last executing test programs:

2m38.413286114s ago: executing program 32 (id=10):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x158)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0)
mount$incfs(&(0x7f0000000080)='\x00', &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0xc002, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m25.722023072s ago: executing program 33 (id=94):
creat(&(0x7f0000000080)='./file0\x00', 0xc9a9c042ad77c5e5)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0x1bc, 0x19, 0x1, 0x4070bd2d, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e20, 0xb, 0xf803, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x400}, {0x1, 0x6, 0x80}, 0xfffffffc}, [@tmpl={0x104, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x5, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ffc}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@loopback, 0x3502, 0x4, 0x3, 0xff, 0x800, 0x803}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x2, 0x4, 0x8}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4d5, 0x6f8b281ce6f2af1c}, 0x0, @in6=@local, 0x0, 0x4, 0x2, 0x0, 0x10000}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x101c44, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRES32=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r1, @ANYBLOB='\x00\x00', @ANYRES32=r0, @ANYRESDEC=r0])
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2b00000003000000000000000000000006000000000000000a000040"], 0x2b)

2m17.232113214s ago: executing program 34 (id=41):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x7c, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x20)
write$P9_RWALK(r6, &(0x7f00000000c0)={0x9, 0x6f, 0x2}, 0x9)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r7)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r7)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x48040)

2m17.17820161s ago: executing program 5 (id=128):
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, 0x0, 0x22)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x88, &(0x7f0000001b40)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$fuse(0x0, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0])

2m17.171063501s ago: executing program 5 (id=129):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x90c3ff, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x162, 0x4)
sendmmsg$inet6(r0, &(0x7f0000002540), 0x0, 0x20000000)
recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40, 0x0)

2m17.128832935s ago: executing program 5 (id=130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0xb4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xd20}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xeef6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfffb}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3982}]}, @NFQA_CT={0x58, 0xb, 0x0, 0x1, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}}}}, @CTA_TUPLE_ZONE={0xfffffffffffffd2c}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}]}, @NFQA_CT={0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x532}]}, 0xb4}, 0x1, 0x0, 0x0, 0x894}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000300)={0x2, 0x4, 0x5, 0x401}) (async)
ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000200)={0xffff, 0x7}) (async)
read(r1, &(0x7f0000000100)=""/215, 0xd7)
ioperm(0x9, 0x7ff, 0x100000000)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0)

2m17.062047912s ago: executing program 5 (id=131):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000300))
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b86, 0x0, {0x9, 0x21, 0x1, 0xc0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007555340109308102c0c0"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000140), 0xa, 0x62080)
ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x18)
r4 = socket$inet(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x401, 0xa5)
write(r5, 0x0, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ff00000}]})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)

2m15.217476709s ago: executing program 5 (id=132):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prctl$PR_GET_NAME(0x10, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x1f90, @loopback}, 0x10)
listen(0xffffffffffffffff, 0x5)
socket$inet_tcp(0x2, 0x1, 0x6) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x1f90, @loopback}, 0x10)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x8001, &(0x7f0000000200)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028d060000007d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c0300000000000000724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r3, 0x200, &(0x7f00000002c0)={&(0x7f0000000380)=""/112, 0x70}) (async)
ptrace$getregset(0x4205, r3, 0x200, &(0x7f00000002c0)={&(0x7f0000000380)=""/112, 0x70})
fcntl$setown(r0, 0x8, r3) (async)
fcntl$setown(r0, 0x8, r3)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket(0x10, 0x80002, 0x0) (async)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="24000000180003041dfffd946f610500020100000005fe060c10880008000500fff3c00e1400", 0x26}], 0x1}, 0x0)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x58) (async)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x58)
ioctl$UI_DEV_DESTROY(r4, 0x5502)
r6 = accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000960)='1', 0x1) (async)
write(r0, &(0x7f0000000960)='1', 0x1)

2m15.122095449s ago: executing program 5 (id=133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x20000885)
syz_usb_connect$midi(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x15, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x4}}}}}]}}, 0x0)

2m3.600623739s ago: executing program 35 (id=118):
r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000300)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271006202000005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401210001022000090401010101022000090501"], 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="e4000067212440e1babcd6e54e4c1562"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x102)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0xd5)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001fc0)=ANY=[@ANYBLOB="12010000e2793f10d10501200028000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, &(0x7f00000021c0)={0x14, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f0000002140)={0x0, 0x3, 0x73, @string={0x73, 0x3, "4e7307c495557f6176df0c2d07d7b54e67915f2c5aff9891c7739262234ae6de14491ea3eddfc14d029186362d7f5defececd367bf292e8ff19867f1c511e4ef11793f6554a3789b9e768029c01c59a93cf1951015e59700b621353f2dc6ad808c34f57150b67ccabe84390670dd6dc147"}}}, &(0x7f0000002740)={0x1c, &(0x7f0000002200)={0x40, 0x1, 0xb8, "32f94c01f0f9051360e329b25944c07f9e35c9818dee1af83ed72a0cf2de8db99a8fbee44d059919b92c3401843bc6f46c7d2375f5e06912cbcbae9e17bf148451c019830fa0421c125da86d3f7b25370307a6913dcff132f5b4da390f93fb977ea887892d6b0fedcbd1e1b0a6f6087ed5873c88be517a83643f5a659c9f4952790acc7b926364bd079d30bdd422aec406fe82781b781ecec1f3fc458f65bc2505b1d5669d53e84c27287e9cfa5613fd08dc0c36268e65dc"}, &(0x7f00000022c0)={0xa1, 0x1, 0x400, "d687a85a108cfebb14ee3ca4750899134b7b18163f3b19a73eb723381c3ac95e01c7b26649e280f4158b7946d925aab0191356a6cbe13a941a38bfcdf23234ae8385686a1104d2e4db9d41703b66ee6c8131f70992851cb0754055acae545a547cfe64452229a2b81fd3209748be6fb713d1b3c51a0a3b03838c040d2d78ff16d999d8935f35c395207c516871b9c6490b8ac5e0e029d64f2d23a6eb75cf2a7da8c5b28fe9f3ac8ada1f84289907056a116cfaf77230ff63130817481fbca6a6fc26a55354bde0920982bf630503a9b2eda275aafba476db68304074e53914eead7eeb4c1468ea9fb2ad38e4e9a8fedbcb423eb7e6e917f31f79f6fabb6a5039c5b10797b9493d8cb0a7b9f4ee5e7df25713bed88d59a689e09c65dd915413ff042b2741b18eaf216bd40da39a921ad68c099f67b5b073df21708b11d8a0983d133d5d3d85e02a59380718801af4c3bbe4b105c659fef0a54c9bc670ff2cff565d4642dbf9a4ff5b16c9e4ce474ccadb7e3d1bbeee5f1b38c834b9b797fee0a4f640976046a73f3174d44281d7ecfc391c49774654a67c335ad934d97ff8287ea338e8f7da2d2bc748333606cf9e8283c2694550c5b3743a79f417c2ffc314f7499e26948630154d68ac22d07554be2be1c31a11d07732d67273958a2eb3a2c0710227c66a1527867baa4c53d18da75469d3b5ee53bafa286fa3e02e98c3e10e6fc6dabc5f6e73455e2f66c2cc9c1bf72fce30dd1ff6d2fcdd2a2a1d3348c31a92a06537e359d439ed445a6c7bc111e822b3f02d3f3406cb998aa2ce9697d8a93c492ea4188a16113209bcb23a563d9393263a6619911650e79de4a9a1a4579a428d0b165258ba0594883f3c78993f4bd1765c8217124b3e133a02010811abcca330a364a06e5430c3427b92dc42aff9b74de76342803b596933a135b30c9a80bf85b4884a268b58d19c496f406d65a9af9a417a7df6dea0079ddfe55a2af2fe8226ae677a676b940e998b5f806f7b27c9fc64419fc23498da6db94f49746a97c5ba567a47930d5352c4db0743f5fdad4b37e307f0416454a92196c222fc0b50191c639fe20045d447f3cc79359e2ef37b69bd4ded5fd1874e7577867e7343181dd421849bff88dc7f9d8d2f21ddfbb0bc074b60dc5a353c692db940a68fafbe670dff04962ad3b878d26e8c779572a3ec7a00158e307e368a2903771c8b8f03459bbef4b0571ec7f7a191d2081f97aeae0066996ff9e19aa2f966d0908c994476f9b70e10c633b71220dd9d9422e837d542975815144e75a14f545332757fc236158b6c436cd9736182b4bc2a77c77f31c44b0e873bccd7f4980c489c40c3c3eff2763a1f7c52f56aec6c27312406713b9de59dc7959f33c8c751225e61137267605daae8def3a86d1cee913b46ad87e13c00aa21c3c7682c869d5a006c73a0"}, &(0x7f0000002700)})
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000400)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000001f80)={0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, r4, 0x6484f000)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f00000000c0)=ANY=[])
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000440)=0x1, 0x4)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000001dc0)={'wg2\x00', &(0x7f0000002780)=@ethtool_rxnfc={0x32, 0x12, 0x1, {0xa, @esp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0xb}, @remote, 0x202, 0x2}, {0x0, @multicast, 0x5, 0xfb44, [0x5, 0x9]}, @esp_ip4_spec={@local, @private=0xa010100, 0x19}, {0x0, @random="f54f1527bce3", 0x46, 0x3ff, [0x10002]}, 0x4, 0x2}, 0x2, [0x0, 0x9]}})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'lo\x00', <r9=>0x0})
sendmsg$can_raw(r7, &(0x7f00000004c0)={&(0x7f0000000500)={0x1d, r9}, 0x10, &(0x7f00000019c0)={&(0x7f0000001d40)=@canfd={{0x3, 0x1, 0x1}, 0x59, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4eb444c5fe6eee297e3a4c5213673263b835cf2ba3a79fc2bf9b844e3a89ef5f7c9d64abb3c843d4d8be00925df018f688564100"}, 0x48}, 0x2, 0x0, 0x0, 0x24040884}, 0x30048009)
sendmmsg$inet(r6, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0x2, 0x4e27, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e23, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="140000992b3a00000000000000000007003eefa3fecdd771ce74093ebecb9016786767ccc62d176bc446eda40136ae98b3c2eaa62b19e921e50604390d8f4ab41425465693ea818aa9a938aa3ee312b9af2cf8933c7fb9b8f44ddd126ab6830bed1b2a206864694212d46a186279b321b7d7b8397f338fd5ea2ce29bd577eb3a1a3c0b91"], 0x18}}], 0x2, 0x0)
r10 = openat$cgroup_ro(r1, &(0x7f0000000600)='cpu.stat\x00', 0x0, 0x0)
recvmmsg$unix(r10, &(0x7f0000001c40)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/96, 0x60}], 0x2}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001780)=""/247, 0xf7}, {&(0x7f0000001880)=""/169, 0xa9}, {&(0x7f0000001940)=""/99, 0x63}, {&(0x7f00000019c0)}], 0x4}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001ac0)=""/158, 0x9e}, {&(0x7f0000001b80)=""/69, 0x45}], 0x2}}], 0x3, 0x40012103, &(0x7f0000001d00)={0x77359400})

2m0.113972343s ago: executing program 36 (id=133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x20000885)
syz_usb_connect$midi(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x15, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x4}}}}}]}}, 0x0)

1m52.201098707s ago: executing program 7 (id=265):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x10)
shutdown(r0, 0x2)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f00000000c0)=0xb6, 0x4)
r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa8e10, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}})
ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '2\x00'}}, [@crypt={0x0, 0x400, 0x0, 0x90, 'crypt\x00', {'capi:ccm(aes)-random', 0x20, @hex16=[0x66, 0x35, 0x64, 0x34, 0x66, 0x66, 0x61, 0x37, 0x61, 0x66, 0x33, 0x39, 0x65, 0x39, 0x30, 0x37, 0x33, 0x30, 0x30, 0x31, 0x37, 0x64, 0x39, 0x65, 0x35, 0x65, 0x39, 0x63, 0x35, 0x63, 0x39, 0x61], 0x20, '128', 0x20, {@ram_num={'1:', 0x1}, 0x20, '0'}, ' 1 allow_discards'}}]})
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x0, @remote}})
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000140)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0)
recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
unshare(0x600)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r2, 0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x5000000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1m52.1642092s ago: executing program 7 (id=267):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) (async, rerun: 32)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
socket$packet(0x11, 0x3, 0x300) (async)
r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) (async, rerun: 32)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (rerun: 32)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$DM_DEV_RENAME(0xffffffffffffffff, 0xc138fd05, 0x0) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32)
r3 = dup(r2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001c80)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sync()
mkdir(&(0x7f00000000c0)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc_mnt/ioports\x00', 0x40, 0x182)
pread64(r5, &(0x7f00000001c0)=""/188, 0xbc, 0x1000001) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001cc0)=[@text32={0x20, &(0x7f0000000000)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000850f969e696f696ff91d08", 0x39}], 0x1, 0x11, 0x0, 0x0) (async)
landlock_create_ruleset(&(0x7f0000000040)={0x8192, 0x3, 0x3, 0x0, 0xc}, 0x30, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001d40)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m50.900119638s ago: executing program 7 (id=270):
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x904e, 0x69a, 0x0, 0x4, 0x31b, 0x4}) (async)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x904e, 0x69a, 0x0, 0x4, 0x31b, 0x4})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1)
sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48081}, 0x0) (async)
sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48081}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x0, 0x8, 0x8, 0x2, 0x8, 0x8, 0x8000, 0x6]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x5c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8045}, 0x44800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001e40)={{<r6=>r0, &(0x7f0000000400)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, &(0x7f0000000440)={@_ha_fsid={[0xfffffff8, 0x200]}, {0x1, 0xb468, 0x2, 0x5}}, 0x4, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0xffff0000}, 0x9, &(0x7f0000001d00)=[{0x3, 0x4, &(0x7f0000000500)='nfc\x00', &(0x7f0000000540)="d57d4a976e6b0625103250da40e700182b2296f51b66d5d5775093ab0406d07d4fb98be36e73fa6b0baa769e095f771377d5995c8cea8dbc248a7e6fccf14a4261ca5ef91b63baa40b9b6b31f833e1e7ef59dffe3eb4bc09b6287c3e3664d541cd795208733468a7769b02bccbb89b1e26523a24198848c1fe4c36694ced40390a51aa1579432eab169540302168fe5fbf4bd55410c3d604aa3dd703fff15574da664be2f8f66ca3aa8fdabf0ff869b3803911654f34a1935eaaffc7370004565c5f96d5a50df4bbe7a03eaec59f1fdde6a382702276889b8d90ff36fe798b49aa8f689639c417f3959b50f2728591ff92d1b1", 0xf3, 0xe}, {0x3, 0x4, &(0x7f0000000640)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000680)="158569768315f8928bbf08a1a65bc7b59d535e29debe3874db7caf4c5763c463f6b9a9a4bdc5782e267b69c7dcfbdb5682fcb22f989a099798ca6e2a786f946a6431c4361c58ed30d3c76f20", 0x4c, 0x22}, {0x1, 0xb6, &(0x7f0000000700)='^\x00', &(0x7f0000000740)="f29707de99f7cb0a19ec0db246608e24e8b90543c49888", 0x17, 0x2}, {0x3, 0x40, &(0x7f0000000780)='nfc\x00', &(0x7f00000007c0)="895f451a0a82f9fa5343133278317b1d842c263418f66ce46c9406d093b9e5d1ba82c155ac09684a2db87bbca57c3c1031ce054f6c6a0d8dae32f82632fa60f3346a0fb3b205c1118e5118b9fd0f706240bb5080432ae3da08b00f3379cbb199398bccc7ce63fb45c50014849a7e292987318402e185c443dadbbc6e5e456ddce74fc1448eadd83c9a84a826ff6a70b983510da273ed36b816498941aba462083fcd262938242ad9b45c75d1307a3008749ebddb", 0xb4, 0x10}, {0x1, 0x8, &(0x7f0000000880)='nfc\x00', &(0x7f00000008c0)="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", 0x1000, 0x10}, {0x1, 0x5, &(0x7f00000018c0)='}\'\x00', &(0x7f0000001900)="62f298a5169682d7bdf851871450fabd136687ca34c1d5840781aefd70ad996b82d0fd5aba40e01dd046fff2e7ded94abb79c3066399984a63f7ed3d0d9f9059b3105b559ff49dc88374ece5d7fb9f87afbfd1072c8e0185a98898ae3e92ced2fa7ecdeb97644d8c4d0194942f73fdc3f5aa3a0a46db7da5f9ff726ccdc0bc5baa018e551c", 0x85, 0x8}, {0x1, 0x1, &(0x7f00000019c0)='*-\x00', &(0x7f0000001a00)="f53a423e48fa2a39f6e4be35a1a02429aa56f45fa9e23f5ddec1fdb415e628aa41673c1d17d2b89acf6aa8785f63163f88eff5b8e544775ac9b5591c0fe0ca6ed3510482bfd3e66e82d3e2ebddabeb1b7d13164da669d7d6b7e149a6d433d948a5309bcee6aabb3c896cf3bbb770b9729035a5a893db669f66dc3c738f28c708a28c321eb78bc4eb0c3fcccc237445b675e4372264e2b03a338797f7c383e440d710515ecbd5d75a37346d09ff22daeeffcdd7003677019f649ab7e759e2b3fe69897e995bf149a9aa7c38c758efa9067573d83373385d0f1825c2d33d5b7bed6bba1063562ca4cb7b4373", 0xeb, 0x18}, {0x2, 0x2, &(0x7f0000001b00)='NLBL_CALIPSO\x00', &(0x7f0000001b40)="4269d56261b68cf09c37468bbb34f4056b3e6e2c3e39c5f99033949d637c01d95df91982e47756f8d804ac4563181f14841f2002bb329e84739d6db517b10c6265e90f6410f0232c57a1587c5537ab6682d06ad822945e3677c603e8f4b48f1eebb95e63c1d014382810170cfd283c232f1eda4800ed080dc0d81beecb95bcc79824d676b3b2d5694c2dd75c04d244e886af48460e6cf94c9d2eacff38727badaecea60e4d9eb0fdefe9f4bfc7c27461c0", 0xb1, 0x18}, {0x3, 0x90000, &(0x7f0000001c00)='NLBL_CALIPSO\x00', &(0x7f0000001c40)="fde7c4c89c4271f844d68e2e783d2ce96bc2c5253a55372634d46abac63d16de3a60f3ad971da469cb4e37ab6279150ba899e73aff7a06445096888097d13a9c473b64cb5bc41a543010546cc6ae42daf231cc75feb9f7e9afa648b507bbdfbff803a0615e1fd8acdbeb4e352f006967d9593df0e4875c5020b14e8636196fb1d44fb175a10cec4fa1ade43a9e06d5e262f8427da5ff8da0c62bb2aa3601555ceb8dad2c93351ccc3b038b16fe913bbcb187", 0xb2, 0x29}]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001ec0)={<r7=>0xffffffffffffffff})
r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001f40)={<r9=>0xffffffffffffffff})
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001f80), 0x220000, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001fc0)={<r11=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002000)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002000)={<r12=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000002140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x50604400}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0x94, r4, 0x334, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xc4}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8885}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), r10) (async)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), r10)
sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000002300)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0xa4, r13, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x8c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x801}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1080}, 0x94)
lstat(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
r15 = getegid()
statx(r6, &(0x7f0000002400)='\x00', 0x100, 0x7ff, &(0x7f0000002440)) (async)
statx(r6, &(0x7f0000002400)='\x00', 0x100, 0x7ff, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
stat(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0})
setgroups(0x4, &(0x7f0000002600)=[r14, r15, r16, r17])
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002680)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002680)={'wlan0\x00', <r18=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r10, &(0x7f00000028c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002880)={&(0x7f00000026c0)={0x1a0, r13, 0x22, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x6}, {0x2, 0x6}, {0x5, 0x5}, {0x10, 0x2}, {0x8, 0x5}, {0x3, 0x3}, {0x5, 0x4}, {0x2}, {0xc, 0x2}, {0x4, 0x2}, {0x7, 0x4}, {0x8, 0x3}, {0x3}, {0x1}, {0x70, 0x1}, {0x4, 0x4}], "f5056d599adde533"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x4, 0x7}, {0x0, 0x4}, {0x5, 0x7}, {0x4, 0x2}, {0x10, 0x5}, {0x7, 0x3}, {0x6, 0x7}, {0x4a, 0x7}, {0x9}, {0x3d, 0x5}, {0x1d, 0x5}, {0x4, 0x3}, {0x2, 0x1}, {0xa}, {0xff, 0x5}, {0x7, 0x1}, {0x8, 0x4}], "a7dd1eaf64976679"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7f, 0x2}, {0x72, 0x5}, {0x4}, {0x9}], "16ce3c7705baecda"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x6, 0x1}, {0x80, 0x2}, {0x5, 0xcc}, {0x3, 0x2}, {0x9, 0x4}, {0x4, 0x2}, {0x6, 0x3}, {0x1, 0x1}, {0x1, 0x5}, {0xd}], "db16ed2943b13462"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xfc, 0x4}, {0x2, 0x7}, {0x2, 0x3}, {0x3, 0x2}, {0xd1, 0x7}, {0x9, 0x1}, {0x2e, 0x6}, {0x40, 0x2}, {0x0, 0x5}, {}, {0x6, 0x4}, {0xb, 0x3}, {0x8, 0x3}, {0xe}, {0x1, 0x5}, {0xd8, 0x5}, {0x77, 0x3}, {0x34, 0x4}, {0x7, 0x3}], "cac16e113742017e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x33, 0x5}, {0x3, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0xf, 0x4}, {0xb8, 0x1}, {0xb1, 0x7}, {0x2, 0x5}, {0x9, 0x6}, {0x40, 0x5}, {0x7, 0x6}, {0x83, 0x6}, {0x2a}, {0x10, 0x4}, {0xd, 0x2}, {0x6, 0x3}, {0x9, 0x2}, {0x6, 0x3}, {0x1, 0x3}, {0x7, 0x7}, {0x8, 0x5}], "782c5715dedf324c"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x9, 0x5}, {0x2e, 0x4}, {0x6, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x1, 0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x87, 0x4}, {0x5, 0x1}, {0x2, 0x7}, {0x6, 0x7}, {0x7f, 0x3}, {0x3, 0x7}, {0x8, 0x4}], "507c4b048267f80e"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8, 0x4}, {0xa, 0x6}, {0xc0, 0x4}, {0x81, 0x1}, {0x6, 0x2}, {0x2}, {0x4, 0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x49, 0x5}, {0x5, 0x6}, {0x6c, 0x7}, {0x52, 0x6}, {0x2, 0x4}, {0x1}, {0x7f}, {0xe}], "168cf6f9fc9873ea"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x2, 0x4}, {0x4, 0x1}], "b3b52f16a6523f96"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xe, 0x5}, {0x5, 0x3}, {0x10, 0x5}, {0x4}, {0xa, 0x9}, {0x1, 0x6}, {0x8, 0x3}], "763e8f152ecaac8f"}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x811}, 0x4000815) (async)
sendmsg$NL80211_CMD_SET_QOS_MAP(r10, &(0x7f00000028c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002880)={&(0x7f00000026c0)={0x1a0, r13, 0x22, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x6}, {0x2, 0x6}, {0x5, 0x5}, {0x10, 0x2}, {0x8, 0x5}, {0x3, 0x3}, {0x5, 0x4}, {0x2}, {0xc, 0x2}, {0x4, 0x2}, {0x7, 0x4}, {0x8, 0x3}, {0x3}, {0x1}, {0x70, 0x1}, {0x4, 0x4}], "f5056d599adde533"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x4, 0x7}, {0x0, 0x4}, {0x5, 0x7}, {0x4, 0x2}, {0x10, 0x5}, {0x7, 0x3}, {0x6, 0x7}, {0x4a, 0x7}, {0x9}, {0x3d, 0x5}, {0x1d, 0x5}, {0x4, 0x3}, {0x2, 0x1}, {0xa}, {0xff, 0x5}, {0x7, 0x1}, {0x8, 0x4}], "a7dd1eaf64976679"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7f, 0x2}, {0x72, 0x5}, {0x4}, {0x9}], "16ce3c7705baecda"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x6, 0x1}, {0x80, 0x2}, {0x5, 0xcc}, {0x3, 0x2}, {0x9, 0x4}, {0x4, 0x2}, {0x6, 0x3}, {0x1, 0x1}, {0x1, 0x5}, {0xd}], "db16ed2943b13462"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xfc, 0x4}, {0x2, 0x7}, {0x2, 0x3}, {0x3, 0x2}, {0xd1, 0x7}, {0x9, 0x1}, {0x2e, 0x6}, {0x40, 0x2}, {0x0, 0x5}, {}, {0x6, 0x4}, {0xb, 0x3}, {0x8, 0x3}, {0xe}, {0x1, 0x5}, {0xd8, 0x5}, {0x77, 0x3}, {0x34, 0x4}, {0x7, 0x3}], "cac16e113742017e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x33, 0x5}, {0x3, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0xf, 0x4}, {0xb8, 0x1}, {0xb1, 0x7}, {0x2, 0x5}, {0x9, 0x6}, {0x40, 0x5}, {0x7, 0x6}, {0x83, 0x6}, {0x2a}, {0x10, 0x4}, {0xd, 0x2}, {0x6, 0x3}, {0x9, 0x2}, {0x6, 0x3}, {0x1, 0x3}, {0x7, 0x7}, {0x8, 0x5}], "782c5715dedf324c"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x9, 0x5}, {0x2e, 0x4}, {0x6, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x1, 0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x87, 0x4}, {0x5, 0x1}, {0x2, 0x7}, {0x6, 0x7}, {0x7f, 0x3}, {0x3, 0x7}, {0x8, 0x4}], "507c4b048267f80e"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8, 0x4}, {0xa, 0x6}, {0xc0, 0x4}, {0x81, 0x1}, {0x6, 0x2}, {0x2}, {0x4, 0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x49, 0x5}, {0x5, 0x6}, {0x6c, 0x7}, {0x52, 0x6}, {0x2, 0x4}, {0x1}, {0x7f}, {0xe}], "168cf6f9fc9873ea"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x2, 0x4}, {0x4, 0x1}], "b3b52f16a6523f96"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xe, 0x5}, {0x5, 0x3}, {0x10, 0x5}, {0x4}, {0xa, 0x9}, {0x1, 0x6}, {0x8, 0x3}], "763e8f152ecaac8f"}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x811}, 0x4000815)
connect$unix(r8, &(0x7f0000002900)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendto(r10, &(0x7f0000002980)="1a474239bb46f3baf02496eb0fb686d215e8cc2146e5275ca2f45422eca0289394dd5ad276f50abda7a26003db8b45ea401bd026f3efc004faa53a00a4332b8d8d55a3be46efa604ddaed5d16b", 0x4d, 0xc800, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000002a40)={0x0, 0x1, 0x13})

1m50.846007404s ago: executing program 7 (id=271):
r0 = memfd_create(&(0x7f0000000240)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc14t\xcd]\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r0, 0xe8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async, rerun: 32)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32)
mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) (async, rerun: 32)
mount$fuse(0x0, &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x88000, 0x0) (rerun: 32)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x178b) (async)
fcntl$addseals(r0, 0x409, 0x7)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x19, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a101853005091901290815002501951075018102c0"}}, 0x111c)
openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 64)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) (rerun: 64)
sendfile(r3, r3, 0x0, 0x5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x4010, r3, 0xe777f000) (async)
write$UHID_INPUT2(r2, &(0x7f0000000180)={0xc, {0x3, '0\x00\x00'}}, 0x111c) (async, rerun: 32)
fallocate(r0, 0x1, 0x3, 0x1) (rerun: 32)

1m48.864194345s ago: executing program 3 (id=284):
socketpair(0xc, 0x3, 0x9, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000040)=0x81)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'pimreg\x00', @broadcast})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000100)=0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180))
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000200)={0x14}, 0x14)
ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000480)={{0x3, 0x6, 0x5, 0x0, 0x1}, &(0x7f0000000240)=[{}, {}, {}]})
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000540)={0x1, r7}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x3)
r8 = openat$ext4_procfs(0xffffffffffffff9c, &(0x7f00000005c0)={'/proc/fs/ext4/loop', 0x0, 0x2f, 'fc_info\x00'}, 0x0, 0x0)
ioctl$TCXONC(r8, 0x540a, 0x3)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000600)=0x30, 0x4)
r9 = openat(r8, &(0x7f0000000640)='./file0\x00', 0x40000, 0x8)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r1)
sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r10, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x84)
sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40094}, 0x8010)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000bc0)={{<r11=>r0, &(0x7f00000008c0)='\xf6\xe6\x00', 0x40000, &(0x7f0000000900)={@align=0x3, {0x6, 0x5, 0xffffffc0, 0x5}}, 0x40, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0xd76}, 0x2, &(0x7f0000000b80)=[{0x1, 0xffffffff, &(0x7f00000009c0)='(:]+\x00', &(0x7f0000000a00)="3067a092a2cfd64350afe622044fd44d5eeff63871d1c776f89e93a1444d67173a2b7c5c44d5fd296182a26f0524c2196cf60ebde156609ae8dfd5ed839b992a5dd463358d498ae9b3081417acfc91f10d2eb7b4877d5f267b49887a173a726da4a9214798574d34fceb4380766c382462419b4f537260d38fb133ff15883ee180b8b23fe13ce8e539e5ecd4dc", 0x8d, 0x28}, {0x3, 0xfffff708, &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)="49bcd7cec28576e2e5f1b3c60fcc7fe550fe7b035704f8bcb53709e279dae0475768fe6e52f31cf885bea7554d102eb0e9558be60f917d13dffcebb8c6c54b78b0f3e74ee3c69d3113f57bd5b7ea4bee9f385010031087f7e8eb", 0x5a, 0x2}]})
read$FUSE(r11, &(0x7f0000000c40)={0x2020}, 0x2020)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000002c80))
r12 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r12, 0x8982, &(0x7f0000002cc0)={0x2, 'veth1\x00', {0x100}, 0x800})
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000002d00)={<r13=>0x0, 0x80, 0x0, [0x3ff, 0x18000000000000, 0x9, 0x7, 0xfff], [0xffff, 0x3, 0x6, 0xd, 0xb, 0x5, 0x49f, 0x3ff, 0x6, 0x7, 0x153e000000000, 0x6, 0xe, 0x56, 0x5, 0x5, 0x9, 0x2, 0x8, 0x1, 0x4, 0x8000, 0x24bb, 0x6, 0x4, 0x7fffffffffffffff, 0x200, 0x22e5, 0x9, 0x7c1e, 0x0, 0xb8cd, 0x7, 0x5, 0x0, 0xee8, 0xffffffffffff0000, 0x72, 0x7fffffff, 0x8, 0x10000, 0x9143, 0x100000000, 0x80000001, 0xec, 0x81, 0x6, 0x10000, 0x1ff, 0x2, 0x720, 0xff, 0x3, 0xb781, 0x200, 0x10001, 0x2, 0xfffffffffffffff9, 0x100000000, 0x3, 0xcb1, 0x9, 0x5, 0x6, 0x80, 0x0, 0x5, 0x7, 0x400, 0x0, 0x4, 0x9000000000, 0x8, 0x8, 0x2, 0x2, 0x933, 0x4, 0x1, 0x5, 0x0, 0x5, 0xbcb3, 0x81, 0x3, 0x81b, 0x4, 0x1, 0x10000, 0x1, 0x3, 0x10000, 0x4, 0x8, 0x8000000000000000, 0x1, 0x100, 0x3, 0x3, 0xff, 0x100000000, 0x0, 0xa, 0x2, 0x9, 0x36, 0x800, 0x66, 0x400, 0x5, 0x8, 0xe7, 0x7, 0x2, 0x1, 0x4, 0x6, 0x8, 0x207, 0x40, 0x6]})
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000003140)={0x1, 0x5, @start={r13, 0x0, "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", "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"}, [0x8, 0x1ff, 0x31776206, 0xe, 0x7, 0x2, 0x3, 0x26, 0x1, 0x865, 0x2, 0x3, 0xcd, 0x0, 0x7, 0x8000, 0x8, 0x4a50, 0x0, 0x80000001, 0xfff, 0x0, 0x8001, 0x9, 0x2, 0xb, 0xe1b, 0x7f, 0x4, 0xff, 0x0, 0x7, 0x3, 0x7, 0x6, 0xff, 0x7, 0xfffffffffffffeff, 0xfc2e, 0x55, 0x7ff, 0xfffffffffffffff5, 0x3, 0x63, 0x8, 0x6, 0x6, 0xf6900, 0x9f, 0x4, 0xeb, 0xfffffffffffffffc, 0x5, 0x8000000000000001, 0x400, 0x20000000000000, 0xd, 0x346, 0x0, 0x9, 0x7, 0x2, 0x8000000000000000, 0x31ab3cbe]})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f0000003b80)={0x0, 0x1})

1m48.710025611s ago: executing program 3 (id=285):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x4010, 0x0)
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0)
r1 = socket(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0xc4}, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x15, 0x39, "dc7fe57d267f368d7af7ebd2a9236579c631586041f4e5a3b7be9f68628e00e595ab87b285e3203b5cb122d4ce444ffa625172f8f1dfc15acb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/ttyUSB0\x00', 0x12df00, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x4010, 0x0) (async)
syz_usb_connect(0x0, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0) (async)
socket(0x1, 0x2, 0x0) (async)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async)
prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0xc4}, 0x0) (async)
ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0x15, 0x39, "dc7fe57d267f368d7af7ebd2a9236579c631586041f4e5a3b7be9f68628e00e595ab87b285e3203b5cb122d4ce444ffa625172f8f1dfc15acb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/ttyUSB0\x00', 0x12df00, 0x0) (async)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

1m45.715878075s ago: executing program 3 (id=297):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_load_code={0x12e, 0x1b, {0x0, "f40f08"}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x63})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x10)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='esdfs\x00', 0x8a4010, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x282, 0x6)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000280)=0xa3, 0x4)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r5, &(0x7f0000000300), 0xffffffffffffffef, 0x15, 0x0, 0x0)
write(r4, &(0x7f0000000300)="ce005251c40018000000722a8b7700", 0xff90)
r6 = eventfd2(0x0, 0x1800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7fff, 0x1, 0x2, r6, 0x8})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x101, 0x10000, 0x7, 0xfffffffffffffff9, 0x40, 0x0, 0x0, 0x101, 0x80, 0x0, 0x9, 0x7, 0x5, 0x0, 0x2, 0x1], 0xb000, 0xe4aeba23175a281e})

1m44.749291123s ago: executing program 3 (id=301):
r0 = syz_create_resource$futex(&(0x7f0000000080))
futex$unlock_wake_list64(r0, 0x28a, 0x3, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500)=0xe, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (async)
setns(0xc9, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000540)=0x100, 0x4)
bind$netlink(r2, &(0x7f0000000580)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000005c0), 0x4) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004004)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x600800, 0x0) (async)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x62, {"0f01c465f30fc77461bc1eefcdfcdbc5e664257cdbc5e664257c051b88ef66bafc0cb002ee670f00d4c461f9e56a00f345d35f0066baf80cb805000000b9435d00000f01c1cd66bafc0cb000ee430f5f1e"}}], 0x7a})
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
r8 = openat$cgroup_devices(r7, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r8, 0x0, 0x8) (async)
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) (async)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/mapper/control\x00', 0x0, 0x0)
r10 = syz_clone(0x1228000, 0x0, 0xfffffffffffffdad, 0x0, 0x0, 0x0)
r11 = syz_pidfd_open(r10, 0x0)
process_mrelease(r11, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)={'#! ', './dev', [{0x20, '--{/[&-'}, {0x20, 'devices.deny\x00'}, {0x20, '^\x83'}, {0x20, ':%-(\xbb:.'}, {0x20, 'devtmpfs\x00'}, {0x20, 'devices.deny\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/mapper/control\x00'}], 0xa, "ab4b9bd361654b5d737cb81d47155f45800bb3fcf3a765c69041531379ac37903277e96376f0de977b149819cda5e16cbb177c43ca63cb62ab149ed72517c8638e30e7faa4fd1961a82513c0d7f08fd369b8b4d0ed68519ad33c0c361008aa8f3626629aa9560731008fb626dd67702d87bf3ad1708c3e06ba61b3e97193bb56029d011c37e7f9c45d940665b17e2798249b72d2dde4b3279d841376353fe492874c42a7f113e48f"}, 0x109)
ioctl(r9, 0xc138fd03, &(0x7f0000000380)="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") (async)
r12 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r12, &(0x7f0000bfe000/0x400000)=nil)

1m44.345980874s ago: executing program 3 (id=302):
r0 = openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '1\x00'}}})
r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="20000000030301"], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xe)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='sysfs\x00', 0x1214040, 0x0)
stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600))
mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount(0x0, &(0x7f0000000580)='./file0/../file0\x00', 0x0, 0x10c6020, 0x0)
ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x810, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x3450, 0x0, 0x90, 'crypt\x00', {'aes-cbc-tcw', 0x20, @keyring=':64:encrypted:syz', 0x20, '128', 0x20, {@ram_num={'1:', 0x1}, 0x20, '1024'}, ' 2 no_read_workqueue no_write_workqueue'}}]})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

1m44.150809744s ago: executing program 3 (id=303):
pipe2(&(0x7f0000000280), 0x80000) (async)
pipe2(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x9300}, @void, @eth={@remote, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x6, 0x1}}, {@mpls_uc={0x8847, {[], @ipv6=@gre_packet={0x6, 0x6, "e943ff", 0x44, 0x2f, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{}, {0x1, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x400004, {{0x1, 0x1, 0xe, 0x1, 0x0, 0x1, 0x1, 0x4}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x7, 0x2, 0x0, 0x2, 0x3, 0x63}, 0x2, {0x718, 0x1, 0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x1}}}}}}}}}}}, 0x86)
getdents(r1, &(0x7f00000003c0)=""/24, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000203050000000000bb0e01c35cf25d510800010001"], 0x1c}}, 0x4)
fsopen(&(0x7f00000004c0)='minix\x00', 0x1) (async)
r3 = fsopen(&(0x7f00000004c0)='minix\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./net/netfilter/nfnetlink_queue\x00', 0x40a000, 0x0)
read(r5, &(0x7f0000000540)=""/1024, 0x400) (async)
read(r5, &(0x7f0000000540)=""/1024, 0x400)
r6 = fsopen(&(0x7f0000000380)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7) (async)
fchdir(r7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000003, 0x12, r8, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000940), &(0x7f0000000980)=0x4)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffdd7) (async)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffdd7)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt(r9, 0x111, 0x20000001, 0x0, 0x0)
r10 = creat(&(0x7f0000000140)='./file0\x00', 0xdafbe5d6891b6ec)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async)
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_NOTIFY_STORE(r11, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x18)
write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r11, @ANYRES8=r3], 0x4f)
close(r10)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)

1m44.08761925s ago: executing program 37 (id=303):
pipe2(&(0x7f0000000280), 0x80000) (async)
pipe2(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x9300}, @void, @eth={@remote, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x6, 0x1}}, {@mpls_uc={0x8847, {[], @ipv6=@gre_packet={0x6, 0x6, "e943ff", 0x44, 0x2f, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{}, {0x1, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x400004, {{0x1, 0x1, 0xe, 0x1, 0x0, 0x1, 0x1, 0x4}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x7, 0x2, 0x0, 0x2, 0x3, 0x63}, 0x2, {0x718, 0x1, 0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x1}}}}}}}}}}}, 0x86)
getdents(r1, &(0x7f00000003c0)=""/24, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000203050000000000bb0e01c35cf25d510800010001"], 0x1c}}, 0x4)
fsopen(&(0x7f00000004c0)='minix\x00', 0x1) (async)
r3 = fsopen(&(0x7f00000004c0)='minix\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./net/netfilter/nfnetlink_queue\x00', 0x40a000, 0x0)
read(r5, &(0x7f0000000540)=""/1024, 0x400) (async)
read(r5, &(0x7f0000000540)=""/1024, 0x400)
r6 = fsopen(&(0x7f0000000380)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7) (async)
fchdir(r7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000003, 0x12, r8, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000940), &(0x7f0000000980)=0x4)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffdd7) (async)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffdd7)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt(r9, 0x111, 0x20000001, 0x0, 0x0)
r10 = creat(&(0x7f0000000140)='./file0\x00', 0xdafbe5d6891b6ec)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async)
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_NOTIFY_STORE(r11, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x18)
write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r11, @ANYRES8=r3], 0x4f)
close(r10)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)

1m41.873799115s ago: executing program 7 (id=323):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./tracefs\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b00010105b00c0904"], 0x0)
r1 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = openat(r1, &(0x7f00000003c0)='./tracefs\x00', 0x0, 0x46)
close_range(r0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180)
r3 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000580)=@gcm_256={{0x303}, "7cd1ff5b4114071e", "1a163f25149dfa4b9131ad04379f4f1df5b692de3c583c78d3efd5828580f99f", "dc8b6329", "a982da9cdd3918ae"}, 0x38)
readlinkat(r3, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f00000002c0)=""/108, 0x6c)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000001100)='27', 0x2)
fgetxattr(r4, &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f00000001c0)=""/227, 0xe3)
r5 = getpgrp(0xffffffffffffffff)
r6 = open$dir(&(0x7f0000000480)='./file0\x00', 0x2, 0x85)
getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x0, &(0x7f0000000440), &(0x7f0000000500)=0x4)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000004c0)={0x30000009})
epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r6)
r8 = syz_open_procfs(r5, &(0x7f0000001140)='fdinfo\x00')
getdents64(r8, &(0x7f0000001180)=""/4089, 0xff9)

1m40.726070072s ago: executing program 7 (id=337):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000002980), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002a80)={[0x67a, 0x8000000000000000, 0x3fe, 0x0, 0x1000, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x200000000010, 0x401, 0x2, 0x4, 0x8, 0x1aa], 0x2, 0x400})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m40.651888459s ago: executing program 38 (id=337):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000002980), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002a80)={[0x67a, 0x8000000000000000, 0x3fe, 0x0, 0x1000, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x200000000010, 0x401, 0x2, 0x4, 0x8, 0x1aa], 0x2, 0x400})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m35.02963794s ago: executing program 8 (id=372):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="ac", 0x1}], 0x1)
r0 = socket(0x1e, 0x4, 0x0)
connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r0, &(0x7f0000000100), 0x400000000000203, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xd7, 0x56a, 0xc6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x40, 0x7}}]}}, 0x0)

1m34.53922921s ago: executing program 8 (id=373):
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000001a40)='./file0\x00', 0x22)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x88, &(0x7f0000001b40)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$fuse(0x0, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0])

1m34.521469292s ago: executing program 8 (id=374):
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/ram0\x00', 0x40, 0x0)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0)
fallocate$kvm_guest_memfd(r1, 0x10, 0x8000, 0x114000)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x80181, 0x0)
write$tcp_mem(r3, &(0x7f0000000240)={0x8, 0x20, 0x200, 0x20, 0x9}, 0x48)
keyctl$chown(0x4, r2, 0x0, 0xffffffffffffffff)
io_setup(0x99, &(0x7f0000000140))

1m34.368256367s ago: executing program 8 (id=375):
mount$incfs(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)='.\x00', &(0x7f0000003d80), 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='rlog_pages=18447370955'])
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
fadvise64(r0, 0x2, 0xc, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0xcc0, 0x90)

1m34.366174357s ago: executing program 8 (id=376):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x156)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='7', 0x1)
syz_open_dev$usbmon(&(0x7f00000002c0), 0x100800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0x2, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000500)="baf80c66b88181c58166efbafc0cb0f8eeb800008ee00fc75e2ff3f2756066b96f03000066b86b7a000066ba000000000f300f235b66b9800000c00f326635000100000f30baf80c66b868b5798a66efbafc0c66edbad004ed0f0b", 0x5b}], 0x1, 0x1d, 0x0, 0xffffffffffffffeb)
mlockall(0x2)
brk(0x689d80000000)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000))
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r5, 0xae9a)
r6 = syz_clone(0x2000000, &(0x7f0000000300)="fdc4123a88691602ce6c498045378c455066ba0f09f7a7287e3f22a711eeb701201fdf4431b16ede992526d1fdc1fe95e63c3f0e1dc4b8557b7ff734c31a4cafeaacd76f0e68168ca4b895ef6f8c106b2976caabfefbb4456b9254f0f50123e2ef640698d832a17137b0835d80aa45", 0x6f, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="030edfb25dd1514263ad8b031982ea9954a35e6bf9")
ptrace$setsig(0x4203, r6, 0x3, &(0x7f0000000440)={0x1, 0x9be, 0x54})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
brk(0x1)

1m34.190051715s ago: executing program 8 (id=379):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8084}, 0x90)

1m18.78731171s ago: executing program 39 (id=379):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8084}, 0x90)

1m7.372866919s ago: executing program 1 (id=614):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="d95700660f3881363eea64f30f1ec60f52bf010026f3a60f01c966b9900d00000f32bad004b084ee0f01ca0f01c3", 0x2e}], 0x1, 0x41, &(0x7f00000001c0), 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000200)={0x2ce, 0x0, 0x4, r5})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x27800000002, 0x0, 0x4, r5, 0x1})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_pktinfo(r6, 0x88, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="470f090f01c9b9dc010000b801000000ba000000000f300f01c40e08c7446b2402d1560000002c24b9120200000f3266ba4300b8d2000000ef0f015ad147c13b34470fc772b5", 0x46}], 0x1, 0x15, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m7.145584172s ago: executing program 1 (id=615):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x22003, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fremovexattr(r3, &(0x7f0000000340)=@known='system.sockprotoname\x00')
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20008044, &(0x7f0000000080)={0xa, 0x2, 0x7, @loopback, 0xfc47}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bond\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/x86/pat_memtype_list\x00', 0x0, 0x49)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000280)=""/170, 0xaa}], 0x1, 0xc79, 0x400)
shutdown(r2, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0000100, 0x0, 0x1}]})

1m7.026072494s ago: executing program 1 (id=617):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0xf42, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x84000, 0x0)
write(r3, &(0x7f0000000280)='r', 0x1)
sendto$packet(r1, &(0x7f0000000080)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000100)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="12011003020000082505a1a44000010203010902"], &(0x7f00000004c0)={0x0, 0x0, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="050f73"], 0x1, [{0x0, 0x0}]})

1m6.450091872s ago: executing program 1 (id=625):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffffff"], 0x24}], 0x1}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=ANY=[], 0x30}], 0x1}, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc53})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0)
ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000140)=0x4)
ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000180)=0x4)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x8, 0x100000f, 0x20000000009, 0xfffffffffffffffd, 0x60d, 0x0, 0xd, 0x87b, 0x200000000000002, 0x0, 0x0, 0x0, 0x6, 0x6, 0x2, 0x3], 0x70000, 0x8341})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
recvfrom$inet(r4, 0x0, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f00000004c0)='.\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mount$bpf(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0xa1480d, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)

1m5.620313527s ago: executing program 1 (id=636):
lremovexattr(&(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus/file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6)
syz_genetlink_get_family_id$smc(&(0x7f0000000480), r0)

1m5.561033253s ago: executing program 1 (id=637):
socket$inet6(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
mount$9p_rdma(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x1}}, {@common=@debug={'debug', 0x3d, 0x3}}, {@timeout={'timeout', 0x3d, 0x1}}, {@common=@nodevmap}, {@common=@cache_loose}, {@rq={'rq', 0x3d, 0x8000}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}]}})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x62020600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="67f36ec8430004362e0f3801ff2e0f96d2652e65360f01c8ba400066edba4300ec66b8000000000f23c00f21f86635010003000f23f8660f38304ae53e0f23d3", 0x40}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0)
r3 = eventfd(0x4)
r4 = eventfd(0x80000000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000580)={r3, 0x4, 0x0, r4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000540)={'bond_slave_0\x00', {0x2, 0x0, @remote}})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x800, 0x1000002, 0x93}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b00, 0x4000, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4007bfff, 0x3a2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x2, 0x1, 0x230}}], 0x1, 0x0, 0x0)

1m5.543170295s ago: executing program 40 (id=637):
socket$inet6(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
mount$9p_rdma(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x1}}, {@common=@debug={'debug', 0x3d, 0x3}}, {@timeout={'timeout', 0x3d, 0x1}}, {@common=@nodevmap}, {@common=@cache_loose}, {@rq={'rq', 0x3d, 0x8000}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}]}})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x62020600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="67f36ec8430004362e0f3801ff2e0f96d2652e65360f01c8ba400066edba4300ec66b8000000000f23c00f21f86635010003000f23f8660f38304ae53e0f23d3", 0x40}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0)
r3 = eventfd(0x4)
r4 = eventfd(0x80000000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000580)={r3, 0x4, 0x0, r4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000540)={'bond_slave_0\x00', {0x2, 0x0, @remote}})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x800, 0x1000002, 0x93}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b00, 0x4000, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4007bfff, 0x3a2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x2, 0x1, 0x230}}], 0x1, 0x0, 0x0)

27.514041247s ago: executing program 9 (id=1039):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x7}, [], {0x4, 0x2}, [{0x8, 0x3}], {0x10, 0x1}, {0x20, 0x1}}, 0x2c, 0x3) (async)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdc3, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async, rerun: 32)
r2 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) (rerun: 32)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0)
read(r4, &(0x7f0000000340)=""/1024, 0x400)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) (async, rerun: 32)
getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed) (rerun: 32)

27.502849188s ago: executing program 9 (id=1040):
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000001a40)='./file0\x00', 0x22)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x88, &(0x7f0000001b40)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$fuse(0x0, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), 0x3f, &(0x7f0000001c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0])

27.455498172s ago: executing program 9 (id=1044):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
pipe(&(0x7f0000000040))
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="300000001000012026bd700000000000100000000c00000000000000000000000d002e"], 0x30}], 0x1}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000200), 0xfdef)
r2 = socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x181, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0x4, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0xe3f, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x3, 0x2, 0x2, 0x9, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x3112, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x2, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3440, 0xfff]}, 0x45c)
ppoll(&(0x7f0000000780)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0xb)
chdir(&(0x7f0000000080)='./cgroup\x00')
fchown(0xffffffffffffffff, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xfffffffb)
capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000700)={0x3, 0x3, 0x7, 0x7, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x14e174135c0b87af)
syz_usb_connect(0x0, 0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902440001000000000904000000ef040100052406000105240000000d240f0100000000060000000006241a050000152412"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x14b442, 0x82)

26.317899408s ago: executing program 9 (id=1062):
sched_setaffinity(0x0, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/block/zram0/disksize\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='7K', 0x2) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x2, 0x1e5}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="38010000100033060000000000000000ac14143d0000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000123432000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000002000400230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) (async)
r2 = socket$inet(0x2, 0x3, 0xff)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x20000001}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x2, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff0000}}, 0xe8) (async)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x2, 0x0, @loopback}, 0x10) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)

26.29933845s ago: executing program 9 (id=1063):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002580), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000025c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000002600)={0x2, &(0x7f0000002640)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0xfe, 0x400}]})
open(&(0x7f0000000040)='./file0\x00', 0x48141, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000002700)='./proc\x00', &(0x7f0000002740)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000002780)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0)
write(r1, &(0x7f00000027c0)='3', 0x1)
landlock_create_ruleset(&(0x7f0000002680)={0x8300, 0x1}, 0xfffffffffffffe5c, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
clock_gettime(0xfffffffffffffffe, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
fcntl$setlease(r3, 0x400, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='fdinfo/4\x00')
read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0x2020)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000001c0)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setresgid(0x0, 0x0, 0xee01)
r7 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(r7, 0x9, 0x0, 0x0)
r8 = dup(r6)
syz_ublk_setup_queues(r8, r5, &(0x7f0000000200)={0x0, 0x353d, 0x40, 0x1, 0x7f}, &(0x7f0000002800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a07, 0x4, 0x1000002, 0x252, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7774, 0x1000, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x8000, 0x1, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x840f, 0x8000, 0xffffbffe, 0x230}}], 0x1, 0x0, 0x0)

26.234079016s ago: executing program 9 (id=1064):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001a40)='./file0\x00', 0x22)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000400)={{0x80a0000, 0x80a0000, 0x8, 0xf, 0x5, 0x4, 0x42, 0x6, 0x0, 0x34, 0x9}, {0x100000, 0xb000, 0xc, 0x2, 0x1, 0x43, 0x7f, 0x85, 0x5, 0xe, 0x7f, 0x5}, {0xdddd0000, 0x80a0000, 0xb, 0x7e, 0x80, 0x7, 0x0, 0x9, 0xff, 0xb, 0x8, 0x85}, {0x10000, 0x8080000, 0x10, 0x6, 0x7, 0xff, 0xfd, 0x1, 0xa, 0xa0, 0x9, 0xf1}, {0x1000, 0x2000, 0x8, 0x3, 0x5, 0x2, 0xab, 0x7f, 0xf, 0x83, 0x0, 0x7}, {0x2000, 0xa000, 0x10, 0xa, 0xf7, 0x4, 0x1, 0x1, 0x80, 0x13, 0x5}, {0x6000, 0xba845000, 0xb, 0x5, 0x0, 0x4, 0x4, 0x3, 0x3, 0x7d, 0x2, 0x70}, {0xeeee0000, 0x9000, 0xd, 0x2, 0xd, 0x7, 0x6a, 0xe2, 0x8, 0x18, 0xee, 0x9}, {0x4, 0x3}, {0x54000, 0x2}, 0x80010031, 0x0, 0x40000, 0x42064, 0x400000006, 0x9000, 0x10000, [0x400000000000a2, 0x800ffa, 0x400000000063, 0x3]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_GET_SREGS2(r6, 0x8140aecc, &(0x7f0000000540))
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000380)=ANY=[@ANYRESHEX=r7], 0x8)
mount$fuse(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x88, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x36, 0x64, 0x36, 0x61, 0x38, 0x4], 0x2d, [0x61, 0x66, 0x33, 0x33], 0x2d, [0x61, 0x33, 0x38, 0x37], 0x2d, [0x34, 0x30, 0x63, 0x36], 0x2d, [0x37, 0x35, 0x32, 0x64, 0x63, 0x30, 0x36, 0x39]}}}]}})
mount$fuse(0x0, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0])
ioctl$KVM_CAP_X86_GUEST_MODE(r2, 0x4068aea3, &(0x7f0000000040))

11.125775411s ago: executing program 41 (id=1064):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001a40)='./file0\x00', 0x22)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000400)={{0x80a0000, 0x80a0000, 0x8, 0xf, 0x5, 0x4, 0x42, 0x6, 0x0, 0x34, 0x9}, {0x100000, 0xb000, 0xc, 0x2, 0x1, 0x43, 0x7f, 0x85, 0x5, 0xe, 0x7f, 0x5}, {0xdddd0000, 0x80a0000, 0xb, 0x7e, 0x80, 0x7, 0x0, 0x9, 0xff, 0xb, 0x8, 0x85}, {0x10000, 0x8080000, 0x10, 0x6, 0x7, 0xff, 0xfd, 0x1, 0xa, 0xa0, 0x9, 0xf1}, {0x1000, 0x2000, 0x8, 0x3, 0x5, 0x2, 0xab, 0x7f, 0xf, 0x83, 0x0, 0x7}, {0x2000, 0xa000, 0x10, 0xa, 0xf7, 0x4, 0x1, 0x1, 0x80, 0x13, 0x5}, {0x6000, 0xba845000, 0xb, 0x5, 0x0, 0x4, 0x4, 0x3, 0x3, 0x7d, 0x2, 0x70}, {0xeeee0000, 0x9000, 0xd, 0x2, 0xd, 0x7, 0x6a, 0xe2, 0x8, 0x18, 0xee, 0x9}, {0x4, 0x3}, {0x54000, 0x2}, 0x80010031, 0x0, 0x40000, 0x42064, 0x400000006, 0x9000, 0x10000, [0x400000000000a2, 0x800ffa, 0x400000000063, 0x3]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_GET_SREGS2(r6, 0x8140aecc, &(0x7f0000000540))
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000380)=ANY=[@ANYRESHEX=r7], 0x8)
mount$fuse(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x88, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x36, 0x64, 0x36, 0x61, 0x38, 0x4], 0x2d, [0x61, 0x66, 0x33, 0x33], 0x2d, [0x61, 0x33, 0x38, 0x37], 0x2d, [0x34, 0x30, 0x63, 0x36], 0x2d, [0x37, 0x35, 0x32, 0x64, 0x63, 0x30, 0x36, 0x39]}}}]}})
mount$fuse(0x0, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0])
ioctl$KVM_CAP_X86_GUEST_MODE(r2, 0x4068aea3, &(0x7f0000000040))

6.346208836s ago: executing program 4 (id=1231):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x47ffbff, 0x2, 0x0, 0x0, 0x9}, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0)
read(r1, &(0x7f00000002c0)=""/1024, 0x400)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x0, 0x401d031, r1, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

6.345545226s ago: executing program 4 (id=1232):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000200)=0x1, 0x4)
sendmmsg$inet(r1, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c040)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040094)
r2 = timerfd_create(0x0, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)={'team_slave_0\x00', 0x200})

6.345073956s ago: executing program 4 (id=1233):
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x963b81) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000000000000070000004404cb73000000008b1542ef"], 0x18}}], 0x1, 0x4000800) (async)
mount(0x0, &(0x7f00000027c0)='./sys\x00', &(0x7f0000002800)='sysfs\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1101}) (async, rerun: 64)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async, rerun: 64)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001640)=[@increfs={0x40046304, 0x2}], 0x100, 0x0, &(0x7f0000000400)})
r3 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0)
read(r3, &(0x7f0000000540)=""/4096, 0x1000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67)
mkdirat(0xffffffffffffff9c, &(0x7f0000001540)='./debug\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000001580)='./debug\x00', &(0x7f00000015c0)='debugfs\x00', 0x0, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./debug/split_huge_pages\x00', 0x24001, 0x0) (async, rerun: 32)
getresuid(0x0, 0x0, 0x0) (async, rerun: 32)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x680500, 0x0) (async)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x80000400000001fb, 0x121301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f00000001c0), 0x4) (async)
ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) (async)
write(r5, &(0x7f0000002880)='res', 0x3)

5.506836941s ago: executing program 4 (id=1243):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x50602, 0x0)
write(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000009177fe81f2ce9627a491459d4735f519223a14ac82627a231d1de3733977ed4c366d340a9ebe6a4dbb0ffdd29e3a7a4b62a641b8d80151cfded8d955a36df6d8310a10642c0cab30acb6c69b956e839152d6b7fa2e3ff93dbc130a2739cadcb715929cb85438b1fdc13a50788b58d2d4651a2b", @ANYRESDEC=r2, @ANYBLOB="010025bd7000fcdbdf25050000001c0003800400040009000500a194b4a1a700000008000200000000000c00018008000100", @ANYBLOB="bfc9699da8811756331e71ad9c4dc3e81f46d35e2b336198110a4d3095f7b3728a8f348da01e20f89ceb9f91b4fb26d31d4d3ed5e792a96b50a406e8a6ed47879a116a0db08a376e941c0227f5764853aba83d1d3e2439124e7bd5015dc36f1ad595facc6ecceb84b1611657a237ef89147e913f587b2ce2290e1f150d55f7e057887b3d95fd6c32e35171f862737003b67a337c818c2c59cb11a5d29ba022af5a5e5cc3a049d0ef5db0d9529818f565c01a6ada30", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', 0x1})
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000900)={0x5, 0xa, 0x5, 0xd, 0x5, 0xf9fc})
write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01051c001000140006004ae0003000680000b30190780a010100ac141428830f50acf300b30a0101014a040c8d0d2eac1414418903eb00000f00906802d00003ad6e7f63b28f747da1efad978c4f800ac9f4b543473cd597e4f402ad5589d236b06a8ed68505c5ba52fe563986d8a8814992ec"], 0x3a)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x2ac, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xdc, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc801364cc1a741b9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x68, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20004050}, 0x5)
r7 = syz_create_resource$binfmt(&(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/rp_filter/file0\x00')
execveat$binfmt(r0, r7, &(0x7f0000000480)={[&(0x7f0000000280)='/dev/net/tun\x00', &(0x7f0000000340)='syzkaller1\x00', &(0x7f00000003c0)='proc\x00', &(0x7f0000000440)='\x00']}, &(0x7f0000000880)={[&(0x7f00000004c0)='syz_tun\x00', &(0x7f0000000500)='-\x00', &(0x7f0000000540)='syzkaller1\x00', &(0x7f0000000580)='.}\x00', &(0x7f00000005c0)='/dev/net/tun\x00', &(0x7f0000000600)='ethtool\x00', &(0x7f0000000640)='syzkaller1\x00', &(0x7f0000000800)='+*[\x00', &(0x7f0000000840)='.\x00']}, 0x400)

5.452878137s ago: executing program 4 (id=1244):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x40000, 0x0)
read(r0, &(0x7f00000001c0)=""/256, 0x100)
fallocate(r0, 0x0, 0x200, 0xc)
syz_usb_connect(0x1, 0xb3, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0xffffff28, 0x0, 0x4, [{0x26, &(0x7f0000000180)=@string={0x26, 0x3, "37d3c25c13d2555be67b079655fbac1c828deeb7c69035b9a8431b6d55b9df1a73600080"}}, {0x4, &(0x7f00000002c0)=@string={0x0, 0x3, "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"}}, {0x17, &(0x7f0000000080)=@string={0x17, 0x3, "805f6a38c13bcbd8018b09f6ecd7e0017adf61fe6d"}}, {0x4, &(0x7f0000000000)=@string={0x0, 0x3, "7cda58bad321ca98f967462bf795671a8517c01912b50b9f1235f8d65e046b175bd5164ddf7b720337dea03332218476e7d647a254e02ac4a2357f1d88116f538cf820a6281d2c5b8569ad0db915076cd1120c169fc4d5f924e145279a1fed11f9965f40a0073b8403c244"}}]})

4.884698955s ago: executing program 6 (id=1252):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x2, &(0x7f0000000000)="813f0ea6", 0x4)
r1 = openat$rnull_attr(0xffffffffffffff9c, &(0x7f0000000040)={'/sys/kernel/config/rnull/syzrnull', 0x0, '/power\x00'}, 0x2, 0x0)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000000c0))
syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a"], 0x0)

4.379451026s ago: executing program 6 (id=1254):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='smaps\x00')
r1 = memfd_create(&(0x7f0000000500)='v\xa6\xf5l(Z\x94\xd0\',\xc6\xd5\xdb]\xcbj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00\x00\x00\x004b#F\x86o\x06\xe3\'\xe05\x10\x81\xb7\xbe\xbc\xab\\\n\xeds\xbf\xd8\x0e\xb9z,\x92\x17\x11\x7fn\x9b\x00:Q\xc7qAx\xae\xb0\xa6T\x02\a\xdb\x06\xa5\x8d;\xcfz\xf5\xff\xc2ZTYd[BV\xa65.p\xcc\xeb\xb1\xf8/[\xfa\xbe\xb0\x1d\xb0\xe6%ttq\x8f\x9d\xd2\x15\xb6|\xbf+\xd6\xd3\xf9\x01\xc8dwejpbB(O\xaa\xd8\x9b\xdb\xdcF\x93\x1f\xe7r\x86\xce\xf0\xa5\x87^\x9e\x1b\xc1\xb8\xba\xbf\x9f\x97Kf\xfem38r\xe1\x89\xdb\x9dX\x85-\xf1\x1e\x99\xf0\x13\x87', 0x1)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0xa0, 0x4)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000003, 0x11, r1, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x2)
read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020)

4.370738327s ago: executing program 6 (id=1255):
mkdir(&(0x7f0000000180)='./proc\x00', 0x8d) (async)
mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x15860, 0x0) (async)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x101a02, 0x0)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x4000, 0x1000003, 0x14852, r0, 0x8000000) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x50)
write(r1, &(0x7f0000009500)='10', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000009540)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90)

4.314090493s ago: executing program 6 (id=1256):
clock_nanosleep(0x4, 0x1, 0x0, 0x0)
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
clock_gettime(0x0, &(0x7f0000002f80)={<r2=>0x0, <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000003000)={0x28, 0x0, 0xffffffff, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000003040), 0x50)
listen(r4, 0x716e)
accept$inet6(r4, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/25, 0x19}], 0x1, &(0x7f0000000080)=""/236, 0xec}, 0x73}, {{&(0x7f0000000180)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/230, 0xe6}], 0x3, &(0x7f0000000480)=""/4096, 0x1000}, 0xc4}, {{&(0x7f0000001480)=@qipcrtr, 0x80, &(0x7f0000002780)=[{&(0x7f0000001500)=""/53, 0x35}, {&(0x7f0000001540)=""/163, 0xa3}, {&(0x7f0000001600)=""/90, 0x5a}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/21, 0x15}, {&(0x7f00000026c0)=""/135, 0x87}], 0x6, &(0x7f0000002800)=""/204, 0xcc}, 0x81}, {{&(0x7f0000002900)=@phonet, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002980)=""/196, 0xc4}, {&(0x7f0000002a80)=""/131, 0x83}, {&(0x7f0000002b40)=""/177, 0xb1}], 0x3, &(0x7f0000002c40)=""/183, 0xb7}, 0x2}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002d00)=""/81, 0x51}, {&(0x7f0000002d80)=""/30, 0x1e}], 0x2, &(0x7f0000002e00)=""/33, 0x21}, 0x7}], 0x5, 0x101, &(0x7f0000002fc0)={r2, r3+10000000})
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, r0, 0x0, 0x12, 0xffffffffffffffff, 0x9000000)

3.622604273s ago: executing program 2 (id=1264):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='sys_mnt\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000080)) (async, rerun: 64)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x33, 0x0, &(0x7f00000000c0)) (async)
clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) (async, rerun: 32)
write$binfmt_script(r0, &(0x7f0000000040), 0x4) (rerun: 32)

3.478151628s ago: executing program 6 (id=1265):
socketpair(0x13, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xc})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000003c000/0x2000)=nil, 0x2000}, 0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f00000001c0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, &(0x7f0000001300)={0x2c, &(0x7f0000001340)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$hidraw(&(0x7f0000001380), 0x0, 0x0) (async)
syz_usb_connect(0x3, 0xa1, &(0x7f00000013c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=0x0], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001400)={0x24, 0x0, 0x0, &(0x7f0000001440)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$HIDIOCGRDESCSIZE(r5, 0x80044801, 0xfffffffffffffffe)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001200)={'vcan0\x00', <r6=>0x0})
bind$can_raw(r3, &(0x7f0000001240)={0x1d, r6}, 0x10) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) (async)
readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/32, 0x20}], 0x1) (async)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001280)) (async)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5})

2.782712498s ago: executing program 2 (id=1266):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x6253, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0xc0, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x88, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_usb_connect$uac2(0x4, 0x10a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x56, 0x60, 0x0, {0x8, 0xb, 0x2, 0x0, 0x1, 0xc, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0xb, 0x2c, 0x9}, [@selector_unit={0xd, 0x24, 0xb, 0x0, 0x8, "f1110b3d2bc7ec19"}, @multiply_unit={0x7, 0x24, 0xc, 0xc, 0x81, 0x36, 0x8}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x1, 0xc0, 0x1, 0x3}, @feature_unit={0x7, 0x24, 0x6, 0x6, 0x1, [0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x18, 0x3, 0x1, 0x9, "", "16"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x1, 0x28, 0x86}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf, 0x8, 0x0, 0x2, 0xba}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x1, 0x40, 0x6, '#'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x8, 0xb, '<I', "f4ab"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x1, 0x5, {0x8, 0x25, 0x1, 0x80, 0xf, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x2, 0xe, 0x6, "fd03dd627205"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9d, 0x1, 0x9, 0x5, '&'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xfa, 0x3, 0x7, 0x3}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xb0, 0x0, 0x6, "b14276b44bfb7f28"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x7, 0x3, "b8063997"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0xb2, 0x8, {0x8, 0x25, 0x1, 0x83, 0xf, 0xd, 0x608c}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0xe2, 0x3, 0x8, 0x10, 0x9}, 0x8, &(0x7f0000000340)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42f}}, {0xc, &(0x7f00000003c0)=@string={0xc, 0x3, "6a3d636453f4a9173461"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1004}}, {0x84, &(0x7f0000000440)=@string={0x84, 0x3, "8aa1e5d7417938c2fda817b204eaad72e01b111b3460e314768fbd065d1eaec81d3c0f009b8742025116ca2953e0ba02ae6f5e34af7ba53fb7a8d6442c38c013729efdadef294f74adea440ca2478aea72b440bd53f6903d3e05668a5086af31a44dbbea735d3bd00ead6921ba722defcfdaeac9f92ba1e574b298d5bf177b149373"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x140d}}, {0xb1, &(0x7f0000000540)=@string={0xb1, 0x3, "494cd95b81d07a9cf779da2969daabcd1aef76dc682217fd58d7bd0fa8097be84f89d720729dbeaa1fdf681ebd7ca74d50c5ff138c00ee4e6c77d5f9f716006dfc2a2e2c8a8dfa2056984094a11baf9a45a23489b0f909aae5d93dc11fa12bf5dca492f5a2b8a1a74598783b19e5b79f076d860a0a2ef862b98ceea73a1f5d94e7afede44603af29e86216290cb347c6ba96733f9a5179208c6e2e5bb77df167c2813091f4ad6ce44932e3e94a516a"}}]})
syz_usb_control_io(r2, &(0x7f0000000940)={0x2c, &(0x7f0000000680)={0x40, 0x6, 0xcd, {0xcd, 0x0, "0dddea0b56ed90180d93346a8fed72d290f83a2654a250994ce5623b7d42140affe515997d127859300d1b5da2e2d0e4567ea5c438f1998751bd3d6d93486b4f7aa28097db82f68225230ea083754e9b376b7f5e5c98c55dae4862e0fca07bcc31ec91b31e96263cdd40103f15054bdd07950057adb2abcfc8a5169c545f538a5ce06f7666d0ced4a1a11ffd50fd4b63ec36452ebacb54ed5cb7815e02f8689962d63a969cecc116136451183f73e298872381eef29bf5d226ec6abaaff84385a80b1ffbf91d9200389c33"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f00000007c0)={0x0, 0xf, 0xe0, {0x5, 0xf, 0xe0, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x51, 0x9, 0x91, 0x1, 0xe4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x96, 0xe, 0x5, 0x6, 0x2}, @generic={0xc5, 0x10, 0xb, "63359e89b1a132eb58d8550d97048df24c1c3f4979b6614ca5eaff9e22e69c23ac188239bae918718e66c2363f5fdc618e085f20687f2684f2addb0af483a994cb7b6d6ae8be39fbdc2cb182976162a7680b194ebb053670f59a4a25bf6e06c0cab2452e17c6922c2b1de8df76caf95294f4c37f26bb6dcc008ffdb9b9f9c03f98127b5ef0e3681207ffbe4298340c0d49669567fa30b3343fea177cbf7dc8fefa9bbac63455bf753b13c29b99834afa4fff5ea208bfdc4c9795f4d54d8d26960045"}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1c, 0x18, 0x80, 0x1, "befef40f", "85a4ee71"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8f, 0x8, 0x8, 0x6, 0x9, 0x5, 0xc227}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a00)={0x0, 0xf, 0x99, "62ea8210e4e0dc354ddcae21f13a18bd90975c0df1c6fcb1cf1f1d2596b3a270c11b54f859740662902d83dcc867c39231899948e1856503bf28252bcd44477b2b2518f93e2a5e8e3f72caa5bae6433681903ecc63599010f3767aa68fcda7ea1acc087e18e8bb31a1c036fb82d24c6c054eba516df244e244040780bc715b8a1a2307ab72de183a36091a2d03328b4e04b205ac83ca4e8917"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x24}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000b80)={0x20, 0x0, 0x8, {0x160, 0x1, [0xf0]}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "e3ba"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "eaa2"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000e00)={0x40, 0x1e, 0x1}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x9}}) (async)
bind$inet(r0, &(0x7f00000009c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) (async)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async)
sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./dev\x00', 0x1ff) (async, rerun: 32)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
bind$inet6(r3, &(0x7f0000001100)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c)
bind$inet6(r3, &(0x7f0000001140)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c) (async, rerun: 32)
mount(0x0, &(0x7f0000000f40)='./dev\x00', &(0x7f0000000f80)='devtmpfs\x00', 0x2, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f0000001000)=@filename='./dev/sda1\x00', &(0x7f0000001040)='./mnt\x00', &(0x7f0000001080)='ext4\x00', 0x8410, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt\x00', 0x0, 0x21)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x40087602, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)

2.447388403s ago: executing program 4 (id=1267):
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0xfe30309f17d087fb)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12015002742488200a1a02016a3701020301090212000108e420030904"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./proc/fs/nfsd\x00')
open(&(0x7f0000000240)='./proc/fs/nfsd/file0\x00', 0x3b1d42, 0x50)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0xffffdfffffffffff, 0x800, 0x9, 0x3}, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x6, 0xfffffffe, 0x8, 0x7f, 0x100000, 0x1, 0x2004c8, 0x8000000, 0x0, 0x10000, 0x7, 0x0, 0x5, 0x3, 0x4, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.211840146s ago: executing program 2 (id=1270):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) (async)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8831, 0xffffffffffffffff, 0x3000) (async, rerun: 64)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) (async, rerun: 64)
sendmsg(r2, &(0x7f0000000200)={0x0, 0x953a, &(0x7f0000000240)=[{&(0x7f0000000340)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async, rerun: 64)
mlockall(0x5) (async, rerun: 64)
r3 = socket$netlink(0x10, 0x3, 0x0)
fcntl$getown(r3, 0x9) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0) (async, rerun: 32)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) (async, rerun: 32)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f00000002c0)={&(0x7f0000000280)=[{&(0x7f0000000000)="696257d1d584e31fd6aadfe9739d5fc8f103ce1ba695ecd70355f2a27db4b3bd753dcc1f16c772664b467f4b8ce310f39ac0f4ac763d01000000c7ee7d8a47af038f7e6a7fdda68589f8a2b3f7e34da1a2cfb32256f2e2ddd85b521ba14fc634c14d54bff117a82686982e1e161e865c1db67fd9cbde2333076f64a78aed5bc5ba5bc56fe436b194f1f36c03e7d4ed010000000000000053792ed2861276aeed274d4de46e666ef7fbb029ec978e555569a5ddb3200896cb27d9d14033b3c94ebb6c675d9f4e0a30c19f5af931faf4fbaf280331", 0xd4}, {&(0x7f0000000100)="657014acde8798f4e6f762974b383b0db6d970e409c6968b8eb2b92ab2ce88a70055dc0000000000", 0x28}, {&(0x7f0000000180)="a6fc278ffda2232b5ce7db816021bc47350f779cda89c69950b4d225594106", 0x1f}, {&(0x7f0000000440)="5ed876d56d0fbae48de1dff760d4f690dc16fd6e8bc0073d0617023ba1347a0e32cc8a106a8703ed8b60466bd74b924263fe085d813f1b9b2967b7f6c908694c0b8f88ce34b2134dfb51141e306657d4c53192446ffb548827cf47036df7ad4dc514105bf6381148335c91a3206ba9cb5999393ebad77020b66eb56c7c79894d98506541756e9a7dad434ded1484a2089cd2f16ac770c325e79e08cabff0711ff1e26e7846ea1eccc972e12be0d0ab13ebe4111e176f80c8bcd1b7f64f00f53e648ba1089eaa8c97d22f730055db1475c5e95ac425e06bf1ab25eb63ddbf8f728c8fcbc73335e68be38ee0fc6665a8141366c04f58512b01fd", 0xf9}], 0x4, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x6, 0x4, 0x4}) (async)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xc0010062, 0x0, 0x4}]})
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, &(0x7f00000003c0)="ba420066ed0f3566b95e0a00000f320f01ef0f01c56766c7442400030000006766c7442402544400006766c744240600000000670f0114246766c74424005a0000006766c7442402002800006766c744240600000000670f011c24bad004ec0f21bbba2100b8b500ef"}], 0xaaaab1d, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.334173776s ago: executing program 2 (id=1271):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000640)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000680)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000006c0)={0x2, 0x6, 0xb, 0x5f9e, 0x80000001}, 0x14)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/cpu_dma_latency\x00', 0x20c01, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
dup3(r2, r1, 0x80000)
close(0x3)

1.300907449s ago: executing program 2 (id=1272):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000500)={0x3f, 0x3, 0x9}, 0x10)
write(r0, &(0x7f0000000540)="240000001e005f0214fffffffffffff80700b4502fd8ca1f05bf0001080008001d000000", 0x24)
syz_usb_connect$midi(0x3, 0x48, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x1, 0x5, 0x20, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xf, [@ms_header={0x7, 0x24, 0x1, 0x8, 0x7}], [{{0x9, 0x5, 0x4, 0x2, 0x200, 0x2c, 0xf5, 0x2, {0x14, 0x25, 0x1, 0x10, "d7edd74705003eed8a3e473caf800300"}}}]}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x11, 0x0})
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, 0x3ed, 0x800, 0x70bd2b, 0x25dfdbfb, "31f0bc9ae1d1e87e32d8231ce7dec56681f84444dcca280af2c961d1ecc20c22cd9d24ead53617d59a479a313c8df9fce068a851a77e2d3089934baa046a67907542c7b77c6730125cea48321cf9880ace6cdcb82530df255ffc7f725c6d522ced7493c34197f18702203b93d6a7656f8caa51691442292938a9a2f837dd2ab7dfec77bb9f4df2bbf9a290dd4a8d1e0a956dccaab7f8830aa8740acc820d8ef3cef6a9d5e3e05be8ffefba2888bf", ["", "", "", "", ""]}, 0xc0}, 0x1, 0x0, 0x0, 0x4028094}, 0x8000)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x6, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x8, {0x9, 0x21, 0x1004, 0xff, 0x1, {0x22, 0x100a}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8c, 0x1, 0x8}}}}}]}}]}}, 0x0)
mremap(&(0x7f0000d84000/0x2000)=nil, 0x7fffdf4dd000, 0x1002, 0x3, &(0x7f0000b22000/0x1000)=nil)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x123e00, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2982, 0x0)
setns(0xc9, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/l2cap\x00')
preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000380)=""/155, 0x9b}], 0x1, 0x400, 0x7)
mlock2(&(0x7f0000b23000/0x4000)=nil, 0x4000, 0x1)
writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="e8", 0x1}], 0x1)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
mmap$xdp(&(0x7f0000b22000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r4, 0x180000000)

530.099517ms ago: executing program 0 (id=1273):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002500)=ANY=[@ANYBLOB="1400000068001f"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
write(r0, &(0x7f00000001c0)="6773c2d18f929b3e0b096f9c4f483461835123dcd1a50117388b52c4d46b158aecf053332371a7ef12576b0192931dd86ff76fc950a2a0c58e8b5363a4d00824e513", 0x42)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000240)={0x3, 0x6, 0x8000, 0x800, 0xd5, "d6e46f55bf4b0d6c7e5a325523b53124b81788", 0x800, 0xfffffffe})
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
modify_ldt$write(0x1, &(0x7f0000000000)={0x8000, 0x20000800, 0x2000, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x7f, 0x6, 0x4, 0x10001, 0x2, "b5c88b2f83e3974750c75342f0a366771ff726"})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
r7 = openat$cgroup_ro(r5, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000380), 0x10010)
sendfile(r6, r7, &(0x7f00000003c0)=0x1010, 0x10001)
r8 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000140)={0x0, &(0x7f0000000140)})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000400)='oom_score_adj\x00')
read$FUSE(r9, &(0x7f0000000440)={0x2020}, 0x2020)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

523.853518ms ago: executing program 0 (id=1274):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4)
timerfd_create(0x9, 0x800)

523.631328ms ago: executing program 0 (id=1275):
modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x40000000, 0x0)
ptrace$setregs(0xd, r0, 0x5, &(0x7f0000002080)="84fff29ab187e0e7598238b73bb330b800b6a8dfb20858c411ff069d4e4b7617e77d2bee4113caeb90da3c5f72e6012834e060e9ec243030f1e204d17c2a46dd1276b2ce0d617a8b5ae78ad7ad44f03994a7d48c4988dcc38a59a9afc818413737f0f29bb6858832d56c17b21457381466e8ad258acbc4fdc2b0b9e941f37351ef0ab2bae2634b747f")
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '2\x00'}}, [@crypt={0x0, 0x400, 0x0, 0x90, 'crypt\x00', {'capi:ccm(aes)-random', 0x20, @hex16=[0x66, 0x35, 0x64, 0x34, 0x66, 0x66, 0x61, 0x37, 0x61, 0x66, 0x33, 0x37, 0x65, 0x39, 0x30, 0x37, 0x33, 0x30, 0x30, 0x31, 0x37, 0x64, 0x39, 0x65, 0x35, 0x65, 0x39, 0x63, 0x35, 0x63, 0x39, 0x61], 0x20, '128', 0x20, {@ram_num={'1:', 0x1}, 0x20, '0'}, ' 1 allow_discards'}}]})
ptrace$cont(0x21, r0, 0x80000001, 0x4)

501.81789ms ago: executing program 0 (id=1276):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000000101010100000000000000000200ffed240002800c00028004000100010000001400018008000100e000000208000200e00000010c001980080002001b"], 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x1, 0x3, 0x7, 0x30, 0x14, 0x6}, @ipv6=@tcp={0xd, 0x6, "831a4f", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x8006, 0x0, 0x3}}}}}, 0x46)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000b80))
ppoll(&(0x7f0000000100)=[{r0, 0xc004}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x8)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000340)={&(0x7f0000000380)="98", 0x1})
mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff)
mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000580)='./mnt\x00')
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r3, &(0x7f0000000600)=[{&(0x7f0000000640)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3)

432.994997ms ago: executing program 2 (id=1277):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_create_resource$binfmt(&(0x7f0000000300)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
write(0xffffffffffffffff, &(0x7f0000000380)='p', 0x1) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffef8, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000640)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000680)=<r3=>0x0) (async)
r4 = syz_ublk_setup_io_uring(0x1ca6, &(0x7f00000006c0)={0x0, 0xcfab, 0xab73f6bc085e106a, 0x0, 0x118}, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r3, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb0d4, 0x2, 0x2, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2000, 0x2, 0x212}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x1, 0x0, 0x2b0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc4cd, 0x2000, 0x3, 0x268, 0x0, r4}}], 0x1, 0x0, 0x0)
setresuid(0xee00, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) (async, rerun: 32)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (rerun: 32)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r7, &(0x7f00000002c0)='10', 0x2) (async)
unshare(0x40000000) (async)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1d4e, 0x103)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async, rerun: 64)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) (rerun: 64)
read$FUSE(r7, &(0x7f0000000c80)={0x2020}, 0x2020) (async, rerun: 32)
mount$fuse(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c6404aaf4e51b3e3c3d30303030303030303030303030303030307036303030302c757365725f69643d5ec492bb64bd014660cd659677787f15ba7234dd3a693593fbbdf52b8ad43a8e0bcdca711ae61db8c9ee6c22142e86ca06b52f74f7e41992c8576020912cac598ae14908a85a214473af31a1f24ee5ca7cb825a1b5c33fce51c9a6292b209afcc203", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (rerun: 32)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

142.184826ms ago: executing program 0 (id=1278):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./dev/ram0\x00', &(0x7f0000000080)='ceph\x00', 0x3102050, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/ram0\x00', 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0xfffffed9) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
setresuid(0x0, 0xee01, 0xee00)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x19, 0x0, 0xff96)

18.946318ms ago: executing program 6 (id=1279):
prctl$PR_GET_KEEPCAPS(0x7)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x1c, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x210a, 0xfd, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x4a, 0xf3}}}}}]}}]}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000080) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)={0x20, 0xc, 0x2, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 0 (id=1280):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}], 0x20}, 0x80)
pipe2(0x0, 0x0)
syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xac, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x1, 0x84, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x50}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x8091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

se_many+0x4f0/0x4f0
[  111.306173][ T2516]  ? dev_set_rx_mode+0x21b/0x2c0
[  111.306188][ T2516]  ? br_dev_change_rx_flags+0x34/0x60
[  111.306204][ T2516]  __dev_change_flags+0x2e7/0x6c0
[  111.306221][ T2516]  ? __cfi___dev_change_flags+0x10/0x10
[  111.306237][ T2516]  ? ioctl_has_perm+0x39a/0x500
[  111.306249][ T2516]  dev_change_flags+0x84/0x1b0
[  111.306265][ T2516]  dev_ifsioc+0x4ef/0xc10
[  111.306280][ T2516]  dev_ioctl+0x9c1/0x1000
[  111.306294][ T2516]  sock_do_ioctl+0x249/0x330
[  111.306306][ T2516]  ? sock_show_fdinfo+0xd0/0xd0
[  111.306317][ T2516]  ? hook_file_ioctl+0x1ef/0x590
[  111.306332][ T2516]  ? hook_file_ioctl+0x1/0x590
[  111.306347][ T2516]  ? __cfi_do_futex+0x10/0x10
[  111.306361][ T2516]  sock_ioctl+0x568/0x7e0
[  111.306372][ T2516]  ? __cfi_sock_ioctl+0x10/0x10
[  111.306384][ T2516]  ? xfd_validate_state+0x68/0x140
[  111.306395][ T2516]  ? bpf_lsm_file_ioctl+0xd/0x20
[  111.306407][ T2516]  ? security_file_ioctl+0x3e/0x110
[  111.306424][ T2516]  ? __cfi_sock_ioctl+0x10/0x10
[  111.306434][ T2516]  __se_sys_ioctl+0x123/0x1b0
[  111.306447][ T2516]  __x64_sys_ioctl+0x7f/0xa0
[  111.306459][ T2516]  x64_sys_call+0x1878/0x2ee0
[  111.306480][ T2516]  do_syscall_64+0x57/0xf0
[  111.306492][ T2516]  ? clear_bhb_loop+0x50/0xa0
[  111.306509][ T2516]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  111.306525][ T2516] RIP: 0033:0x7faa81fa94d9
[  111.306537][ T2516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.306547][ T2516] RSP: 002b:00007faa82de2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.306562][ T2516] RAX: ffffffffffffffda RBX: 00007faa82225fa0 RCX: 00007faa81fa94d9
[  111.306572][ T2516] RDX: 0000200000000640 RSI: 0000000000008914 RDI: 0000000000000008
[  111.306580][ T2516] RBP: 00007faa8203804e R08: 0000000000000000 R09: 0000000000000000
[  111.306588][ T2516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.306598][ T2516] R13: 00007faa82226038 R14: 00007faa82225fa0 R15: 00007ffd0c6d6c78
[  111.306611][ T2516]  </TASK>
[  111.307034][ T2516] bridge0: entered allmulticast mode
[  111.402017][  T367] raw-gadget.0 gadget.2: failed to queue suspend event
[  111.655283][  T367] usb usb3-port1: unable to enumerate USB device
[  111.683875][ T2519] netlink: 24 bytes leftover after parsing attributes in process `syz.9.565'.
[  111.777035][   T36] audit: type=1400 audit(1811450789.051:5045): avc:  denied  { name_bind } for  pid=2525 comm="syz.9.567" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  111.778190][ T2526] FAULT_INJECTION: forcing a failure.
[  111.778190][ T2526] name failslab, interval 1, probability 0, space 0, times 0
[  111.806098][ T2528] netlink: 104 bytes leftover after parsing attributes in process `syz.2.568'.
[  111.810984][ T2526] CPU: 0 UID: 0 PID: 2526 Comm: syz.9.567 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c
[  111.811014][ T2526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  111.811026][ T2526] Call Trace:
[  111.811033][ T2526]  <TASK>
[  111.811040][ T2526]  __dump_stack+0x21/0x30
[  111.811065][ T2526]  dump_stack_lvl+0x140/0x1c0
[  111.811083][ T2526]  ? __cfi_dump_stack_lvl+0x10/0x10
[  111.811103][ T2526]  dump_stack+0x19/0x20
[  111.811120][ T2526]  should_fail_ex+0x3c2/0x510
[  111.811140][ T2526]  should_failslab+0xac/0x100
[  111.811160][ T2526]  __kmalloc_node_track_caller_noprof+0x65/0x4f0
[  111.811188][ T2526]  ? match_token+0x520/0x5a0
[  111.811210][ T2526]  ? match_strdup+0x65/0x80
[  111.811233][ T2526]  kmemdup_nul+0x5a/0x1a0
[  111.811256][ T2526]  ? kfree+0x158/0x440
[  111.811279][ T2526]  ? p9_client_create+0x47d/0x12d0
[  111.811305][ T2526]  match_strdup+0x65/0x80
[  111.811327][ T2526]  p9_client_create+0x4bf/0x12d0
[  111.811354][ T2526]  ? __cfi_p9_client_create+0x10/0x10
[  111.811382][ T2526]  ? __kasan_kmalloc+0x96/0xb0
[  111.811401][ T2526]  ? __kmalloc_cache_noprof+0x23c/0x470
[  111.811428][ T2526]  ? v9fs_mount+0xc1/0x9d0
[  111.811447][ T2526]  ? kasan_save_alloc_info+0x3a/0x50
[  111.811472][ T2526]  ? __kasan_kmalloc+0x96/0xb0
[  111.811492][ T2526]  ? kstrdup+0x7b/0x130
[  111.811522][ T2526]  ? __asan_memset+0x39/0x50
[  111.811547][ T2526]  v9fs_session_init+0x1c4/0x18a0
[  111.811574][ T2526]  ? __cfi_v9fs_session_init+0x10/0x10
[  111.811600][ T2526]  ? kasan_save_alloc_info+0x3a/0x50
[  111.811624][ T2526]  ? __kasan_kmalloc+0x96/0xb0
[  111.811643][ T2526]  ? __kmalloc_cache_noprof+0x23c/0x470
[  111.811669][ T2526]  ? v9fs_mount+0xc1/0x9d0
[  111.811689][ T2526]  v9fs_mount+0xdb/0x9d0
[  111.811707][ T2526]  ? __cfi_v9fs_mount+0x10/0x10
[  111.811727][ T2526]  ? selinux_capable+0x38/0x50
[  111.811750][ T2526]  legacy_get_tree+0x106/0x1b0
[  111.811773][ T2526]  ? __cfi_v9fs_mount+0x10/0x10
[  111.811792][ T2526]  vfs_get_tree+0xa1/0x290
[  111.811818][ T2526]  do_new_mount+0x251/0xb40
[  111.811843][ T2526]  ? security_capable+0x44/0x130
[  111.811864][ T2526]  path_mount+0x66a/0xff0
[  111.811889][ T2526]  ? putname+0x113/0x150
[  111.811907][ T2526]  __se_sys_mount+0x2bf/0x480
[  111.811925][ T2526]  ? __x64_sys_mount+0xf0/0xf0
[  111.811942][ T2526]  ? __kasan_check_write+0x18/0x20
[  111.811972][ T2526]  ? fpregs_restore_userregs+0x11c/0x260
[  111.811998][ T2526]  __x64_sys_mount+0xc3/0xf0
[  111.812015][ T2526]  x64_sys_call+0x2021/0x2ee0
[  111.812035][ T2526]  do_syscall_64+0x57/0xf0
[  111.812054][ T2526]  ? clear_bhb_loop+0x50/0xa0
[  111.812080][ T2526]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  111.812104][ T2526] RIP: 0033:0x7faa81fa94d9
[  111.812122][ T2526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.812138][ T2526] RSP: 002b:00007faa82de2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  111.812161][ T2526] RAX: ffffffffffffffda RBX: 00007faa82225fa0 RCX: 00007faa81fa94d9
[  111.812176][ T2526] RDX: 0000200000000940 RSI: 0000200000000900 RDI: 00002000000008c0
[  111.812189][ T2526] RBP: 00007faa8203804e R08: 0000200000000b80 R09: 0000000000000000
[  111.812203][ T2526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.812216][ T2526] R13: 00007faa82226038 R14: 00007faa82225fa0 R15: 00007ffd0c6d6c78
[  111.812232][ T2526]  </TASK>
[  111.877065][ T1157] kernel write not supported for file [eventfd] (pid: 1157 comm: kworker/0:5)
[  111.885334][ T2528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.167358][ T2528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.202377][ T2537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.210975][ T2537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.225028][ T2537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.233538][ T2537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.760506][ T2545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.769086][ T2545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.782365][ T2547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=2547 comm=syz.2.574
[  112.796027][ T2547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=2547 comm=syz.2.574
[  112.832851][ T2549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.843245][ T2549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.872491][ T2549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.881834][ T2549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.956194][ T2565] futex_wake_op: syz.6.580 tries to shift op by 144; fix this program
[  112.976555][ T2569] futex_wake_op: syz.6.580 tries to shift op by 144; fix this program
[  113.216121][ T2585] netlink: 57 bytes leftover after parsing attributes in process `syz.9.583'.
[  113.262017][ T2587] Config c/1 of g1 needs at least one function.
[  113.268458][ T2587] udc dummy_udc.0: failed to start g1: -22
[  113.274392][ T2587] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  113.285302][ T2587] UDC core: g1: couldn't find an available UDC or it's busy
[  113.293523][ T2587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=2587 comm=syz.9.587
[  113.307047][ T2587] netlink: 32 bytes leftover after parsing attributes in process `syz.9.587'.
[  113.324013][ T2589] ./dev: Can't lookup blockdev
[  113.408489][ T2599] bridge0: mtu less than device minimum
[  113.424769][ T2601] device-mapper: table: 252:6: thin-pool: unknown target type
[  113.432507][ T2601] device-mapper: ioctl: error adding target to table
[  113.528007][ T2613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.536596][ T2613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.038023][   T36] kauditd_printk_skb: 10 callbacks suppressed
[  114.038041][   T36] audit: type=1400 audit(1811450791.311:5056): avc:  denied  { ioctl } for  pid=2618 comm="syz.9.596" path="socket:[21354]" dev="sockfs" ino=21354 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  114.081603][ T2621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2621 comm=syz.1.597
[  114.114091][ T2621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.122672][ T2621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.512378][ T2632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.520923][ T2632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.915254][   T36] audit: type=1400 audit(1811450792.191:5057): avc:  denied  { cmd } for  pid=2640 comm="syz.9.602" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[  115.054348][ T2648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'.
[  115.110194][ T2656] FAULT_INJECTION: forcing a failure.
[  115.110194][ T2656] name failslab, interval 1, probability 0, space 0, times 0
[  115.123949][ T2656] CPU: 0 UID: 0 PID: 2656 Comm: syz.2.607 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c
[  115.123987][ T2656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  115.124001][ T2656] Call Trace:
[  115.124008][ T2656]  <TASK>
[  115.124016][ T2656]  __dump_stack+0x21/0x30
[  115.124042][ T2656]  dump_stack_lvl+0x140/0x1c0
[  115.124063][ T2656]  ? __cfi_dump_stack_lvl+0x10/0x10
[  115.124089][ T2656]  dump_stack+0x19/0x20
[  115.124108][ T2656]  should_fail_ex+0x3c2/0x510
[  115.124129][ T2656]  should_failslab+0xac/0x100
[  115.124161][ T2656]  __kmalloc_node_noprof+0x69/0x500
[  115.124192][ T2656]  ? __kvmalloc_node_noprof+0x128/0x300
[  115.124222][ T2656]  __kvmalloc_node_noprof+0x128/0x300
[  115.124251][ T2656]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  115.124275][ T2656]  ? __kasan_check_write+0x18/0x20
[  115.124305][ T2656]  ? static_key_fast_inc_not_disabled+0x159/0x220
[  115.124333][ T2656]  nf_hook_entries_grow+0x284/0x740
[  115.124362][ T2656]  ? mutex_lock+0x97/0x1d0
[  115.124391][ T2656]  ? ethnl_phy_fill_reply+0x3f1/0x410
[  115.124422][ T2656]  __nf_register_net_hook+0x225/0x820
[  115.124454][ T2656]  nf_register_net_hook+0xbf/0x1b0
[  115.124485][ T2656]  nf_register_net_hooks+0x4b/0x1c0
[  115.124515][ T2656]  ip6t_register_table+0x522/0x7d0
[  115.124545][ T2656]  ? ip6t_alloc_initial_table+0x4c8/0x8d0
[  115.124577][ T2656]  ? __cfi_ip6t_register_table+0x10/0x10
[  115.124611][ T2656]  ip6table_mangle_table_init+0x45/0x70
[  115.124632][ T2656]  xt_find_table_lock+0x36f/0x460
[  115.124661][ T2656]  do_ip6t_get_ctl+0x632/0x1210
[  115.124694][ T2656]  ? __cfi_do_ip6t_get_ctl+0x10/0x10
[  115.124725][ T2656]  ? __asan_set_shadow_00+0x12/0x20
[  115.124753][ T2656]  ? do_ipv6_getsockopt+0x109c/0x1fd0
[  115.124785][ T2656]  ? __cfi_do_ipv6_getsockopt+0x10/0x10
[  115.124817][ T2656]  ? try_to_wake_up+0x1082/0x1d50
[  115.124845][ T2656]  ? do_syscall_64+0x57/0xf0
[  115.124868][ T2656]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  115.124897][ T2656]  ? plist_check_list+0x2a8/0x2c0
[  115.124921][ T2656]  ? avc_has_perm_noaudit+0x26b/0x360
[  115.124946][ T2656]  ? __asan_memcpy+0x5a/0x80
[  115.124976][ T2656]  ? avc_has_perm_noaudit+0x289/0x360
[  115.125001][ T2656]  ? __kasan_check_write+0x18/0x20
[  115.125031][ T2656]  ? mutex_unlock+0x90/0x240
[  115.125058][ T2656]  ? __cfi_mutex_unlock+0x10/0x10
[  115.125086][ T2656]  ? futex_wake+0x666/0x950
[  115.125114][ T2656]  nf_getsockopt+0x28b/0x2b0
[  115.125137][ T2656]  ipv6_getsockopt+0x203/0x2b0
[  115.125178][ T2656]  ? __cfi_ipv6_getsockopt+0x10/0x10
[  115.125213][ T2656]  udpv6_getsockopt+0x7e/0x90
[  115.125238][ T2656]  sock_common_getsockopt+0xaf/0xd0
[  115.125264][ T2656]  ? __cfi_sock_common_getsockopt+0x10/0x10
[  115.125287][ T2656]  do_sock_getsockopt+0x3a4/0x6c0
[  115.125317][ T2656]  ? __cfi_do_sock_getsockopt+0x10/0x10
[  115.125346][ T2656]  ? fpu_flush_thread+0x2d0/0x340
[  115.125374][ T2656]  ? __fget_files+0x2bc/0x330
[  115.125399][ T2656]  __x64_sys_getsockopt+0x1aa/0x250
[  115.125428][ T2656]  ? fpu_flush_thread+0x2d0/0x340
[  115.125457][ T2656]  ? fpu_flush_thread+0x2d0/0x340
[  115.125486][ T2656]  x64_sys_call+0x10db/0x2ee0
[  115.125510][ T2656]  do_syscall_64+0x57/0xf0
[  115.125532][ T2656]  ? clear_bhb_loop+0x50/0xa0
[  115.125562][ T2656]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  115.125591][ T2656] RIP: 0033:0x7f4008ba94d9
[  115.125611][ T2656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.125630][ T2656] RSP: 002b:00007f4009b08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  115.125657][ T2656] RAX: ffffffffffffffda RBX: 00007f4008e25fa0 RCX: 00007f4008ba94d9
[  115.125675][ T2656] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000004
[  115.125689][ T2656] RBP: 00007f4008c3804e R08: 0000200000000740 R09: 0000000000000000
[  115.125704][ T2656] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  115.125719][ T2656] R13: 00007f4008e26038 R14: 00007f4008e25fa0 R15: 00007fff8cb886a8
[  115.125739][ T2656]  </TASK>
[  115.573627][ T2662] netlink: 76 bytes leftover after parsing attributes in process `syz.2.610'.
[  115.597098][   T36] audit: type=1400 audit(1811450792.871:5058): avc:  denied  { bind } for  pid=2661 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  115.617402][   T36] audit: type=1400 audit(1811450792.871:5059): avc:  denied  { name_bind } for  pid=2661 comm="syz.2.610" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  115.638076][ T2669] incfs_lookup_dentry err:-13
[  115.638099][ T2669] incfs: Can't find or create .index dir in ./file0
[  115.638157][ T2669] incfs: mount failed -13
[  115.638437][ T2669] incfs_lookup_dentry err:-13
[  115.645423][   T36] audit: type=1400 audit(1811450792.871:5060): avc:  denied  { node_bind } for  pid=2661 comm="syz.2.610" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  115.679883][   T36] audit: type=1326 audit(1811450792.921:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.9.613" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa81fa94d9 code=0x0
[  115.705276][ T2669] incfs: Can't find or create .index dir in ./file0
[  115.716455][ T2669] incfs: mount failed -13
[  116.055007][ T2684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.078951][ T2684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.372567][ T2687] ./dev/sda1: Can't lookup blockdev
[  116.503803][ T2694] tmpfs: Too small a size for current use
[  116.585396][ T2704] fuse: Unknown parameter 'use00000000000000000000'
[  116.618241][ T2709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.637863][ T2709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.702028][   T36] audit: type=1400 audit(1811450793.971:5062): avc:  denied  { write } for  pid=2719 comm="syz.9.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  116.982016][   T66] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  117.133178][   T66] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  117.142394][   T66] usb 10-1: config 1 has no interface number 0
[  117.148567][   T66] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  117.157771][   T66] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7
[  117.170329][   T66] usb 10-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  117.179708][   T66] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.188095][   T66] usb 10-1: Product: syz
[  117.192435][   T66] usb 10-1: Manufacturer: syz
[  117.197238][   T66] usb 10-1: SerialNumber: syz
[  117.257039][ T2734] fuse: Unknown parameter 'user_i00000000000000000000'
[  117.405756][   T66] usb 10-1: 1:0 : does not exist
[  117.410747][   T66] usb 10-1: 2:1 : incorrect wMaxPacketSize for BADD profile
[  117.418345][   T66] usb 10-1: incorrect wMaxPacketSize 0x40 for BADD profile
[  117.426831][   T66] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -22
[  117.437139][   T66] usb 10-1: USB disconnect, device number 22
[  117.446245][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  117.493326][  T365] usb 2-1: USB disconnect, device number 10
[  117.630258][ T2743] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.637438][ T2743] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.644585][ T2743] bridge_slave_0: entered allmulticast mode
[  117.650841][ T2743] bridge_slave_0: entered promiscuous mode
[  117.657685][ T2743] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.664794][ T2743] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.672131][ T2743] bridge_slave_1: entered allmulticast mode
[  117.678641][ T2743] bridge_slave_1: entered promiscuous mode
[  117.713348][ T2743] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.720383][ T2743] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.727682][ T2743] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.734766][ T2743] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.754281][ T2323] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.761669][ T2323] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.770920][ T2324] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.777991][ T2324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.787056][ T2323] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.794110][ T2323] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.817197][ T2743] veth0_vlan: entered promiscuous mode
[  117.828088][ T2743] veth1_macvtap: entered promiscuous mode
[  117.859537][   T36] audit: type=1400 audit(1811450795.131:5063): avc:  denied  { validate_trans } for  pid=2747 comm="syz.0.638" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  117.905594][   T36] audit: type=1400 audit(1811450795.181:5064): avc:  denied  { ioctl } for  pid=2752 comm="syz.0.640" path="socket:[23662]" dev="sockfs" ino=23662 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  117.944678][   T36] audit: type=1400 audit(1811450795.221:5065): avc:  denied  { setopt } for  pid=2756 comm="syz.9.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  117.967220][ T2760] fuse: Unknown parameter 'user_i00000000000000000000'
[  118.212021][   T31] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  118.372011][   T31] usb 10-1: Using ep0 maxpacket: 16
[  118.383689][   T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.395146][   T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.418200][   T31] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  118.432806][   T31] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  118.442433][   T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.451468][   T31] usb 10-1: config 0 descriptor??
[  118.512958][ T2789] /dev/md_syzg2: Can't lookup blockdev
[  118.601604][ T2794] fuse: Unknown parameter 'user_i00000000000000000000'
[  118.714655][ T2800] netlink: 24 bytes leftover after parsing attributes in process `syz.6.658'.
[  118.723777][ T2801] netlink: 24 bytes leftover after parsing attributes in process `syz.6.658'.
[  118.748424][ T2803] overlayfs: failed to clone lowerpath
[  118.754931][ T2803] fuse: Bad value for 'group_id'
[  118.759967][ T2803] fuse: Bad value for 'group_id'
[  118.950622][   T31] usbhid 10-1:0.0: can't add hid device: -71
[  118.956989][   T31] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  118.965914][   T31] usb 10-1: USB disconnect, device number 23
[  119.003269][ T2814] fuse: Unknown parameter 'user_id00000000000000000000'
[  119.048783][ T2822] overlayfs: disabling nfs_export due to verity=on
[  119.075894][ T2826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'.
[  119.321412][ T2833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.336620][ T2833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.372036][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  119.429137][ T2838] fuse: Unknown parameter 'user_id00000000000000000000'
[  119.446561][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  119.446579][   T36] audit: type=1400 audit(1811450796.721:5068): avc:  denied  { getopt } for  pid=2839 comm="syz.6.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  119.533058][   T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  119.544650][   T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 251, changing to 11
[  119.555916][   T10] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  119.569034][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  119.575724][   T10] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00
[  119.584786][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.593740][   T10] usb 1-1: config 0 descriptor??
[  119.752124][  T311] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  119.903144][  T311] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.919695][  T311] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  119.928937][  T311] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  119.938523][  T311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.951125][  T311] usb 10-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  120.000860][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  120.010894][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  120.019791][   T10] usb 1-1: USB disconnect, device number 4
[  120.159775][ T2848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.168342][ T2848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.176790][  T311] usb 10-1: Failed to query (GET_INFO) UVC control 14 on unit 1: 0 (exp. 1).
[  120.185998][  T311] usb 10-1: No streaming interface found for terminal 2.
[  120.538272][ T2859] fuse: Unknown parameter 'user_id00000000000000000000'
[  120.560558][ T2861] fuse: Bad value for 'user_id'
[  120.575706][ T2861] fuse: Bad value for 'user_id'
[  120.646611][ T2881] veth0: mtu less than device minimum
[  120.692481][ T2888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.701919][ T2888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.862102][  T311] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  120.992039][  T311] usb 1-1: device descriptor read/64, error -71
[  121.178823][ T2891] netlink: 68 bytes leftover after parsing attributes in process `syz.6.691'.
[  121.232092][  T311] usb 1-1: device descriptor read/64, error -71
[  121.472004][  T311] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  121.602026][  T311] usb 1-1: device descriptor read/64, error -71
[  121.697797][ T2897] fuse: Bad value for 'fd'
[  121.842020][  T311] usb 1-1: device descriptor read/64, error -71
[  121.952114][  T311] usb usb1-port1: attempt power cycle
[  122.302067][  T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  122.323008][  T311] usb 1-1: device descriptor read/8, error -71
[  122.342961][   T36] audit: type=1400 audit(1811450799.621:5069): avc:  denied  { read } for  pid=2903 comm="syz.6.695" name="dm0" dev="tmpfs" ino=1400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  122.372661][ T2907] ������: renamed from bridge0 (while UP)
[  122.459876][ T2915] overlayfs: failed to clone upperpath
[  122.474471][  T311] usb 1-1: device descriptor read/8, error -71
[  122.478616][ T2917] fuse: Bad value for 'fd'
[  122.502758][   T36] audit: type=1400 audit(1811450799.781:5070): avc:  denied  { mount } for  pid=2921 comm="syz.6.703" name="/" dev="pstore" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  122.531201][   T10] usb 10-1: USB disconnect, device number 24
[  122.625349][ T2939] pim6reg1: entered promiscuous mode
[  122.630701][ T2939] pim6reg1: entered allmulticast mode
[  122.697992][   T36] audit: type=1400 audit(1811450799.971:5071): avc:  denied  { read } for  pid=2941 comm="syz.9.709" name="/" dev="configfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  122.720087][   T36] audit: type=1400 audit(1811450799.971:5072): avc:  denied  { open } for  pid=2941 comm="syz.9.709" path="/82/config" dev="configfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  122.746778][ T2944] random: crng reseeded on system resumption
[  122.747034][   T36] audit: type=1400 audit(1811450800.021:5073): avc:  denied  { write } for  pid=2943 comm="syz.9.710" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  122.752857][  T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  122.777024][ T2945] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  122.799530][   T36] audit: type=1400 audit(1811450800.071:5074): avc:  denied  { ioctl } for  pid=2943 comm="syz.9.710" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  122.825559][  T311] usb 1-1: device descriptor read/8, error -71
[  122.873212][ T2950] fuse: Bad value for 'fd'
[  122.949642][ T2961] netlink: 'syz.9.715': attribute type 63 has an invalid length.
[  122.957795][ T2961] netlink: 5 bytes leftover after parsing attributes in process `syz.9.715'.
[  122.958867][  T311] usb 1-1: device descriptor read/8, error -71
[  122.967161][ T2961] gretap0: entered allmulticast mode
[  122.978514][ T2961] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  123.082223][  T311] usb usb1-port1: unable to enumerate USB device
[  123.109971][ T2967] tipc: Can't bind to reserved service type 1
[  123.136317][ T2971] fuse: Unknown parameter '0x0000000000000005'
[  123.176284][ T2984] fuse: Bad value for 'fd'
[  123.191125][   T36] audit: type=1400 audit(1811450800.461:5075): avc:  denied  { getopt } for  pid=2985 comm="syz.6.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  123.351653][ T2999] fuse: Unknown parameter '0x0000000000000005'
[  123.380441][ T3006] /dev/sr0: Can't lookup blockdev
[  123.387272][   T36] audit: type=1400 audit(1811450800.661:5076): avc:  denied  { write } for  pid=3005 comm="syz.9.732" path="socket:[24747]" dev="sockfs" ino=24747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  123.389768][ T3006] zram0: detected capacity change from 0 to 16
[  123.425832][   T36] audit: type=1400 audit(1811450800.701:5077): avc:  denied  { unmount } for  pid=1548 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  123.522652][  T311] rust_binder: 3008: undelivered TRANSACTION_COMPLETE
[  123.713341][ T3026] fuse: Unknown parameter '0x0000000000000005'
[  123.852116][  T311] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  123.861106][ T3020] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17
[  123.956669][ T3060] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  123.997689][ T3062] fuse: Unknown parameter '0x0000000000000005'
[  124.021997][  T311] usb 10-1: Using ep0 maxpacket: 16
[  124.028481][  T311] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.039660][  T311] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.050423][  T311] usb 10-1: config 0 interface 0 has no altsetting 0
[  124.058068][  T311] usb 10-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  124.071521][  T311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.086195][ T3065] SELinux: failed to load policy
[  124.087550][  T311] usb 10-1: config 0 descriptor??
[  124.246146][   T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  124.364757][ T3074] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  124.378052][ T3074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'.
[  124.402046][   T31] usb 1-1: Using ep0 maxpacket: 8
[  124.408983][   T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  124.417425][   T31] usb 1-1: config 179 has no interface number 0
[  124.423980][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  124.442727][ T3075] netlink: 112 bytes leftover after parsing attributes in process `syz.2.752'.
[  124.445436][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  124.464757][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  124.476190][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  124.487872][   T31] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  124.502973][  T311] itetech 0003:258A:6A88.0015: unknown main item tag 0x0
[  124.510061][  T311] itetech 0003:258A:6A88.0015: unknown main item tag 0x0
[  124.517225][   T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  124.526378][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.534468][  T311] itetech 0003:258A:6A88.0015: unknown main item tag 0x0
[  124.541518][  T311] itetech 0003:258A:6A88.0015: unknown main item tag 0x0
[  124.548945][  T311] itetech 0003:258A:6A88.0015: unknown main item tag 0x0
[  124.556511][ T3060] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  124.569525][  T311] itetech 0003:258A:6A88.0015: hiddev96,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.9-1/input0
[  124.762737][   T66] usb 10-1: USB disconnect, device number 25
[  124.780477][ T3060] tipc: Started in network mode
[  124.785696][ T3060] tipc: Node identity , cluster identity 4711
[  124.791913][ T3060] tipc: Failed to set node id, please configure manually
[  124.799027][ T3060] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  125.013584][ T3060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.022160][ T3060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.030786][ T3060] netlink: 140 bytes leftover after parsing attributes in process `syz.0.747'.
[  125.095295][   T10] usb 1-1: USB disconnect, device number 9
[  125.095295][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  125.095429][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  125.188424][ T3090] fuse: Unknown parameter '0x0000000000000005'
[  125.290668][ T3097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.299702][ T3097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.632077][  T311] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  125.661113][   T36] kauditd_printk_skb: 7 callbacks suppressed
[  125.661133][   T36] audit: type=1400 audit(1811450802.931:5085): avc:  denied  { bind } for  pid=3107 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  125.697390][ T3110] fuse: Unknown parameter '0x0000000000000005'
[  125.732786][ T3118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=3118 comm=syz.0.770
[  125.752632][   T36] audit: type=1400 audit(1811450803.031:5086): avc:  denied  { ioctl } for  pid=3119 comm="syz.0.771" path="socket:[25978]" dev="sockfs" ino=25978 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  125.777443][   T36] audit: type=1400 audit(1811450803.031:5087): avc:  denied  { lock } for  pid=3119 comm="syz.0.771" path="socket:[25978]" dev="sockfs" ino=25978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  125.785675][ T3125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.772'.
[  125.811029][  T311] usb 10-1: unable to get BOS descriptor or descriptor too short
[  125.819599][  T311] usb 10-1: config 50 has an invalid descriptor of length 0, skipping remainder of the config
[  125.837031][  T311] usb 10-1: config 50 has 1 interface, different from the descriptor's value: 2
[  125.847678][  T311] usb 10-1: New USB device found, idVendor=152d, idProduct=0578, bcdDevice=6a.b8
[  125.857293][  T311] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.865451][  T311] usb 10-1: Product: syz
[  125.869744][  T311] usb 10-1: Manufacturer: syz
[  125.874432][  T311] usb 10-1: SerialNumber: syz
[  125.931464][ T3134] SELinux:  truncated policydb string identifier
[  125.937922][ T3134] SELinux: failed to load policy
[  125.940277][ T3135] fuse: Unknown parameter 'fd0x0000000000000005'
[  126.015818][ T3138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.024333][ T3138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.080717][ T3101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  126.100014][  T311] usb-storage 10-1:50.0: USB Mass Storage device detected
[  126.109708][  T311] usb-storage 10-1:50.0: Quirks match for vid 152d pid 0578: 1000000
[  126.163497][  T311] usb 10-1: USB disconnect, device number 26
[  126.192068][   T66] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  126.240653][   T36] audit: type=1400 audit(1811450803.511:5088): avc:  denied  { create } for  pid=3142 comm="syz.6.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  126.261815][   T36] audit: type=1400 audit(1811450803.511:5089): avc:  denied  { create } for  pid=3142 comm="syz.6.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  126.373194][   T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.383385][   T66] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  126.393920][   T66] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40
[  126.402963][   T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.410932][   T66] usb 1-1: Product: syz
[  126.415267][   T66] usb 1-1: Manufacturer: syz
[  126.419892][   T66] usb 1-1: SerialNumber: syz
[  126.652734][ T3134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.661233][ T3134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.677529][   T66] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  126.687928][   T66] usb 1-1: USB disconnect, device number 10
[  126.697362][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  126.735011][ T3160] fuse: Unknown parameter 'fd0x0000000000000005'
[  127.052070][  T311] usb 10-1: new low-speed USB device number 27 using dummy_hcd
[  127.213093][  T311] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  127.224141][  T311] usb 10-1: config 0 interface 0 has no altsetting 0
[  127.230916][  T311] usb 10-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  127.240221][  T311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.249176][ T3187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'.
[  127.249236][  T311] usb 10-1: config 0 descriptor??
[  127.259653][ T3187] EXT4-fs warning (device sda1): ext4_group_extend:1870: need to use ext2online to resize further
[  127.273828][ T3180] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  127.290591][ T3189] fuse: Unknown parameter 'fd0x0000000000000005'
[  127.290600][ T3187] overlayfs: failed to resolve './file2': -2
[  127.380658][ T3193] FAULT_INJECTION: forcing a failure.
[  127.380658][ T3193] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.393783][ T3193] CPU: 0 UID: 0 PID: 3193 Comm: syz.2.796 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c
[  127.393817][ T3193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  127.393830][ T3193] Call Trace:
[  127.393838][ T3193]  <TASK>
[  127.393847][ T3193]  __dump_stack+0x21/0x30
[  127.393873][ T3193]  dump_stack_lvl+0x140/0x1c0
[  127.393893][ T3193]  ? __cfi_dump_stack_lvl+0x10/0x10
[  127.393915][ T3193]  dump_stack+0x19/0x20
[  127.393929][ T3193]  should_fail_ex+0x3c2/0x510
[  127.393941][ T3193]  should_fail+0xf/0x20
[  127.393952][ T3193]  should_fail_usercopy+0x1e/0x30
[  127.393964][ T3193]  strncpy_from_user+0x29/0x280
[  127.393976][ T3193]  getname_flags+0x106/0x6b0
[  127.393997][ T3193]  getname+0x1b/0x30
[  127.394026][ T3193]  do_sys_openat2+0xda/0x1d0
[  127.394051][ T3193]  ? do_sys_open+0x100/0x100
[  127.394073][ T3193]  ? __cfi___close_range+0x10/0x10
[  127.394085][ T3193]  __x64_sys_openat+0x13a/0x170
[  127.394099][ T3193]  x64_sys_call+0xe69/0x2ee0
[  127.394112][ T3193]  do_syscall_64+0x57/0xf0
[  127.394125][ T3193]  ? clear_bhb_loop+0x50/0xa0
[  127.394156][ T3193]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  127.394184][ T3193] RIP: 0033:0x7f4008b69d0e
[  127.394202][ T3193] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  127.394218][ T3193] RSP: 002b:00007f4009b07ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  127.394233][ T3193] RAX: ffffffffffffffda RBX: 00007f4009b086c0 RCX: 00007f4008b69d0e
[  127.394242][ T3193] RDX: 0000000000000002 RSI: 00007f4009b07f90 RDI: ffffffffffffff9c
[  127.394251][ T3193] RBP: 00007f4008c3804e R08: 0000000000000000 R09: 0000000000000000
[  127.394258][ T3193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.394265][ T3193] R13: 00007f4008e26038 R14: 00007f4008e25fa0 R15: 00007fff8cb886a8
[  127.394276][ T3193]  </TASK>
[  127.395815][ T3193] overlay: Bad value for 'index'
[  127.448229][ T3194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.597594][ T3194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.598011][  T311] usbhid 10-1:0.0: can't add hid device: -71
[  127.611890][  T311] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  127.621376][  T311] usb 10-1: USB disconnect, device number 27
[  128.028348][   T36] audit: type=1400 audit(1811450805.301:5090): avc:  denied  { unmount } for  pid=2743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  128.124826][ T3202] block device autoloading is deprecated and will be removed.
[  128.258390][ T3215] 9pnet: Could not find request transport: unqv
[  128.292059][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  128.322058][ T3219] fuse: Bad value for 'fd'
[  128.326799][ T3219] fuse: Bad value for 'fd'
[  128.339427][ T3221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.347964][ T3221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.451997][   T10] usb 1-1: Using ep0 maxpacket: 32
[  128.458493][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  128.466870][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.477485][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  128.487868][   T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  128.497051][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.505337][   T10] usb 1-1: Product: syz
[  128.509705][   T10] usb 1-1: Manufacturer: syz
[  128.512704][ T3223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.808'.
[  128.514606][   T10] usb 1-1: SerialNumber: syz
[  128.523414][ T3223] erspan0: entered promiscuous mode
[  128.532836][   T10] usb 1-1: selecting invalid altsetting 1
[  128.535935][ T3223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=3223 comm=syz.6.808
[  128.552059][ T3223] netlink: 112 bytes leftover after parsing attributes in process `syz.6.808'.
[  128.742097][ T3200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.751876][ T3200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.760780][   T10] usb 1-1: 6:0: failed to get current value for ch 0 (-71)
[  128.771774][   T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  128.781884][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  128.781967][   T10] usb 1-1: USB disconnect, device number 11
[  128.906202][ T3262] ./dev/sda1: Can't lookup blockdev
[  128.913023][   T36] audit: type=1400 audit(1811450806.191:5091): avc:  denied  { bpf } for  pid=3257 comm="syz.6.821" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  128.922007][  T311] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  129.091993][  T311] usb 10-1: Using ep0 maxpacket: 32
[  129.098588][  T311] usb 10-1: unable to get BOS descriptor or descriptor too short
[  129.107101][  T311] usb 10-1: config 128 has an invalid interface number: 127 but max is 3
[  129.115609][  T311] usb 10-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  129.125980][  T311] usb 10-1: config 128 has 1 interface, different from the descriptor's value: 4
[  129.135220][  T311] usb 10-1: config 128 has no interface number 0
[  129.141545][  T311] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  129.151803][  T311] usb 10-1: config 128 interface 127 has no altsetting 0
[  129.160215][  T311] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  129.169366][  T311] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.177449][  T311] usb 10-1: Product: syz
[  129.181694][  T311] usb 10-1: Manufacturer: syz
[  129.186377][  T311] usb 10-1: SerialNumber: syz
[  129.400146][  T311] usb 10-1: USB disconnect, device number 28
[  129.407502][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  139.021536][   T36] audit: type=1326 audit(1811450816.291:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3268 comm="syz.9.827" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa81fa94d9 code=0x0
[  139.174397][ T3301] netlink: 84 bytes leftover after parsing attributes in process `syz.6.832'.
[  139.326905][ T3307] ./dev/sda1: Can't lookup blockdev
[  139.512008][  T367] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  139.632461][ T3313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.641901][ T3313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.642034][ T3314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.659052][ T3314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.666903][  T367] usb 1-1: Using ep0 maxpacket: 8
[  139.673302][  T367] usb 1-1: config 2 has an invalid interface number: 234 but max is 0
[  139.681515][  T367] usb 1-1: config 2 has no interface number 0
[  139.687711][  T367] usb 1-1: config 2 interface 234 altsetting 4 endpoint 0xA has an invalid bInterval 43, changing to 7
[  139.698921][  T367] usb 1-1: config 2 interface 234 has no altsetting 0
[  139.707330][  T367] usb 1-1: New USB device found, idVendor=22a8, idProduct=1928, bcdDevice=ac.22
[  139.716487][  T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.724514][  T367] usb 1-1: Product: syz
[  139.728684][  T367] usb 1-1: Manufacturer: syz
[  139.733392][  T367] usb 1-1: SerialNumber: syz
[  139.955359][ T3329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.845'.
[  139.978906][ T3331] fuse: Bad value for 'group_id'
[  139.984020][ T3331] fuse: Bad value for 'group_id'
[  139.984949][ T3333] rust_binder: 3332:3333 no such ref 0
[  139.989334][ T3331] fuse: Unknown parameter '00000000000000000000010g�5*¥)��
t�W���P�TH{H9�E�`�H��'
[  139.995219][ T3334] rust_binder: 3332:3334 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  140.261967][ T1157] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  140.285947][ T3363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.294642][ T3363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.391990][ T1157] usb 10-1: device descriptor read/64, error -71
[  140.644449][ T1157] usb 10-1: device descriptor read/64, error -71
[  140.661983][ T3367] netlink: 40 bytes leftover after parsing attributes in process `syz.6.856'.
[  140.688718][ T3374] fuse: Bad value for 'user_id'
[  140.693633][ T3374] fuse: Bad value for 'user_id'
[  140.732241][ T3385] overlayfs: failed to clone lowerpath
[  140.901994][ T1157] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  140.960312][ T3396] netlink: 'syz.6.865': attribute type 5 has an invalid length.
[  140.968122][ T3396] netlink: 45 bytes leftover after parsing attributes in process `syz.6.865'.
[  141.051965][ T1157] usb 10-1: device descriptor read/64, error -71
[  141.167138][ T3407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.175753][ T3407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.291986][ T1157] usb 10-1: device descriptor read/64, error -71
[  141.402142][ T1157] usb usb10-port1: attempt power cycle
[  141.693425][ T3424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.873'.
[  141.741971][ T1157] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[  141.763077][ T1157] usb 10-1: device descriptor read/8, error -71
[  141.902950][ T1157] usb 10-1: device descriptor read/8, error -71
[  142.141965][ T1157] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  142.163059][ T1157] usb 10-1: device descriptor read/8, error -71
[  142.180375][  T367] usb-storage 1-1:2.234: USB Mass Storage device detected
[  142.186868][ T3438] netlink: 'syz.0.878': attribute type 4 has an invalid length.
[  142.196692][ T3438] netlink: 17 bytes leftover after parsing attributes in process `syz.0.878'.
[  142.211265][ T3436] netlink: 'syz.0.878': attribute type 9 has an invalid length.
[  142.219207][ T3436] netlink: 'syz.0.878': attribute type 2 has an invalid length.
[  142.228629][ T3436] netlink: 'syz.0.878': attribute type 9 has an invalid length.
[  142.232090][  T367] usb 1-1: USB disconnect, device number 12
[  142.237005][ T3436] netlink: 'syz.0.878': attribute type 2 has an invalid length.
[  142.250923][ T3442] netlink: 'syz.0.878': attribute type 12 has an invalid length.
[  142.258759][   T36] audit: type=1400 audit(1811450819.521:5093): avc:  denied  { write } for  pid=3435 comm="syz.0.878" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  142.275460][ T3436] netlink: 'syz.0.878': attribute type 9 has an invalid length.
[  142.289289][ T3436] netlink: 'syz.0.878': attribute type 2 has an invalid length.
[  142.293042][ T1157] usb 10-1: device descriptor read/8, error -71
[  142.305468][ T3436] netlink: 'syz.0.878': attribute type 9 has an invalid length.
[  142.412064][ T1157] usb usb10-port1: unable to enumerate USB device
[  142.842361][   T36] audit: type=1400 audit(1811450820.121:5094): avc:  denied  { create } for  pid=3470 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  142.875674][ T3479] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled.
[  142.878998][ T3480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.897128][ T3480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.015857][ T3491] overlayfs: missing 'lowerdir'
[  143.131067][ T3504] fuse: Unknown parameter 'gro~3enup_id'
[  143.145399][ T1157] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  143.160404][ T1157] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  143.230712][ T3524] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  143.318117][ T3529] can0: slcan on ptm0.
[  143.421386][   T36] audit: type=1400 audit(1811450820.691:5095): avc:  denied  { read } for  pid=3545 comm="syz.2.908" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  143.448403][   T36] audit: type=1400 audit(1811450820.691:5096): avc:  denied  { open } for  pid=3545 comm="syz.2.908" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  143.461520][ T3528] can0 (unregistered): slcan off ptm0.
[  143.475902][   T36] audit: type=1400 audit(1811450820.731:5097): avc:  denied  { checkpoint_restore } for  pid=3545 comm="syz.2.908" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  143.588535][ T3561] rust_binder: 3560:3561 no such ref 0
[  143.646709][ T3580] kvm: pic: level sensitive irq not supported
[  143.744461][ T3583] kvm: kvm [3582]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  143.770171][ T3583] kvm: kvm [3582]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  143.797659][ T3592] netlink: 168 bytes leftover after parsing attributes in process `syz.0.917'.
[  144.031381][ T3606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.924'.
[  144.359774][ T3622] kvm: emulating exchange as write
[  144.426571][  T377] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[  144.475962][ T3630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.484519][ T3630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.576472][  T377] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.589150][  T377] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  144.598352][  T377] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.606446][  T377] usb 10-1: Product: syz
[  144.610687][  T377] usb 10-1: Manufacturer: syz
[  144.615547][  T377] usb 10-1: SerialNumber: syz
[  144.625321][  T377] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  144.631359][  T377] cdc_wdm 10-1:1.0: Unknown control protocol
[  144.694469][   T31] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  144.822632][   T36] audit: type=1400 audit(1811450822.099:5098): avc:  denied  { read write } for  pid=3619 comm="syz.9.928" name="cdc-wdm0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  144.846490][   T36] audit: type=1400 audit(1811450822.099:5099): avc:  denied  { open } for  pid=3619 comm="syz.9.928" path="/dev/cdc-wdm0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  144.865546][   T31] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  144.879345][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.887493][   T31] usb 1-1: Product: syz
[  144.891689][   T31] usb 1-1: Manufacturer: syz
[  144.896313][   T31] usb 1-1: SerialNumber: syz
[  145.025332][  T377] usb 10-1: USB disconnect, device number 33
[  145.044805][ T3649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.053379][ T3649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.301035][   T31] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  145.589213][ T3665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.597791][ T3665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.648462][   T36] audit: type=1400 audit(1811450822.946:5100): avc:  denied  { read write } for  pid=3627 comm="syz.0.931" name="lp0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  145.672258][   T36] audit: type=1400 audit(1811450822.946:5101): avc:  denied  { open } for  pid=3627 comm="syz.0.931" path="/dev/usb/lp0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  145.705297][ T3671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.946'.
[  145.845538][   T31] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[  145.994424][   T31] usb 10-1: Using ep0 maxpacket: 8
[  146.000728][   T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.010983][   T31] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  146.020053][   T31] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  146.031108][   T31] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  146.040291][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.048394][   T31] usb 10-1: Product: syz
[  146.052632][   T31] usb 10-1: Manufacturer: syz
[  146.057699][   T31] usb 10-1: SerialNumber: syz
[  146.241665][   T36] audit: type=1400 audit(1811450823.530:5102): avc:  denied  { listen } for  pid=3681 comm="syz.2.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  146.294554][ T3686] overlayfs: failed to resolve './cgroup': -2
[  146.300764][ T3688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.310236][ T3688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.660984][   T31] usb 10-1: clock source 0 is not valid, cannot use
[  147.165925][    C0] usblp0: nonzero write bulk status received: -71
[  147.172668][ T1157] usb 1-1: USB disconnect, device number 13
[  147.417174][ T3711] netlink: 72 bytes leftover after parsing attributes in process `syz.6.961'.
[  148.043518][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.965'.
[  148.200502][ T3673] usblp0: removed
[  148.565272][  T377] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  148.578834][   T31] usb 10-1: 1:1: cannot get freq (v2/v3): err -71
[  148.591288][   T31] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  148.602538][   T31] usb 10-1: USB disconnect, device number 34
[  148.612491][ T3434] udevd[3434]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  148.724107][  T377] usb 1-1: Using ep0 maxpacket: 16
[  148.730352][  T377] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  148.738805][  T377] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.749109][  T377] usb 1-1: config 0 has no interface number 0
[  148.756839][  T377] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  148.765932][  T377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.774048][  T377] usb 1-1: Product: syz
[  148.778262][  T377] usb 1-1: Manufacturer: syz
[  148.782869][  T377] usb 1-1: SerialNumber: syz
[  148.788079][  T377] usb 1-1: config 0 descriptor??
[  148.993056][  T377] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  149.000335][  T377] usb 1-1: No valid video chain found.
[  149.006689][  T377] usb 1-1: USB disconnect, device number 14
[  149.022045][   T31] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[  149.172188][   T31] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.183260][   T31] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.193173][   T31] usb 10-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  149.202430][   T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.336120][ T3760] netlink: 180 bytes leftover after parsing attributes in process `syz.2.978'.
[  149.417790][ T3771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.439769][ T3771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.494136][   T31] input: HID 04d8:c002 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/0003:04D8:C002.0017/input/input19
[  149.526878][   T31] hid-picolcd 0003:04D8:C002.0017: No report with id 0x94 found
[  149.542115][   T31] hid-picolcd 0003:04D8:C002.0017: failed to configure display
[  149.600013][   T36] audit: type=1400 audit(1811450826.925:5103): avc:  denied  { connect } for  pid=3779 comm="syz.6.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  149.630096][ T1157] usb 10-1: USB disconnect, device number 35
[  149.642428][ T3783] syzkaller0: entered promiscuous mode
[  149.656499][ T3783] syzkaller0: entered allmulticast mode
[  150.143172][ T3790] fuse: Bad value for 'group_id'
[  150.148302][ T3790] fuse: Bad value for 'group_id'
[  150.153852][ T3790] fuse: Bad value for 'user_id'
[  150.158962][ T3790] fuse: Bad value for 'user_id'
[  150.240750][ T3809] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  150.260848][ T3810] FAULT_INJECTION: forcing a failure.
[  150.260848][ T3810] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  150.276413][ T3810] CPU: 0 UID: 0 PID: 3810 Comm: syz.9.987 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c
[  150.276450][ T3810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  150.276465][ T3810] Call Trace:
[  150.276473][ T3810]  <TASK>
[  150.276482][ T3810]  __dump_stack+0x21/0x30
[  150.276509][ T3810]  dump_stack_lvl+0x140/0x1c0
[  150.276527][ T3810]  ? __cfi_dump_stack_lvl+0x10/0x10
[  150.276549][ T3810]  ? __alloc_pages_noprof+0x7e0/0x7e0
[  150.276578][ T3810]  dump_stack+0x19/0x20
[  150.276609][ T3810]  should_fail_ex+0x3c2/0x510
[  150.276630][ T3810]  should_fail_alloc_page+0xec/0x110
[  150.276654][ T3810]  __alloc_pages_noprof+0x1c0/0x7e0
[  150.276681][ T3810]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  150.276710][ T3810]  ? is_bpf_text_address+0x17b/0x1a0
[  150.276734][ T3810]  ? __lruvec_stat_mod_folio+0x13f/0x1a0
[  150.276757][ T3810]  pte_alloc_one+0x92/0x530
[  150.276781][ T3810]  ? __cfi_pte_alloc_one+0x10/0x10
[  150.276804][ T3810]  ? __kasan_check_write+0x18/0x20
[  150.276833][ T3810]  ? _raw_spin_lock+0x92/0x120
[  150.276856][ T3810]  ? __cfi__raw_spin_lock+0x10/0x10
[  150.276880][ T3810]  __pte_alloc+0x79/0x440
[  150.276908][ T3810]  ? __cfi___pte_alloc+0x10/0x10
[  150.276936][ T3810]  ? __pte_offset_map_lock+0x279/0x2f0
[  150.276966][ T3810]  walk_pgd_range+0xc6c/0x1c20
[  150.276993][ T3810]  ? __cfi_guard_install_set_pte+0x10/0x10
[  150.277021][ T3810]  ? __cfi_guard_install_set_pte+0x10/0x10
[  150.277049][ T3810]  ? __cfi_guard_install_pte_entry+0x10/0x10
[  150.277078][ T3810]  ? walk_page_range_novma+0x2a0/0x2a0
[  150.277101][ T3810]  ? find_vma+0xd3/0x120
[  150.277128][ T3810]  ? __cfi_find_vma+0x10/0x10
[  150.277154][ T3810]  ? __cfi___perf_event_task_sched_out+0x10/0x10
[  150.277177][ T3810]  walk_page_range_mm+0x620/0x850
[  150.277204][ T3810]  ? __cfi_walk_page_range_mm+0x10/0x10
[  150.277233][ T3810]  madvise_vma_behavior+0x14bd/0x2e70
[  150.277260][ T3810]  ? __sched_text_start+0x10/0x10
[  150.277296][ T3810]  ? __cfi_madvise_vma_behavior+0x10/0x10
[  150.277323][ T3810]  ? check_preempt_wakeup_fair+0x786/0xb20
[  150.277347][ T3810]  ? preempt_schedule_common+0x2d/0x60
[  150.277379][ T3810]  ? preempt_schedule+0xc5/0xe0
[  150.277403][ T3810]  ? __cfi_preempt_schedule+0x10/0x10
[  150.277433][ T3810]  ? activate_task+0x47d/0x4c0
[  150.277458][ T3810]  ? preempt_schedule_thunk+0x1a/0x40
[  150.277482][ T3810]  ? mtree_range_walk+0x573/0x730
[  150.277510][ T3810]  ? mas_prev_slot+0xb6b/0xc20
[  150.277537][ T3810]  ? mas_prev+0x5f/0xa0
[  150.277563][ T3810]  ? find_vma_prev+0x12a/0x1b0
[  150.277601][ T3810]  ? __cfi_find_vma_prev+0x10/0x10
[  150.277630][ T3810]  ? __kasan_check_write+0x18/0x20
[  150.277659][ T3810]  ? rwsem_read_trylock+0x275/0x5a0
[  150.277682][ T3810]  ? downgrade_write+0x470/0x470
[  150.277705][ T3810]  ? bpf_lsm_file_permission+0xd/0x20
[  150.277726][ T3810]  madvise_walk_vmas+0x3ee/0x700
[  150.277753][ T3810]  ? __cfi_madvise_vma_behavior+0x10/0x10
[  150.277778][ T3810]  ? down_read+0x7f/0xe0
[  150.277806][ T3810]  ? madvise_set_anon_name+0x650/0x650
[  150.277833][ T3810]  ? __asan_memset+0x39/0x50
[  150.277860][ T3810]  ? blk_start_plug+0x71/0x1c0
[  150.277884][ T3810]  do_madvise+0x5e8/0xbb0
[  150.277910][ T3810]  ? __cfi_do_madvise+0x10/0x10
[  150.277936][ T3810]  ? xfd_validate_state+0x68/0x140
[  150.277956][ T3810]  ? __kasan_check_write+0x18/0x20
[  150.277984][ T3810]  ? fpregs_restore_userregs+0x11c/0x260
[  150.278012][ T3810]  __x64_sys_madvise+0xad/0xc0
[  150.278039][ T3810]  x64_sys_call+0x20c3/0x2ee0
[  150.278060][ T3810]  do_syscall_64+0x57/0xf0
[  150.278081][ T3810]  ? clear_bhb_loop+0x50/0xa0
[  150.278107][ T3810]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  150.278136][ T3810] RIP: 0033:0x7faa81fa94d9
[  150.278156][ T3810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.278175][ T3810] RSP: 002b:00007faa80977028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  150.278201][ T3810] RAX: ffffffffffffffda RBX: 00007faa82226090 RCX: 00007faa81fa94d9
[  150.278219][ T3810] RDX: 0000000000000066 RSI: 000000000080fd00 RDI: 000020000042f000
[  150.278234][ T3810] RBP: 00007faa8203804e R08: 0000000000000000 R09: 0000000000000000
[  150.278250][ T3810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.278263][ T3810] R13: 00007faa82226128 R14: 00007faa82226090 R15: 00007ffd0c6d6c78
[  150.278281][ T3810]  </TASK>
[  150.342831][ T3813] validate_nla: 123 callbacks suppressed
[  150.342848][ T3813] netlink: 'syz.2.989': attribute type 25 has an invalid length.
[  150.492014][   T36] audit: type=1400 audit(1811450827.821:5104): avc:  denied  { mounton } for  pid=3811 comm="syz.2.989" path="/153/file0" dev="tmpfs" ino=887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  150.743457][   T36] audit: type=1400 audit(1811450827.892:5105): avc:  denied  { ioctl } for  pid=3811 comm="syz.2.989" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  150.804824][ T3831] ./dev/sda1: Can't lookup blockdev
[  150.813142][   T36] audit: type=1400 audit(1811450828.143:5106): avc:  denied  { mounton } for  pid=3832 comm="syz.0.995" path="/file0" dev="ramfs" ino=29918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  150.850583][   T36] audit: type=1400 audit(1811450828.184:5107): avc:  denied  { append } for  pid=3835 comm="syz.0.996" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  150.886182][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.895626][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.915786][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.934493][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.038970][ T3838] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  151.048648][ T3838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.997'.
[  151.363351][ T3836] FAULT_INJECTION: forcing a failure.
[  151.363351][ T3836] name failslab, interval 1, probability 0, space 0, times 0
[  151.376064][ T3836] CPU: 0 UID: 0 PID: 3836 Comm: syz.0.996 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c
[  151.376102][ T3836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  151.376112][ T3836] Call Trace:
[  151.376118][ T3836]  <TASK>
[  151.376124][ T3836]  __dump_stack+0x21/0x30
[  151.376143][ T3836]  dump_stack_lvl+0x140/0x1c0
[  151.376155][ T3836]  ? __cfi_dump_stack_lvl+0x10/0x10
[  151.376167][ T3836]  dump_stack+0x19/0x20
[  151.376178][ T3836]  should_fail_ex+0x3c2/0x510
[  151.376191][ T3836]  should_failslab+0xac/0x100
[  151.376205][ T3836]  __kmalloc_cache_noprof+0x41/0x470
[  151.376224][ T3836]  ? __kasan_kmalloc+0x96/0xb0
[  151.376238][ T3836]  ? ramfs_init_fs_context+0x62/0x190
[  151.376256][ T3836]  ramfs_init_fs_context+0x62/0x190
[  151.376272][ T3836]  ? __cfi_ramfs_init_fs_context+0x10/0x10
[  151.376289][ T3836]  alloc_fs_context+0x5c4/0x800
[  151.376303][ T3836]  fs_context_for_mount+0x26/0x40
[  151.376318][ T3836]  __se_sys_fsopen+0xab/0x390
[  151.376334][ T3836]  __x64_sys_fsopen+0x5f/0x80
[  151.376350][ T3836]  x64_sys_call+0x2d40/0x2ee0
[  151.376365][ T3836]  do_syscall_64+0x57/0xf0
[  151.376375][ T3836]  ? clear_bhb_loop+0x50/0xa0
[  151.376389][ T3836]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  151.376401][ T3836] RIP: 0033:0x7f8dc1da94d9
[  151.376412][ T3836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.376420][ T3836] RSP: 002b:00007f8dc2c9d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  151.376432][ T3836] RAX: ffffffffffffffda RBX: 00007f8dc2025fa0 RCX: 00007f8dc1da94d9
[  151.376444][ T3836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000005c0
[  151.376456][ T3836] RBP: 00007f8dc1e3804e R08: 0000000000000000 R09: 0000000000000000
[  151.376466][ T3836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.376476][ T3836] R13: 00007f8dc2026038 R14: 00007f8dc2025fa0 R15: 00007ffeb11b6878
[  151.376491][ T3836]  </TASK>
[  151.703086][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  151.762960][ T3868] FAULT_INJECTION: forcing a failure.
[  151.762960][ T3868] name failslab, interval 1, probability 0, space 0, times 0
[  151.776555][ T3868] CPU: 1 UID: 0 PID: 3868 Comm: syz.2.1002 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c
[  151.776593][ T3868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  151.776608][ T3868] Call Trace:
[  151.776616][ T3868]  <TASK>
[  151.776624][ T3868]  __dump_stack+0x21/0x30
[  151.776651][ T3868]  dump_stack_lvl+0x140/0x1c0
[  151.776672][ T3868]  ? __cfi_dump_stack_lvl+0x10/0x10
[  151.776694][ T3868]  ? kasan_save_track+0x4f/0x80
[  151.776716][ T3868]  ? kasan_save_alloc_info+0x3a/0x50
[  151.776744][ T3868]  ? __kasan_slab_alloc+0x73/0x90
[  151.776767][ T3868]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  151.776799][ T3868]  ? copy_process+0x12a5/0x33a0
[  151.776828][ T3868]  ? kernel_clone+0x233/0x810
[  151.776858][ T3868]  dump_stack+0x19/0x20
[  151.776877][ T3868]  should_fail_ex+0x3c2/0x510
[  151.776898][ T3868]  should_failslab+0xac/0x100
[  151.776920][ T3868]  kmem_cache_alloc_noprof+0x42/0x410
[  151.776949][ T3868]  ? copy_mm+0x187/0x1da0
[  151.776978][ T3868]  copy_mm+0x187/0x1da0
[  151.777007][ T3868]  ? copy_signal+0x6c0/0x6c0
[  151.777036][ T3868]  ? __kasan_check_write+0x18/0x20
[  151.777064][ T3868]  ? _raw_spin_lock+0x92/0x120
[  151.777088][ T3868]  ? __asan_memset+0x39/0x50
[  151.777116][ T3868]  ? __init_rwsem+0x110/0x1f0
[  151.777141][ T3868]  ? copy_signal+0x4ef/0x6c0
[  151.777170][ T3868]  copy_process+0x12d1/0x33a0
[  151.777202][ T3868]  ? __cfi_copy_process+0x10/0x10
[  151.777231][ T3868]  kernel_clone+0x233/0x810
[  151.777261][ T3868]  ? __cfi_kernel_clone+0x10/0x10
[  151.777289][ T3868]  ? do_futex+0x32a/0x510
[  151.777314][ T3868]  __x64_sys_clone+0x1b7/0x230
[  151.777343][ T3868]  ? __cfi___x64_sys_clone+0x10/0x10
[  151.777376][ T3868]  ? __kasan_check_write+0x18/0x20
[  151.777404][ T3868]  ? fpregs_restore_userregs+0x11c/0x260
[  151.777434][ T3868]  ? switch_fpu_return+0x12/0x20
[  151.777469][ T3868]  x64_sys_call+0x2b3c/0x2ee0
[  151.777492][ T3868]  do_syscall_64+0x57/0xf0
[  151.777515][ T3868]  ? clear_bhb_loop+0x50/0xa0
[  151.777544][ T3868]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  151.777574][ T3868] RIP: 0033:0x7f4008ba94d9
[  151.777593][ T3868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.777611][ T3868] RSP: 002b:00007f4009ae6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  151.777636][ T3868] RAX: ffffffffffffffda RBX: 00007f4008e26090 RCX: 00007f4008ba94d9
[  151.777652][ T3868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  151.777665][ T3868] RBP: 00007f4008c3804e R08: 0000000000000000 R09: 0000000000000000
[  151.777680][ T3868] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  151.777693][ T3868] R13: 00007f4008e26128 R14: 00007f4008e26090 R15: 00007fff8cb886a8
[  151.777712][ T3868]  </TASK>
[  151.779896][ T3868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3868 comm=syz.2.1002
[  151.863000][    T9] usb 1-1: config 0 has no interfaces?
[  152.010804][  T367] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[  152.019015][    T9] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  152.086926][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.094958][    T9] usb 1-1: Product: syz
[  152.099116][    T9] usb 1-1: Manufacturer: syz
[  152.103820][    T9] usb 1-1: SerialNumber: syz
[  152.108981][    T9] usb 1-1: config 0 descriptor??
[  152.170727][  T367] usb 10-1: config 0 interface 0 has no altsetting 0
[  152.177441][  T367] usb 10-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00
[  152.186703][  T367] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.195433][  T367] usb 10-1: config 0 descriptor??
[  152.442041][   T31] usb 1-1: USB disconnect, device number 15
[  152.484312][   T36] audit: type=1326 audit(1811450829.825:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.2.1002" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4008ba94d9 code=0x7fc00000
[  152.519604][ T3886] fuse: Unknown parameter 'rJ�KJ����ootmode'
[  152.616968][ T3888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.625372][ T3889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.625926][ T3888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.634343][ T3889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.651935][ T3888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.652302][  T367] usbhid 10-1:0.0: can't add hid device: -71
[  152.662460][ T3888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.666649][  T367] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  152.683739][  T367] usb 10-1: USB disconnect, device number 36
[  153.193059][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  153.310961][ T3901] loop5: detected capacity change from 0 to 7
[  153.321249][ T3900] Bluetooth: ISO socket layer initialized
[  153.327978][   T36] audit: type=1400 audit(1811450830.681:5109): avc:  denied  { read } for  pid=3899 comm="syz.9.1016" path="socket:[29690]" dev="sockfs" ino=29690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  153.341711][    T9] usb 1-1: Using ep0 maxpacket: 32
[  153.364952][    T9] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[  153.376703][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  153.389192][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40
[  153.398282][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.406330][    T9] usb 1-1: Product: ୤豈쒷﹀䒅싥薅砩賴ꗤ뜠㨍ⷜ玗ۖᙈꀍ蕌㾚䈮⨃₭爱Ҕ侩逿林ꄱ찼㯪骈蹦軿䅿䯄몹誓訁㘖
[  153.422505][    T9] usb 1-1: Manufacturer: ᐄ
[  153.427084][    T9] usb 1-1: SerialNumber: 쮙厯
[  153.609939][   T31] usb 10-1: new full-speed USB device number 37 using dummy_hcd
[  153.635098][    T9] usb 1-1: MIDIStreaming interface descriptor not found
[  153.645299][    T9] usb 1-1: USB disconnect, device number 16
[  153.656633][ T3434] udevd[3434]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  153.760307][   T31] usb 10-1: unable to get BOS descriptor or descriptor too short
[  153.768432][   T31] usb 10-1: not running at top speed; connect to a high speed hub
[  153.776985][   T31] usb 10-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config
[  153.787344][   T31] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  153.796428][   T31] usb 10-1: too many endpoints for config 1 interface 1 altsetting 205: 198, using maximum allowed: 30
[  153.807502][   T31] usb 10-1: config 1 interface 1 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 198
[  153.820867][   T31] usb 10-1: config 1 interface 1 has no altsetting 0
[  153.829492][   T31] usb 10-1: string descriptor 0 read error: -22
[  153.835842][   T31] usb 10-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice=22.40
[  153.845081][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.855171][   T31] usb 10-1: 0:2 : does not exist
[  154.064088][   T31] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71
[  154.067018][ T3305] udevd[3305]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  154.076682][   T31] usb 10-1: USB disconnect, device number 37
[  154.344718][ T3905] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1018'.
[  154.563943][ T3910] overlayfs: empty lowerdir
[  154.639833][ T3912] kvm: Disabled LAPIC found during irq injection
[  154.649519][   T36] audit: type=1326 audit(1811450832.010:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3909 comm="syz.9.1020" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa81fa94d9 code=0x0
[  154.814440][ T3922] fuse: Bad value for 'group_id'
[  154.819437][ T3922] fuse: Bad value for 'group_id'
[  155.041751][   T36] audit: type=1400 audit(1811450832.402:5111): avc:  denied  { setopt } for  pid=3939 comm="syz.6.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  155.088201][ T3947] 9pnet_fd: Insufficient options for proto=fd
[  155.422658][ T3952] netlink: 'syz.9.1036': attribute type 29 has an invalid length.
[  155.430580][ T3952] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.1036'.
[  155.618038][   T36] audit: type=1400 audit(1811450832.986:5112): avc:  denied  { remount } for  pid=3964 comm="syz.9.1040" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  155.651472][ T3975] netlink: 'syz.9.1044': attribute type 46 has an invalid length.
[  155.660276][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1044'.
[  155.675506][ T3970] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000
[  155.777535][   T36] audit: type=1400 audit(1811450833.147:5113): avc:  denied  { write } for  pid=3990 comm="syz.2.1048" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  155.883855][   T36] audit: type=1400 audit(1811450833.248:5114): avc:  denied  { setopt } for  pid=3993 comm="syz.2.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  155.904789][   T66] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[  156.032443][ T4000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.041129][ T4000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.049882][ T4000] 9pnet_fd: Insufficient options for proto=fd
[  156.054822][   T66] usb 10-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  156.065280][   T66] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.074051][   T66] usb 10-1: config 0 descriptor??
[  156.079945][   T66] usb 10-1: bad CDC descriptors
[  156.255646][   T31] kernel write not supported for file [eventfd] (pid: 31 comm: kworker/1:0)
[  156.279863][   T66] usb 10-1: USB disconnect, device number 38
[  156.311417][ T4006] random: crng reseeded on system resumption
[  156.331570][ T4006] fuse: Bad value for 'user_id'
[  156.336555][ T4006] fuse: Bad value for 'user_id'
[  156.342054][ T4006] fuse: Unknown parameter 'm5^����������'
[  156.365608][ T4010] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1056'.
[  156.460434][ T4016] kvm: pic: non byte write
[  156.770852][ T4023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.779518][ T4023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.793898][ T4027] zram: Cannot change disksize for initialized device
[  157.346134][ T4035] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1065'.
[  157.605034][ T4051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.620115][ T4051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.633701][   T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  157.792706][   T31] usb 1-1: device descriptor read/64, error -71
[  158.051217][   T31] usb 1-1: device descriptor read/64, error -71
[  158.299511][   T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  158.383591][   T36] audit: type=1400 audit(1811450835.764:5115): avc:  denied  { getopt } for  pid=4079 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  158.438643][   T31] usb 1-1: device descriptor read/64, error -71
[  158.628258][ T4095] kvm: kvm [4094]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x598b
[  158.637163][ T4095] kvm: kvm [4094]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xb313
[  158.651649][ T4095] kvm: kvm [4094]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x99f5
[  158.666016][ T4095] kvm: MONITOR instruction emulated as NOP!
[  158.677159][   T31] usb 1-1: device descriptor read/64, error -71
[  158.757170][ T4102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.766518][ T4102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.786719][   T31] usb usb1-port1: attempt power cycle
[  159.154200][   T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  159.185084][   T31] usb 1-1: device descriptor read/8, error -71
[  159.292634][ T4112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.301753][ T4112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.313352][   T36] audit: type=1400 audit(1811450836.699:5116): avc:  denied  { mounton } for  pid=4111 comm="syz.2.1093" path="/proc/566/task" dev="proc" ino=31353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  159.339332][   T31] usb 1-1: device descriptor read/8, error -71
[  159.611385][   T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  159.642217][   T31] usb 1-1: device descriptor read/8, error -71
[  159.660104][   T36] audit: type=1400 audit(1811450837.041:5117): avc:  denied  { bind } for  pid=4115 comm="syz.6.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  159.771576][   T31] usb 1-1: device descriptor read/8, error -71
[  159.848135][ T4118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.857994][ T4118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.858016][ T4119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.874300][ T4119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.884494][ T4118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.889928][   T31] usb usb1-port1: unable to enumerate USB device
[  159.893029][ T4118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.219956][   T36] audit: type=1400 audit(1811450837.615:5118): avc:  denied  { execute } for  pid=4122 comm="syz.6.1097" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  160.418819][ T4127] Invalid argument reading file caps for ./file0
[  160.427522][   T36] audit: type=1400 audit(1811450837.826:5119): avc:  denied  { ioctl } for  pid=4124 comm="syz.0.1098" path="socket:[31366]" dev="sockfs" ino=31366 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  160.469149][ T4130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.478475][ T4130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.566711][   T36] audit: type=1400 audit(1811450837.967:5120): avc:  denied  { read } for  pid=4124 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  161.151229][ T4146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.167204][ T4146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.589496][   T31] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  161.680422][ T4159] 9pnet_fd: Insufficient options for proto=fd
[  161.687177][ T4159] overlayfs: failed to resolve './cgroup': -2
[  161.731758][ T4161] mmap: syz.6.1108 (4161): VmData 29073408 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  161.770189][ T4155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.779635][ T4161] overlayfs: failed to clone upperpath
[  161.780959][ T4155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.800753][ T4155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.813696][ T4155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.850532][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[  161.860905][   T31] usb 1-1: unable to read config index 0 descriptor/start: -71
[  161.887737][   T31] usb 1-1: can't read configurations, error -71
[  161.986157][ T4182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.994884][ T4182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.466409][ T4188] 8021q: VLANs not supported on lo
[  162.533650][ T4195] incfs: Backing dir is not set, filesystem can't be mounted.
[  162.563580][ T4195] incfs: mount failed -2
[  162.633917][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1116'.
[  162.664138][ T4193] netlink: 'syz.6.1116': attribute type 10 has an invalid length.
[  162.673146][ T4193] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1116'.
[  162.691797][ T4193] veth1: entered promiscuous mode
[  162.711937][ T4198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.722272][ T4198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.745246][   T31] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  162.776705][   T36] audit: type=1400 audit(1811450840.180:5121): avc:  denied  { audit_read } for  pid=4199 comm="syz.6.1119" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  162.913253][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[  162.921426][   T31] usb 1-1: not running at top speed; connect to a high speed hub
[  162.930303][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.940699][   T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  162.951324][   T31] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  162.960697][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.969013][   T31] usb 1-1: Product: syz
[  162.973457][   T31] usb 1-1: Manufacturer: syz
[  162.978079][   T31] usb 1-1: SerialNumber: syz
[  163.189015][  T367] rust_binder: 4183: undelivered TRANSACTION_ERROR: 29189
[  163.228760][   T31] usb 1-1: USB disconnect, device number 22
[  163.311863][ T4202] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1120'.
[  163.337510][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1121'.
[  163.486348][ T4214] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  163.496130][ T4214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.505897][ T4214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.273891][ T1157] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  164.433001][ T1157] usb 1-1: Using ep0 maxpacket: 32
[  164.443994][ T1157] usb 1-1: unable to get BOS descriptor or descriptor too short
[  164.463187][ T1157] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  164.471914][ T1157] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  164.502611][ T1157] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  164.520812][ T1157] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  164.529969][ T1157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.552312][ T1157] usb 1-1: Product: syz
[  164.556520][ T1157] usb 1-1: Manufacturer: syz
[  164.561143][ T1157] usb 1-1: SerialNumber: syz
[  164.860881][ T1157] usb 1-1: unit 0 not found!
[  164.867279][ T1157] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  164.879396][ T1157] usb 1-1: unit 0 not found!
[  164.893320][ T1157] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  164.905896][ T3305] udevd[3305]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  164.922701][ T1157] usb 1-1: USB disconnect, device number 23
[  165.535920][ T4244] netlink: 'syz.0.1135': attribute type 30 has an invalid length.
[  165.565677][ T4248] FAULT_INJECTION: forcing a failure.
[  165.565677][ T4248] name failslab, interval 1, probability 0, space 0, times 0
[  165.578453][ T4248] CPU: 0 UID: 0 PID: 4248 Comm: syz.0.1136 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c
[  165.578489][ T4248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  165.578503][ T4248] Call Trace:
[  165.578511][ T4248]  <TASK>
[  165.578519][ T4248]  __dump_stack+0x21/0x30
[  165.578547][ T4248]  dump_stack_lvl+0x140/0x1c0
[  165.578567][ T4248]  ? __cfi_dump_stack_lvl+0x10/0x10
[  165.578590][ T4248]  dump_stack+0x19/0x20
[  165.578609][ T4248]  should_fail_ex+0x3c2/0x510
[  165.578631][ T4248]  should_failslab+0xac/0x100
[  165.578654][ T4248]  __kmalloc_cache_node_noprof+0x46/0x430
[  165.578685][ T4248]  ? __get_vm_area_node+0x150/0x390
[  165.578711][ T4248]  ? kasan_save_alloc_info+0x3a/0x50
[  165.578739][ T4248]  ? __kasan_slab_alloc+0x73/0x90
[  165.578761][ T4248]  ? kmem_cache_alloc_node_noprof+0x1ca/0x420
[  165.578793][ T4248]  __get_vm_area_node+0x150/0x390
[  165.578822][ T4248]  __vmalloc_node_range_noprof+0x340/0x1300
[  165.578852][ T4248]  ? copy_process+0x579/0x33a0
[  165.578884][ T4248]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  165.578913][ T4248]  ? kasan_save_alloc_info+0x3a/0x50
[  165.578941][ T4248]  ? __kasan_slab_alloc+0x73/0x90
[  165.578962][ T4248]  ? arch_dup_task_struct+0x5b/0xe0
[  165.578985][ T4248]  ? __asan_memcpy+0x5a/0x80
[  165.579015][ T4248]  dup_task_struct+0x5d6/0xd80
[  165.579044][ T4248]  ? copy_process+0x579/0x33a0
[  165.579071][ T4248]  ? _raw_spin_lock_irq+0x93/0x120
[  165.579095][ T4248]  ? copy_process+0x33a0/0x33a0
[  165.579134][ T4248]  ? __kasan_check_write+0x18/0x20
[  165.579163][ T4248]  copy_process+0x579/0x33a0
[  165.579191][ T4248]  ? __kasan_check_write+0x18/0x20
[  165.579221][ T4248]  ? futex_wake+0x666/0x950
[  165.579248][ T4248]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  165.579276][ T4248]  ? __cfi_copy_process+0x10/0x10
[  165.579305][ T4248]  ? sysvec_apic_timer_interrupt+0x50/0x90
[  165.579339][ T4248]  kernel_clone+0x233/0x810
[  165.579369][ T4248]  ? __cfi_kernel_clone+0x10/0x10
[  165.579397][ T4248]  ? do_futex+0x37d/0x510
[  165.579422][ T4248]  __x64_sys_clone+0x1b7/0x230
[  165.579456][ T4248]  ? __cfi___x64_sys_clone+0x10/0x10
[  165.579488][ T4248]  ? __kasan_check_write+0x18/0x20
[  165.579518][ T4248]  ? fpregs_restore_userregs+0x11c/0x260
[  165.579545][ T4248]  ? switch_fpu_return+0x12/0x20
[  165.579573][ T4248]  x64_sys_call+0x2b3c/0x2ee0
[  165.579595][ T4248]  do_syscall_64+0x57/0xf0
[  165.579616][ T4248]  ? clear_bhb_loop+0x50/0xa0
[  165.579642][ T4248]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  165.579668][ T4248] RIP: 0033:0x7f8dc1da94d9
[  165.579688][ T4248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.579706][ T4248] RSP: 002b:00007f8dc2c9cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  165.579731][ T4248] RAX: ffffffffffffffda RBX: 00007f8dc2025fa0 RCX: 00007f8dc1da94d9
[  165.579748][ T4248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000
[  165.579763][ T4248] RBP: 00007f8dc1e3804e R08: 0000000000000000 R09: 0000000000000000
[  165.579778][ T4248] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  165.579792][ T4248] R13: 00007f8dc2026038 R14: 00007f8dc2025fa0 R15: 00007ffeb11b6878
[  165.579811][ T4248]  </TASK>
[  165.579870][ T4248] syz.0.1136: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[  165.912194][ T4248] CPU: 0 UID: 0 PID: 4248 Comm: syz.0.1136 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c
[  165.912232][ T4248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  165.912247][ T4248] Call Trace:
[  165.912255][ T4248]  <TASK>
[  165.912265][ T4248]  __dump_stack+0x21/0x30
[  165.912305][ T4248]  dump_stack_lvl+0x140/0x1c0
[  165.912327][ T4248]  ? __cfi_dump_stack_lvl+0x10/0x10
[  165.912350][ T4248]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  165.912379][ T4248]  dump_stack+0x19/0x20
[  165.912399][ T4248]  warn_alloc+0x1e7/0x2c0
[  165.912426][ T4248]  ? __kasan_kmalloc+0x28/0xb0
[  165.912449][ T4248]  ? __cfi_warn_alloc+0x10/0x10
[  165.912475][ T4248]  ? __get_vm_area_node+0x150/0x390
[  165.912502][ T4248]  ? kasan_save_alloc_info+0x3a/0x50
[  165.912533][ T4248]  ? __get_vm_area_node+0x382/0x390
[  165.912563][ T4248]  __vmalloc_node_range_noprof+0x365/0x1300
[  165.912597][ T4248]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  165.912627][ T4248]  ? kasan_save_alloc_info+0x3a/0x50
[  165.912656][ T4248]  ? __kasan_slab_alloc+0x73/0x90
[  165.912679][ T4248]  ? arch_dup_task_struct+0x5b/0xe0
[  165.912702][ T4248]  ? __asan_memcpy+0x5a/0x80
[  165.912733][ T4248]  dup_task_struct+0x5d6/0xd80
[  165.912762][ T4248]  ? copy_process+0x579/0x33a0
[  165.912791][ T4248]  ? _raw_spin_lock_irq+0x93/0x120
[  165.912815][ T4248]  ? copy_process+0x33a0/0x33a0
[  165.912845][ T4248]  ? __kasan_check_write+0x18/0x20
[  165.912876][ T4248]  copy_process+0x579/0x33a0
[  165.912906][ T4248]  ? __kasan_check_write+0x18/0x20
[  165.912950][ T4248]  ? futex_wake+0x666/0x950
[  165.912979][ T4248]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  165.913010][ T4248]  ? __cfi_copy_process+0x10/0x10
[  165.913041][ T4248]  ? sysvec_apic_timer_interrupt+0x50/0x90
[  165.913075][ T4248]  kernel_clone+0x233/0x810
[  165.913108][ T4248]  ? __cfi_kernel_clone+0x10/0x10
[  165.913141][ T4248]  ? do_futex+0x37d/0x510
[  165.913167][ T4248]  __x64_sys_clone+0x1b7/0x230
[  165.913200][ T4248]  ? __cfi___x64_sys_clone+0x10/0x10
[  165.913233][ T4248]  ? __kasan_check_write+0x18/0x20
[  165.913263][ T4248]  ? fpregs_restore_userregs+0x11c/0x260
[  165.913294][ T4248]  ? switch_fpu_return+0x12/0x20
[  165.913325][ T4248]  x64_sys_call+0x2b3c/0x2ee0
[  165.913349][ T4248]  do_syscall_64+0x57/0xf0
[  165.913372][ T4248]  ? clear_bhb_loop+0x50/0xa0
[  165.913404][ T4248]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  165.913432][ T4248] RIP: 0033:0x7f8dc1da94d9
[  165.913453][ T4248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.913472][ T4248] RSP: 002b:00007f8dc2c9cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  165.913498][ T4248] RAX: ffffffffffffffda RBX: 00007f8dc2025fa0 RCX: 00007f8dc1da94d9
[  165.913516][ T4248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000
[  165.913532][ T4248] RBP: 00007f8dc1e3804e R08: 0000000000000000 R09: 0000000000000000
[  165.913547][ T4248] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  165.913561][ T4248] R13: 00007f8dc2026038 R14: 00007f8dc2025fa0 R15: 00007ffeb11b6878
[  165.913581][ T4248]  </TASK>
[  165.913708][ T4248] Mem-Info:
[  166.222958][ T4248] active_anon:27424 inactive_anon:241 isolated_anon:0
[  166.222958][ T4248]  active_file:24442 inactive_file:2761 isolated_file:0
[  166.222958][ T4248]  unevictable:0 dirty:43 writeback:0
[  166.222958][ T4248]  slab_reclaimable:4480 slab_unreclaimable:86047
[  166.222958][ T4248]  mapped:27418 shmem:21343 pagetables:1149
[  166.222958][ T4248]  sec_pagetables:0 bounce:0
[  166.222958][ T4248]  kernel_misc_reclaimable:0
[  166.222958][ T4248]  free:1473701 free_pcp:4436 free_cma:0
[  166.272543][ T4248] Node 0 active_anon:109696kB inactive_anon:964kB active_file:97768kB inactive_file:11044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109672kB dirty:172kB writeback:0kB shmem:85372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7416kB pagetables:4396kB sec_pagetables:0kB all_unreclaimable? no
[  166.306008][ T4248] DMA32 free:2941908kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954988kB mlocked:0kB bounce:0kB free_pcp:13080kB local_pcp:3068kB free_cma:0kB
[  166.343818][ T4248] lowmem_reserve[]: 0 3920 3920
[  166.348986][ T4248] Normal free:2959348kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109696kB inactive_anon:964kB active_file:97768kB inactive_file:11044kB unevictable:0kB writepending:172kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:1640kB local_pcp:1544kB free_cma:0kB
[  166.381966][ T4248] lowmem_reserve[]: 0 0 0
[  166.386610][ T4248] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (M) 715*4096kB (M) = 2941908kB
[  166.497132][ T4248] Normal: 1241*4kB (UME) 1349*8kB (UME) 921*16kB (UME) 386*32kB (UME) 372*64kB (UME) 81*128kB (UME) 63*256kB (UME) 55*512kB (UM) 29*1024kB (ME) 21*2048kB (UME) 676*4096kB (UM) = 2962908kB
[  166.729208][ T4248] 48791 total pagecache pages
[  166.741006][ T4248] 249 pages in swap cache
[  166.745371][ T4248] Free swap  = 122868kB
[  166.771738][ T4248] Total swap = 124996kB
[  166.775939][ T4248] 2097051 pages RAM
[  166.779748][ T4248] 0 pages HighMem/MovableOnly
[  166.785005][ T4256] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  166.804732][ T4248] 354594 pages reserved
[  166.808938][ T4248] 0 pages cma reserved
[  166.826968][ T4248] Memory allocations:
[  166.839599][ T4248]          0 B        0 init/main.c:1477 func:do_initcalls
[  166.857033][ T4248]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  166.869421][ T4248]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  166.887542][ T4248]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  166.907705][ T4248]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  166.917751][ T4248]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  166.937952][ T4248]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  166.958109][ T4248]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  166.968162][ T4248]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  166.988342][ T4248]          0 B        0 init/initramfs.c:101 func:find_link
[  167.027513][   T36] audit: type=1400 audit(1811450844.454:5122): avc:  denied  { remount } for  pid=4259 comm="syz.0.1139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  167.324707][ T4258] FAULT_INJECTION: forcing a failure.
[  167.324707][ T4258] name failslab, interval 1, probability 0, space 0, times 0
[  167.347078][ T4258] CPU: 0 UID: 0 PID: 4258 Comm: syz.2.1138 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c
[  167.347114][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  167.347126][ T4258] Call Trace:
[  167.347134][ T4258]  <TASK>
[  167.347142][ T4258]  __dump_stack+0x21/0x30
[  167.347168][ T4258]  dump_stack_lvl+0x140/0x1c0
[  167.347187][ T4258]  ? __cfi_dump_stack_lvl+0x10/0x10
[  167.347208][ T4258]  dump_stack+0x19/0x20
[  167.347226][ T4258]  should_fail_ex+0x3c2/0x510
[  167.347247][ T4258]  should_failslab+0xac/0x100
[  167.347269][ T4258]  kmem_cache_alloc_noprof+0x42/0x410
[  167.347297][ T4258]  ? __kasan_check_write+0x18/0x20
[  167.347326][ T4258]  ? taskstats_exit+0x161/0xb50
[  167.347350][ T4258]  ? acct_update_integrals+0x2e5/0x330
[  167.347375][ T4258]  taskstats_exit+0x161/0xb50
[  167.347398][ T4258]  ? _raw_spin_unlock_irq+0x45/0x70
[  167.347423][ T4258]  do_exit+0x7f7/0x2850
[  167.347452][ T4258]  ? futex_wake+0x666/0x950
[  167.347487][ T4258]  ? __cfi_do_exit+0x10/0x10
[  167.347516][ T4258]  ? futex_wait+0x2b8/0x7c0
[  167.347542][ T4258]  ? __cfi_futex_wait+0x10/0x10
[  167.347568][ T4258]  ? __kasan_check_write+0x18/0x20
[  167.347595][ T4258]  ? _raw_spin_lock_irq+0x93/0x120
[  167.347616][ T4258]  do_group_exit+0x21f/0x2f0
[  167.347642][ T4258]  ? __kasan_check_write+0x18/0x20
[  167.347667][ T4258]  ? recalc_sigpending+0x16c/0x1d0
[  167.347693][ T4258]  get_signal+0x134c/0x1490
[  167.347715][ T4258]  arch_do_signal_or_restart+0xbc/0x700
[  167.347739][ T4258]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  167.347764][ T4258]  syscall_exit_to_user_mode+0x57/0xb0
[  167.347794][ T4258]  do_syscall_64+0x63/0xf0
[  167.347815][ T4258]  ? clear_bhb_loop+0x50/0xa0
[  167.347844][ T4258]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  167.347870][ T4258] RIP: 0033:0x7f4008ba94d9
[  167.347889][ T4258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.347906][ T4258] RSP: 002b:00007f4009aa50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  167.347928][ T4258] RAX: fffffffffffffe00 RBX: 00007f4008e26278 RCX: 00007f4008ba94d9
[  167.347944][ T4258] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4008e26278
[  167.347957][ T4258] RBP: 00007f4008e26270 R08: 0000000000000000 R09: 0000000000000000
[  167.347970][ T4258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.347983][ T4258] R13: 00007f4008e26308 R14: 00007fff8cb885c0 R15: 00007fff8cb886a8
[  167.348001][ T4258]  </TASK>
[  167.376663][   T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  167.760145][   T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.773010][   T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  167.794449][   T45] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  167.803530][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.828691][   T45] usb 1-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  167.842086][   T12] bridge_slave_1: left allmulticast mode
[  167.847814][   T12] bridge_slave_1: left promiscuous mode
[  167.853490][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.862948][   T12] bridge_slave_0: left allmulticast mode
[  167.875216][   T12] bridge_slave_0: left promiscuous mode
[  167.880961][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.992592][ T4288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.008647][ T4288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.024613][ T4286] can0: slcan on ptm0.
[  168.035851][   T45] usb 1-1: No streaming interface found for terminal 2.
[  168.056687][   T45] usb 1-1: USB disconnect, device number 24
[  168.085186][   T12] tipc: Left network mode
[  168.094219][   T12] veth1_macvtap: left promiscuous mode
[  168.106100][   T12] veth0_vlan: left promiscuous mode
[  169.790608][ T4348] TCP: TCP_TX_DELAY enabled
[  169.845599][ T4357] tmpfs: Bad value for 'size'
[  169.850467][ T4357] tmpfs: Bad value for 'size'
[  169.860721][ T4357] tmpfs: Bad value for 'size'
[  169.865594][ T4357] tmpfs: Bad value for 'size'
[  169.870433][ T4357] tmpfs: Bad value for 'size'
[  169.883460][ T4357] tmpfs: Bad value for 'size'
[  169.888253][ T4357] tmpfs: Bad value for 'size'
[  169.899825][ T4357] tmpfs: Bad value for 'size'
[  169.905200][ T4357] tmpfs: Bad value for 'size'
[  169.910281][ T4357] tmpfs: Bad value for 'size'
[  169.915460][ T4357] tmpfs: Bad value for 'size'
[  169.920323][ T4359] ./dev/sda1: Can't lookup blockdev
[  169.926537][ T4357] tmpfs: Bad value for 'size'
[  169.931444][ T4357] tmpfs: Bad value for 'size'
[  169.939628][ T4357] tmpfs: Bad value for 'size'
[  169.944789][ T4357] tmpfs: Bad value for 'size'
[  169.949878][ T4357] tmpfs: Bad value for 'size'
[  169.964400][ T4357] tmpfs: Bad value for 'size'
[  169.969225][ T4357] tmpfs: Bad value for 'size'
[  169.978817][ T4357] tmpfs: Bad value for 'size'
[  169.983968][ T4357] tmpfs: Bad value for 'size'
[  169.988859][ T4357] tmpfs: Bad value for 'size'
[  169.994130][ T4357] tmpfs: Bad value for 'size'
[  169.999120][ T4357] tmpfs: Bad value for 'size'
[  170.004132][ T4357] tmpfs: Bad value for 'size'
[  170.008901][ T4357] tmpfs: Bad value for 'size'
[  170.013953][ T4357] tmpfs: Bad value for 'size'
[  170.022902][ T4357] tmpfs: Bad value for 'size'
[  170.027953][ T4357] tmpfs: Bad value for 'size'
[  170.033143][ T4357] tmpfs: Bad value for 'size'
[  170.037977][ T4357] tmpfs: Bad value for 'size'
[  170.043211][ T4357] tmpfs: Bad value for 'size'
[  170.048028][ T4357] tmpfs: Bad value for 'size'
[  170.053027][ T4357] tmpfs: Bad value for 'size'
[  170.084800][ T4368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1159'.
[  170.321076][   T45] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  170.491712][   T45] usb 1-1: unable to get BOS descriptor or descriptor too short
[  170.499788][   T45] usb 1-1: not running at top speed; connect to a high speed hub
[  170.507797][   T45] usb 1-1: no configurations
[  170.512734][   T45] usb 1-1: can't read configurations, error -22
[  170.660115][   T45] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  170.850016][   T45] usb 1-1: unable to get BOS descriptor or descriptor too short
[  170.858540][   T45] usb 1-1: not running at top speed; connect to a high speed hub
[  170.867022][   T45] usb 1-1: no configurations
[  170.872372][   T45] usb 1-1: can't read configurations, error -22
[  170.888357][   T45] usb usb1-port1: attempt power cycle
[  170.972719][ T4286] can0 (unregistered): slcan off ptm0.
[  171.045971][ T4390] netlink: 'syz.6.1165': attribute type 4 has an invalid length.
[  171.055476][ T4390] netlink: 'syz.6.1165': attribute type 5 has an invalid length.
[  171.063526][ T4390] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1165'.
[  171.083704][ T4390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4390 comm=syz.6.1165
[  171.098960][ T4398] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1164'.
[  171.108417][ T4389] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1164'.
[  171.118183][ T4388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.126699][ T4388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.257488][   T45] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  171.299449][   T45] usb 1-1: unable to get BOS descriptor or descriptor too short
[  171.309210][   T45] usb 1-1: not running at top speed; connect to a high speed hub
[  171.323349][   T45] usb 1-1: no configurations
[  171.328267][   T45] usb 1-1: can't read configurations, error -22
[  171.475204][   T45] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  171.507140][   T45] usb 1-1: unable to get BOS descriptor or descriptor too short
[  171.515238][   T45] usb 1-1: not running at top speed; connect to a high speed hub
[  171.523103][   T45] usb 1-1: no configurations
[  171.528000][   T45] usb 1-1: can't read configurations, error -22
[  171.544280][   T45] usb usb1-port1: unable to enumerate USB device
[  171.672875][ T4436] overlayfs: conflicting lowerdir path
[  172.183166][ T4449] new mount options do not match the existing superblock, will be ignored
[  172.212350][ T2309] bridge_slave_1: left allmulticast mode
[  172.218026][ T2309] bridge_slave_1: left promiscuous mode
[  172.223882][ T2309] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.234071][ T2309] bridge_slave_0: left allmulticast mode
[  172.239742][ T2309] bridge_slave_0: left promiscuous mode
[  172.249303][ T2309] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.357079][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.365050][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.377597][ T4445] bridge_slave_0: entered allmulticast mode
[  172.383590][   T36] audit: type=1400 audit(1811450849.832:5123): avc:  denied  { read } for  pid=4467 comm="syz.6.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  172.384208][ T4445] bridge_slave_0: entered promiscuous mode
[  172.409655][ T2309] veth1_macvtap: left promiscuous mode
[  172.415194][ T2309] veth0_vlan: left promiscuous mode
[  172.447361][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.454485][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.461736][ T4445] bridge_slave_1: entered allmulticast mode
[  172.468510][ T4445] bridge_slave_1: entered promiscuous mode
[  172.478187][ T4470] fuse: Bad value for 'fd'
[  172.510433][ T4474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.520220][ T4474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.530371][ T4474] tipc: Started in network mode
[  172.535350][ T4474] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  172.543203][ T4474] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  172.551710][ T4474] tipc: Disabling bearer <eth:syz_tun>
[  172.571452][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.578574][ T4445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.585949][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.593032][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.622582][ T2323] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.631196][ T2323] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.649104][ T2308] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.656159][ T2308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.664610][ T2308] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.671684][ T2308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.692204][ T4445] veth0_vlan: entered promiscuous mode
[  172.702922][ T4472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1180'.
[  172.703423][ T4445] veth1_macvtap: entered promiscuous mode
[  172.711980][ T4476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1180'.
[  172.747787][ T4478] bpf: Bad value for 'gid'
[  173.171492][ T4491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.180188][ T4491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.257543][ T4501] Invalid ELF header len 16
[  173.263412][ T4501] ./dev/sda1: Can't lookup blockdev
[  173.455301][   T66] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  173.605681][   T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.616712][   T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.626470][   T66] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  173.635570][   T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.644071][   T66] usb 1-1: config 0 descriptor??
[  173.709213][ T4513] netlink: 'syz.2.1195': attribute type 19 has an invalid length.
[  174.049741][   T66] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[  174.056616][   T66] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[  174.063514][   T66] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[  174.070307][   T66] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[  174.077122][   T66] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[  174.083983][   T66] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[  174.090777][   T66] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[  174.098113][   T66] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[  174.449157][ T4489] kvm: kvm [4488]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  174.458138][ T4489] kvm: kvm [4488]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  174.492073][   T66] pyra 0003:1E7D:2CF6.0018: couldn't init struct pyra_device
[  174.500109][   T66] pyra 0003:1E7D:2CF6.0018: couldn't install mouse
[  174.508163][   T66] pyra 0003:1E7D:2CF6.0018: probe with driver pyra failed with error -71
[  174.521770][   T66] usb 1-1: USB disconnect, device number 29
[  174.525411][   T36] audit: type=1400 audit(1811450851.993:5124): avc:  denied  { create } for  pid=4521 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  174.661810][ T4538] sit0: entered promiscuous mode
[  174.668081][ T4538] netlink: 'syz.2.1202': attribute type 1 has an invalid length.
[  174.676094][ T4538] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1202'.
[  174.868956][ T4543] device-mapper: ioctl: Unable to change uuid of mapped device syzc0 to syzc3 because uuid is already set to LVM-syzc2
[  174.876160][ T4546] netlink: 'syz.6.1205': attribute type 13 has an invalid length.
[  174.913197][ T4550] x_tables: duplicate entry at hook 2
[  174.929371][ T4543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1204'.
[  174.933374][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1208'.
[  175.139964][ T4579] device-mapper: verity: sha1 using shash "sha1-avx2"
[  175.190021][ T4579] device-mapper: table: 252:10: verity: Hash device is too small (-E2BIG)
[  175.198640][ T4579] device-mapper: ioctl: error adding target to table
[  175.315739][   T36] audit: type=1400 audit(1811450852.786:5125): avc:  denied  { ioctl } for  pid=4584 comm="syz.0.1218" path="socket:[34466]" dev="sockfs" ino=34466 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  175.366116][   T10] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96
[  175.545197][  T377] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  175.694458][  T377] usb 1-1: Using ep0 maxpacket: 16
[  175.700893][  T377] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  175.708949][  T377] usb 1-1: config 0 has no interface number 0
[  175.715061][  T377] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.725941][  T377] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.735701][  T377] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  175.748473][  T377] usb 1-1: config 0 interface 1 has no altsetting 0
[  175.755099][  T377] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  175.764151][  T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.772744][  T377] usb 1-1: config 0 descriptor??
[  175.778902][  T377] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count
[  175.876493][ T4594] netlink: 'syz.4.1221': attribute type 17 has an invalid length.
[  175.896731][ T4597] input: syz1 as /devices/virtual/input/input22
[  175.910278][   T36] audit: type=1400 audit(1811450853.379:5126): avc:  denied  { accept } for  pid=4596 comm="syz.4.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  175.933654][   T36] audit: type=1400 audit(1811450853.389:5127): avc:  denied  { map } for  pid=4596 comm="syz.4.1222" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  175.969913][ T4605] overlay: Unknown parameter 'smackfsroot'
[  175.987688][   T36] audit: type=1400 audit(1811450853.459:5128): avc:  denied  { mount } for  pid=4604 comm="syz.4.1224" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  175.997858][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.021396][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.031158][ T4586] 9pnet_fd: Insufficient options for proto=fd
[  176.574413][ T4613] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1226'.
[  176.611825][   T36] audit: type=1400 audit(1811450854.092:5129): avc:  denied  { lock } for  pid=4616 comm="syz.4.1228" path="socket:[34761]" dev="sockfs" ino=34761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  176.711052][ T4627] fuse: Unknown parameter '�>�Xmode'
[  176.757901][ T4634] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.774974][ T4637] rust_binder: 4633:4637 no such ref 2
[  176.780277][ T4634] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.789494][ T4634] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.797036][ T4636] rust_binder: Error in use_page_slow: ESRCH
[  176.803805][ T4634] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.815518][ T4636] rust_binder: use_range failure ESRCH
[  176.821439][ T4634] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.829189][ T4636] rust_binder: 4633:4636 transaction call to 4633:0 failed ESRCH, code 0 size 0-0 line process.rs:1128
[  176.843144][ T4634] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.863378][ T4634] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.886094][ T4634] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.906710][ T4634] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.925417][ T4634] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.942173][   T36] audit: type=1400 audit(1811450854.424:5130): avc:  denied  { create } for  pid=4640 comm="syz.6.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  177.276331][ T4648] overlay: filesystem on ./file0 not supported as upperdir
[  177.445281][ T4660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.453865][ T4660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.462988][   T36] audit: type=1400 audit(1811450854.946:5131): avc:  denied  { lock } for  pid=4659 comm="syz.2.1239" path="socket:[36143]" dev="sockfs" ino=36143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  177.497627][ T4662] overlayfs: failed to clone upperpath
[  177.586055][   T45] rust_binder: 4633: undelivered TRANSACTION_ERROR: 29201
[  178.085959][   T36] audit: type=1400 audit(1811450855.569:5132): avc:  denied  { name_bind } for  pid=4678 comm="syz.2.1247" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  178.121002][ T4679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.129673][ T4679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.132975][   T36] audit: type=1400 audit(1811450855.609:5133): avc:  denied  { connect } for  pid=4673 comm="syz.6.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  178.763489][ T4707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.772081][ T4707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.292952][ T4711] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 257 (only 8 groups)
[  180.326007][ T4737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.334606][ T4737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.346697][ T4736] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled.
[  180.821966][  T377] usbhid 1-1:0.1: can't add hid device: -32
[  180.827950][  T377] usbhid 1-1:0.1: probe with driver usbhid failed with error -32
[  180.841155][  T377] usb 1-1: USB disconnect, device number 30
[  181.199446][  T377] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  181.360076][  T377] usb 1-1: config 0 interface 0 has no altsetting 0
[  181.367566][  T377] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00
[  181.379269][  T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.397935][  T377] usb 1-1: config 0 descriptor??
[  181.777767][   T36] audit: type=1400 audit(1811450859.286:5134): avc:  denied  { append } for  pid=4757 comm="syz.2.1271" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  181.802233][   T36] audit: type=1400 audit(1811450859.286:5135): avc:  denied  { open } for  pid=4757 comm="syz.2.1271" path="/242/dev/cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  181.827849][  T377] apple 0003:05AC:024E.0019: unexpected long global item
[  181.835087][  T377] apple 0003:05AC:024E.0019: parse failed
[  181.836495][ T4760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.841001][  T377] apple 0003:05AC:024E.0019: probe with driver apple failed with error -22
[  181.851201][ T4760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.868160][ T4760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.876693][ T4760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.937540][   T36] audit: type=1400 audit(1811450859.446:5136): avc:  denied  { map } for  pid=4759 comm="syz.2.1272" path="pipe:[35730]" dev="pipefs" ino=35730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  182.029820][  T377] usb 1-1: USB disconnect, device number 31
[  182.619239][ T4771] netlink: 'syz.0.1276': attribute type 1 has an invalid length.
[  182.691804][ T4777] fuse: Unknown parameter 'd���><'
[  182.693177][ T4774] FAULT_INJECTION: forcing a failure.
[  182.693177][ T4774] name failslab, interval 1, probability 0, space 0, times 0
[  182.697476][ T4777] fuse: Unknown parameter 'd���><'
[  182.715538][ T4777] fuse: Unknown parameter 'd���><'
[  182.720277][ T4774] CPU: 0 UID: 0 PID: 4774 Comm: syz.2.1277 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c
[  182.720306][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  182.720319][ T4774] Call Trace:
[  182.720326][ T4774]  <TASK>
[  182.720334][ T4774]  __dump_stack+0x21/0x30
[  182.720358][ T4774]  dump_stack_lvl+0x140/0x1c0
[  182.720376][ T4774]  ? __cfi_dump_stack_lvl+0x10/0x10
[  182.720396][ T4774]  dump_stack+0x19/0x20
[  182.720412][ T4774]  should_fail_ex+0x3c2/0x510
[  182.720440][ T4774]  should_failslab+0xac/0x100
[  182.720461][ T4774]  kmem_cache_alloc_noprof+0x42/0x410
[  182.720487][ T4774]  ? getname_flags+0xcc/0x6b0
[  182.720506][ T4774]  ? call_rcu_hurry+0x30/0x30
[  182.720534][ T4774]  getname_flags+0xcc/0x6b0
[  182.720552][ T4774]  getname+0x1b/0x30
[  182.720569][ T4774]  do_sys_openat2+0xda/0x1d0
[  182.720592][ T4774]  ? do_sys_open+0x100/0x100
[  182.720616][ T4774]  __x64_sys_openat+0x13a/0x170
[  182.720639][ T4774]  x64_sys_call+0xe69/0x2ee0
[  182.720658][ T4774]  do_syscall_64+0x57/0xf0
[  182.720679][ T4774]  ? clear_bhb_loop+0x50/0xa0
[  182.720705][ T4774]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  182.720729][ T4774] RIP: 0033:0x7f4008b69d0e
[  182.720745][ T4774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  182.720761][ T4774] RSP: 002b:00007f4009ae4ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  182.720784][ T4774] RAX: ffffffffffffffda RBX: 00007f4009ae76c0 RCX: 00007f4008b69d0e
[  182.720799][ T4774] RDX: 0000000000000002 RSI: 00007f4008c37382 RDI: ffffffffffffff9c
[  182.720813][ T4774] RBP: 00007f4008c3804e R08: 0000000000000000 R09: 0000000000000000
[  182.720827][ T4774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036
[  182.720840][ T4774] R13: 0000200000000000 R14: 0000000000000000 R15: 00007fff8cb886a8
[  182.720857][ T4774]  </TASK>
[  182.908875][ T4777] fuse: Unknown parameter 'd���><'
[  182.914642][ T4777] fuse: Unknown parameter 'd���><'
[  182.920126][ T4777] fuse: Unknown parameter 'd���><'
[  182.925759][ T4777] fuse: Unknown parameter 'd���><'
[  182.931161][ T4777] fuse: Unknown parameter 'd���><'
[  182.936934][ T4777] fuse: Unknown parameter 'd���><'
[  182.942433][ T4777] fuse: Unknown parameter 'd���><'
[  182.947935][ T4777] fuse: Unknown parameter 'd���><'
[  182.953305][ T4777] fuse: Unknown parameter 'd���><'
[  182.958822][ T4777] fuse: Unknown parameter 'd���><'
[  182.964780][ T4777] fuse: Unknown parameter 'd���><'
[  182.970154][ T4777] fuse: Unknown parameter 'd���><'
[  182.975557][ T4777] fuse: Unknown parameter 'd���><'
[  182.980891][ T4777] fuse: Unknown parameter 'd���><'
[  182.986261][ T4777] fuse: Unknown parameter 'd���><'
[  182.991592][ T4777] fuse: Unknown parameter 'd���><'
[  182.996989][ T4777] fuse: Unknown parameter 'd���><'
[  183.002372][ T4777] fuse: Unknown parameter 'd���><'
[  183.007691][ T4777] fuse: Unknown parameter 'd���><'
[  183.013053][ T4777] fuse: Unknown parameter 'd���><'
[  183.018402][ T4777] fuse: Unknown parameter 'd���><'
[  183.023776][ T4777] fuse: Unknown parameter 'd���><'
[  183.029151][ T4777] fuse: Unknown parameter 'd���><'
[  183.034549][ T4777] fuse: Unknown parameter 'd���><'
SYZFAIL: SIGBUS
pc-offset:0xffffffffffedc109 pc:0x7fe2fa178607 addr:0x7fe2f6a11000 code=2 (errno 11: Resource temporarily unavailable)
[  183.039915][ T4777] fuse: Unknown parameter 'd���><'
[  183.045286][ T4777] fuse: Unknown parameter 'd���><'
[  183.050616][ T4777] fuse: Unknown parameter 'd���><'
[  183.055965][ T4777] fuse: Unknown parameter 'd���><'
[  183.061292][ T4777] fuse: Unknown parameter 'd���><'
[  183.066638][ T4777] fuse: Unknown parameter 'd���><'
[  183.116956][   T36] audit: type=1400 audit(1811450860.621:5137): avc:  denied  { write } for  pid=287 comm="syz-executor" path="pipe:[1578]" dev="pipefs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  183.188079][ T2224] raw-gadget.0 gadget.2: failed to queue disconnect event
[  183.464586][ T2292] bridge_slave_1: left allmulticast mode
[  183.470306][ T2292] bridge_slave_1: left promiscuous mode
[  183.475954][ T2292] ������: port 2(bridge_slave_1) entered disabled state
[  183.484024][ T2292] bridge_slave_0: left allmulticast mode
[  183.490269][ T2292] bridge_slave_0: left promiscuous mode
[  183.495934][ T2292] ������: port 1(bridge_slave_0) entered disabled state
[  183.504148][ T2292] bridge_slave_1: left allmulticast mode
[  183.510127][ T2292] bridge_slave_1: left promiscuous mode
[  183.515765][ T2292] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.523741][ T2292] bridge_slave_0: left allmulticast mode
[  183.529406][ T2292] bridge_slave_0: left promiscuous mode
[  183.545651][ T2292] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.700252][ T2292] tipc: Disabling bearer <eth:veth1_vlan>
[  183.706032][ T2292] tipc: Left network mode
[  183.711763][ T2292] veth1_macvtap: left promiscuous mode
[  183.717232][ T2292] veth0_vlan: left promiscuous mode
[  183.722896][ T2292] veth1_macvtap: left promiscuous mode
[  183.728407][ T2292] veth0_vlan: left promiscuous mode
[  184.087838][ T2292] bridge_slave_1: left allmulticast mode
[  184.093489][ T2292] bridge_slave_1: left promiscuous mode
[  184.099143][ T2292] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.106555][ T2292] bridge_slave_0: left allmulticast mode
[  184.112330][ T2292] bridge_slave_0: left promiscuous mode
[  184.117981][ T2292] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.198274][ T2292] tipc: Left network mode
[  184.203053][ T2292] veth1_macvtap: left promiscuous mode
[  184.208603][ T2292] veth0_vlan: left promiscuous mode