   58.504789][ T1062] usb 4-1: Using ep0 maxpacket: 8
[   58.517415][    T9] usb 1-1: USB disconnect, device number 19
[   58.518233][ T1062] usb 4-1: unable to get BOS descriptor or descriptor too short
[   58.532170][ T1063] usb 2-1: USB disconnect, device number 26
[   58.542660][ T1421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'.
[   58.543740][ T1062] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[   58.556787][   T36] kauditd_printk_skb: 6 callbacks suppressed
[   58.556802][   T36] audit: type=1326 audit(1781352736.997:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.0.336" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe24b79ce59 code=0x0
[   58.561248][ T1062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.599562][ T1062] usb 4-1: Product: syz
[   58.603616][ T1424] overlayfs: failed to clone upperpath
[   58.603925][ T1062] usb 4-1: Manufacturer: syz
[   58.613858][ T1062] usb 4-1: SerialNumber: syz
[   58.636570][ T1428] netlink: 'syz.2.339': attribute type 27 has an invalid length.
[   58.688363][ T1428] veth0_vlan: left promiscuous mode
[   58.693920][ T1428] veth0_vlan: entered promiscuous mode
[   58.700336][ T1428] veth1_macvtap: left promiscuous mode
[   58.706321][ T1428] veth1_macvtap: entered promiscuous mode
[   58.822474][ T1062] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   58.829434][ T1062] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   58.840829][ T1062] usb 4-1: USB disconnect, device number 20
[   58.850749][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   58.995466][   T36] audit: type=1400 audit(1781352737.427:281): avc:  denied  { map } for  pid=1438 comm="syz.1.342" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   59.019835][   T36] audit: type=1400 audit(1781352737.427:282): avc:  denied  { execute } for  pid=1438 comm="syz.1.342" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   59.131715][ T1441] overlayfs: missing 'lowerdir'
[   59.330970][ T1448] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   59.379203][  T885] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   59.509232][  T885] usb 2-1: device descriptor read/64, error -71
[   59.589633][ T1063] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[   59.740081][ T1063] usb 4-1: descriptor type invalid, skip
[   59.745768][ T1063] usb 4-1: No LPM exit latency info found, disabling LPM.
[   59.754040][ T1063] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config
[   59.758948][  T885] usb 2-1: device descriptor read/64, error -71
[   59.764279][ T1063] usb 4-1: config 24 has 0 interfaces, different from the descriptor's value: 1
[   59.784466][ T1063] usb 4-1: string descriptor 0 read error: -22
[   59.785342][ T1453] validate_nla: 1 callbacks suppressed
[   59.785357][ T1453] netlink: 'syz.2.348': attribute type 27 has an invalid length.
[   59.790747][ T1063] usb 4-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd
[   59.813329][ T1063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.843206][ T1453] netlink: 'syz.2.348': attribute type 27 has an invalid length.
[   59.866081][ T1453] veth0_vlan: left promiscuous mode
[   59.871954][ T1453] veth0_vlan: entered promiscuous mode
[   59.878392][ T1453] veth1_macvtap: left promiscuous mode
[   59.885337][ T1453] veth1_macvtap: entered promiscuous mode
[   59.913092][   T36] audit: type=1400 audit(1781352738.348:283): avc:  denied  { setopt } for  pid=1458 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   59.948157][ T1463] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   59.957084][ T1463] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   60.008957][  T885] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[   60.020571][   T36] audit: type=1400 audit(1781352738.458:284): avc:  denied  { ioctl } for  pid=1464 comm="syz.0.353" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   60.054356][ T1450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.063073][ T1450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.129673][ T1063] usb 4-1: USB disconnect, device number 21
[   60.138896][  T885] usb 2-1: device descriptor read/64, error -71
[   60.379001][  T885] usb 2-1: device descriptor read/64, error -71
[   60.455017][   T36] audit: type=1400 audit(1781352738.888:285): avc:  denied  { connect } for  pid=1469 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   60.474475][   T36] audit: type=1400 audit(1781352738.888:286): avc:  denied  { write } for  pid=1469 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   60.488982][  T885] usb usb2-port1: attempt power cycle
[   60.603997][ T1472] overlayfs: conflicting options: userxattr,verity=on
[   60.674870][ T1476] netlink: 'syz.3.358': attribute type 27 has an invalid length.
[   60.687996][ T1476] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.695175][ T1476] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.722944][ T1476] netlink: 'syz.3.358': attribute type 27 has an invalid length.
[   60.744887][ T1476] veth0_vlan: left promiscuous mode
[   60.750299][ T1476] veth0_vlan: entered promiscuous mode
[   60.756575][ T1476] veth1_macvtap: left promiscuous mode
[   60.763089][ T1476] veth1_macvtap: entered promiscuous mode
[   60.770930][  T461] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.778039][  T461] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.786440][  T461] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.793529][  T461] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.838864][  T885] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[   60.859781][  T885] usb 2-1: device descriptor read/8, error -71
[   60.990453][  T885] usb 2-1: device descriptor read/8, error -71
[   61.029930][ T1062] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[   61.188836][ T1062] usb 4-1: Using ep0 maxpacket: 32
[   61.195222][ T1062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.206174][ T1062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.215955][ T1062] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   61.228792][  T885] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[   61.228982][ T1062] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[   61.245506][ T1062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.249790][  T885] usb 2-1: device descriptor read/8, error -71
[   61.260555][ T1062] usb 4-1: config 0 descriptor??
[   61.389765][  T885] usb 2-1: device descriptor read/8, error -71
[   61.498854][  T885] usb usb2-port1: unable to enumerate USB device
[   61.664616][ T1485] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   61.673646][ T1485] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   61.683026][ T1062] pantherlord 0003:0810:0002.000A: unknown main item tag 0x0
[   61.690774][ T1062] pantherlord 0003:0810:0002.000A: unknown main item tag 0x0
[   61.698414][ T1062] pantherlord 0003:0810:0002.000A: unknown main item tag 0x0
[   61.705907][ T1062] pantherlord 0003:0810:0002.000A: unknown main item tag 0x0
[   61.713576][ T1062] pantherlord 0003:0810:0002.000A: item fetching failed at offset 24/40
[   61.722106][ T1062] pantherlord 0003:0810:0002.000A: parse failed
[   61.728364][ T1062] pantherlord 0003:0810:0002.000A: probe with driver pantherlord failed with error -22
[   62.170800][   T36] audit: type=1400 audit(1781352740.608:287): avc:  denied  { accept } for  pid=1493 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   62.190357][   T36] audit: type=1400 audit(1781352740.608:288): avc:  denied  { ioctl } for  pid=1493 comm="syz.1.364" path="socket:[12496]" dev="sockfs" ino=12496 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   62.210799][ T1499] overlayfs: conflicting options: userxattr,verity=on
[   62.215156][   T36] audit: type=1400 audit(1781352740.608:289): avc:  denied  { bind } for  pid=1493 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   62.381766][  T885] usb 4-1: USB disconnect, device number 22
[   62.392975][ T1504] netlink: 'syz.3.367': attribute type 27 has an invalid length.
[   62.405880][ T1504] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.413083][ T1504] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.439570][ T1504] netlink: 'syz.3.367': attribute type 27 has an invalid length.
[   62.462420][ T1504] veth0_vlan: left promiscuous mode
[   62.467787][ T1504] veth0_vlan: entered promiscuous mode
[   62.474716][ T1504] veth1_macvtap: left promiscuous mode
[   62.480775][ T1504] veth1_macvtap: entered promiscuous mode
[   62.489048][  T453] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.496147][  T453] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.504440][  T453] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.511523][  T453] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.512641][ T1506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1506 comm=syz.3.368
[   62.594094][ T1509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52217 sclass=netlink_route_socket pid=1509 comm=syz.2.369
[   62.848753][  T885] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[   62.863973][ T1513] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   62.873101][ T1513] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   62.988707][  T885] usb 4-1: device descriptor read/64, error -71
[   63.228553][  T885] usb 4-1: device descriptor read/64, error -71
[   63.382428][ T1520] overlayfs: conflicting options: userxattr,verity=on
[   63.450430][ T1526] netlink: 'syz.2.377': attribute type 27 has an invalid length.
[   63.468576][  T885] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[   63.491024][ T1526] netlink: 'syz.2.377': attribute type 27 has an invalid length.
[   63.513924][ T1526] veth0_vlan: left promiscuous mode
[   63.519378][ T1526] veth0_vlan: entered promiscuous mode
[   63.525817][ T1526] veth1_macvtap: left promiscuous mode
[   63.532097][ T1526] veth1_macvtap: entered promiscuous mode
[   63.598476][  T885] usb 4-1: device descriptor read/64, error -71
[   63.838456][  T885] usb 4-1: device descriptor read/64, error -71
[   63.842894][ T1539] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   63.853762][ T1539] overlayfs: conflicting options: userxattr,verity=on
[   63.888493][ T1063] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   63.948529][  T885] usb usb4-port1: attempt power cycle
[   64.038422][ T1063] usb 1-1: Using ep0 maxpacket: 32
[   64.044638][ T1063] usb 1-1: unable to get BOS descriptor set
[   64.052223][ T1063] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 114, changing to 7
[   64.063313][ T1063] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   64.083269][ T1063] usb 1-1: string descriptor 0 read error: -22
[   64.083982][ T1548] netlink: 'syz.2.386': attribute type 27 has an invalid length.
[   64.097324][ T1063] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[   64.106424][ T1063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.141333][ T1548] netlink: 'syz.2.386': attribute type 27 has an invalid length.
[   64.148503][  T886] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[   64.166344][ T1548] veth0_vlan: left promiscuous mode
[   64.173000][ T1548] veth0_vlan: entered promiscuous mode
[   64.179999][ T1548] veth1_macvtap: left promiscuous mode
[   64.186229][ T1548] veth1_macvtap: entered promiscuous mode
[   64.288682][  T885] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[   64.309445][  T886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   64.320508][  T886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.322904][ T1534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.330401][  T886] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   64.340219][ T1534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.347990][  T886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.364082][  T885] usb 4-1: device descriptor read/8, error -71
[   64.371673][  T886] usb 2-1: config 0 descriptor??
[   64.398901][ T1063] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   64.412068][ T1063] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   64.428276][ T1063] usb 1-1: USB disconnect, device number 20
[   64.500001][  T885] usb 4-1: device descriptor read/8, error -71
[   64.728332][ T1063] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   64.738506][  T885] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[   64.759299][  T885] usb 4-1: device descriptor read/8, error -71
[   64.780878][  T886] hid-generic 0003:04F3:0755.000B: unknown main item tag 0x0
[   64.788700][  T886] hid-generic 0003:04F3:0755.000B: unknown main item tag 0x0
[   64.796245][  T886] hid-generic 0003:04F3:0755.000B: failed to start in urb: -90
[   64.804517][  T886] hid-generic 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[   64.885772][ T1570] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   64.888310][ T1063] usb 1-1: Using ep0 maxpacket: 16
[   64.894860][ T1570] overlayfs: conflicting options: userxattr,verity=on
[   64.901139][ T1063] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24
[   64.907450][  T885] usb 4-1: device descriptor read/8, error -71
[   64.919821][ T1063] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7
[   64.936787][ T1063] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 95, changing to 7
[   64.949442][ T1063] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   64.958746][ T1063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.963336][   T36] kauditd_printk_skb: 1 callbacks suppressed
[   64.963352][   T36] audit: type=1400 audit(1781352743.398:291): avc:  denied  { getopt } for  pid=1571 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   64.966944][ T1063] usb 1-1: Product: syz
[   64.993138][  T886] usb 2-1: USB disconnect, device number 31
[   64.998035][ T1063] usb 1-1: Manufacturer: syz
[   65.007070][ T1063] usb 1-1: SerialNumber: syz
[   65.029274][  T885] usb usb4-port1: unable to enumerate USB device
[   65.199560][ T1574] netlink: 'syz.2.394': attribute type 2 has an invalid length.
[   65.207249][ T1574] netlink: 1 bytes leftover after parsing attributes in process `syz.2.394'.
[   65.218450][ T1566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.227010][ T1566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.238994][ T1063] usb 1-1: 1:1 : incorrect wMaxPacketSize for BADD profile
[   65.246509][ T1063] usb 1-1: incorrect wMaxPacketSize 0x3ff for BADD profile
[   65.255207][ T1063] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[   65.267162][ T1063] usb 1-1: USB disconnect, device number 21
[   65.276663][  T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   65.525337][ T1580] netlink: 'syz.3.396': attribute type 27 has an invalid length.
[   65.538949][ T1580] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.546398][ T1580] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.572581][ T1580] netlink: 'syz.3.396': attribute type 27 has an invalid length.
[   65.594810][ T1580] veth0_vlan: left promiscuous mode
[   65.600284][ T1580] veth0_vlan: entered promiscuous mode
[   65.606946][ T1580] veth1_macvtap: left promiscuous mode
[   65.613470][ T1580] veth1_macvtap: entered promiscuous mode
[   65.621770][  T461] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.628852][  T461] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.637140][  T461] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.644237][  T461] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.728766][   T36] audit: type=1400 audit(1781352744.168:292): avc:  denied  { block_suspend } for  pid=1585 comm="syz.2.398" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   65.759165][ T1588] overlayfs: failed to clone upperpath
[   65.777827][ T1593] overlayfs: conflicting options: userxattr,verity=on
[   65.815815][ T1604] netlink: 'syz.2.405': attribute type 27 has an invalid length.
[   65.847785][ T1604] netlink: 'syz.2.405': attribute type 27 has an invalid length.
[   65.858189][  T885] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[   65.876238][ T1604] veth0_vlan: left promiscuous mode
[   65.882091][ T1604] veth0_vlan: entered promiscuous mode
[   65.888774][ T1604] veth1_macvtap: left promiscuous mode
[   65.894852][ T1604] veth1_macvtap: entered promiscuous mode
[   65.900730][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[   66.029333][  T885] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[   66.040382][  T885] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[   66.048218][ T1063] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   66.059242][  T885] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[   66.068906][  T885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.076926][  T885] usb 2-1: Product: syz
[   66.081498][  T885] usb 2-1: Manufacturer: syz
[   66.086158][  T885] usb 2-1: SerialNumber: syz
[   66.091551][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[   66.100125][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.110314][    T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   66.116313][   T36] audit: type=1326 audit(1781352744.548:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1608 comm="syz.2.407" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5b199ce59 code=0x0
[   66.119299][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   66.156112][    T9] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[   66.165215][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.173702][    T9] usb 4-1: Product: syz
[   66.177887][    T9] usb 4-1: Manufacturer: syz
[   66.182514][    T9] usb 4-1: SerialNumber: syz
[   66.219587][ T1063] usb 1-1: unable to get BOS descriptor or descriptor too short
[   66.229427][ T1063] usb 1-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[   66.238691][ T1063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.246702][ T1063] usb 1-1: Product: ⎄⇿穱㰰朄ບ䵑క筼嫮桙ꞕ婊僻놌溆福瓘꨾㥔ὑ洓싩뛆
[   66.257457][ T1063] usb 1-1: Manufacturer: ⩇불斈풯㽅斂嗗ጩ迩
[   66.264987][ T1063] usb 1-1: SerialNumber: syz
[   66.393288][    T9] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor
[   66.401947][    T9] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 0
[   66.409281][    T9] usb 4-1: 1:1 : unsupported sample bitwidth 62 in 0 bytes
[   66.416567][    T9] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[   66.426906][    T9] usb 4-1: unit 2 not found!
[   66.431606][    T9] usb 4-1: unit 0 not found!
[   66.441640][    T9] usb 4-1: USB disconnect, device number 27
[   66.455011][  T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   66.480503][ T1063] usb 1-1: USB disconnect, device number 22
[   66.491948][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   66.777477][   T36] audit: type=1326 audit(1781352745.208:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.2.408" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5b199ce59 code=0x0
[   66.829670][   T36] audit: type=1326 audit(1781352745.268:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.2.408" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b199ce59 code=0x7ffc0000
[   66.855020][   T36] audit: type=1326 audit(1781352745.268:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.2.408" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b199ce59 code=0x7ffc0000
[   66.880508][   T36] audit: type=1326 audit(1781352745.268:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.2.408" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b199ce59 code=0x7ffc0000
[   66.905892][   T36] audit: type=1326 audit(1781352745.268:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.2.408" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b199ce59 code=0x7ffc0000
[   66.931467][   T36] audit: type=1326 audit(1781352745.268:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.2.408" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa5b199ce59 code=0x7ffc0000
[   66.957010][   T36] audit: type=1326 audit(1781352745.268:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.2.408" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b199ce59 code=0x7ffc0000
[   66.991559][ T1622] FAULT_INJECTION: forcing a failure.
[   66.991559][ T1622] name failslab, interval 1, probability 0, space 0, times 1
[   67.004412][ T1622] CPU: 0 UID: 0 PID: 1622 Comm: syz.3.411 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[   67.004431][ T1622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   67.004438][ T1622] Call Trace:
[   67.004442][ T1622]  <TASK>
[   67.004447][ T1622]  __dump_stack+0x21/0x30
[   67.004467][ T1622]  dump_stack_lvl+0x140/0x1c0
[   67.004481][ T1622]  ? __cfi_dump_stack_lvl+0x10/0x10
[   67.004495][ T1622]  ? __kasan_check_write+0x18/0x20
[   67.004506][ T1622]  ? proc_fail_nth_write+0x184/0x220
[   67.004524][ T1622]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   67.004538][ T1622]  dump_stack+0x19/0x20
[   67.004551][ T1622]  should_fail_ex+0x3d7/0x530
[   67.004564][ T1622]  should_failslab+0xac/0x100
[   67.004576][ T1622]  kmem_cache_alloc_noprof+0x42/0x410
[   67.004588][ T1622]  ? getname_flags+0xc5/0x700
[   67.004600][ T1622]  getname_flags+0xc5/0x700
[   67.004610][ T1622]  ? __cfi_mutex_unlock+0x10/0x10
[   67.004622][ T1622]  getname+0x1b/0x30
[   67.004632][ T1622]  do_sys_openat2+0xda/0x1d0
[   67.004652][ T1622]  ? fput+0x1a4/0x240
[   67.004665][ T1622]  ? do_sys_open+0x100/0x100
[   67.004678][ T1622]  ? ksys_write+0x1f3/0x260
[   67.004689][ T1622]  ? __cfi_ksys_write+0x10/0x10
[   67.004699][ T1622]  __x64_sys_openat+0x13a/0x170
[   67.004714][ T1622]  x64_sys_call+0xe69/0x2ee0
[   67.004723][ T1622]  do_syscall_64+0x57/0xf0
[   67.004742][ T1622]  ? clear_bhb_loop+0x50/0xa0
[   67.004760][ T1622]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   67.004784][ T1622] RIP: 0033:0x7fa216d9ce59
[   67.004799][ T1622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.004810][ T1622] RSP: 002b:00007fa217c0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   67.004832][ T1622] RAX: ffffffffffffffda RBX: 00007fa217015fa0 RCX: 00007fa216d9ce59
[   67.004845][ T1622] RDX: 0000000000103841 RSI: 0000200000000400 RDI: ffffffffffffff9c
[   67.004858][ T1622] RBP: 00007fa217c0e090 R08: 0000000000000000 R09: 0000000000000000
[   67.004871][ T1622] R10: 0000000000000186 R11: 0000000000000246 R12: 0000000000000001
[   67.004881][ T1622] R13: 00007fa217016038 R14: 00007fa217015fa0 R15: 00007fff327b2118
[   67.004896][ T1622]  </TASK>
[   67.239454][ T1628] overlayfs: conflicting options: userxattr,verity=on
[   67.239863][ T1626] 9pnet_fd: Insufficient options for proto=fd
[   67.319833][ T1633] overlayfs: conflicting options: userxattr,verity=on
[   67.443614][ T1640] netlink: 'syz.3.419': attribute type 27 has an invalid length.
[   67.457098][ T1640] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.464279][ T1640] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.491495][ T1640] netlink: 'syz.3.419': attribute type 27 has an invalid length.
[   67.509512][ T1063] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[   67.509737][ T1640] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.524217][ T1640] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.533173][ T1640] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.540214][ T1640] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.553837][ T1640] veth0_vlan: left promiscuous mode
[   67.559553][ T1640] veth0_vlan: entered promiscuous mode
[   67.566427][ T1640] veth1_macvtap: left promiscuous mode
[   67.572872][ T1640] veth1_macvtap: entered promiscuous mode
[   67.628510][ T1646] overlayfs: failed to clone upperpath
[   67.670134][ T1063] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   67.670785][ T1657] overlayfs: failed to clone upperpath
[   67.681234][ T1063] usb 1-1: config 0 interface 0 has no altsetting 0
[   67.693328][ T1063] usb 1-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00
[   67.702412][ T1063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.712457][ T1063] usb 1-1: config 0 descriptor??
[   67.713549][ T1659] overlayfs: conflicting options: userxattr,verity=on
[   67.769025][ T1665] overlayfs: conflicting options: userxattr,verity=on
[   67.868000][  T886] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[   68.017941][  T886] usb 4-1: Using ep0 maxpacket: 32
[   68.024149][  T886] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   68.032512][  T886] usb 4-1: config 0 has no interface number 0
[   68.040160][  T886] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   68.049284][  T886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.057299][  T886] usb 4-1: Product: syz
[   68.061682][  T886] usb 4-1: Manufacturer: syz
[   68.066298][  T886] usb 4-1: SerialNumber: syz
[   68.071903][  T886] usb 4-1: config 0 descriptor??
[   68.077727][  T886] smsc95xx v2.0.0
[   68.127302][ T1063] usbhid 1-1:0.0: can't add hid device: -71
[   68.133418][ T1063] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   68.142475][ T1063] usb 1-1: USB disconnect, device number 23
[   68.298642][ T1671] netlink: 'syz.2.431': attribute type 27 has an invalid length.
[   68.334778][ T1671] netlink: 'syz.2.431': attribute type 27 has an invalid length.
[   68.359667][ T1671] veth0_vlan: left promiscuous mode
[   68.365234][ T1671] veth0_vlan: entered promiscuous mode
[   68.372108][ T1671] veth1_macvtap: left promiscuous mode
[   68.378555][ T1671] veth1_macvtap: entered promiscuous mode
[   68.403270][ T1673] overlayfs: failed to clone upperpath
[   68.528703][  T885] usb 2-1: Can't get UAC3 power state for id 10
[   68.548566][  T885] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[   68.561328][  T885] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[   68.581854][  T885] usb 2-1: USB disconnect, device number 32
[   68.602025][  T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   68.881052][  T886] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[   68.892987][  T886] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   68.902965][  T886] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   68.913862][  T886] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[   68.923092][  T886] usb 4-1: USB disconnect, device number 28
[   68.959384][ T1688] overlayfs: conflicting options: userxattr,verity=on
[   68.991657][ T1694] netlink: 'syz.2.440': attribute type 27 has an invalid length.
[   69.032712][ T1694] veth0_vlan: left promiscuous mode
[   69.038610][ T1694] veth0_vlan: entered promiscuous mode
[   69.044875][ T1694] veth1_macvtap: left promiscuous mode
[   69.051168][ T1694] veth1_macvtap: entered promiscuous mode
[   69.463832][ T1063] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[   69.521999][ T1702] dummy0: entered allmulticast mode
[   69.538177][ T1063] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   69.717627][ T1715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.728114][ T1715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.837703][ T1063] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[   69.917736][  T873] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[   69.957743][  T886] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[   69.989298][ T1063] usb 1-1: unable to get BOS descriptor or descriptor too short
[   69.997739][ T1063] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.008034][ T1063] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   70.018942][ T1063] usb 1-1: string descriptor 0 read error: -22
[   70.025142][ T1063] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[   70.034259][ T1063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.044273][ T1063] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[   70.068132][  T873] usb 4-1: Using ep0 maxpacket: 16
[   70.074273][  T873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   70.087202][  T873] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[   70.096297][  T873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.097651][  T886] usb 2-1: device descriptor read/64, error -71
[   70.108428][  T873] usb 4-1: config 0 descriptor??
[   70.187508][ T1718] netlink: 64 bytes leftover after parsing attributes in process `syz.2.449'.
[   70.197233][ T1718] overlayfs: conflicting options: userxattr,verity=on
[   70.213344][ T1720] validate_nla: 1 callbacks suppressed
[   70.213364][ T1720] netlink: 'syz.2.450': attribute type 27 has an invalid length.
[   70.244214][ T1063] usb 1-1: unit 2 not found!
[   70.248913][ T1063] usb 1-1: unit 0 not found!
[   70.260663][ T1063] usb 1-1: USB disconnect, device number 24
[   70.270503][ T1721] netlink: 'syz.2.450': attribute type 27 has an invalid length.
[   70.296144][ T1721] veth0_vlan: left promiscuous mode
[   70.302053][ T1721] veth0_vlan: entered promiscuous mode
[   70.308763][ T1721] veth1_macvtap: left promiscuous mode
[   70.314748][ T1721] veth1_macvtap: entered promiscuous mode
[   70.382621][  T886] usb 2-1: device descriptor read/64, error -71
[   70.627681][  T886] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[   70.742681][ T1739] overlayfs: failed to clone upperpath
[   70.749861][  T873] usbhid 4-1:0.0: can't add hid device: -71
[   70.772051][  T873] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   70.788966][  T873] usb 4-1: USB disconnect, device number 29
[   70.792964][  T886] usb 2-1: device descriptor read/64, error -71
[   70.825223][ T1752] netlink: 'syz.0.461': attribute type 27 has an invalid length.
[   70.841332][ T1752] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.848508][ T1752] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.878638][ T1752] netlink: 'syz.0.461': attribute type 27 has an invalid length.
[   70.896298][ T1752] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.903375][ T1752] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.912036][ T1752] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.919086][ T1752] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.931894][ T1752] veth0_vlan: left promiscuous mode
[   70.937681][ T1752] veth0_vlan: entered promiscuous mode
[   70.944268][ T1752] veth1_macvtap: left promiscuous mode
[   70.950711][ T1752] veth1_macvtap: entered promiscuous mode
[   71.047598][  T886] usb 2-1: device descriptor read/64, error -71
[   71.167943][  T886] usb usb2-port1: attempt power cycle
[   71.325910][ T1759] x_tables: unsorted entry at hook 2
[   71.486427][   T36] kauditd_printk_skb: 535 callbacks suppressed
[   71.486444][   T36] audit: type=1326 audit(1781352749.919:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1764 comm="syz.3.466" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa216d9ce59 code=0x0
[   71.517560][  T886] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[   71.538752][  T886] usb 2-1: device descriptor read/8, error -71
[   71.669403][  T886] usb 2-1: device descriptor read/8, error -71
[   71.792963][ T1768] overlay: ./file1 is not a directory
[   71.818925][ T1772] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   71.841677][ T1774] netlink: 'syz.0.470': attribute type 27 has an invalid length.
[   71.862494][ T1774] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.869645][ T1774] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.895797][ T1774] netlink: 'syz.0.470': attribute type 27 has an invalid length.
[   71.903269][ T1776] overlayfs: conflicting options: userxattr,verity=on
[   71.908876][  T886] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[   71.935468][ T1774] veth0_vlan: left promiscuous mode
[   71.938502][  T886] usb 2-1: device descriptor read/8, error -71
[   71.941108][ T1774] veth0_vlan: entered promiscuous mode
[   71.953834][ T1774] veth1_macvtap: left promiscuous mode
[   71.959750][ T1774] veth1_macvtap: entered promiscuous mode
[   71.966774][  T317] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.973833][  T317] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.982493][  T317] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.989555][  T317] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.016770][ T1778] fuse: Invalid rootmode
[   72.017309][ T1784] SELinux:  policydb version 2052740701 does not match my version range 15-33
[   72.021153][   T36] audit: type=1400 audit(1781352750.449:837): avc:  denied  { load_policy } for  pid=1782 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   72.030685][ T1784] SELinux: failed to load policy
[   72.089126][  T886] usb 2-1: device descriptor read/8, error -71
[   72.197514][  T886] usb usb2-port1: unable to enumerate USB device
[   72.264738][ T1795] netlink: 'syz.0.477': attribute type 4 has an invalid length.
[   72.577421][  T886] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[   72.605909][ T1807] netlink: 'syz.3.483': attribute type 27 has an invalid length.
[   72.619496][ T1807] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.626677][ T1807] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.653862][ T1807] netlink: 'syz.3.483': attribute type 27 has an invalid length.
[   72.674920][ T1807] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.682010][ T1807] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.690616][ T1807] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.697687][ T1807] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.710256][ T1807] veth0_vlan: left promiscuous mode
[   72.715798][ T1807] veth0_vlan: entered promiscuous mode
[   72.723371][  T886] usb 1-1: device descriptor read/64, error -71
[   72.725097][ T1807] veth1_macvtap: left promiscuous mode
[   72.741719][ T1807] veth1_macvtap: entered promiscuous mode
[   72.767124][ T1819] rust_binder: Write failure EFAULT in pid:281
[   72.987350][  T886] usb 1-1: device descriptor read/64, error -71
[   73.045744][ T1831] overlayfs: conflicting options: userxattr,verity=on
[   73.147345][  T885] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[   73.237366][  T886] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[   73.298385][  T885] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15
[   73.314804][  T885] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   73.323948][  T885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   73.332280][  T885] usb 2-1: SerialNumber: syz
[   73.367261][  T886] usb 1-1: device descriptor read/64, error -71
[   73.457414][  T889] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[   73.587254][  T889] usb 4-1: device descriptor read/64, error -71
[   73.607233][  T886] usb 1-1: device descriptor read/64, error -71
[   73.717392][  T886] usb usb1-port1: attempt power cycle
[   73.827339][  T889] usb 4-1: device descriptor read/64, error -71
[   73.850289][ T1843] netlink: 'syz.2.495': attribute type 27 has an invalid length.
[   73.903578][ T1843] veth0_vlan: left promiscuous mode
[   73.910637][ T1843] veth0_vlan: entered promiscuous mode
[   73.917133][ T1843] veth1_macvtap: left promiscuous mode
[   73.923297][ T1843] veth1_macvtap: entered promiscuous mode
[   73.943642][  T885] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42
[   73.965174][   T36] audit: type=1400 audit(1781352752.399:838): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   73.968483][ T1848] overlayfs: failed to clone upperpath
[   74.001359][   T36] audit: type=1400 audit(1781352752.429:839): avc:  denied  { search } for  pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.024410][   T36] audit: type=1400 audit(1781352752.429:840): avc:  denied  { read } for  pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=2138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   74.049450][   T36] audit: type=1400 audit(1781352752.429:841): avc:  denied  { open } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   74.075162][   T36] audit: type=1400 audit(1781352752.429:842): avc:  denied  { getattr } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   74.080394][  T886] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[   74.110913][  T889] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[   74.132211][   T36] audit: type=1400 audit(1781352752.469:843): avc:  denied  { read } for  pid=1852 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.167901][  T886] usb 1-1: device descriptor read/8, error -71
[   74.169624][ T1816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.186469][ T1816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.194654][   T36] audit: type=1400 audit(1781352752.469:844): avc:  denied  { open } for  pid=1852 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.222842][ T1816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.231589][ T1816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.241174][   T36] audit: type=1400 audit(1781352752.469:845): avc:  denied  { getattr } for  pid=1852 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.298890][  T889] usb 4-1: device descriptor read/64, error -71
[   74.338877][ T1871] mmap: syz.2.501 (1871) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   74.385412][  T886] usb 1-1: device descriptor read/8, error -71
[   74.435295][ T1874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1874 comm=syz.2.502
[   74.449166][ T1061] usb 2-1: USB disconnect, device number 37
[   74.571295][ T1061] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device
[   74.582551][    C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending?
[   74.634998][ T1878] veth0_vlan: left promiscuous mode
[   74.647118][  T889] usb 4-1: device descriptor read/64, error -71
[   74.648901][ T1878] veth0_vlan: entered promiscuous mode
[   74.667451][ T1878] veth1_macvtap: left promiscuous mode
[   74.675019][ T1878] veth1_macvtap: entered promiscuous mode
[   74.727137][  T886] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[   74.738649][ T1895] overlayfs: failed to resolve './file0/file1': -2
[   74.748159][  T886] usb 1-1: device descriptor read/8, error -71
[   74.767370][  T889] usb usb4-port1: attempt power cycle
[   74.878181][  T886] usb 1-1: device descriptor read/8, error -71
[   74.989745][  T886] usb usb1-port1: unable to enumerate USB device
[   75.107165][  T889] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[   75.128334][  T889] usb 4-1: device descriptor read/8, error -71
[   75.212933][ T1922] overlayfs: conflicting options: userxattr,verity=on
[   75.247085][ T1061] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[   75.260694][  T889] usb 4-1: device descriptor read/8, error -71
[   75.268377][ T1926] x_tables: duplicate entry at hook 2
[   75.281431][ T1930] validate_nla: 3 callbacks suppressed
[   75.281448][ T1930] netlink: 'syz.2.513': attribute type 27 has an invalid length.
[   75.314569][ T1930] netlink: 'syz.2.513': attribute type 27 has an invalid length.
[   75.336311][ T1930] veth0_vlan: left promiscuous mode
[   75.341716][ T1930] veth0_vlan: entered promiscuous mode
[   75.349020][ T1930] veth1_macvtap: left promiscuous mode
[   75.355032][ T1930] veth1_macvtap: entered promiscuous mode
[   75.397038][ T1061] usb 2-1: device descriptor read/64, error -71
[   75.497148][  T889] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[   75.518144][  T889] usb 4-1: device descriptor read/8, error -71
[   75.557023][  T886] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   75.648084][  T889] usb 4-1: device descriptor read/8, error -71
[   75.667048][ T1061] usb 2-1: device descriptor read/64, error -71
[   75.718199][  T886] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11
[   75.729485][  T886] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   75.742447][  T886] usb 1-1: config 0 interface 0 has no altsetting 0
[   75.749433][  T886] usb 1-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00
[   75.758670][  T886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.767056][  T889] usb usb4-port1: unable to enumerate USB device
[   75.774145][  T886] usb 1-1: config 0 descriptor??
[   75.917049][ T1061] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[   76.046943][ T1061] usb 2-1: device descriptor read/64, error -71
[   76.184316][ T1945] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   76.189060][  T886] wacom 0003:056A:0314.000D: unknown main item tag 0x2
[   76.202733][  T886] wacom 0003:056A:0314.000D: unknown main item tag 0x0
[   76.212739][  T886] wacom 0003:056A:0314.000D: unknown main item tag 0x0
[   76.224698][  T886] wacom 0003:056A:0314.000D: unknown main item tag 0x0
[   76.232197][  T886] wacom 0003:056A:0314.000D: unknown main item tag 0x0
[   76.239300][  T886] wacom 0003:056A:0314.000D: unknown main item tag 0x0
[   76.255895][  T886] wacom 0003:056A:0314.000D: unknown main item tag 0x0
[   76.264194][  T886] wacom 0003:056A:0314.000D: unknown main item tag 0x0
[   76.271293][  T886] wacom 0003:056A:0314.000D: unknown main item tag 0x0
[   76.273891][ T1951] overlayfs: missing 'lowerdir'
[   76.278673][  T886] wacom 0003:056A:0314.000D: Unknown device_type for 'HID 056a:0314'. Assuming pen.
[   76.297012][  T886] wacom 0003:056A:0314.000D: hidraw0: USB HID v0.04 Device [HID 056a:0314] on usb-dummy_hcd.0-1/input0
[   76.316928][ T1061] usb 2-1: device descriptor read/64, error -71
[   76.317082][  T886] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0314.000D/input/input9
[   76.337511][ T1954] netlink: 'syz.2.522': attribute type 27 has an invalid length.
[   76.372505][ T1954] netlink: 'syz.2.522': attribute type 27 has an invalid length.
[   76.397716][ T1954] veth0_vlan: left promiscuous mode
[   76.400851][    C0] usb 1-1: input irq status -75 received
[   76.403282][ T1954] veth0_vlan: entered promiscuous mode
[   76.415772][ T1954] veth1_macvtap: left promiscuous mode
[   76.422614][ T1954] veth1_macvtap: entered promiscuous mode
[   76.428911][ T1061] usb usb2-port1: attempt power cycle
[   76.446885][  T873] usb 4-1: new low-speed USB device number 34 using dummy_hcd
[   76.462207][ T1956] netlink: 76 bytes leftover after parsing attributes in process `syz.2.523'.
[   76.472723][ T1956] overlayfs: failed to clone upperpath
[   76.602018][ T1063] usb 1-1: USB disconnect, device number 29
[   76.610571][  T873] usb 4-1: unable to get BOS descriptor or descriptor too short
[   76.623062][  T873] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt
[   76.646216][  T873] usb 4-1: string descriptor 0 read error: -22
[   76.652697][  T873] usb 4-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40
[   76.662068][  T873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.670995][ T1948] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   76.679115][  T873] usb 4-1: MIDIStreaming interface descriptor not found
[   76.797040][ T1061] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[   76.817941][ T1061] usb 2-1: device descriptor read/8, error -71
[   76.879407][  T886] usb 4-1: USB disconnect, device number 34
[   76.948601][ T1061] usb 2-1: device descriptor read/8, error -71
[   77.120212][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   77.120229][   T36] audit: type=1400 audit(1781352755.560:856): avc:  denied  { getopt } for  pid=1966 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   77.199005][ T1971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.528'.
[   77.208012][ T1061] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[   77.216146][ T1971] netlink: 25 bytes leftover after parsing attributes in process `syz.0.528'.
[   77.233646][ T1061] usb 2-1: device descriptor read/8, error -71
[   77.368024][ T1061] usb 2-1: device descriptor read/8, error -71
[   77.486888][ T1061] usb usb2-port1: unable to enumerate USB device
[   77.546797][  T886] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   77.626795][  T889] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[   77.676750][  T886] usb 1-1: device descriptor read/64, error -71
[   77.776763][  T889] usb 4-1: Using ep0 maxpacket: 32
[   77.783059][  T889] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   77.795043][  T889] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[   77.804386][  T889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[   77.812391][  T889] usb 4-1: Product: syz
[   77.816547][  T889] usb 4-1: Manufacturer: syz
[   77.821160][  T889] usb 4-1: SerialNumber: syz
[   77.827413][  T889] asix 4-1:2.0: probe with driver asix failed with error -22
[   77.916731][  T886] usb 1-1: device descriptor read/64, error -71
[   78.014658][ T1981] netlink: 'syz.1.533': attribute type 27 has an invalid length.
[   78.029237][ T1981] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.030697][  T889] usb 4-1: USB disconnect, device number 35
[   78.036407][ T1981] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.070139][ T1982] netlink: 'syz.1.533': attribute type 27 has an invalid length.
[   78.090290][ T1982] veth0_vlan: left promiscuous mode
[   78.095732][ T1982] veth0_vlan: entered promiscuous mode
[   78.102781][ T1982] veth1_macvtap: left promiscuous mode
[   78.109269][ T1982] veth1_macvtap: entered promiscuous mode
[   78.116445][  T429] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.123532][  T429] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.131889][  T429] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.138994][  T429] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.156682][  T886] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   78.286724][  T886] usb 1-1: device descriptor read/64, error -71
[   78.526690][  T886] usb 1-1: device descriptor read/64, error -71
[   78.546453][   T36] audit: type=1400 audit(1781352756.980:857): avc:  denied  { getattr } for  pid=2001 comm="syz.3.539" name="/" dev="incremental-fs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   78.636764][  T886] usb usb1-port1: attempt power cycle
[   78.721015][   T36] audit: type=1400 audit(1781352757.160:858): avc:  denied  { mounton } for  pid=2006 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   78.746181][  T450] bridge_slave_1: left allmulticast mode
[   78.752071][  T450] bridge_slave_1: left promiscuous mode
[   78.757849][  T450] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.772229][  T450] bridge_slave_0: left allmulticast mode
[   78.777952][  T450] bridge_slave_0: left promiscuous mode
[   78.783692][  T450] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.871714][ T2006] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.878862][ T2006] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.885984][ T2006] bridge_slave_0: entered allmulticast mode
[   78.892283][ T2006] bridge_slave_0: entered promiscuous mode
[   78.898716][ T2006] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.905754][ T2006] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.912877][ T2006] bridge_slave_1: entered allmulticast mode
[   78.919245][ T2006] bridge_slave_1: entered promiscuous mode
[   78.929957][  T450] veth1_macvtap: left promiscuous mode
[   78.935527][  T450] veth0_vlan: left promiscuous mode
[   78.976624][  T886] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[   79.004478][ T2006] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.007623][  T886] usb 1-1: device descriptor read/8, error -71
[   79.011553][ T2006] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.024964][ T2006] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.027923][  T885] usb 2-1: new low-speed USB device number 42 using dummy_hcd
[   79.032027][ T2006] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.067096][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.074331][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.083796][  T464] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.090883][  T464] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.107600][  T464] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.114725][  T464] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.127587][ T2006] veth0_vlan: entered promiscuous mode
[   79.138503][ T2006] veth1_macvtap: entered promiscuous mode
[   79.148289][  T886] usb 1-1: device descriptor read/8, error -71
[   79.162100][   T36] audit: type=1400 audit(1781352757.600:859): avc:  denied  { mounton } for  pid=2006 comm="syz-executor" path="/root/syzkaller.cbmAt3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   79.186904][  T885] usb 2-1: Invalid ep0 maxpacket: 16
[   79.204210][ T2015] netlink: 'syz.4.542': attribute type 27 has an invalid length.
[   79.218032][ T2015] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.225212][ T2015] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.248833][ T2015] netlink: 'syz.4.542': attribute type 27 has an invalid length.
[   79.268447][ T2015] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.275487][ T2015] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.283503][ T2015] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.290545][ T2015] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.304128][ T2015] veth0_vlan: left promiscuous mode
[   79.309707][ T2015] veth0_vlan: entered promiscuous mode
[   79.316227][ T2015] veth1_macvtap: left promiscuous mode
[   79.316584][  T885] usb 2-1: new low-speed USB device number 43 using dummy_hcd
[   79.322717][ T2015] veth1_macvtap: entered promiscuous mode
[   79.386596][  T886] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   79.408044][  T886] usb 1-1: device descriptor read/8, error -71
[   79.435818][ T2017] cgroup: fork rejected by pids controller in /syz4
[   79.476817][  T885] usb 2-1: Invalid ep0 maxpacket: 16
[   79.487903][  T885] usb usb2-port1: attempt power cycle
[   79.543500][  T886] usb 1-1: device descriptor read/8, error -71
[   79.552216][  T434] bridge_slave_1: left allmulticast mode
[   79.558366][  T434] bridge_slave_1: left promiscuous mode
[   79.564009][  T434] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.571793][  T434] bridge_slave_0: left allmulticast mode
[   79.577553][  T434] bridge_slave_0: left promiscuous mode
[   79.583240][  T434] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.657343][  T886] usb usb1-port1: unable to enumerate USB device
[   79.705657][ T2022] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.712733][ T2022] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.720029][ T2022] bridge_slave_0: entered allmulticast mode
[   79.726177][ T2022] bridge_slave_0: entered promiscuous mode
[   79.732839][ T2022] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.740247][ T2022] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.747383][ T2022] bridge_slave_1: entered allmulticast mode
[   79.753694][ T2022] bridge_slave_1: entered promiscuous mode
[   79.761496][  T434] veth1_macvtap: left promiscuous mode
[   79.767015][  T434] veth0_vlan: left promiscuous mode
[   79.826511][  T885] usb 2-1: new low-speed USB device number 44 using dummy_hcd
[   79.839390][ T2022] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.846482][ T2022] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.853718][ T2022] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.860751][ T2022] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.879145][  T428] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.886770][  T428] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.887435][  T885] usb 2-1: Invalid ep0 maxpacket: 16
[   79.901447][  T462] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.908558][  T462] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.920049][  T428] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.927125][  T428] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.950639][ T2022] veth0_vlan: entered promiscuous mode
[   79.961456][ T2022] veth1_macvtap: entered promiscuous mode
[   79.992422][   T36] audit: type=1400 audit(1781352758.430:860): avc:  denied  { sqpoll } for  pid=2026 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   80.026483][  T885] usb 2-1: new low-speed USB device number 45 using dummy_hcd
[   80.056957][  T885] usb 2-1: Invalid ep0 maxpacket: 16
[   80.062434][  T885] usb usb2-port1: unable to enumerate USB device
[   80.334304][ T2042] fuse: blksize only supported for fuseblk
[   80.346832][ T2042] overlayfs: conflicting options: userxattr,verity=on
[   80.363991][ T2044] netlink: 'syz.0.552': attribute type 27 has an invalid length.
[   80.377658][ T2044] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.384783][ T2044] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.411202][ T2044] netlink: 'syz.0.552': attribute type 27 has an invalid length.
[   80.426958][ T2044] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.434014][ T2044] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.441979][ T2044] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.449016][ T2044] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.461827][ T2044] veth0_vlan: left promiscuous mode
[   80.468440][ T2044] veth0_vlan: entered promiscuous mode
[   80.474994][ T2044] veth1_macvtap: left promiscuous mode
[   80.481273][ T2044] veth1_macvtap: entered promiscuous mode
[   80.507236][ T2046] syzkaller1: entered promiscuous mode
[   80.512774][ T2046] syzkaller1: entered allmulticast mode
[   80.521281][ T2046] syzkaller1: left promiscuous mode
[   80.526813][ T2046] syzkaller1: left allmulticast mode
[   80.836378][  T886] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   80.904555][ T2052] rust_binder: 2051:2052 transaction to 0 failed: ENOENT
[   81.008783][  T886] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   81.024904][  T886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.033050][  T886] usb 1-1: Product: syz
[   81.037996][  T886] usb 1-1: Manufacturer: syz
[   81.042595][  T886] usb 1-1: SerialNumber: syz
[   81.186387][ T1061] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   81.267607][  T886] rtl8150 1-1:1.0: couldn't reset the device
[   81.273703][  T886] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[   81.282710][  T886] usb 1-1: USB disconnect, device number 34
[   81.336300][ T1061] usb 5-1: Using ep0 maxpacket: 8
[   81.342531][ T1061] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[   81.354389][ T1061] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   81.367487][ T1061] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[   81.376557][ T1061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.385000][ T1061] usb 5-1: config 0 descriptor??
[   81.481869][ T2061] overlayfs: failed to clone upperpath
[   81.768333][ T2066] ip6_tunnel: non-ECT from fe80:0000:0000:88fc:7073:8daf:7b32:00aa with DS=0xee
[   81.791678][ T2066] overlayfs: conflicting options: userxattr,verity=on
[   81.799603][ T1061] usb 5-1: string descriptor 0 read error: -71
[   81.816077][ T1061] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   81.836102][ T1061] usb 5-1: USB disconnect, device number 2
[   81.857245][ T2074] netlink: 'syz.0.562': attribute type 27 has an invalid length.
[   81.870140][ T2074] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.877338][ T2074] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.909643][ T2074] netlink: 'syz.0.562': attribute type 27 has an invalid length.
[   81.925508][ T2074] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.932603][ T2074] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.943185][ T2074] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.950299][ T2074] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.968352][ T2074] veth0_vlan: left promiscuous mode
[   81.974250][ T2074] veth0_vlan: entered promiscuous mode
[   81.981757][ T2074] veth1_macvtap: left promiscuous mode
[   81.989281][ T2074] veth1_macvtap: entered promiscuous mode
[   82.014525][   T36] audit: type=1400 audit(1781352760.450:861): avc:  denied  { write } for  pid=2080 comm="syz.1.565" name="rt_cache" dev="proc" ino=4026532313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   82.041783][   T36] audit: type=1326 audit(1781352760.450:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2080 comm="syz.1.565" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14f3b9ce59 code=0x0
[   82.072902][   T36] audit: type=1400 audit(1781352760.510:863): avc:  denied  { write } for  pid=2087 comm="syz.0.567" name="/" dev="incremental-fs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   82.073836][ T2089] netlink: 'syz.0.567': attribute type 11 has an invalid length.
[   82.095434][   T36] audit: type=1400 audit(1781352760.510:864): avc:  denied  { remove_name } for  pid=2087 comm="syz.0.567" name="file0" dev="incremental-fs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   82.095468][   T36] audit: type=1400 audit(1781352760.510:865): avc:  denied  { rename } for  pid=2087 comm="syz.0.567" name="file0" dev="incremental-fs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   82.127825][ T2090] overlayfs: upper fs does not support tmpfile.
[   82.155871][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   82.155889][   T36] audit: type=1400 audit(1781352760.570:869): avc:  denied  { setattr } for  pid=2087 comm="syz.0.567" name="work" dev="incremental-fs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   82.191931][   T36] audit: type=1400 audit(1781352760.630:870): avc:  denied  { rmdir } for  pid=2087 comm="syz.0.567" name="work" dev="incremental-fs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   82.192220][ T2089] overlayfs: upper fs does not support tmpfile.
[   82.228877][  T298] ------------[ cut here ]------------
[   82.234382][  T298] WARNING: CPU: 0 PID: 298 at fs/inode.c:340 drop_nlink+0xce/0x110
[   82.242362][  T298] Modules linked in:
[   82.246275][  T298] CPU: 0 UID: 0 PID: 298 Comm: syz-executor Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[   82.257929][  T298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   82.268005][  T298] RIP: 0010:drop_nlink+0xce/0x110
[   82.273032][  T298] Code: 04 00 00 be 08 00 00 00 e8 6f 06 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 4f 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[   82.292694][  T298] RSP: 0018:ffffc9000b657c60 EFLAGS: 00010293
[   82.298884][  T298] RAX: ffffffff81f271be RBX: ffff888122484428 RCX: ffff88812002b900
[   82.307069][  T298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   82.315040][  T298] RBP: ffffc9000b657c88 R08: 0000000000000003 R09: 0000000000000004
[   82.316176][ T1062] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[   82.323125][  T298] R10: dffffc0000000000 R11: fffff520016caf7c R12: dffffc0000000000
[   82.338607][  T298] R13: 1ffff1102449088e R14: ffff888122484470 R15: 0000000000000000
[   82.346666][  T298] FS:  000055558716f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   82.355602][  T298] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   82.362233][  T298] CR2: 0000555587192958 CR3: 0000000122100000 CR4: 00000000003526b0
[   82.370247][  T298] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[   82.378249][  T298] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   82.386399][  T298] Call Trace:
[   82.389682][  T298]  <TASK>
[   82.392607][  T298]  shmem_rmdir+0x5f/0x90
[   82.396927][  T298]  vfs_rmdir+0x3e3/0x560
[   82.401180][  T298]  incfs_kill_sb+0x109/0x230
[   82.405852][  T298]  deactivate_locked_super+0xd5/0x2a0
[   82.411267][  T298]  deactivate_super+0xb8/0xe0
[   82.415953][  T298]  cleanup_mnt+0x406/0x4a0
[   82.420409][  T298]  __cleanup_mnt+0x1d/0x40
[   82.424827][  T298]  task_work_run+0x1e5/0x260
[   82.429454][  T298]  ? __cfi_task_work_run+0x10/0x10
[   82.434570][  T298]  ? __x64_sys_umount+0x12e/0x180
[   82.439660][  T298]  ? __cfi___x64_sys_umount+0x10/0x10
[   82.445031][  T298]  ? __kasan_check_read+0x15/0x20
[   82.450105][  T298]  resume_user_mode_work+0x35/0x50
[   82.455221][  T298]  syscall_exit_to_user_mode+0x63/0xb0
[   82.460708][  T298]  do_syscall_64+0x63/0xf0
[   82.465145][  T298]  ? clear_bhb_loop+0x50/0xa0
[   82.469962][  T298]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   82.475876][  T298] RIP: 0033:0x7fe24b79e097
[   82.480314][  T298] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   82.500006][  T298] RSP: 002b:00007fffc85b3a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   82.507547][ T1062] usb 2-1: unable to get BOS descriptor or descriptor too short
[   82.508463][  T298] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe24b79e097
[   82.517157][ T1062] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.524138][  T298] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc85b3af0
[   82.534517][ T1062] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   82.542164][  T298] RBP: 00007fffc85b3af0 R08: 00007fffc85b4af0 R09: 00000000ffffffff
[   82.552917][ T1062] usb 2-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40
[   82.559051][  T298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc85b4b80
[   82.568665][ T1062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.576082][  T298] R13: 00007fe24b8321ca R14: 0000000000014122 R15: 00007fffc85b4bc0
[   82.584389][ T1062] usb 2-1: Product: syz
[   82.592183][  T298]  </TASK>
[   82.592193][  T298] ---[ end trace 0000000000000000 ]---
[   82.596661][ T1062] usb 2-1: Manufacturer: syz
[   82.609589][  T298] ==================================================================
[   82.617659][  T298] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[   82.623891][  T298] Write of size 4 at addr 0000000000000168 by task syz-executor/298
[   82.631874][  T298] 
[   82.634183][  T298] CPU: 1 UID: 0 PID: 298 Comm: syz-executor Tainted: G        W          syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[   82.634201][  T298] Tainted: [W]=WARN
[   82.634204][  T298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   82.634211][  T298] Call Trace:
[   82.634215][  T298]  <TASK>
[   82.634220][  T298]  __dump_stack+0x21/0x30
[   82.634238][  T298]  dump_stack_lvl+0x140/0x1c0
[   82.634252][  T298]  ? __cfi_dump_stack_lvl+0x10/0x10
[   82.634267][  T298]  print_report+0x3d/0x70
[   82.634281][  T298]  kasan_report+0x162/0x1a0
[   82.634295][  T298]  ? ihold+0x24/0x70
[   82.634307][  T298]  ? _raw_spin_unlock+0x45/0x60
[   82.634322][  T298]  ? ihold+0x24/0x70
[   82.634333][  T298]  kasan_check_range+0x25a/0x2b0
[   82.634346][  T298]  __kasan_check_write+0x18/0x20
[   82.634356][  T298]  ihold+0x24/0x70
[   82.634367][  T298]  vfs_rmdir+0x26a/0x560
[   82.634382][  T298]  incfs_kill_sb+0x109/0x230
[   82.634394][  T298]  deactivate_locked_super+0xd5/0x2a0
[   82.634409][  T298]  deactivate_super+0xb8/0xe0
[   82.634422][  T298]  cleanup_mnt+0x406/0x4a0
[   82.634435][  T298]  __cleanup_mnt+0x1d/0x40
[   82.634447][  T298]  task_work_run+0x1e5/0x260
[   82.634461][  T298]  ? __cfi_task_work_run+0x10/0x10
[   82.634474][  T298]  ? __x64_sys_umount+0x12e/0x180
[   82.634484][  T298]  ? __cfi___x64_sys_umount+0x10/0x10
[   82.634493][  T298]  ? __kasan_check_read+0x15/0x20
[   82.634503][  T298]  resume_user_mode_work+0x35/0x50
[   82.634514][  T298]  syscall_exit_to_user_mode+0x63/0xb0
[   82.634526][  T298]  do_syscall_64+0x63/0xf0
[   82.634540][  T298]  ? clear_bhb_loop+0x50/0xa0
[   82.634551][  T298]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   82.634566][  T298] RIP: 0033:0x7fe24b79e097
[   82.634576][  T298] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   82.634586][  T298] RSP: 002b:00007fffc85b3a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   82.634597][  T298] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe24b79e097
[   82.634605][  T298] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc85b3af0
[   82.634612][  T298] RBP: 00007fffc85b3af0 R08: 00007fffc85b4af0 R09: 00000000ffffffff
[   82.634620][  T298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc85b4b80
[   82.634626][  T298] R13: 00007fe24b8321ca R14: 0000000000014122 R15: 00007fffc85b4bc0
[   82.634635][  T298]  </TASK>
[   82.634639][  T298] ==================================================================
[   82.878057][ T1062] usb 2-1: SerialNumber: syz
[   82.879974][  T298] Disabling lock debugging due to kernel taint
[   82.888926][  T298] BUG: kernel NULL pointer dereference, address: 0000000000000168
[   82.896739][  T298] #PF: supervisor write access in kernel mode
[   82.902800][  T298] #PF: error_code(0x0002) - not-present page
[   82.908777][  T298] PGD 80000001306e3067 P4D 80000001306e3067 PUD 0 
[   82.915279][  T298] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[   82.921331][  T298] CPU: 0 UID: 0 PID: 298 Comm: syz-executor Tainted: G    B   W          syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[   82.934462][  T298] Tainted: [B]=BAD_PAGE, [W]=WARN
[   82.939478][  T298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   82.949516][  T298] RIP: 0010:ihold+0x2a/0x70
[   82.954032][  T298] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed
[   82.973636][  T298] RSP: 0018:ffffc9000b657ca0 EFLAGS: 00010246
[   82.979691][  T298] RAX: ffff88812002b900 RBX: 0000000000000000 RCX: ffff88812002b900
[   82.987673][  T298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   82.995644][  T298] RBP: ffffc9000b657cb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28
[   83.003608][  T298] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff888122484434
[   83.011577][  T298] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[   83.019550][  T298] FS:  000055558716f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   83.028487][  T298] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   83.035063][  T298] CR2: 0000000000000168 CR3: 0000000122100000 CR4: 00000000003526b0
[   83.043025][  T298] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[   83.050996][  T298] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   83.058971][  T298] Call Trace:
[   83.062244][  T298]  <TASK>
[   83.065178][  T298]  vfs_rmdir+0x26a/0x560
[   83.069423][  T298]  incfs_kill_sb+0x109/0x230
[   83.074026][  T298]  deactivate_locked_super+0xd5/0x2a0
[   83.079524][  T298]  deactivate_super+0xb8/0xe0
[   83.084201][  T298]  cleanup_mnt+0x406/0x4a0
[   83.088631][  T298]  __cleanup_mnt+0x1d/0x40
[   83.093048][  T298]  task_work_run+0x1e5/0x260
[   83.097641][  T298]  ? __cfi_task_work_run+0x10/0x10
[   83.102744][  T298]  ? __x64_sys_umount+0x12e/0x180
[   83.107776][  T298]  ? __cfi___x64_sys_umount+0x10/0x10
[   83.113152][  T298]  ? __kasan_check_read+0x15/0x20
[   83.118181][  T298]  resume_user_mode_work+0x35/0x50
[   83.123282][  T298]  syscall_exit_to_user_mode+0x63/0xb0
[   83.128750][  T298]  do_syscall_64+0x63/0xf0
[   83.133161][  T298]  ? clear_bhb_loop+0x50/0xa0
[   83.137857][  T298]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   83.143759][  T298] RIP: 0033:0x7fe24b79e097
[   83.148163][  T298] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   83.167760][  T298] RSP: 002b:00007fffc85b3a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   83.176165][  T298] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe24b79e097
[   83.184143][  T298] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc85b3af0
[   83.192118][  T298] RBP: 00007fffc85b3af0 R08: 00007fffc85b4af0 R09: 00000000ffffffff
[   83.200082][  T298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc85b4b80
[   83.208052][  T298] R13: 00007fe24b8321ca R14: 0000000000014122 R15: 00007fffc85b4bc0
[   83.216030][  T298]  </TASK>
[   83.219056][  T298] Modules linked in:
[   83.222964][  T298] CR2: 0000000000000168
[   83.227101][  T298] ---[ end trace 0000000000000000 ]---
[   83.232544][  T298] RIP: 0010:ihold+0x2a/0x70
[   83.237046][  T298] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed
[   83.256658][  T298] RSP: 0018:ffffc9000b657ca0 EFLAGS: 00010246
[   83.262735][  T298] RAX: ffff88812002b900 RBX: 0000000000000000 RCX: ffff88812002b900
[   83.270706][  T298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   83.278686][  T298] RBP: ffffc9000b657cb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28
[   83.286667][  T298] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff888122484434
[   83.294641][  T298] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[   83.302624][  T298] FS:  000055558716f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   83.311558][  T298] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   83.318149][  T298] CR2: 0000000000000168 CR3: 0000000122100000 CR4: 00000000003526b0
[   83.326129][  T298] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[   83.334621][  T298] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   83.342608][  T298] Kernel panic - not syncing: Fatal exception
[   83.348949][  T298] Kernel Offset: disabled
[   83.353270][  T298] Rebooting in 86400 seconds..