last executing test programs:

6.248245519s ago: executing program 1 (id=44):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040ef0ec4720000000000010902240001000000010904009657bb6fae7c54080203f2f50fb1fd7f7b77420003000921"], 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x321101, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r2, @ANYBLOB="0600000021a500000c0001000300000000000000db532c10cfe91afbc647c60320412564da40f8bfef6a13f9ef6f93c14535dc8fea530b5fd131a8f9bcbed2319cf06b14167d561ebc8f35ab6c68a5da9b50d17af9429fdcfab4cf90eba7daf64941e6705bbca7c3b019cef9ca4569c724f96e4f87cbc91192fc56970817b3f8e9044c02baae2343dc8f7b2470fd5107a0117674e05998f7f428fb714329e488e52286a4fbcdb90774200e27abd4d147fa79a09e"], 0x2c}], 0x1}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc2302010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0022180000000501150025ff090ca101090182008c0508950129302102c0"], 0x0}, 0x0)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x44, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xa00)
ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x69a8ec8e)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)={0x40, 0x0, 0x6, "a1899d02a40b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r6 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7\xc6yE\xa8\xd6A\xe8*\xedEd\x14m|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6E&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/717, 0x2)
ftruncate(r6, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
fcntl$addseals(r6, 0x409, 0x19)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000800)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.57868093s ago: executing program 1 (id=54):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=@routing={0x21, 0x14, 0x1, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @mcast2, @mcast2, @mcast1]}, 0xa8)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000000)="120000003000e7ef8b000000a100c7b1ee57", 0x12, 0x2404c810, 0x0, 0x0) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000001c0)={0x5e, 0x11, '\x00', [@generic={0xc, 0x8b, "f26e24aac4ae458768c26d43dfad204f3a7d0b4147053d0cded94f5b1e56b4d8db0c178f20945f1c4d941c95adb511c679356a76e9cbf853aa45ded71f75987b6901ced6a2be2daf0f056855830fdf928fb8f23b511d63992594b0c7974f3f7551d340782ef8086fd382c7965393a63131873ad7c01da965eeddb96c20b839c9c6dc3ffcfe4ecda60012cf"}]}, 0x98) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0xffff, 0xa}, {@in=@broadcast, 0x4d4, 0xff}, @in6=@private2, {0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0xde7}, 0x70bd26, 0x1000, 0x2, 0x4, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x18040}, 0x40082)

4.56418481s ago: executing program 1 (id=55):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000100))
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d27e, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0)
write(r3, 0x0, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) (async, rerun: 32)
fallocate(r2, 0x0, 0x0, 0x1000f4) (async, rerun: 64)
sendfile(r2, r2, 0x0, 0x800000a1e) (async, rerun: 64)
write$make_it_fail(r2, &(0x7f0000000140)='N\x00', 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x89ff, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0xfffffffe, 0xfb3, [0x1]}})
syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0})

4.15208143s ago: executing program 2 (id=56):
r0 = socket(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f0000000100)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)

4.15050091s ago: executing program 2 (id=57):
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', &(0x7f00000003c0)={0x2000, 0x40, 0x26}, 0x18)
mkdirat(r0, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x8) (async)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x4404, 0x0) (async, rerun: 64)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) (rerun: 64)
write(r1, &(0x7f0000000140)='1', 0x1) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x100, 0x41) (async, rerun: 32)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 32)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_FIOSETOWN(r2, 0x8901, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x102, 0x0) (async, rerun: 32)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000300)=0x3, 0x4) (async, rerun: 32)
connect$pppl2tp(r4, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0x2f9d, @local}}}, 0x32) (rerun: 32)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'none\x00', 0x30, 0x660f5380, 0x3}, 0x2c) (async)
setns(r3, 0x8000000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x4e27, 0x0, @private2, 0x5}, 0x1c) (async)
sendmsg$nl_xfrm(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0x134}}, 0x0)
close(0xffffffffffffffff) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) (rerun: 32)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x1})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x18b8c1, 0x0)
close(r8) (async)
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x80482, 0x0)
pwritev(r9, &(0x7f00000001c0)=[{&(0x7f0000000240)="b4c403848e651c1ad808997029492bbfdc41f7776198f3ddbd7aec6fc5d0444b81f2301ee10b08cabcb4deab2ccba625abd8153eae3455b7cb12c1357ae4e73d", 0x40}], 0x1, 0xe, 0xf8000000) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) (rerun: 32)

4.019010873s ago: executing program 2 (id=58):
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x60, 0x0, <r0=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000140)=<r1=>0x0)
capset(&(0x7f0000001a80)={0x20080522}, &(0x7f0000001ac0))
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f0000001b00)=@proc={0x10, 0x0, 0x1}, 0xc) (async)
connect$netlink(r2, &(0x7f0000001b00)=@proc={0x10, 0x0, 0x1}, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)) (async)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)={<r7=>0xffffffffffffffff})
getdents(r6, &(0x7f0000001a40)=""/62, 0x3e)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000840)={r4, 0x6, 0x0, 0x10}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000840)={<r8=>r4, 0x6, 0x0, 0x10})
syz_ublk_setup_queues(r6, r1, &(0x7f00000004c0)={0x0, 0x3240, 0x200, 0x0, 0x3e3, 0x0, r4}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5585, 0x100, 0x2, 0x12a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfc74, 0x800, 0x0, 0x78}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x49cf, 0x40000, 0x1, 0x3e8, 0x0, r7}, 0xffffffffffffffff, 0x0, <r9=>0x0, <r10=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ca1, 0x20, 0x2, 0x359, 0x0, r4}}], 0x4, &(0x7f0000001880)={0x2e, 0x40, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8}, 0x0, <r11=>0x0, '\x00', {0x2, 0x21c, 0x0, &(0x7f0000000880)=@buf_max_buf="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"}}, &(0x7f0000001900))
syz_ublk_add_dev(r4, 0x0, r9, r10, &(0x7f0000001980)={0x2e, 0x47, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r11, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001940)=@any_dev={0x2, 0xde, 0x0, 0x0, 0x1000, 0x8001, 0x0, 0x0, 0x2}}}, &(0x7f0000001a00)=<r12=>0x0)
syz_ublk_setup_queues(r4, r12, &(0x7f0000000180)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000000, 0x8e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x2, 0x1, 0x230}}], 0x1, 0x0, 0x0) (async)
syz_ublk_setup_queues(r4, r12, &(0x7f0000000180)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000000, 0x8e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x2, 0x1, 0x230}}], 0x1, 0x0, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x23, &(0x7f0000000480)="7c79a68cc9ff5bbcea19fe131aacbeb4bf8b8787c5a2b8545bf819dc0d56d5cabbb46b6bb63fe1ac79", 0x29) (async)
setsockopt$inet_buf(r4, 0x0, 0x23, &(0x7f0000000480)="7c79a68cc9ff5bbcea19fe131aacbeb4bf8b8787c5a2b8545bf819dc0d56d5cabbb46b6bb63fe1ac79", 0x29)
syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000403e13150840000102030109021f00010109100409040000010103000b090505", @ANYRES32], 0x0)

2.792486263s ago: executing program 2 (id=67):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, 0xffffffffffffffff})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x21, 0x7}, 0x4) (async)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000000c0)=[@acquire, @release]})

2.791997413s ago: executing program 2 (id=68):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000500)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="261805000000e52a2c63fa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x40, 0x22, 0x3, {0x3, 0x4, 'b'}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, &(0x7f0000000240)={0x0, 0xf, 0x127, {0x5, 0xf, 0x127, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "55972557148065ba3590a70c5c915a2b"}, @generic={0x85, 0x10, 0xa, "3775b654f75d3f121962ec31d931ea3943fb85d93a336b4ac3bdd8322d7dcac455eb173c6a7d6667c8bef674fdbaba182cdc39c040a8a961fd47b0f3c187ce34754b1702d01c5e110a91ad93ff67d9d37b344278ca9a4d5ddee7305446b9c4ad6def7779627fa7219d063ca51543db7d890455c00fbad973aa34c21f07e643e07c1f"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xf, 0x0, 0x6}, @generic={0x82, 0x10, 0x8, "0a4f6e609597991ac8cfe84d617dee538b74d0d4418d4b5be2a074e34a5572ffee303732d4aca44de8dd573c1dce8939ec5464dcc21e6603c637485bd51fe14ed6afc0276a09612339b4edfce765184a382694abe74920d2f829c8e255cebec7527fd9c06ba2aaa51c8df1c2ed2ca544ff5d48156463d033439f0000000000"}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x18, 0xf9, 0xc, "4dc2f260", "37648841"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x2, 0x7, 0x80, 0x17, 0x2, 0x4}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000640)={0x20, 0xc, 0x46, "394d4cef6d3e931117cc28f54ab4b027fd2fe7c0042c475ae9a500008ab325f509922a31e84b2fcc9a412e2a8c8f1eb6a86af3a4e211d6cd71bbfb356a6b9d7915b554e981b5"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f00000007c0)={0x40, 0x7, 0x2}, &(0x7f0000000080)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "8820"}, &(0x7f00000009c0)={0x40, 0xf, 0x2}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @random="26c668366856"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "9805"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x4a}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x8}})
syz_usb_control_io(r0, 0x0, 0x0)

1.64875983s ago: executing program 0 (id=75):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x60}) (async)
r4 = socket(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x2003, @remote, 0x2}, 0x1c) (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x3d3a, 0x4) (async)
sendfile(r4, r5, 0x0, 0xffffffff) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.594310202s ago: executing program 0 (id=76):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x2, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x4, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x20000, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000100012000800010076657468180002000a00010000", 0x45}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a000100000000000000000002200000000000000000000008000160e00000010800030001", 0x29)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r3) (async)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x7, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x1000, 0x2, 0x11, r6, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000300)='freezer.self_freezing\x00', 0x0, 0x0)
preadv(r8, &(0x7f0000000340)=[{&(0x7f0000000380)=""/140, 0x8c}], 0x1, 0x2, 0xfffffff9) (async)
preadv(r8, &(0x7f0000000340)=[{&(0x7f0000000380)=""/140, 0x8c}], 0x1, 0x2, 0xfffffff9)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async)
r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
dup2(r10, r9) (async)
dup2(r10, r9)
connect$inet(r9, &(0x7f0000000140)={0x27, 0x4e27, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async)
connect$inet(r9, &(0x7f0000000140)={0x27, 0x4e27, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.536503084s ago: executing program 0 (id=77):
r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/pids.max\x00', 0x2, 0x0)
write$binfmt_format(r0, &(0x7f0000000600)='1\x00', 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x12, 0x0, &(0x7f0000000000))
r4 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000680)={0x0, 0x0})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.534673363s ago: executing program 0 (id=78):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7d)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000640)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0)
r3 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x2, 0x1, 0xfffffffc, 0x3ba}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000600)=<r6=>0x0)
r7 = syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r8=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r9=>0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r10 = syz_open_dev$usbmon(&(0x7f0000000140), 0x5, 0x0)
pread64(r10, 0x0, 0x0, 0x1)
ioctl$MON_IOCX_MFETCH(r10, 0xc0109207, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffd})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r11 = syz_open_dev$usbfs(&(0x7f0000000300), 0xf, 0x101301)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x5001})
r13 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', 0x1})
write$tun(r12, &(0x7f0000000780)={@void, @val={0x2, 0x3, 0x1b, 0x30, 0x14, 0x2}, @ipv6=@esp={0x3, 0x6, "7a5aef", 0x2a, 0x32, 0xff, @remote, @loopback, {[], {0x4d4, 0x1ff, @cc={0x1, 0x0, 0x9, 0x7f, 0x8, 0x508, 0x1000}, "6356e10b40553f25", 0x8}}}}, 0x5c)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$USBDEVFS_IOCTL(r11, 0x80045505, &(0x7f00000003c0)=@usbdevfs_connect)
r14 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1, 0x189002)
ioctl$MON_IOCT_RING_SIZE(r14, 0x9204, 0x80000000)
r15 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r15)
r16 = syz_open_dev$ublk_chdev(&(0x7f00000006c0), r7, 0x10a00)
syz_ublk_setup_queues(r16, r9, &(0x7f0000000700)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa63b, 0x8, 0x0, 0xa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x90d0, 0x1000, 0x1000000, 0x80000df, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x3, 0x2, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x220, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x48, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)

1.534471443s ago: executing program 1 (id=79):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
listen(r0, 0x7fffffff) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
pipe(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$P9_RGETLOCK(r4, &(0x7f0000000640)=ANY=[], 0x200002e6)
fcntl$setpipe(r3, 0x407, 0x1) (async)
ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x7000, 0x0, 0x81, 0x7fff, 0x0, [{0x5, 0x5, 0x7, '\x00', 0x1}, {0x80, 0x32, 0x14, '\x00', 0x6}, {0x89, 0x80, 0x4}, {0x81, 0x5, 0xa0, '\x00', 0x7}, {0x80, 0x5, 0x1, '\x00', 0x9}, {0x1, 0x5, 0x5, '\x00', 0xb}, {0x4, 0x9, 0x4, '\x00', 0x9}, {0x40, 0x6, 0x7, '\x00', 0xb}, {0x9, 0x7f, 0x8, '\x00', 0x3}, {0x8, 0x0, 0xff, '\x00', 0x2}, {0xff, 0x10, 0x6, '\x00', 0x8}, {0x44, 0x10, 0x97, '\x00', 0x6}, {0x4, 0x1, 0x1, '\x00', 0x37}, {0x0, 0x8, 0x5, '\x00', 0x6}, {0x6, 0x40, 0x16, '\x00', 0x4}, {0x7, 0x1, 0x8, '\x00', 0x7f}, {0x7, 0x6, 0x3, '\x00', 0xe7}, {0x11, 0x2, 0x50, '\x00', 0xf8}, {0xe8, 0x9, 0xf4}, {0x9, 0x4, 0x7}, {0x1, 0xf3, 0x6, '\x00', 0x6}, {0x2, 0x6, 0x24, '\x00', 0x25}, {0x1, 0x8, 0x1, '\x00', 0x4}, {0x6, 0xfa, 0x6, '\x00', 0x1}]}}) (async)
mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='sysfs\x00', 0x989, 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0)
ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000100)=0x40) (async)
ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000140)={0x8, 0x2, 0xce, 0x9, 0x9, "7d0946376753416e6e1c697c1e877c035f8b36", 0x344, 0x7f})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000600)=0x40) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x5}]})
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000240)=0x3) (async)
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x20000400, 0x1, 0xffffffffffffffff, 0x1fffffffffffffff, 0xb3, 0x91], 0xeeee8000, 0x2018d3}) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

1.502397824s ago: executing program 0 (id=80):
syz_usb_connect(0x0, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='sys_mnt\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='1', 0x1)

995.320126ms ago: executing program 0 (id=80):
syz_usb_connect(0x0, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='sys_mnt\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='1', 0x1)

871.5073ms ago: executing program 3 (id=81):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00003a1000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="0f23730fc7710df2166766c7442400080000006766c7442402490000006766c744240600000000670f011c2466b8a70000000f23d00f21f86635100000090f23f8f30f1c0566b9800000c00f326635000800000f309a0ac5004a00002af50f01df0f23c00f21f8663502000f000f23f8", 0x70}], 0x1, 0x4a, 0x0, 0x0) (async)
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000001c0)={0x70001, 0x0, {[0xffffffffffffffff, 0x1fb, 0xffffffffffffffff, 0x8001, 0x16, 0x4, 0x1, 0x8]}}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)

756.619232ms ago: executing program 2 (id=82):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5001})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0xc)
socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/console\x00', 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000340)={0x7fffffff, 0xfcd, 0x2, 0x1, 0x8f, "388d673f088b000000020000000000001af800"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xb8)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64)
syz_usb_connect(0x1, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303fcb5"], 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5001}) (async)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0xc) (async)
socket$packet(0x11, 0x2, 0x300) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/console\x00', 0x1, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async)
connect$unix(r2, 0x0, 0x0) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000340)={0x7fffffff, 0xfcd, 0x2, 0x1, 0x8f, "388d673f088b000000020000000000001af800"}) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xb8) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) (async)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) (async)
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) (async)
syz_usb_connect(0x1, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303fcb5"], 0x0) (async)

700.274704ms ago: executing program 3 (id=83):
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x77359400}}, 0x0)
mmap(&(0x7f0000161000/0x3000)=nil, 0x3000, 0x2, 0x204031, 0xffffffffffffffff, 0xe60d3000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x1, 0x2, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0)
bind$unix(r3, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r1, 0x0, r5, 0x0, 0x39000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x408cd, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xfffffe3e)
add_key(0x0, 0x0, &(0x7f0000000240), 0x0, 0xfffffffffffffffc)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0)
write$UHID_CREATE(r7, &(0x7f0000000400)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000540)=""/2, 0x2, 0x0, 0x8}}, 0x120)
pipe(&(0x7f0000000580)={<r8=>0xffffffffffffffff})
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
splice(r8, 0x0, r9, 0x0, 0x81fd, 0x4)
readv(r7, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/155, 0x9b}], 0x1)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)

700.003914ms ago: executing program 3 (id=84):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r1 = syz_create_resource$futex(&(0x7f0000000080))
futex(r1, 0x0, 0x0, 0x0, 0x0, 0x1)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa2) (async)
mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4)

697.010884ms ago: executing program 3 (id=85):
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40100, 0x106, 0x4}, 0x18)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@generic={0x3, 0x5, 0xe})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x2a1e5876972a8f22, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x57}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040984}, 0x20000050)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000280)={0x3, 0x3})
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000002c0)={'ah\x00'}, &(0x7f0000000300)=0x1e)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x86dd}]}, 0x30}}, 0x24000890)
syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x20, 0xd, 0x96, {0x96, 0x8, "1c3131d1570cd7c97fc5d7e66b25f59d4a7eb75055196a631f221840645589d54cb3f645cde4378078b1b71d69e015b2c0c9cbe145523b6a7d1698f8332d2e92713fde188b9095518670c66f461bd371571d5d5c2e12a4bb2fdac218c30d00717178248439ee80cc4243ee3d24a6771c273750197e0ff37d71a155e81808690621157cc23c454b85b9dd5007acfa0f1257833a74"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000640)={0x20, 0x18, 0x7b, "aac6c4fc5bd165c5485efda82db1e1d615ab0edfa2247b058e17dc3472aee2b1c5fe65fa8f23e9405670d5dad4b548483dfa2092f8d9841182e64d7cd978745789c4d9356509150341d276c2f46dc6383bc90e680cb84ea1b16929620eb9b88456435cbe529bce10600799c7689231489413c8e1f180a1e2789d52"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000780)={0x20, 0x81, 0x1, "8e"}, &(0x7f00000007c0)={0x20, 0x82, 0x3, "48f1ab"}, &(0x7f0000000800)={0x20, 0x83, 0x1, "db"}, &(0x7f0000000840)={0x20, 0x84, 0x1, "b9"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "563bd4"}})
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xf4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x8080)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf, 0x69}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x48040)
mount$9p_virtio(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x2800020, &(0x7f0000000c40)={'trans=virtio,', {[{@fscache}, {@version_9p2000}, {@msize={'msize', 0x3d, 0x71d68b99}}, {@directio}, {@nodevmap}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, r4}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}})
r6 = openat2(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x80500, 0xb03f28273c48c7b3, 0x6}, 0x18)
getsockname(r6, &(0x7f0000000d80)=@tipc, &(0x7f0000000e00)=0x80)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000e40)=@md0, r4, &(0x7f0000000e80))
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x8, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000fc0), r6)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xcc, r7, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008010}, 0x8800)
quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000001180)=@rnullb={'/dev/syzrnull', 0x0}, r4, &(0x7f00000011c0)={0x468, 0x9, 0x0, 0xb})
r8 = syz_usb_connect$uac1(0x4, 0xa1, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x245f, 0x931c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0xf0, 0x10, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd7a, 0x23}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x4, 0x4, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x404, 0x5, 0x1, 0x6}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x5, "3510"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xfb, 0x2, 0x81, 0x2, "8f9d", "a335"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x8, 0x2, 0x9, {0x7, 0x25, 0x1, 0x4, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x4, 0x6, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x9, 0x7, {0x7, 0x25, 0x1, 0x0, 0x3a, 0x81}}}}}}}}]}}, &(0x7f0000001580)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x200, 0x0, 0x6, 0x4, 0x20, 0xe}, 0xc, &(0x7f0000001300)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x6, 0x2}]}, 0x4, [{0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x41a}}, {0x93, &(0x7f0000001380)=@string={0x93, 0x3, "1e7a9b6a64f0c24a7e30a93be94501a5a14d1cf757a375bcf7217ad6943a3a0586199df6065439612bc6e2fe4334db4ad36a8a660e30ac88e3bf33cdf8e5741ee56de472dd43fd9531897a4ba3bedd9225120b5f34ad10894f1616639b0c3e3717f4f3fefcd80b178ed80c0d48a0b6f78633364b7b008c0fa099d649b4a7552fdf30e65301c785f282101f3cb5b6504a19"}}, {0x6b, &(0x7f0000001440)=@string={0x6b, 0x3, "a03065366092102789061999f1b4acf4a20a5d0bb35e7092ef24be05468a885d3055ead5b7a610d3ff9b370beb6f89b20109690511ca5ee11055146f8a67b010929d95876e5fcbf25777e2ccc6b897a480d73ea32237c164c0cc02a027cd025dc324993a236f316c24"}}, {0x9f, &(0x7f00000014c0)=@string={0x9f, 0x3, "1e13b76b38a52d225590fe8adaedd2bc06d48a2d49a486b3aedc9630035bb95557c180bc8b3748c1b526487049f55482dbf52dd27e3193913bea02eee1896477656e07802a474976672a106a0132929011161b5520e154a540cbd4272cc1ec0da21a2951dd17eea3f336d4906f93ae2708c5cf05b5137ad261403df2d7497a1863908ffca993b5e878dcd46ac5998592361c64b574c291f779bc338a0e"}}]})
syz_usb_control_io$uac1(r8, &(0x7f0000001800)={0x14, &(0x7f0000001600)={0x40, 0x10, 0xf3, {0xf3, 0x22, "7b47b99f447094bde23b49ff2fa454b0a97c398101d2c01e6684fe170dbd0b83fc3cf694504f9a85c1ea88228c2f2f077fd6d2ac98509ce96ae51e08422847f6240fc92d5f69f72666830694cd5105058cfa409ba7cc78c4f05ce806e937c1d9114742d0c3ebc9f276a83b9dbb841dc536e8dcd4f8eb52a0e5279b206cbdd8a205c12a5825d4d4fac213fdf568fce0ae7b8e347933dbee02a95ca2a5b8d489482a4d64e8f8c85ce4b012dfe4c9e21fad2dfb7606dda09e11fde02911d6cdcd0e0805f9be9f0ed539687988710e96f5ac4b1d0f190867e1da5cd0a575193caab3047f71c13c858d52e8b571c14888aa0669"}}, &(0x7f0000001700)={0x0, 0x3, 0xec, @string={0xec, 0x3, "a54c0c421d7b101c330d9e3c4d2c970e04d56c359c2d98f205f7637a4492aa5bfe6dcaf083e9b5272b87e6f4f7390d11725af5af39a56d3c9d3b6a503ebe1942d2aaa4fe9f3e73d648478f383973ddfd87fc7c7b0da70f5bc238abd0046b38bc74aa84d615f5b88c574b90155770f091a12f6a0030e7a12043ad489bf943da2df0dbbdd5894bf3d0f4a72de6f96f718d73c000b11af3984f8a9f5a9c66aa306477f7318377bdc26b9d077c7eecf89dcc161171dbc9c6238a01e4663d04cf209df57e3a40116abfb6b4dbb30286a34f822651bfd9775a1431862365ca85b649d65696ee8fc2f8ba04ea78"}}}, &(0x7f0000001a80)={0x44, &(0x7f0000001840)={0x0, 0x6, 0x7a, "9457a2a122197386f1ec84cf03ba12c6dbc27b1a3b177f20687f439f4a8cd71745a8d10941afb9659e09aefda7c9a30a2d9c2ba02d0029494a48bdd6d0ce0b2e75c1ffa143eb7784f3e3a0c65bd2d183a46a06c22f7186b4f432dcd4c9246131294c6e69255f0dc0bf289c5459fd9cd5c89512cb3d80647049db"}, &(0x7f00000018c0)={0x0, 0xa, 0x1, 0x75}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001940)={0x20, 0x81, 0x1, "b0"}, &(0x7f0000001980)={0x20, 0x82, 0x1, '>'}, &(0x7f00000019c0)={0x20, 0x83, 0x3, "ea3e2f"}, &(0x7f0000001a00)={0x20, 0x84, 0x3, "b2c545"}, &(0x7f0000001a40)={0x20, 0x85, 0x3, "d8747d"}})
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
r9 = openat2(0xffffffffffffffff, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x20002, 0x0, 0x18}, 0x18)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
msync(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1)
r11 = fcntl$getown(r9, 0x9)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000030c0)=<r12=>0x0)
sendmmsg$unix(r6, &(0x7f0000003280)=[{{&(0x7f0000001b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000001c00)="f59bb26607bcba7ebe853da4cfb7ec8b68e0eacb6f7d5b7eb948687f1699f78fbee12848368e86fd091e", 0x2a}, {&(0x7f0000001c40)="b6e8ed1276df1246a97704acdee86521511418c392d7ec4b104252b1299832a1748047b26cb3a6c25c38c0", 0x2b}, {&(0x7f0000001c80)="af104393cc2c140c2c3484e5173ed829e00c42dd4246807c0861ac3957ce2c72c08f9aca6dba9b0a2fb8c4f71aa5d939444769b78c6dc49423f5be03a46ab50ba5b6ed0f857b42e80e9028fc498d651f57b065846becc36a67adb773708f470af359b2c6c9b7de18f17fb48f028288d20fb4902dd0d16612013f582d0a256545fb079e4182d34192acae25ece7f5abc54e40b0c1d19de383a9d1bcff480c036123bd934e9333a18d2e294a3a53100115039c20aa479693a22fe4f3b4584bd497af7f987e0f156ac55008744d7c1cafc6a3bf2703b64672bddc4bbd31d5802f701476a210fd1e999945dccc60c1db0374d6f5e3", 0xf3}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="9dda2e4bd24af2acf0968aac3f510d95ca6230131a4ea1d3de428b106d7c7fe1afd051a2dba728b534b669d85b1c251be184f03b6526846616019e6827e478a8d0e70fb6a3aef006c205ef3c3af7184a662a589beee90542257c2487948fab5c10b7c51b903117f1e4577276737ef82b74fe89", 0x73}, {&(0x7f0000002e00)}, {&(0x7f0000002e40)="64eaf106c9260ce2654bbc85e67c5d64751c4ca95b951c6a2f4da543ab6aecfe47dca5fbb33fabfcb2c035c9fd4f63d95c0fe98057f6c36d5613667b2876dd6fe19d3ab4865882630b9e03d0090469108ff5e3f74d7c740f190e584f47c47c07fed68778bf95c3bbefe67b", 0x6b}, {&(0x7f0000002ec0)="c83847252dd31988d1711870ae0c43013ba88418f0b8f82f8c67d4c66e76555d813a5e315d559a8304c40e5745e267fb54472294abea76e3a90d07f293fbbc349ac2a17873a110cd235169", 0x4b}, {&(0x7f0000002f40)="7d204e7a701b112bc34a51214ad6afa237b371a3dc5546ab441929e05daea5cf9a4aecb0b0dc9c0efb299a00c44d53c7bce44a3cdcc3f1e34967b56a8ddc1d7181fc8c705c8681f5c62ae7d8ace4eb66932062af65e686432b3117a33b1aa4115c6c5eeb2016d4a1bbcc75277c4ab83c1ef59b71d22d7765a116363d95999ff0b1b764b1e15f0e3224f2070bcd", 0x8d}], 0x9, &(0x7f0000003180)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x1c, 0x1, 0x1, [r10, r9, r6]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x30, 0x1, 0x1, [r6, 0xffffffffffffffff, r9, r0, 0xffffffffffffffff, 0xffffffffffffffff, r6, r0]}}], 0xc8, 0x4004}}], 0x1, 0x8000)

639.091075ms ago: executing program 1 (id=86):
open(&(0x7f0000000100)='./file1\x00', 0x14b042, 0x8c)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0xbb42)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000002c0)={0x6, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"})
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000340))
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000400)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
chmod(&(0x7f0000000880)='./file1\x00', 0x50)

158.120577ms ago: executing program 1 (id=87):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x9b)
close(r2)
capset(&(0x7f0000000880)={0x20071026}, &(0x7f00000008c0)={0x0, 0x2})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000900)='./bus\x00', 0x2000018)
r3 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000940))
syz_io_uring_setup(0x66b6, &(0x7f0000000100)={0x0, 0x61de, 0x27, 0x5, 0x372}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000080)={'xfrm0\x00'})
sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe0, 0xb, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x72f}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x92e}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xf7ae}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7d}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6e}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x82d}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc004}, 0x80)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000b40)={0x40000000})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x83}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008090)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_complete(r4, r5)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'lo\x00', <r9=>0x0})
sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000640)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="9a4d825fcb59d74cc757532cf16764f57ecc2f938ebfbb233011f1039205640c36dbe4ef56df9f25e9afa949e1f4203e844d5aef20e0ffea8f481ebb72215c74288703f3be91aeb37b4963fec58fc9713b056f822fd5de6b8865f1629a876561f38b007906a16fc0da5a29c6056274ab13cca52adc61481b8969b9be7e74680c398261f745281edb792b4bde0f774b4cb77f5479cc4902787140adfea30e30fb0c01575b37", 0xa5}], 0x1, &(0x7f0000000780)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x17, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@loopback, 0x1213a1f}, {@empty, 0x7fffffff}, {@multicast1, 0x800}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x98}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x98}, 0x4040000)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r10, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r11, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x4000040)

157.127457ms ago: executing program 3 (id=88):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCNXCL(r0, 0x540d)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x5}, 0x4)
ioctl$TIOCNXCL(r1, 0x540d)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040))
recvfrom$packet(r1, &(0x7f0000000080)=""/61, 0x3d, 0x40, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'hsr0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x9, 0xe1, "542f1c0ddc22e7e6c7455ebbfabbde0e4dd5cf1fdbfb4b4b1fc404c1bcf7b0aa550b46dfbc0c5b0863cc8471b937e59d4d914f7e7663adaf69ff7a286303201f0efc60b9727b011295105730385a76567a359e1b17537ad5231185b35669d499e2e7d7d05ac27db51b311d112fa457d51a7f3652325913d9dd27c78d5aab5b500eaa52b762d448f46a6ec225519177bfc91b8edd9d7e22bc99255965529ea33bab4e04e5a05e8324a9d8b1b06fe22b901b5d728c3e853b16e14efe1ad712db909a452f5bcabe4d86d23d77e8ce869c3717fdf95e50c134107ecf649850e9c78ba7"}})
r2 = dup3(r1, r1, 0x80000)
r3 = openat$incfs(r1, &(0x7f0000000200)='.pending_reads\x00', 0x301502, 0x0)
ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000240)={0x0, r1, r3, 0xffffffffffffffff, 0x8, '\x00', {0x5, 0x5cfe, 0x6, 0x9, 0x2, 0x4, 0x8, 0x2, {0x8, 0x1}, {0x7, 0x9}, {0x100000001, 0x7}, 0x6, 0xffffff00, 0x1, 0x3, 0xfffffc01, 0x7, 0x79, 0x6, 0xdb, 0x5, '\x00', 0x8, 0x1, 0x1, 0x3}})
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000300)=0x5)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000340)="440f20c0663503000000440f22c0660f3a220c93bad004ed66b9800000c00f326635001000000f30dc3d0f463e0c000f07f30f1c03f30f5c7800670f2371", 0x3e}], 0x1, 0x0, &(0x7f00000003c0), 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000400)='team_slave_1\x00')
ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000440))
ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000480)={{0xa000, 0xeeef0000, 0x5, 0xd6, 0x7, 0x7, 0xea, 0xfb, 0x0, 0x0, 0x67}, {0x2000, 0xf000, 0x3, 0x9, 0x10, 0x9, 0x3, 0xb, 0x6, 0x2, 0xc, 0x8}, {0xe000, 0xdddd0000, 0xe, 0x9, 0x0, 0xed, 0x3, 0x7, 0x25, 0x6, 0x0, 0x2}, {0x506f217b1a1cdee7, 0xdddd0000, 0xb, 0x1, 0x1, 0x4, 0x4, 0x9, 0xf, 0x8, 0x3, 0x7}, {0x6000, 0xeeef0000, 0x9, 0x10, 0x53, 0xff, 0x81, 0x7, 0x40, 0x4, 0x6, 0x9}, {0xf000, 0x30000, 0xc, 0x8, 0x42, 0x5, 0x5, 0x7, 0xf, 0x40, 0xf, 0x3}, {0xffc, 0xd000, 0xf, 0x5, 0x8, 0x0, 0x8, 0x9, 0x5, 0x27, 0x2, 0x7f}, {0x1, 0x100000, 0xf, 0x3, 0x7, 0xd, 0x4, 0x8, 0x32, 0x10, 0x9, 0x4}, {0x60000, 0x1000}, {0x9000, 0xfe39}, 0x80040021, 0x0, 0xeeee8000, 0x100010, 0x5, 0x801, 0xeeee0002, 0x0, [0xfffffffffffffffe, 0x7, 0x3, 0x4]})
ioctl$KIOCSOUND(r0, 0x4b2f, 0xc67)
ioctl$KVM_TDX_GET_CPUID(r3, 0xc008aeba, &(0x7f0000000640)={0x5, 0x0, &(0x7f00000005c0)={0x2, 0x0, [{0x0, 0x4, 0x3, 0xfffffffa, 0x7, 0x0, 0x3000000}, {0x80000019, 0x1000, 0x2, 0x7, 0xb13d, 0xb227, 0x1ff}]}})
ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000680)=0x3)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text64={0x40, &(0x7f00000006c0)="f20f01dfb8010000000f01c10f549f00000000410f01f88d5097f3410fc7765766bad00466edf0470fc143e2c402a59ac1c401605e33", 0x36}], 0x1, 0x62, &(0x7f0000000740)=[@cr0={0x0, 0x3}], 0x1)
ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000780)={0x4, 0x3, 0x75, 0x8})
setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00000007c0)=0x1, 0x4)
getsockopt(r1, 0x100, 0x0, &(0x7f0000000800)=""/206, &(0x7f0000000900)=0xce)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000980), 0x521041, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4)
sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x8081)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000ac0)={0x0, 0x2, 0x0, 0x0, 0x17, "a40f1d3ead5268c4"})
ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000b00)={0x6, 0x6, 0x81bf, 0x3, 0xff, 0x0, 0x2})
sendto$inet6(r2, &(0x7f0000000b40)="2d9d97bf5b9722e6b3863d8e09f542cc166f72c6bba97ee20c0d8b9d4652e2a5bacc5b23c0f49d5861e6340b3609c9e13054a85db97947aef5b7ef6089088c018758ee02d2e8a74cfcac18f1f0401292fea1eb528d9ad4efeb564d58fee0cf6b119cb4dbdd3affa4e6414016bc7e1c579627fe1223c3afc4532416e1e32d09902811d5989b7f587db08a95144834abbac6b856ea3ce59631254652", 0x9b, 0x4044080, &(0x7f0000000c00)={0xa, 0x4e23, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
mount(&(0x7f0000000c40)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='autofs\x00', 0x4000004, &(0x7f0000000d00)='\x00')

0s ago: executing program 3 (id=89):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r2, &(0x7f0000000600)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x2}}, 0x26)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000240)={{0x3000, 0x1, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x10, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0xff, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x1c, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x9}, {0xf000, 0xd000, 0xf, 0x3, 0x12, 0x7, 0xa9, 0x8, 0x9, 0x4, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x9}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef0000, 0x30}, {0xdddd1000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0x10000000000e5b5, 0x4, 0x3, 0x8]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r0, @ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYRES64=r6, @ANYBLOB=',rootmodid=', @ANYRESOCT=r0, @ANYRESHEX=r6, @ANYRESDEC=r0])
setresgid(0xee00, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x6000)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x800, 0x0, 0x33}, 0x18)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect$cdc_ncm(0x2, 0x73, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRESHEX=r6], 0x0)
r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000d80)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_usb_control_io(r8, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000010000000000000000000000000000fe8000000000000000000000000000bb000004d533"], 0x23c}}, 0x4080)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b805000000090200e1660f3a1429af320f01d9660ff7e31bf7c4c1672aaf65cd000066b81d018ec805000000b90000c0fe0f41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x63}], 0x1, 0x1f, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000b00)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x800)
r11 = dup(r10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40)={0x0, <r12=>0x0}, &(0x7f0000000b80)=0xc)
mount$9p_fd(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='trans=f\x00no=\x00\x00\x00\x00', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',access=', @ANYRESDEC=r12, @ANYBLOB=',\x00'])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts.
[   28.898996][   T36] audit: type=1400 audit(1792415728.380:64): avc:  denied  { mounton } for  pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.902568][  T287] cgroup: Unknown subsys name 'net'
[   28.921715][   T36] audit: type=1400 audit(1792415728.380:65): avc:  denied  { mount } for  pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.949056][   T36] audit: type=1400 audit(1792415728.410:66): avc:  denied  { unmount } for  pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.949626][  T287] cgroup: Unknown subsys name 'devices'
[   29.074175][  T287] cgroup: Unknown subsys name 'hugetlb'
[   29.079837][  T287] cgroup: Unknown subsys name 'rlimit'
[   29.195824][   T36] audit: type=1400 audit(1792415728.680:67): avc:  denied  { setattr } for  pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   29.219061][   T36] audit: type=1400 audit(1792415728.680:68): avc:  denied  { mounton } for  pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   29.243840][   T36] audit: type=1400 audit(1792415728.680:69): avc:  denied  { mount } for  pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   29.268559][  T289] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   29.277400][   T36] audit: type=1400 audit(1792415728.760:70): avc:  denied  { relabelto } for  pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   29.302837][   T36] audit: type=1400 audit(1792415728.760:71): avc:  denied  { write } for  pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   29.303366][  T287] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   29.328936][   T36] audit: type=1400 audit(1792415728.770:72): avc:  denied  { read } for  pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   29.362804][   T36] audit: type=1400 audit(1792415728.770:73): avc:  denied  { open } for  pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.296275][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.303500][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.310625][  T294] bridge_slave_0: entered allmulticast mode
[   30.317066][  T294] bridge_slave_0: entered promiscuous mode
[   30.325141][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.332343][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.339485][  T294] bridge_slave_1: entered allmulticast mode
[   30.345937][  T294] bridge_slave_1: entered promiscuous mode
[   30.352136][  T297] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.359223][  T297] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.366475][  T297] bridge_slave_0: entered allmulticast mode
[   30.372809][  T297] bridge_slave_0: entered promiscuous mode
[   30.386132][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.394464][  T297] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.401569][  T297] bridge_slave_1: entered allmulticast mode
[   30.408321][  T297] bridge_slave_1: entered promiscuous mode
[   30.437733][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.445190][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.452415][  T295] bridge_slave_0: entered allmulticast mode
[   30.458814][  T295] bridge_slave_0: entered promiscuous mode
[   30.473881][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.480969][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.488275][  T295] bridge_slave_1: entered allmulticast mode
[   30.494753][  T295] bridge_slave_1: entered promiscuous mode
[   30.545945][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.553186][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.560288][  T296] bridge_slave_0: entered allmulticast mode
[   30.566711][  T296] bridge_slave_0: entered promiscuous mode
[   30.573282][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.580345][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.587487][  T296] bridge_slave_1: entered allmulticast mode
[   30.593848][  T296] bridge_slave_1: entered promiscuous mode
[   30.720130][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.727249][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.734643][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.741811][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.763551][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.770664][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.778049][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.785138][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.804794][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.811913][  T297] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.819246][  T297] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.826394][  T297] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.835123][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.842249][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.849562][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.856642][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.897159][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.904985][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.912467][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.919788][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.927733][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.935152][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.942750][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.950034][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.968518][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.975640][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.996980][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.004117][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.012595][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.019672][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.028684][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.035810][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.048968][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.056163][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.064548][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.071831][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.085603][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.092731][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.100506][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.107620][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.170101][  T296] veth0_vlan: entered promiscuous mode
[   31.189163][  T294] veth0_vlan: entered promiscuous mode
[   31.207889][  T296] veth1_macvtap: entered promiscuous mode
[   31.215720][  T297] veth0_vlan: entered promiscuous mode
[   31.233789][  T294] veth1_macvtap: entered promiscuous mode
[   31.242246][  T295] veth0_vlan: entered promiscuous mode
[   31.260324][  T297] veth1_macvtap: entered promiscuous mode
[   31.306748][  T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.306758][  T295] veth1_macvtap: entered promiscuous mode
[   31.348640][  T313] ./dev/sda1: Can't lookup blockdev
[   31.388085][  T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   31.406766][  T321] futex_wake_op: syz.3.4 tries to shift op by 144; fix this program
[   31.422539][  T321] futex_wake_op: syz.3.4 tries to shift op by 144; fix this program
[   31.431005][  T321] futex_wake_op: syz.3.4 tries to shift op by 144; fix this program
[   31.443940][  T321] futex_wake_op: syz.3.4 tries to shift op by 144; fix this program
[   31.452471][  T321] futex_wake_op: syz.3.4 tries to shift op by 144; fix this program
[   31.460525][  T321] futex_wake_op: syz.3.4 tries to shift op by 144; fix this program
[   31.472794][  T321] futex_wake_op: syz.3.4 tries to shift op by 144; fix this program
[   31.481259][  T321] futex_wake_op: syz.3.4 tries to shift op by 144; fix this program
[   31.490170][  T321] futex_wake_op: syz.3.4 tries to shift op by 144; fix this program
[   31.498874][  T321] futex_wake_op: syz.3.4 tries to shift op by 144; fix this program
[   31.549061][  T331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'.
[   31.558873][  T331] bridge0: port 3(syz_tun) entered blocking state
[   31.565608][  T331] bridge0: port 3(syz_tun) entered disabled state
[   31.572326][  T331] syz_tun: entered allmulticast mode
[   31.578013][  T331] syz_tun: entered promiscuous mode
[   31.583645][  T331] bridge0: port 3(syz_tun) entered blocking state
[   31.590192][  T331] bridge0: port 3(syz_tun) entered forwarding state
[   31.598168][  T334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'.
[   31.651922][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   31.671911][  T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   31.801862][  T311] usb 3-1: device descriptor read/64, error -71
[   31.802763][   T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   31.811078][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[   31.824981][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   31.835358][    T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   31.845651][    T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   31.856696][    T9] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   31.869921][    T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   31.872104][   T67] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   31.880780][    T9] usb 1-1: config 1 interface 1 has no altsetting 0
[   31.896859][    T9] usb 1-1: string descriptor 0 read error: -22
[   31.903387][    T9] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   31.912572][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.961859][   T45] usb 4-1: Using ep0 maxpacket: 16
[   31.968537][   T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[   31.979106][   T45] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   31.989984][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.004431][   T45] usb 4-1: Product: syz
[   32.008683][   T45] usb 4-1: Manufacturer: syz
[   32.013370][   T45] usb 4-1: SerialNumber: syz
[   32.019054][   T45] usb 4-1: config 0 descriptor??
[   32.025925][   T45] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[   32.034005][   T45] usb 4-1: Detected FT232R
[   32.042895][   T67] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   32.053695][   T67] usb 2-1: config 0 has no interfaces?
[   32.059392][   T67] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00
[   32.069241][   T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.074670][  T311] usb 3-1: device descriptor read/64, error -71
[   32.085868][   T67] usb 2-1: config 0 descriptor??
[   32.226241][   T45] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   32.234003][   T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   32.241209][   T45] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[   32.248768][   T45] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   32.258094][   T45] usb 4-1: USB disconnect, device number 2
[   32.265237][   T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   32.275040][   T45] ftdi_sio 4-1:0.0: device disconnected
[   32.293266][   T67] usb 2-1: USB disconnect, device number 2
[   32.331800][  T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   32.471833][  T311] usb 3-1: device descriptor read/64, error -71
[   32.721907][  T311] usb 3-1: device descriptor read/64, error -71
[   32.841937][  T311] usb usb3-port1: attempt power cycle
[   32.929561][    T9] usb 1-1: 2:0: failed to get current value for ch 1 (-32)
[   32.991837][   T67] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   33.142735][   T67] usb 4-1: not running at top speed; connect to a high speed hub
[   33.151882][   T67] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.162671][   T67] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   33.172247][   T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.175026][    T9] usb 1-1: USB disconnect, device number 2
[   33.188052][   T67] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   33.202612][  T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   33.222933][  T311] usb 3-1: device descriptor read/8, error -71
[   33.353073][  T311] usb 3-1: device descriptor read/8, error -71
[   33.589252][   T67] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   33.605101][  T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   33.657368][  T311] usb 3-1: device descriptor read/8, error -71
[   33.714495][  T351] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS
[   33.793050][  T311] usb 3-1: device descriptor read/8, error -71
[   33.801981][    T9] usb 4-1: USB disconnect, device number 3
[   33.902142][  T311] usb usb3-port1: unable to enumerate USB device
[   33.910978][  T356] kvm: kvm [348]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111
[   33.981839][   T67] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   34.150348][   T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.161455][   T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.171805][   T67] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   34.184981][   T67] usb 1-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00
[   34.194315][   T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.205841][   T67] usb 1-1: config 0 descriptor??
[   34.334575][   T36] kauditd_printk_skb: 54 callbacks suppressed
[   34.334595][   T36] audit: type=1400 audit(1792415733.820:128): avc:  denied  { setopt } for  pid=364 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   34.360634][   T36] audit: type=1400 audit(1792415733.820:129): avc:  denied  { read write } for  pid=364 comm="syz.1.15" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   34.388472][   T36] audit: type=1400 audit(1792415733.820:130): avc:  denied  { open } for  pid=364 comm="syz.1.15" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   34.416175][   T36] audit: type=1400 audit(1792415733.820:131): avc:  denied  { ioctl } for  pid=364 comm="syz.1.15" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   34.450569][   T36] audit: type=1400 audit(1792415733.870:132): avc:  denied  { name_bind } for  pid=366 comm="syz.3.16" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   34.473623][   T36] audit: type=1400 audit(1792415733.870:133): avc:  denied  { node_bind } for  pid=366 comm="syz.3.16" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   34.495988][   T67] usbhid 1-1:0.0: can't add hid device: -71
[   34.500094][   T36] audit: type=1400 audit(1792415733.930:134): avc:  denied  { create } for  pid=369 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   34.512062][   T67] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   34.534784][   T67] usb 1-1: USB disconnect, device number 3
[   34.542134][   T36] audit: type=1400 audit(1792415733.930:135): avc:  denied  { setopt } for  pid=369 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   34.563482][   T36] audit: type=1400 audit(1792415733.930:136): avc:  denied  { write } for  pid=369 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   34.564525][  T374] process 'syz.2.17' launched './file0' with NULL argv: empty string added
[   34.587471][   T36] audit: type=1400 audit(1792415733.930:137): avc:  denied  { read } for  pid=369 comm="syz.1.18" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   34.612255][  T374] SELinux:  policydb version 808464404 does not match my version range 15-33
[   34.621424][  T374] SELinux: failed to load policy
[   34.931833][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   35.083329][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   35.092138][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   35.102572][    T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   35.118084][    T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   35.132919][    T9] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   35.147648][    T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   35.158792][    T9] usb 3-1: config 1 interface 1 has no altsetting 0
[   35.180531][    T9] usb 3-1: string descriptor 0 read error: -22
[   35.187665][    T9] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   35.197762][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.236415][  T403] FAULT_INJECTION: forcing a failure.
[   35.236415][  T403] name fail_futex, interval 1, probability 0, space 0, times 1
[   35.255885][  T403] CPU: 1 UID: 0 PID: 403 Comm: syz.3.24 Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7
[   35.255927][  T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   35.255954][  T403] Call Trace:
[   35.255963][  T403]  <TASK>
[   35.255972][  T403]  __dump_stack+0x21/0x30
[   35.256016][  T403]  dump_stack_lvl+0x140/0x1c0
[   35.256053][  T403]  ? __cfi_dump_stack_lvl+0x10/0x10
[   35.256093][  T403]  dump_stack+0x19/0x20
[   35.256128][  T403]  should_fail_ex+0x3c2/0x510
[   35.256153][  T403]  should_fail+0xf/0x20
[   35.256174][  T403]  get_futex_key+0x178/0x940
[   35.256198][  T403]  ? kasan_save_track+0x3e/0x80
[   35.256237][  T403]  ? __cfi_get_futex_key+0x10/0x10
[   35.256259][  T403]  ? do_sys_openat2+0x170/0x1d0
[   35.256285][  T403]  ? x64_sys_call+0xe69/0x2ee0
[   35.256307][  T403]  ? do_syscall_64+0x57/0xf0
[   35.256328][  T403]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   35.256358][  T403]  futex_wake+0x150/0x950
[   35.256389][  T403]  ? __cfi_futex_wake+0x10/0x10
[   35.256421][  T403]  do_futex+0x37d/0x510
[   35.256446][  T403]  ? __cfi_do_futex+0x10/0x10
[   35.256472][  T403]  __se_sys_futex+0x13c/0x320
[   35.256498][  T403]  ? __x64_sys_futex+0x110/0x110
[   35.256525][  T403]  __x64_sys_futex+0xe9/0x110
[   35.256549][  T403]  x64_sys_call+0x227f/0x2ee0
[   35.256572][  T403]  do_syscall_64+0x57/0xf0
[   35.256591][  T403]  ? clear_bhb_loop+0x50/0xa0
[   35.256622][  T403]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   35.256650][  T403] RIP: 0033:0x7f18bb19e559
[   35.256687][  T403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.256708][  T403] RSP: 002b:00007f18bc0f10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   35.256745][  T403] RAX: ffffffffffffffda RBX: 00007f18bb425fa8 RCX: 00007f18bb19e559
[   35.256764][  T403] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f18bb425fac
[   35.256781][  T403] RBP: 00007f18bb425fa0 R08: 4000000000000000 R09: 0000000000000000
[   35.256800][  T403] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[   35.256815][  T403] R13: 00007f18bb426038 R14: 00007ffcebbdf180 R15: 00007ffcebbdf268
[   35.256835][  T403]  </TASK>
[   35.480103][   T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   35.641820][   T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   35.650943][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.659054][   T31] usb 1-1: Product: syz
[   35.663316][   T31] usb 1-1: Manufacturer: syz
[   35.667991][   T31] usb 1-1: SerialNumber: syz
[   35.702243][   T67] rust_binder: 440: undelivered TRANSACTION_COMPLETE
[   36.021815][  T344] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   36.171798][  T344] usb 2-1: Using ep0 maxpacket: 8
[   36.178392][  T344] usb 2-1: unable to get BOS descriptor or descriptor too short
[   36.187023][  T344] usb 2-1: config 138 has an invalid interface number: 221 but max is 0
[   36.195508][  T344] usb 2-1: config 138 has no interface number 0
[   36.201832][  T344] usb 2-1: config 138 interface 221 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10
[   36.213466][  T344] usb 2-1: config 138 interface 221 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024
[   36.225521][  T344] usb 2-1: config 138 interface 221 has no altsetting 0
[   36.232600][    T9] usb 3-1: 2:0: failed to get current value for ch 1 (-32)
[   36.241396][  T344] usb 2-1: New USB device found, idVendor=0582, idProduct=ed81, bcdDevice=a7.d3
[   36.251984][  T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.260101][  T344] usb 2-1: Product: syz
[   36.264402][  T344] usb 2-1: Manufacturer: syz
[   36.269034][  T344] usb 2-1: SerialNumber: syz
[   36.277807][  T456] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   36.442593][   T67] usb 3-1: USB disconnect, device number 6
[   36.495158][  T344] usb 2-1: USB disconnect, device number 3
[   36.525301][  T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:138.221/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   37.011974][  T344] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   37.069780][  T479] overlay: filesystem on ./bus not supported as upperdir
[   37.136183][  T487] FAULT_INJECTION: forcing a failure.
[   37.136183][  T487] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   37.161786][  T487] CPU: 1 UID: 0 PID: 487 Comm: syz.1.42 Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7
[   37.161844][  T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   37.161858][  T487] Call Trace:
[   37.161865][  T487]  <TASK>
[   37.161874][  T487]  __dump_stack+0x21/0x30
[   37.161913][  T487]  dump_stack_lvl+0x140/0x1c0
[   37.161946][  T487]  ? __cfi_dump_stack_lvl+0x10/0x10
[   37.161981][  T487]  ? __alloc_pages_noprof+0x7e0/0x7e0
[   37.162009][  T487]  dump_stack+0x19/0x20
[   37.162042][  T487]  should_fail_ex+0x3c2/0x510
[   37.162065][  T487]  should_fail_alloc_page+0xec/0x110
[   37.162088][  T487]  __alloc_pages_noprof+0x1c0/0x7e0
[   37.162115][  T487]  ? cgroup_rstat_updated+0x144/0x800
[   37.162147][  T487]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   37.162176][  T487]  ? __lruvec_stat_mod_folio+0x13f/0x1a0
[   37.162200][  T487]  pte_alloc_one+0x92/0x530
[   37.162226][  T487]  ? __cfi_pte_alloc_one+0x10/0x10
[   37.162250][  T487]  ? __kasan_check_write+0x18/0x20
[   37.162279][  T487]  ? _raw_spin_lock+0x92/0x120
[   37.162307][  T487]  ? __cfi__raw_spin_lock+0x10/0x10
[   37.162342][  T487]  __pte_alloc+0x79/0x440
[   37.162371][  T487]  ? __cfi___pte_alloc+0x10/0x10
[   37.162400][  T487]  ? __pte_offset_map_lock+0x279/0x2f0
[   37.162430][  T487]  walk_pgd_range+0xc6c/0x1c20
[   37.162841][  T487]  ? __cfi_guard_install_set_pte+0x10/0x10
[   37.162873][  T487]  ? __cfi_guard_install_set_pte+0x10/0x10
[   37.162905][  T487]  ? __cfi_guard_install_pte_entry+0x10/0x10
[   37.162937][  T487]  ? walk_page_range_novma+0x2a0/0x2a0
[   37.162964][  T487]  ? find_vma+0xd3/0x120
[   37.162994][  T487]  ? __cfi_find_vma+0x10/0x10
[   37.163024][  T487]  ? kvm_sched_clock_read+0x15/0x30
[   37.163053][  T487]  ? sched_clock_noinstr+0xd/0x30
[   37.163081][  T487]  walk_page_range_mm+0x620/0x850
[   37.163109][  T487]  ? __cfi_walk_page_range_mm+0x10/0x10
[   37.163139][  T487]  madvise_vma_behavior+0x145e/0x2df0
[   37.163170][  T487]  ? __cfi_madvise_vma_behavior+0x10/0x10
[   37.163202][  T487]  ? __sched_text_start+0x10/0x10
[   37.163225][  T487]  ? plist_add+0x4d4/0x570
[   37.163260][  T487]  ? __futex_queue+0x19f/0x350
[   37.163283][  T487]  ? __cfi___futex_queue+0x10/0x10
[   37.163315][  T487]  ? mtree_range_walk+0x573/0x730
[   37.163345][  T487]  ? mas_prev_slot+0xb6b/0xc20
[   37.163374][  T487]  ? mas_prev+0x5f/0xa0
[   37.163401][  T487]  ? find_vma_prev+0x12a/0x1b0
[   37.163431][  T487]  ? __cfi_find_vma_prev+0x10/0x10
[   37.163463][  T487]  ? __kasan_check_write+0x18/0x20
[   37.163494][  T487]  ? rwsem_read_trylock+0x275/0x5a0
[   37.163522][  T487]  ? downgrade_write+0x470/0x470
[   37.163548][  T487]  madvise_walk_vmas+0x3ee/0x700
[   37.163578][  T487]  ? __cfi_madvise_vma_behavior+0x10/0x10
[   37.163607][  T487]  ? down_read+0x7f/0xe0
[   37.163634][  T487]  ? madvise_set_anon_name+0x650/0x650
[   37.163663][  T487]  ? __asan_memset+0x39/0x50
[   37.163692][  T487]  ? blk_start_plug+0x71/0x1c0
[   37.163713][  T487]  do_madvise+0x5e8/0xbb0
[   37.163741][  T487]  ? __cfi_do_madvise+0x10/0x10
[   37.163770][  T487]  ? xfd_validate_state+0x68/0x140
[   37.163805][  T487]  ? __kasan_check_write+0x18/0x20
[   37.163835][  T487]  ? fpregs_restore_userregs+0x11c/0x260
[   37.163866][  T487]  __x64_sys_madvise+0xad/0xc0
[   37.163895][  T487]  x64_sys_call+0x20c3/0x2ee0
[   37.163919][  T487]  do_syscall_64+0x57/0xf0
[   37.163939][  T487]  ? clear_bhb_loop+0x50/0xa0
[   37.163968][  T487]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   37.163995][  T487] RIP: 0033:0x7f6b21b9e559
[   37.164015][  T487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   37.164034][  T487] RSP: 002b:00007f6b22a62028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   37.164059][  T487] RAX: ffffffffffffffda RBX: 00007f6b21e25fa0 RCX: 00007f6b21b9e559
[   37.164076][  T487] RDX: 0000000000000066 RSI: 000000000080fd00 RDI: 000020000042f000
[   37.164092][  T487] RBP: 00007f6b21c35ab8 R08: 0000000000000000 R09: 0000000000000000
[   37.164107][  T487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   37.164120][  T487] R13: 00007f6b21e26038 R14: 00007f6b21e25fa0 R15: 00007ffc800a3c08
[   37.164140][  T487]  </TASK>
[   37.185888][  T344] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[   37.593071][  T344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.601130][  T344] usb 4-1: Product: syz
[   37.605394][  T344] usb 4-1: Manufacturer: syz
[   37.610041][  T344] usb 4-1: SerialNumber: syz
[   37.662232][  T311] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   37.811762][  T311] usb 3-1: Using ep0 maxpacket: 8
[   37.817978][  T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   37.829284][  T311] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   37.838582][  T311] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   37.849116][  T344] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   37.856489][  T344] usb 4-1: found format II with max.bitrate = 44931, frame size=8
[   37.864668][  T311] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   37.874157][  T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.882296][  T344] usb 4-1: found format II with max.bitrate = 44931, frame size=8
[   37.890752][  T311] usb 3-1: Product: syz
[   37.895283][  T311] usb 3-1: Manufacturer: syz
[   37.900239][  T344] usb 4-1: 2:1: cannot set freq 4584960 to ep 0x82
[   37.907270][  T311] usb 3-1: SerialNumber: syz
[   37.919634][  T344] usb 4-1: USB disconnect, device number 4
[   37.942497][  T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   38.011664][   T67] usb 1-1: USB disconnect, device number 4
[   38.048638][  T497] FAULT_INJECTION: forcing a failure.
[   38.048638][  T497] name failslab, interval 1, probability 0, space 0, times 1
[   38.071772][  T497] CPU: 1 UID: 0 PID: 497 Comm: syz.0.45 Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7
[   38.071810][  T497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   38.071826][  T497] Call Trace:
[   38.071834][  T497]  <TASK>
[   38.071842][  T497]  __dump_stack+0x21/0x30
[   38.071884][  T497]  dump_stack_lvl+0x140/0x1c0
[   38.071918][  T497]  ? __cfi_dump_stack_lvl+0x10/0x10
[   38.071953][  T497]  dump_stack+0x19/0x20
[   38.071986][  T497]  should_fail_ex+0x3c2/0x510
[   38.072011][  T497]  should_failslab+0xac/0x100
[   38.072034][  T497]  kmem_cache_alloc_node_noprof+0x45/0x420
[   38.072070][  T497]  ? __alloc_skb+0x10c/0x360
[   38.072095][  T497]  ? fib6_rule_lookup+0x395/0x6d0
[   38.072120][  T497]  __alloc_skb+0x10c/0x360
[   38.072145][  T497]  __ip6_append_data+0x2a78/0x3bf0
[   38.072177][  T497]  ? xfrm_selector_match+0xbcf/0x10b0
[   38.072202][  T497]  ? __kasan_check_write+0x18/0x20
[   38.072236][  T497]  ? __cfi_raw6_getfrag+0x10/0x10
[   38.072265][  T497]  ? __kasan_check_write+0x18/0x20
[   38.072297][  T497]  ? _raw_spin_lock_bh+0x96/0x130
[   38.072320][  T497]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[   38.072343][  T497]  ? ip6_setup_cork+0x13a0/0x13a0
[   38.072370][  T497]  ? __kasan_check_write+0x18/0x20
[   38.072415][  T497]  ? ip6_append_data+0x23e/0x370
[   38.072443][  T497]  ip6_append_data+0x194/0x370
[   38.072470][  T497]  ? __cfi_raw6_getfrag+0x10/0x10
[   38.072500][  T497]  rawv6_sendmsg+0x1240/0x1820
[   38.072532][  T497]  ? __cfi_avc_has_perm+0x10/0x10
[   38.072557][  T497]  ? __cfi_rawv6_sendmsg+0x10/0x10
[   38.072588][  T497]  ? selinux_socket_sendmsg+0x281/0x380
[   38.072620][  T497]  ? inet_send_prepare+0x64/0x4e0
[   38.072642][  T497]  ? __cfi_rawv6_sendmsg+0x10/0x10
[   38.072671][  T497]  inet_sendmsg+0x116/0x120
[   38.072692][  T497]  ____sys_sendmsg+0x822/0xa00
[   38.072724][  T497]  ? __import_iovec+0x3fa/0x7d0
[   38.072755][  T497]  ? __sys_sendmsg_sock+0x50/0x50
[   38.072787][  T497]  ? import_iovec+0x80/0xb0
[   38.072818][  T497]  ___sys_sendmsg+0x2a6/0x370
[   38.072851][  T497]  ? __sys_sendmsg+0x260/0x260
[   38.072880][  T497]  ? __futex_wait+0x330/0x3d0
[   38.072912][  T497]  ? __cfi___futex_wait+0x10/0x10
[   38.072944][  T497]  ? futex_wake+0x666/0x950
[   38.072975][  T497]  ? __fget_files+0x2bc/0x330
[   38.073000][  T497]  __sys_sendmmsg+0x292/0x490
[   38.073032][  T497]  ? __cfi___sys_sendmmsg+0x10/0x10
[   38.073069][  T497]  ? __kasan_check_write+0x18/0x20
[   38.073102][  T497]  ? fpregs_restore_userregs+0x11c/0x260
[   38.073137][  T497]  __x64_sys_sendmmsg+0xa4/0xc0
[   38.073176][  T497]  x64_sys_call+0xfec/0x2ee0
[   38.073202][  T497]  do_syscall_64+0x57/0xf0
[   38.073224][  T497]  ? clear_bhb_loop+0x50/0xa0
[   38.073256][  T497]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   38.073286][  T497] RIP: 0033:0x7f62ef79e559
[   38.073314][  T497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   38.073334][  T497] RSP: 002b:00007f62f0703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   38.073360][  T497] RAX: ffffffffffffffda RBX: 00007f62efa25fa0 RCX: 00007f62ef79e559
[   38.073508][  T497] RDX: 00000000000002e9 RSI: 0000200000000400 RDI: 0000000000000008
[   38.073530][  T497] RBP: 00007f62ef835ab8 R08: 0000000000000000 R09: 0000000000000000
[   38.073547][  T497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   38.073562][  T497] R13: 00007f62efa26038 R14: 00007f62efa25fa0 R15: 00007ffc144d2328
[   38.073588][  T497]  </TASK>
[   38.441528][  T499] input: syz1 as /devices/virtual/input/input4
[   38.521892][  T311] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   38.531282][  T311] usb 3-1: clock source 0 is not valid, cannot use
[   38.541163][  T311] usb 3-1: 1:1: cannot get freq (v2/v3): err -32
[   38.548874][  T311] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   38.551934][   T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   38.710389][  T520] capability: warning: `syz.3.53' uses 32-bit capabilities (legacy support in use)
[   38.723583][   T31] usb 2-1: config 0 has an invalid descriptor of length 84, skipping remainder of the config
[   38.734029][   T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 150: 87, using maximum allowed: 30
[   38.745040][   T67] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   38.752634][   T31] usb 2-1: config 0 interface 0 altsetting 150 has 0 endpoint descriptors, different from the interface descriptor's value: 87
[   38.765896][   T31] usb 2-1: config 0 interface 0 has no altsetting 0
[   38.772782][   T31] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   38.782133][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.791012][   T31] usb 2-1: config 0 descriptor??
[   38.923305][   T67] usb 1-1: unable to get BOS descriptor or descriptor too short
[   38.931974][   T67] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   38.942622][   T67] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   38.951706][   T67] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   38.962969][  T338] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   38.970717][   T67] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   38.984000][   T67] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   38.995074][   T67] usb 1-1: config 1 interface 1 has no altsetting 0
[   39.004755][   T67] usb 1-1: string descriptor 0 read error: -22
[   39.011356][   T67] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   39.020574][   T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.059178][  T495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.068150][  T495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.077182][  T495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.085883][  T495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.094636][  T495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.103463][  T495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.152555][   T31] usb 2-1: string descriptor 0 read error: -71
[   39.160418][   T31] usb 2-1: USB disconnect, device number 4
[   39.167940][  T338] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[   39.177313][  T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.186107][  T338] usb 4-1: Product: syz
[   39.190356][  T338] usb 4-1: Manufacturer: syz
[   39.195047][  T338] usb 4-1: SerialNumber: syz
[   39.602973][  T338] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[   39.700625][   T36] kauditd_printk_skb: 70 callbacks suppressed
[   39.700643][   T36] audit: type=1400 audit(1792415739.180:208): avc:  denied  { getopt } for  pid=525 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   39.953701][   T36] audit: type=1400 audit(1792415739.440:209): avc:  denied  { read write } for  pid=519 comm="syz.3.53" name="lp0" dev="devtmpfs" ino=499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   39.977069][   T36] audit: type=1400 audit(1792415739.440:210): avc:  denied  { open } for  pid=519 comm="syz.3.53" path="/dev/usb/lp0" dev="devtmpfs" ino=499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   40.000817][  T311] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   40.033363][   T67] usb 1-1: 2:0: failed to get current value for ch 1 (-32)
[   40.050276][  T327] usb 3-1: USB disconnect, device number 7
[   40.063384][   T36] audit: type=1400 audit(1792415739.540:211): avc:  denied  { unmount } for  pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   40.092245][   T36] audit: type=1400 audit(1792415739.570:212): avc:  denied  { write } for  pid=531 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   40.123661][   T36] audit: type=1400 audit(1792415739.610:213): avc:  denied  { create } for  pid=533 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   40.131954][  T311] usb 2-1: device descriptor read/64, error -71
[   40.146611][   T36] audit: type=1400 audit(1792415739.630:214): avc:  denied  { connect } for  pid=533 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   40.169186][   T36] audit: type=1400 audit(1792415739.650:215): avc:  denied  { read append } for  pid=533 comm="syz.2.57" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   40.193907][   T36] audit: type=1400 audit(1792415739.650:216): avc:  denied  { open } for  pid=533 comm="syz.2.57" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   40.243620][   T67] usb 1-1: USB disconnect, device number 5
[   40.263862][  T541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.272562][  T541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.381819][  T311] usb 2-1: device descriptor read/64, error -71
[   40.491810][  T344] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   40.621829][  T311] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   40.642861][  T344] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   40.653148][  T344] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 255, changing to 11
[   40.664302][  T344] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59391, setting to 1024
[   40.676815][  T344] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[   40.685947][  T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.694218][  T344] usb 3-1: Product: syz
[   40.698418][  T344] usb 3-1: Manufacturer: syz
[   40.703351][  T344] usb 3-1: SerialNumber: syz
[   40.709205][  T538] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   40.761813][  T311] usb 2-1: device descriptor read/64, error -71
[   40.836653][  T545] netlink: 'syz.0.60': attribute type 46 has an invalid length.
[   40.845131][   T36] audit: type=1400 audit(1792415740.330:217): avc:  denied  { write } for  pid=544 comm="syz.0.60" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   40.847094][  T545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'.
[   40.876829][  T545] bridge_slave_1: left allmulticast mode
[   40.882565][  T545] bridge_slave_1: left promiscuous mode
[   40.888252][  T545] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.896207][  T545] bridge_slave_0: left allmulticast mode
[   40.902455][  T545] bridge_slave_0: left promiscuous mode
[   40.908319][  T545] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.920720][  T344] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[   40.931352][  T344] usb 3-1: USB disconnect, device number 8
[   41.011910][  T311] usb 2-1: device descriptor read/64, error -71
[   41.128496][  T311] usb usb2-port1: attempt power cycle
[   41.432280][  T567] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   41.440400][  T567] rust_binder: Read failure Err(EFAULT) in pid:36
[   41.471806][  T311] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   41.492757][  T311] usb 2-1: device descriptor read/8, error -71
[   41.502033][    C0] usblp0: nonzero write bulk status received: -71
[   41.510144][  T344] usb 4-1: USB disconnect, device number 5
[   41.517206][  T344] usblp0: removed
[   41.622952][  T311] usb 2-1: device descriptor read/8, error -71
[   41.691844][   T67] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   41.843470][   T67] usb 3-1: unable to get BOS descriptor or descriptor too short
[   41.852753][   T67] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.862042][  T311] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   41.863278][   T67] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   41.879586][   T67] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   41.883538][  T311] usb 2-1: device descriptor read/8, error -71
[   41.891443][   T67] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   41.910258][   T67] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   41.921156][   T67] usb 3-1: config 1 interface 1 has no altsetting 0
[   41.929973][   T67] usb 3-1: string descriptor 0 read error: -22
[   41.936257][   T67] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   41.945377][   T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.022937][  T311] usb 2-1: device descriptor read/8, error -71
[   42.132399][  T311] usb usb2-port1: unable to enumerate USB device
[   42.461808][  T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   42.612015][  T311] usb 4-1: Using ep0 maxpacket: 16
[   42.618381][  T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   42.628753][  T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   42.641617][  T311] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[   42.650773][  T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   42.658822][  T311] usb 4-1: SerialNumber: syz
[   42.698121][  T294] cgroup: fork rejected by pids controller in /syz0
[   42.816872][   T51] veth1_macvtap: left promiscuous mode
[   42.822765][   T51] veth0_vlan: left promiscuous mode
[   42.955664][  T615] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.963085][   T67] usb 3-1: 2:0: failed to get current value for ch 1 (-71)
[   42.964693][  T615] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.978019][  T615] bridge_slave_0: entered allmulticast mode
[   42.985028][  T615] bridge_slave_0: entered promiscuous mode
[   42.991850][  T311] usb 4-1: cannot find UAC_HEADER
[   42.997681][   T67] usb 3-1: USB disconnect, device number 9
[   43.005213][  T615] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.012425][  T615] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.015933][  T311] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[   43.020285][  T615] bridge_slave_1: entered allmulticast mode
[   43.037188][  T615] bridge_slave_1: entered promiscuous mode
[   43.048891][  T311] usb 4-1: USB disconnect, device number 6
[   43.059177][  T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   43.113559][  T615] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.120631][  T615] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.128116][  T615] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.135352][  T615] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.157559][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.165571][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.175880][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.183007][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.193151][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.200303][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.227207][  T615] veth0_vlan: entered promiscuous mode
[   43.239319][  T615] veth1_macvtap: entered promiscuous mode
[   43.501948][  T327] usb 1-1: new high-speed USB device number 6 using dummy_hcd
		
		

			
		
		

		
	
	

	
		

		
	
	


		

		

	
	

	
		

		

	
	


		
		
			





	

		
	

	
		


		
		
		
		
	






			
		






		




		



	








	
	
		

	


	







	


	






	









	





	




		













	




		
		
		




		
	




	




			









	

	




	
	







	
	
	
		

	


	







	


	






	









	





	




		












	
	


	
		
	



	

		
		
	
	






	
		
	




	






			
		








		



		









	
		

	


	







	


	
	
	










	









	





	


		


		











		



		








		



		



[   44.645471][  T297] DR3: 0000000000008001 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   44.653761][  T297] Kernel panic - not syncing: Fatal exception
[   44.660040][  T297] Kernel Offset: disabled
[   44.664385][  T297] Rebooting in 86400 seconds..