0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 2:
r0 = geteuid()
r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r1)

00:03:37 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x0)

00:03:37 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x0)

00:03:37 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x0)

00:03:37 executing program 2:
r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:37 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x0)

00:03:37 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x0)

00:03:37 executing program 2:
r0 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:37 executing program 2:
r0 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e", 0xd, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 2:
r0 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:37 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x0)

00:03:37 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x0)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e", 0xd, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 2:
r0 = add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:37 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000440), 0x0, 0xc1)

00:03:37 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x0)

00:03:37 executing program 2:
r0 = add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:37 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x0)

00:03:37 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000440), 0x0, 0xc1)

00:03:37 executing program 1:
syz_open_dev$usbfs(0x0, 0x8, 0x0)

00:03:37 executing program 2:
r0 = add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94", 0xf, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 1:
syz_open_dev$usbfs(0x0, 0x8, 0x0)

00:03:37 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000440), 0x0, 0xc1)

00:03:37 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)

00:03:37 executing program 2:
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, 0x0)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94", 0xf, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 3:
syz_open_dev$usbfs(0x0, 0x0, 0xc1)

00:03:37 executing program 1:
syz_open_dev$usbfs(0x0, 0x8, 0x0)

00:03:37 executing program 2:
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, 0x0)

00:03:37 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
keyctl$get_persistent(0x16, r1, 0x0)

00:03:37 executing program 3:
syz_open_dev$usbfs(0x0, 0x0, 0xc1)

00:03:37 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000440), 0x0, 0x0)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94", 0xf, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 2:
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, 0x0)

00:03:37 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
keyctl$get_persistent(0x16, r1, 0x0)

00:03:37 executing program 3:
syz_open_dev$usbfs(0x0, 0x0, 0xc1)

00:03:37 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000440), 0x0, 0x0)

00:03:37 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e", 0xd, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a9", 0x10, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000440), 0x0, 0x0)

00:03:37 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000440), 0x0, 0x0)

00:03:37 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020, 0x0, <r5=>0x0}, 0x2020)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r6, &(0x7f0000004f40)={0x18, 0x0, r5, {0x5}}, 0x18)

00:03:37 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
keyctl$get_persistent(0x16, r1, 0x0)

00:03:37 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020, 0x0, <r5=>0x0}, 0x2020)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r6, &(0x7f0000004f40)={0x18, 0x0, r5, {0x5}}, 0x18)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a9", 0x10, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020, 0x0, <r5=>0x0}, 0x2020)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r6, &(0x7f0000004f40)={0x18, 0x0, r5, {0x5}}, 0x18)

00:03:37 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a9", 0x10, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020, 0x0, <r5=>0x0}, 0x2020)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r6, &(0x7f0000004f40)={0x18, 0x0, r5, {0x5}}, 0x18)

00:03:37 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
keyctl$get_persistent(0x16, r1, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020, 0x0, <r4=>0x0}, 0x2020)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r5, &(0x7f0000004f40)={0x18, 0x0, r4, {0x5}}, 0x18)

00:03:37 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)

00:03:37 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r0, 0x0, 0x0)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x0, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r0, 0x0, 0x0)

00:03:37 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)

00:03:37 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r0, 0x0, 0x0)

00:03:37 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a9", 0x10, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x0, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020, 0x0, <r4=>0x0}, 0x2020)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r5, &(0x7f0000004f40)={0x18, 0x0, r4, {0x5}}, 0x18)

00:03:37 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x0, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)

00:03:37 executing program 1:
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)

00:03:37 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a9", 0x10, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x0, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 1:
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)

00:03:37 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)

00:03:37 executing program 1:
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)

00:03:37 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_WRITE(r0, 0x0, 0x0)

00:03:37 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_WRITE(r0, 0x0, 0x0)

00:03:37 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)

00:03:37 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x0, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:37 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x0, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'})
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)

00:03:38 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_WRITE(r0, 0x0, 0x0)

00:03:38 executing program 1:
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x0, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x0, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r1)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x0, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 1:
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)

00:03:38 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = geteuid()
r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r1)

00:03:38 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r1)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x0, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0x0, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 1:
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)

00:03:38 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0x0, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 0:
r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020, 0x0, <r5=>0x0}, 0x2020)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r6, &(0x7f0000004f40)={0x18, 0x0, r5, {0x5}}, 0x18)

00:03:38 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:38 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0x0, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0x0, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:38 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r7 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
accept$unix(r7, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020, 0x0, <r8=>0x0}, 0x2020)
r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r9, &(0x7f0000004f40)={0x18, 0x0, r8, {0x5}}, 0x18)

00:03:38 executing program 0:
r0 = add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0x0, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 0:
r0 = add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:38 executing program 0:
r0 = add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r0)

00:03:38 executing program 0:
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, 0x0)

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 0:
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, 0x0)

00:03:38 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r4, &(0x7f0000004f40)={0x18, 0x0, 0x0, {0x5}}, 0x18)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)

00:03:38 executing program 0:
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, 0x0)

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)

00:03:38 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r5, &(0x7f0000004f40)={0x18, 0x0, 0x0, {0x5}}, 0x18)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r4, &(0x7f0000004f40)={0x18, 0x0, 0x0, {0x5}}, 0x18)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)

00:03:38 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x0, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)

00:03:38 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r4, &(0x7f0000004f40)={0x18, 0x0, 0x0, {0x5}}, 0x18)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x0, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r6, &(0x7f0000004f40)={0x18, 0x0, 0x0, {0x5}}, 0x18)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x0, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r11=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r10, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r11, &(0x7f0000002d80)={0x2020, 0x0, <r12=>0x0}, 0x2020)
r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r13, &(0x7f0000004f40)={0x18, 0x0, r12, {0x5}}, 0x18)

00:03:38 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, 0x0})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r10, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)

00:03:38 executing program 1:
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))

00:03:38 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r7, &(0x7f0000004f40)={0x18, 0x0, 0x0, {0x5}}, 0x18)

00:03:38 executing program 1:
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))

00:03:38 executing program 1:
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, 0x0})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, 0x0, <r14=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r14}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, 0x0})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(0x0, &(0x7f0000000080), &(0x7f00000000c0))

00:03:38 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(0x0, &(0x7f0000000080), &(0x7f00000000c0))

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r7 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r8 = accept$unix(r7, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r8, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r9, &(0x7f0000004f40)={0x18, 0x0, 0x0, {0x5}}, 0x18)

00:03:38 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(0x0, &(0x7f0000000080), &(0x7f00000000c0))

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040), 0x0, &(0x7f00000000c0))

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040), 0x0, &(0x7f00000000c0))

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040), 0x0, &(0x7f00000000c0))

00:03:38 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:38 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), 0x0)

00:03:39 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(0x0, &(0x7f0000000080), &(0x7f00000000c0))

00:03:39 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), 0x0)

00:03:39 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r7 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r8 = accept$unix(r7, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r8, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), 0x0)

00:03:39 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)

00:03:39 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:39 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r10, &(0x7f0000004f40)={0x18, 0x0, 0x0, {0x5}}, 0x18)

00:03:39 executing program 3:
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:39 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r7 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r8 = accept$unix(r7, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r8, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x800)

00:03:39 executing program 2:
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x800)

00:03:39 executing program 2:
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r7 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
accept$unix(r7, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:39 executing program 2:
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x800)

00:03:39 executing program 2:
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe99"}, 0x25, 0x800)

00:03:39 executing program 2:
msgsnd(0x0, &(0x7f0000004e80), 0x8, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
msgsnd(0x0, &(0x7f0000004e80), 0x8, 0x0)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x3, '|'}, 0x9, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x3, '|'}, 0x9, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x3, '|'}, 0x9, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x800)

00:03:39 executing program 2:
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:39 executing program 2:
msgsnd(0x0, 0x0, 0x0, 0x0)

00:03:39 executing program 0:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x0)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x0)

00:03:39 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x0)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x0)

00:03:39 executing program 0:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x0)

00:03:39 executing program 0:
msgsnd(0x0, 0x0, 0x0, 0x0)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, 0x0, 0x0, 0x0)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, 0x0, 0x0, 0x0)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, 0x0, &(0x7f0000000280))
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, &(0x7f0000004e80), 0x8, 0x0)

00:03:39 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, &(0x7f0000004e80), 0x8, 0x0)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, 0x0, &(0x7f0000000280))
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
msgsnd(0x0, &(0x7f0000004e80), 0x8, 0x0)

00:03:39 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r16, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)

00:03:39 executing program 2:
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x440)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048085}, 0x800)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, 0x0, &(0x7f0000000280))
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x440)
ioctl$NBD_DO_IT(r0, 0xab03)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x410000)
ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x6)
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000001880)=0x800, &(0x7f00000018c0)=0x4)

00:03:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, 0x0)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:39 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x440)
ioctl$NBD_DO_IT(r0, 0xab03)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x410000)
ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x6)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff9)
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000001880)=0x800, &(0x7f00000018c0)=0x4)

00:03:40 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x0)

00:03:40 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)

00:03:40 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x440)
ioctl$NBD_DO_IT(r0, 0xab03)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x410000)
ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x6)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff9)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x9, 0x10cd20, 0x1})
pipe2$9p(&(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x80000)
r4 = geteuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r1, {<r6=>0xee01, 0xee01}}, './file0\x00'})
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport}, {@version_9p2000}, {@uname={'uname', 0x3d, '&&!+'}}], [{@subj_type={'subj_type', 0x3d, ':(^.((\''}}, {@fowner_lt={'fowner<', r4}}, {@dont_measure}, {@dont_hash}, {@fowner_eq={'fowner', 0x3d, r6}}, {@flag='silent'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}})
ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8000)
r7 = memfd_create(&(0x7f0000000380)='#)#-[!:%\xc8#\x00', 0x5)
ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000003c0)={r7, 0x0, 0xfffffffff0000000})
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048085}, 0x800)

00:03:40 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, 0x0)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 2:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x0)

00:03:40 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, 0x0)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x440)
ioctl$NBD_DO_IT(r0, 0xab03)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x410000)
ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x6)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff9)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x9, 0x10cd20, 0x1})
pipe2$9p(&(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x80000)
r4 = geteuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r1, {<r6=>0xee01, 0xee01}}, './file0\x00'})
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport}, {@version_9p2000}, {@uname={'uname', 0x3d, '&&!+'}}], [{@subj_type={'subj_type', 0x3d, ':(^.((\''}}, {@fowner_lt={'fowner<', r4}}, {@dont_measure}, {@dont_hash}, {@fowner_eq={'fowner', 0x3d, r6}}, {@flag='silent'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}})
ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8000)
r7 = memfd_create(&(0x7f0000000380)='#)#-[!:%\xc8#\x00', 0x5)
ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000003c0)={r7, 0x0, 0xfffffffff0000000})
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab04)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048085}, 0x800)

00:03:40 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:40 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:40 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:40 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:40 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:40 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
keyctl$get_persistent(0x16, r1, 0x0)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:40 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:40 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, 0x0)
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
keyctl$get_persistent(0x16, r1, 0x0)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:40 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, 0x0)
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
keyctl$get_persistent(0x16, r1, 0x0)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, 0x0, <r14=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r14}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
msgget(0x2, 0x441)

00:03:40 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:40 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, 0x0)
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:40 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, 0x0, <r14=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r14}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget(0x2, 0x441)

00:03:41 executing program 3:
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x0)

00:03:41 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:41 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x0, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r11=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r10, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r11, &(0x7f0000002d80)={0x2020}, 0x2020)
msgget(0x2, 0x441)

00:03:41 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x0, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:41 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r10, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
msgget(0x2, 0x441)

00:03:41 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x0, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r10, 0x80026101, &(0x7f0000002cc0))
msgget(0x2, 0x441)

00:03:41 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r10, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)

00:03:41 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0x0, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
msgget(0x2, 0x441)

00:03:41 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)

00:03:41 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0x0, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r7 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r8 = accept$unix(r7, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r8, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgget(0x2, 0x441)

00:03:41 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r7 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r8 = accept$unix(r7, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r8, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
keyctl$reject(0x13, r6, 0x8, 0x80000001, r6)

00:03:41 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0x0, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r7 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
accept$unix(r7, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
msgget(0x2, 0x441)

00:03:41 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r7 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
accept$unix(r7, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
keyctl$reject(0x13, r6, 0x8, 0x80000001, r6)

00:03:41 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0x0, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:41 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
keyctl$reject(0x13, r6, 0x8, 0x80000001, r6)

00:03:41 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
msgget(0x2, 0x441)

00:03:41 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r7 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
accept$unix(r7, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
msgget(0x2, 0x441)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0x0, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$reject(0x13, r5, 0x8, 0x80000001, r5)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
msgget(0x2, 0x441)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
keyctl$reject(0x13, r4, 0x8, 0x80000001, r4)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgget(0x2, 0x441)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r7 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
accept$unix(r7, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
msgget(0x2, 0x441)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0x0, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
keyctl$reject(0x13, r4, 0x8, 0x80000001, r4)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgget(0x2, 0x441)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
keyctl$reject(0x13, r4, 0x8, 0x80000001, r4)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x0, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
msgget(0x2, 0x441)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
keyctl$reject(0x13, r4, 0x8, 0x80000001, r4)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x0, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
msgget(0x2, 0x441)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
msgget(0x2, 0x441)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$reject(0x13, r4, 0x8, 0x80000001, r4)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0x0, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x0, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
msgget(0x2, 0x441)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
keyctl$reject(0x13, 0x0, 0x8, 0x80000001, 0x0)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0x0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
msgget(0x2, 0x441)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
keyctl$reject(0x13, 0x0, 0x8, 0x80000001, 0x0)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0x0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget(0x2, 0x441)

00:03:42 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r1)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
keyctl$reject(0x13, 0x0, 0x8, 0x80000001, 0x0)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0x0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
msgget(0x2, 0x441)

00:03:42 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r1)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
keyctl$reject(0x13, 0x0, 0x8, 0x80000001, 0x0)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
msgget(0x2, 0x441)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0x0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r1)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
keyctl$reject(0x13, 0x0, 0x8, 0x80000001, 0x0)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0x0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
msgget(0x2, 0x441)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
keyctl$reject(0x13, 0x0, 0x8, 0x80000001, 0x0)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
keyctl$reject(0x13, 0x0, 0x8, 0x80000001, 0x0)

00:03:42 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'})
msgget(0x2, 0x441)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'})
keyctl$reject(0x13, 0x0, 0x8, 0x80000001, 0x0)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(0x0, &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0x0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
msgget(0x2, 0x441)

00:03:42 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
keyctl$reject(0x13, 0x0, 0x8, 0x80000001, 0x0)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0x0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(0x0, &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x0, r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
msgget(0x2, 0x441)

00:03:42 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
keyctl$reject(0x13, 0x0, 0x8, 0x80000001, 0x0)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0x0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(0x0, &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x0, r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
msgget(0x2, 0x441)

00:03:42 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x0, r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(0x0, &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:42 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
keyctl$reject(0x13, 0x0, 0x8, 0x80000001, 0x0)

00:03:42 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), 0x0, &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 0:
msgget(0x2, 0x441)

00:03:43 executing program 1:
r0 = geteuid()
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {r0, r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 0:
msgget(0x2, 0x0)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(0x0, &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 1:
r0 = geteuid()
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {r0, r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), 0x0, &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
keyctl$reject(0x13, 0x0, 0x8, 0x80000001, 0x0)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:43 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x80000001, 0x0)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), 0x0, &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 1:
r0 = geteuid()
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {r0, r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0)

00:03:43 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:43 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), 0x0)
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0)

00:03:43 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0)

00:03:43 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), 0x0)
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:43 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0)

00:03:43 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), 0x0)
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
r0 = geteuid()
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {r0, r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r7 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r8 = accept$unix(r7, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r8, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)

00:03:43 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, 0x0, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, 0x0, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:43 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, 0x0, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r5 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
msgctl$IPC_INFO(r5, 0x3, &(0x7f0000002c40)=""/66)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r6)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:43 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:43 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r1)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r1)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r1)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = geteuid()
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {r0, r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = geteuid()
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {r0, r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:43 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = geteuid()
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {r0, r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r0, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:43 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:43 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:43 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, 0x0)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x0, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:44 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:44 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, 0x0)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x0, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:44 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {<r3=>r1, r2}}, './file0\x00'})
keyctl$get_persistent(0x16, r3, 0xfffffffffffffffa)

00:03:44 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x0, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, 0x0)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:44 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffa)

00:03:44 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(0x0, 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:44 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffa)

00:03:44 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffa)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(0x0, 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:44 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0x3})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 2:
keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffa)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
recvmsg$unix(0xffffffffffffffff, 0x0, 0x7d242659f69ea8f9)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(0x0, 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0x3})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x0, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:44 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0x3})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 3:
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:44 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x0, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 0:
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0x3})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x0, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 0:
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, 0x0)
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 0:
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, 0x0)
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x0, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r3)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 0:
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, 0x0)
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x0, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 0:
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000024c0)={0x48})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 0:
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000024c0)={0x48})
msgctl$IPC_INFO(0x0, 0x3, 0x0)

00:03:44 executing program 0:
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000024c0)={0x48})
msgctl$IPC_INFO(0x0, 0x3, 0x0)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0)
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 0:
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000024c0)={0x48})
msgctl$IPC_INFO(0x0, 0x3, 0x0)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:44 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:44 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0)
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0)
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0x0, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

00:03:44 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

00:03:44 executing program 0:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

00:03:44 executing program 0:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

00:03:44 executing program 3:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 0:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

00:03:44 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0x0, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

00:03:44 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

00:03:44 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

00:03:44 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0x0, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:44 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0x0, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:44 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, 0x0, 0x0, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, 0x0, 0x0, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, 0x0, 0x0, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r4 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgctl$IPC_INFO(r4, 0x3, &(0x7f0000002c40)=""/66)

00:03:45 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, 0x0)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140), 0x0, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), 0x0)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140), 0x0, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, 0x0)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), 0x0)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140), 0x0, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, 0x0)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 0:
getresgid(&(0x7f0000000040), &(0x7f0000000080), 0x0)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140), 0x0, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 0:
getresgid(0x0, &(0x7f0000000080), 0x0)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 0:
getresgid(0x0, &(0x7f0000000080), 0x0)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 0:
getresgid(0x0, &(0x7f0000000080), 0x0)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 0:
getresgid(&(0x7f0000000040), 0x0, 0x0)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 0:
getresgid(&(0x7f0000000040), 0x0, 0x0)

00:03:45 executing program 0:
getresgid(&(0x7f0000000040), 0x0, 0x0)

00:03:45 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e", 0xd, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:45 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e", 0xd, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e", 0xd, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94", 0xf, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94", 0xf, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:45 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94", 0xf, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, 0x0, 0x0, 0x800)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a9", 0x10, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r5)
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a9", 0x10, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a9", 0x10, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:45 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x0, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:45 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x0, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x800)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:46 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x0, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3}, 0x8, 0x0)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:46 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x0, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x0, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, 0x0, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r4 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
accept4$unix(r4, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:46 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x0, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept4$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x0, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, 0x0, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x0, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'})
accept4$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:46 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a9", 0x10, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0x0, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
accept4$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, 0x0, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0x0, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
accept4$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 3:
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, 0x0, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0x0, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 3:
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

00:03:46 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
accept4$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 0:
accept4$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)

00:03:46 executing program 0:
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000025c0), 0x80000)

00:03:46 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e", 0xd, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0x3})
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 0:
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)

00:03:46 executing program 0:
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:03:46 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)

00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc17", 0x9, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x0, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x7d242659f69ea8f9)

00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x0, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x0, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x0, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, 0x0})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, 0x0})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)

00:03:46 executing program 3:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e58"})
r5 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r6 = msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r7)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000024c0)={0x48, 0xb, r3, 0x0, 0x3})
r8 = accept4$unix(r5, &(0x7f0000002540)=@abs, &(0x7f00000025c0)=0x6e, 0x80000)
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffa)
r9 = accept$unix(r8, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e)
recvmsg$unix(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/200, 0xc8}, {&(0x7f0000002980)=""/127, 0x7f}, {&(0x7f0000002a00)=""/37, 0x25}], 0x5, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x7d242659f69ea8f9)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000002c40)=""/66)
ioctl$CEC_ADAP_G_PHYS_ADDR(r12, 0x80026101, &(0x7f0000002cc0))
keyctl$reject(0x13, r7, 0x8, 0x80000001, r7)
read$FUSE(r13, &(0x7f0000002d80)={0x2020, 0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002d00)='./file1\x00', &(0x7f0000002d40), 0x20000, &(0x7f0000004dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.}'}}]}})
msgget$private(0x0, 0x501)
r16 = msgget(0x2, 0x441)
msgsnd(r16, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)
r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004f00), 0x2, 0x0)
write$FUSE_WRITE(r17, &(0x7f0000004f40)={0x18, 0x0, r14, {0x5}}, 0x18)
write$bt_hci(r13, &(0x7f0000004f80)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x7fff}}}, 0x8)

00:03:46 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 1)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'})

[  226.868074][T27982] FAULT_INJECTION: forcing a failure.
[  226.868074][T27982] name failslab, interval 1, probability 0, space 0, times 1
[  226.871897][T27982] CPU: 1 PID: 27982 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  226.874861][T27982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  226.877655][T27982] Call trace:
[  226.878533][T27982]  dump_backtrace+0x1b8/0x1e4
[  226.879800][T27982]  show_stack+0x2c/0x3c
[  226.880897][T27982]  dump_stack_lvl+0xd0/0x124
[  226.882088][T27982]  dump_stack+0x1c/0x28
[  226.883176][T27982]  should_fail_ex+0x3b0/0x50c
[  226.884459][T27982]  __should_failslab+0xc8/0x128
[  226.885787][T27982]  should_failslab+0x10/0x28
00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, 0x0})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

[  226.886991][T27982]  kmem_cache_alloc+0x80/0x488
[  226.888312][T27982]  getname_flags+0xd0/0x48c
[  226.889564][T27982]  getname+0x28/0x38
[  226.890625][T27982]  do_sys_openat2+0xd0/0x1b8
[  226.891813][T27982]  __arm64_sys_openat+0x1f0/0x240
[  226.893184][T27982]  invoke_syscall+0x98/0x2b8
[  226.894395][T27982]  el0_svc_common+0x130/0x23c
[  226.895650][T27982]  do_el0_svc+0x48/0x58
[  226.896827][T27982]  el0_svc+0x54/0x158
[  226.897894][T27982]  el0t_64_sync_handler+0x84/0xfc
[  226.899237][T27982]  el0t_64_sync+0x190/0x194
00:03:46 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)

00:03:46 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 2)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

[  226.923111][T27998] FAULT_INJECTION: forcing a failure.
[  226.923111][T27998] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  226.926745][T27998] CPU: 0 PID: 27998 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  226.929669][T27998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  226.932383][T27998] Call trace:
[  226.933232][T27998]  dump_backtrace+0x1b8/0x1e4
[  226.934460][T27998]  show_stack+0x2c/0x3c
[  226.935565][T27998]  dump_stack_lvl+0xd0/0x124
[  226.936768][T27998]  dump_stack+0x1c/0x28
[  226.937860][T27998]  should_fail_ex+0x3b0/0x50c
[  226.939083][T27998]  should_fail+0x14/0x24
[  226.940215][T27998]  should_fail_usercopy+0x20/0x30
[  226.941540][T27998]  strncpy_from_user+0x48/0x54c
[  226.942880][T27998]  getname_flags+0x104/0x48c
[  226.944179][T27998]  getname+0x28/0x38
[  226.945219][T27998]  do_sys_openat2+0xd0/0x1b8
[  226.946463][T27998]  __arm64_sys_openat+0x1f0/0x240
[  226.947746][T27998]  invoke_syscall+0x98/0x2b8
[  226.948954][T27998]  el0_svc_common+0x130/0x23c
[  226.950181][T27998]  do_el0_svc+0x48/0x58
00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'})

[  226.951311][T27998]  el0_svc+0x54/0x158
[  226.952375][T27998]  el0t_64_sync_handler+0x84/0xfc
[  226.953744][T27998]  el0t_64_sync+0x190/0x194
00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:46 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 3)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:46 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()

00:03:46 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)

00:03:46 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

[  226.993357][T28021] FAULT_INJECTION: forcing a failure.
[  226.993357][T28021] name failslab, interval 1, probability 0, space 0, times 0
[  226.996947][T28021] CPU: 1 PID: 28021 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  226.999914][T28021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  227.002539][T28021] Call trace:
[  227.003394][T28021]  dump_backtrace+0x1b8/0x1e4
[  227.004661][T28021]  show_stack+0x2c/0x3c
[  227.005806][T28021]  dump_stack_lvl+0xd0/0x124
[  227.007061][T28021]  dump_stack+0x1c/0x28
[  227.008217][T28021]  should_fail_ex+0x3b0/0x50c
[  227.009459][T28021]  __should_failslab+0xc8/0x128
00:03:46 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

[  227.010766][T28021]  should_failslab+0x10/0x28
[  227.012064][T28021]  kmem_cache_alloc+0x80/0x488
[  227.013326][T28021]  alloc_empty_file+0xac/0x1d4
[  227.014592][T28021]  path_openat+0xd0/0x2830
[  227.015755][T28021]  do_filp_open+0x1bc/0x3cc
[  227.017059][T28021]  do_sys_openat2+0x124/0x1b8
[  227.018317][T28021]  __arm64_sys_openat+0x1f0/0x240
[  227.019624][T28021]  invoke_syscall+0x98/0x2b8
[  227.020853][T28021]  el0_svc_common+0x130/0x23c
[  227.022132][T28021]  do_el0_svc+0x48/0x58
[  227.023289][T28021]  el0_svc+0x54/0x158
[  227.024412][T28021]  el0t_64_sync_handler+0x84/0xfc
[  227.025790][T28021]  el0t_64_sync+0x190/0x194
00:03:47 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 4)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

[  227.047674][T28040] FAULT_INJECTION: forcing a failure.
[  227.047674][T28040] name failslab, interval 1, probability 0, space 0, times 0
00:03:47 executing program 3:
geteuid()

[  227.057765][T28040] CPU: 0 PID: 28040 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  227.060892][T28040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  227.063508][T28040] Call trace:
[  227.064380][T28040]  dump_backtrace+0x1b8/0x1e4
[  227.065690][T28040]  show_stack+0x2c/0x3c
[  227.066839][T28040]  dump_stack_lvl+0xd0/0x124
[  227.068065][T28040]  dump_stack+0x1c/0x28
[  227.069169][T28040]  should_fail_ex+0x3b0/0x50c
[  227.070412][T28040]  __should_failslab+0xc8/0x128
[  227.071794][T28040]  should_failslab+0x10/0x28
[  227.072909][T28040]  kmem_cache_alloc+0x80/0x488
[  227.074123][T28040]  security_file_alloc+0x30/0x124
[  227.075435][T28040]  init_file+0x90/0x1f8
[  227.076478][T28040]  alloc_empty_file+0xc0/0x1d4
[  227.077721][T28040]  path_openat+0xd0/0x2830
[  227.078867][T28040]  do_filp_open+0x1bc/0x3cc
[  227.080046][T28040]  do_sys_openat2+0x124/0x1b8
00:03:47 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)

00:03:47 executing program 3:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()

[  227.081258][T28040]  __arm64_sys_openat+0x1f0/0x240
[  227.082590][T28040]  invoke_syscall+0x98/0x2b8
[  227.083806][T28040]  el0_svc_common+0x130/0x23c
[  227.085005][T28040]  do_el0_svc+0x48/0x58
[  227.086102][T28040]  el0_svc+0x54/0x158
[  227.087135][T28040]  el0t_64_sync_handler+0x84/0xfc
[  227.088483][T28040]  el0t_64_sync+0x190/0x194
00:03:47 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:47 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'})

00:03:47 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 5)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:47 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)

00:03:47 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (fail_nth: 1)

00:03:47 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, 0x0})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:47 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)

00:03:47 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

[  227.139064][T28064] FAULT_INJECTION: forcing a failure.
[  227.139064][T28064] name failslab, interval 1, probability 0, space 0, times 0
[  227.143741][T28069] FAULT_INJECTION: forcing a failure.
[  227.143741][T28069] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.145878][T28064] CPU: 1 PID: 28064 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  227.150114][T28064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  227.152662][T28064] Call trace:
[  227.153531][T28064]  dump_backtrace+0x1b8/0x1e4
[  227.154810][T28064]  show_stack+0x2c/0x3c
[  227.155937][T28064]  dump_stack_lvl+0xd0/0x124
[  227.157121][T28064]  dump_stack+0x1c/0x28
[  227.158209][T28064]  should_fail_ex+0x3b0/0x50c
[  227.159413][T28064]  __should_failslab+0xc8/0x128
[  227.160724][T28064]  should_failslab+0x10/0x28
[  227.161881][T28064]  __kmalloc+0x114/0x5d4
[  227.162974][T28064]  tomoyo_realpath_from_path+0xc8/0x4cc
[  227.164335][T28064]  tomoyo_check_open_permission+0x1ec/0x414
[  227.165881][T28064]  tomoyo_file_open+0x15c/0x1ec
[  227.167130][T28064]  security_file_open+0x70/0x4d8
[  227.168406][T28064]  do_dentry_open+0x29c/0x12b4
[  227.169749][T28064]  vfs_open+0x7c/0x90
[  227.170822][T28064]  path_openat+0x1f6c/0x2830
[  227.171993][T28064]  do_filp_open+0x1bc/0x3cc
[  227.173141][T28064]  do_sys_openat2+0x124/0x1b8
[  227.174362][T28064]  __arm64_sys_openat+0x1f0/0x240
[  227.175682][T28064]  invoke_syscall+0x98/0x2b8
[  227.176859][T28064]  el0_svc_common+0x130/0x23c
[  227.178065][T28064]  do_el0_svc+0x48/0x58
[  227.179188][T28064]  el0_svc+0x54/0x158
[  227.180164][T28064]  el0t_64_sync_handler+0x84/0xfc
[  227.181423][T28064]  el0t_64_sync+0x190/0x194
[  227.182571][T28069] CPU: 0 PID: 28069 Comm: syz-executor.3 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  227.185506][T28069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  227.186055][T28064] ERROR: Out of memory at tomoyo_realpath_from_path.
[  227.188056][T28069] Call trace:
[  227.188062][T28069]  dump_backtrace+0x1b8/0x1e4
[  227.188076][T28069]  show_stack+0x2c/0x3c
[  227.192870][T28069]  dump_stack_lvl+0xd0/0x124
[  227.194072][T28069]  dump_stack+0x1c/0x28
[  227.195117][T28069]  should_fail_ex+0x3b0/0x50c
[  227.196320][T28069]  should_fail+0x14/0x24
[  227.197432][T28069]  should_fail_usercopy+0x20/0x30
[  227.198783][T28069]  simple_read_from_buffer+0xd4/0x248
[  227.200200][T28069]  proc_fail_nth_read+0x134/0x1a0
[  227.201490][T28069]  vfs_read+0x230/0x954
[  227.202612][T28069]  ksys_read+0x15c/0x26c
[  227.203709][T28069]  __arm64_sys_read+0x7c/0x90
[  227.204909][T28069]  invoke_syscall+0x98/0x2b8
[  227.206030][T28069]  el0_svc_common+0x130/0x23c
[  227.207182][T28069]  do_el0_svc+0x48/0x58
[  227.208189][T28069]  el0_svc+0x54/0x158
[  227.209202][T28069]  el0t_64_sync_handler+0x84/0xfc
[  227.210565][T28069]  el0t_64_sync+0x190/0x194
00:03:47 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)

00:03:47 executing program 2:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
geteuid()
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)

00:03:47 executing program 0:
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)

00:03:47 executing program 0:
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280))

00:03:47 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:47 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x856bdb1530e771b2}}, './file0\x00'})

00:03:47 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 6)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:47 executing program 0:
accept$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:47 executing program 2:
geteuid() (fail_nth: 1)

[  227.274813][T28106] FAULT_INJECTION: forcing a failure.
[  227.274813][T28106] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.279120][T28106] CPU: 0 PID: 28106 Comm: syz-executor.2 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  227.282088][T28106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  227.283754][T28108] FAULT_INJECTION: forcing a failure.
[  227.283754][T28108] name failslab, interval 1, probability 0, space 0, times 0
[  227.284666][T28106] Call trace:
[  227.284673][T28106]  dump_backtrace+0x1b8/0x1e4
[  227.284689][T28106]  show_stack+0x2c/0x3c
[  227.291019][T28106]  dump_stack_lvl+0xd0/0x124
00:03:47 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x856bdb1530e771b2}}, './file0\x00'})

[  227.292176][T28106]  dump_stack+0x1c/0x28
[  227.293233][T28106]  should_fail_ex+0x3b0/0x50c
[  227.294493][T28106]  should_fail+0x14/0x24
[  227.295589][T28106]  should_fail_usercopy+0x20/0x30
[  227.296921][T28106]  simple_read_from_buffer+0xd4/0x248
[  227.298340][T28106]  proc_fail_nth_read+0x134/0x1a0
[  227.299623][T28106]  vfs_read+0x230/0x954
[  227.300800][T28106]  ksys_read+0x15c/0x26c
[  227.301865][T28106]  __arm64_sys_read+0x7c/0x90
[  227.303084][T28106]  invoke_syscall+0x98/0x2b8
[  227.304325][T28106]  el0_svc_common+0x130/0x23c
[  227.305585][T28106]  do_el0_svc+0x48/0x58
[  227.306681][T28106]  el0_svc+0x54/0x158
[  227.307747][T28106]  el0t_64_sync_handler+0x84/0xfc
[  227.309096][T28106]  el0t_64_sync+0x190/0x194
[  227.310259][T28108] CPU: 1 PID: 28108 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  227.313301][T28108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  227.315922][T28108] Call trace:
[  227.316757][T28108]  dump_backtrace+0x1b8/0x1e4
[  227.317956][T28108]  show_stack+0x2c/0x3c
[  227.319043][T28108]  dump_stack_lvl+0xd0/0x124
[  227.320266][T28108]  dump_stack+0x1c/0x28
[  227.321332][T28108]  should_fail_ex+0x3b0/0x50c
[  227.322533][T28108]  __should_failslab+0xc8/0x128
[  227.323740][T28108]  should_failslab+0x10/0x28
[  227.324955][T28108]  __kmalloc+0x114/0x5d4
[  227.326058][T28108]  tomoyo_encode+0x270/0x4b0
[  227.327231][T28108]  tomoyo_realpath_from_path+0x478/0x4cc
[  227.328689][T28108]  tomoyo_check_open_permission+0x1ec/0x414
[  227.330160][T28108]  tomoyo_file_open+0x15c/0x1ec
[  227.331389][T28108]  security_file_open+0x70/0x4d8
[  227.332694][T28108]  do_dentry_open+0x29c/0x12b4
[  227.333948][T28108]  vfs_open+0x7c/0x90
[  227.334995][T28108]  path_openat+0x1f6c/0x2830
[  227.336163][T28108]  do_filp_open+0x1bc/0x3cc
[  227.337377][T28108]  do_sys_openat2+0x124/0x1b8
[  227.338585][T28108]  __arm64_sys_openat+0x1f0/0x240
[  227.339964][T28108]  invoke_syscall+0x98/0x2b8
[  227.341193][T28108]  el0_svc_common+0x130/0x23c
[  227.342442][T28108]  do_el0_svc+0x48/0x58
[  227.343574][T28108]  el0_svc+0x54/0x158
[  227.344601][T28108]  el0t_64_sync_handler+0x84/0xfc
[  227.345927][T28108]  el0t_64_sync+0x190/0x194
00:03:47 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:47 executing program 2:
geteuid()

00:03:47 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x856bdb1530e771b2}}, './file0\x00'})

[  227.353931][T28108] ERROR: Out of memory at tomoyo_realpath_from_path.
00:03:47 executing program 2:
geteuid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000740)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f00000003c0)=""/238, 0xee}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000600)=""/31, 0x1f}, {&(0x7f0000000640)=""/61, 0x3d}], 0x8, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x80)
sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="ea7ee5e76ff26da1aa91185e20fe3f4210a9e9f44fd5e5281e74397544a0376f2ad7bf5bbe74cc8d442f61d339f0df6693e97074b8aa5320581e709a2dacabb63b52037bc942e2604e3580f7e5fd58b8fca61680150ef2d009316ed502bf5bd32137724047af0f148b7fb8fbb294f1ea8bc7f2b62f760808a9799a2807ab99cd417ac891e3004ca5cf63fb0d8ff7713fb0eb698ab18cdd7e7dc9f3d6f5b17b6b43b8eee09b94449d", 0xa8}, {&(0x7f0000000100)="0fce91aa8314163bac16680574bd59e72738b345cf9e337e00a7825fc4", 0x1d}], 0x2}, 0x4)

00:03:47 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x856bdb1530e771b2}}, './file0\x00'})

00:03:47 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x856bdb1530e771b2}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x856bdb1530e771b2}}, './file0\x00'})

00:03:47 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 7)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:47 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:47 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$NBD_DO_IT(r1, 0xab03)
r2 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x240002, 0x84)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x40}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)

[  227.408190][T28137] FAULT_INJECTION: forcing a failure.
[  227.408190][T28137] name failslab, interval 1, probability 0, space 0, times 0
00:03:47 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x856bdb1530e771b2}}, './file0\x00'})

[  227.413661][T28137] CPU: 0 PID: 28137 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  227.416602][T28137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  227.419146][T28137] Call trace:
[  227.420037][T28137]  dump_backtrace+0x1b8/0x1e4
[  227.421271][T28137]  show_stack+0x2c/0x3c
[  227.422320][T28137]  dump_stack_lvl+0xd0/0x124
[  227.423535][T28137]  dump_stack+0x1c/0x28
[  227.424641][T28137]  should_fail_ex+0x3b0/0x50c
00:03:47 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$NBD_DO_IT(r1, 0xab03)
r2 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x240002, 0x84)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x40}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)

[  227.425777][T28137]  __should_failslab+0xc8/0x128
[  227.427065][T28137]  should_failslab+0x10/0x28
[  227.428248][T28137]  kmalloc_trace+0x80/0x49c
[  227.429453][T28137]  virtual_ncidev_open+0x5c/0x1bc
[  227.430813][T28137]  misc_open+0x2f0/0x368
[  227.431930][T28137]  chrdev_open+0x3c8/0x4dc
[  227.433047][T28137]  do_dentry_open+0x778/0x12b4
[  227.434323][T28137]  vfs_open+0x7c/0x90
[  227.435342][T28137]  path_openat+0x1f6c/0x2830
[  227.436537][T28137]  do_filp_open+0x1bc/0x3cc
[  227.437773][T28137]  do_sys_openat2+0x124/0x1b8
[  227.438987][T28137]  __arm64_sys_openat+0x1f0/0x240
[  227.440355][T28137]  invoke_syscall+0x98/0x2b8
[  227.441539][T28137]  el0_svc_common+0x130/0x23c
[  227.442826][T28137]  do_el0_svc+0x48/0x58
[  227.443896][T28137]  el0_svc+0x54/0x158
[  227.444901][T28137]  el0t_64_sync_handler+0x84/0xfc
[  227.446211][T28137]  el0t_64_sync+0x190/0x194
00:03:47 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 8)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

[  227.463387][T28149] FAULT_INJECTION: forcing a failure.
[  227.463387][T28149] name failslab, interval 1, probability 0, space 0, times 0
[  227.467138][T28149] CPU: 1 PID: 28149 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  227.470147][T28149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  227.472744][T28149] Call trace:
[  227.473570][T28149]  dump_backtrace+0x1b8/0x1e4
[  227.474814][T28149]  show_stack+0x2c/0x3c
[  227.475894][T28149]  dump_stack_lvl+0xd0/0x124
[  227.477036][T28149]  dump_stack+0x1c/0x28
[  227.478131][T28149]  should_fail_ex+0x3b0/0x50c
[  227.479294][T28149]  __should_failslab+0xc8/0x128
[  227.480605][T28149]  should_failslab+0x10/0x28
[  227.481793][T28149]  kmalloc_trace+0x80/0x49c
[  227.482953][T28149]  nci_allocate_device+0xec/0x324
00:03:47 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$NBD_DO_IT(r1, 0xab03)
r2 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x240002, 0x84)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x40}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$NBD_DO_IT(r1, 0xab03) (async)
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x240002, 0x84) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x40}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (async)

[  227.484175][T28149]  virtual_ncidev_open+0x84/0x1bc
[  227.485423][T28149]  misc_open+0x2f0/0x368
[  227.486529][T28149]  chrdev_open+0x3c8/0x4dc
[  227.487628][T28149]  do_dentry_open+0x778/0x12b4
[  227.488869][T28149]  vfs_open+0x7c/0x90
[  227.489920][T28149]  path_openat+0x1f6c/0x2830
[  227.491052][T28149]  do_filp_open+0x1bc/0x3cc
[  227.492151][T28149]  do_sys_openat2+0x124/0x1b8
[  227.493379][T28149]  __arm64_sys_openat+0x1f0/0x240
[  227.494618][T28149]  invoke_syscall+0x98/0x2b8
[  227.495818][T28149]  el0_svc_common+0x130/0x23c
[  227.496952][T28149]  do_el0_svc+0x48/0x58
[  227.498050][T28149]  el0_svc+0x54/0x158
[  227.499071][T28149]  el0t_64_sync_handler+0x84/0xfc
[  227.500384][T28149]  el0t_64_sync+0x190/0x194
00:03:47 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0)

00:03:47 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 9)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:47 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:47 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x3, 0xffffffffffffffff, 0x0, 0x81, 0xb2, &(0x7f0000000040)="e2d42c3de8b03516f2a5dc4cee96e2eafd6d09d2f618a0a27d27e1c76afd2c90e120c895d93cca8327ad4d5e7dad5af330cc7fb4732ec31072817872eb0e32292cfc5afc0f5f3cbc7b56e364a8457fdb4ddf4c838abf97bd3169ece56b15f578490d2befe1cfeaa9c28e436ff334623d4ea7f7460d22efca16f922f6639849e8802c701664e94d4d62a9b45c808b062ab08b72e68b4bc9ad4e459ecee9917d6bb51a18c0b859c4430ad912f42bfb584a010b"})

00:03:47 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

[  227.533254][T28161] FAULT_INJECTION: forcing a failure.
[  227.533254][T28161] name failslab, interval 1, probability 0, space 0, times 0
00:03:47 executing program 0:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0)

[  227.540323][T28161] CPU: 0 PID: 28161 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  227.543377][T28161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  227.545948][T28161] Call trace:
[  227.546772][T28161]  dump_backtrace+0x1b8/0x1e4
[  227.547983][T28161]  show_stack+0x2c/0x3c
[  227.549005][T28161]  dump_stack_lvl+0xd0/0x124
[  227.550131][T28161]  dump_stack+0x1c/0x28
[  227.551196][T28161]  should_fail_ex+0x3b0/0x50c
[  227.552400][T28161]  __should_failslab+0xc8/0x128
[  227.553597][T28161]  should_failslab+0x10/0x28
[  227.554749][T28161]  kmalloc_trace+0x80/0x49c
[  227.555889][T28161]  nfc_allocate_device+0x124/0x45c
[  227.557169][T28161]  nci_allocate_device+0x1ac/0x324
[  227.558460][T28161]  virtual_ncidev_open+0x84/0x1bc
[  227.559749][T28161]  misc_open+0x2f0/0x368
[  227.560843][T28161]  chrdev_open+0x3c8/0x4dc
[  227.561963][T28161]  do_dentry_open+0x778/0x12b4
[  227.563168][T28161]  vfs_open+0x7c/0x90
[  227.564174][T28161]  path_openat+0x1f6c/0x2830
[  227.565309][T28161]  do_filp_open+0x1bc/0x3cc
[  227.566454][T28161]  do_sys_openat2+0x124/0x1b8
[  227.567682][T28161]  __arm64_sys_openat+0x1f0/0x240
[  227.568931][T28161]  invoke_syscall+0x98/0x2b8
[  227.570120][T28161]  el0_svc_common+0x130/0x23c
[  227.571301][T28161]  do_el0_svc+0x48/0x58
[  227.572323][T28161]  el0_svc+0x54/0x158
[  227.573370][T28161]  el0t_64_sync_handler+0x84/0xfc
[  227.574689][T28161]  el0t_64_sync+0x190/0x194
00:03:47 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x3, 0xffffffffffffffff, 0x0, 0x81, 0xb2, &(0x7f0000000040)="e2d42c3de8b03516f2a5dc4cee96e2eafd6d09d2f618a0a27d27e1c76afd2c90e120c895d93cca8327ad4d5e7dad5af330cc7fb4732ec31072817872eb0e32292cfc5afc0f5f3cbc7b56e364a8457fdb4ddf4c838abf97bd3169ece56b15f578490d2befe1cfeaa9c28e436ff334623d4ea7f7460d22efca16f922f6639849e8802c701664e94d4d62a9b45c808b062ab08b72e68b4bc9ad4e459ecee9917d6bb51a18c0b859c4430ad912f42bfb584a010b"})

00:03:47 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 10)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:47 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x3, 0xffffffffffffffff, 0x0, 0x81, 0xb2, &(0x7f0000000040)="e2d42c3de8b03516f2a5dc4cee96e2eafd6d09d2f618a0a27d27e1c76afd2c90e120c895d93cca8327ad4d5e7dad5af330cc7fb4732ec31072817872eb0e32292cfc5afc0f5f3cbc7b56e364a8457fdb4ddf4c838abf97bd3169ece56b15f578490d2befe1cfeaa9c28e436ff334623d4ea7f7460d22efca16f922f6639849e8802c701664e94d4d62a9b45c808b062ab08b72e68b4bc9ad4e459ecee9917d6bb51a18c0b859c4430ad912f42bfb584a010b"})

00:03:47 executing program 0:
openat$autofs(0xffffffffffffff9c, 0x0, 0x10100, 0x0)

00:03:47 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

[  227.606347][T28177] FAULT_INJECTION: forcing a failure.
[  227.606347][T28177] name failslab, interval 1, probability 0, space 0, times 0
[  227.609614][T28177] CPU: 0 PID: 28177 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  227.612355][T28177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  227.614876][T28177] Call trace:
[  227.615705][T28177]  dump_backtrace+0x1b8/0x1e4
[  227.616921][T28177]  show_stack+0x2c/0x3c
[  227.617991][T28177]  dump_stack_lvl+0xd0/0x124
[  227.619178][T28177]  dump_stack+0x1c/0x28
[  227.620212][T28177]  should_fail_ex+0x3b0/0x50c
[  227.621433][T28177]  __should_failslab+0xc8/0x128
[  227.622624][T28177]  should_failslab+0x10/0x28
[  227.623854][T28177]  __kmalloc_node_track_caller+0x110/0x620
00:03:47 executing program 0:
openat$autofs(0xffffffffffffff9c, 0x0, 0x10100, 0x0)

[  227.625309][T28177]  kvasprintf+0x108/0x1dc
[  227.626371][T28177]  kvasprintf_const+0xdc/0x230
[  227.627608][T28177]  kobject_set_name_vargs+0xd0/0x1b8
[  227.629039][T28177]  dev_set_name+0xe0/0x12c
[  227.630238][T28177]  nfc_allocate_device+0x1a0/0x45c
[  227.631586][T28177]  nci_allocate_device+0x1ac/0x324
00:03:47 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0)

[  227.632928][T28177]  virtual_ncidev_open+0x84/0x1bc
[  227.634253][T28177]  misc_open+0x2f0/0x368
[  227.635401][T28177]  chrdev_open+0x3c8/0x4dc
[  227.636581][T28177]  do_dentry_open+0x778/0x12b4
[  227.637850][T28177]  vfs_open+0x7c/0x90
[  227.638981][T28177]  path_openat+0x1f6c/0x2830
[  227.640211][T28177]  do_filp_open+0x1bc/0x3cc
[  227.641373][T28177]  do_sys_openat2+0x124/0x1b8
[  227.642595][T28177]  __arm64_sys_openat+0x1f0/0x240
[  227.643865][T28177]  invoke_syscall+0x98/0x2b8
[  227.645065][T28177]  el0_svc_common+0x130/0x23c
[  227.646277][T28177]  do_el0_svc+0x48/0x58
[  227.647396][T28177]  el0_svc+0x54/0x158
[  227.648408][T28177]  el0t_64_sync_handler+0x84/0xfc
[  227.649728][T28177]  el0t_64_sync+0x190/0x194
00:03:47 executing program 0:
openat$autofs(0xffffffffffffff9c, 0x0, 0x10100, 0x0)

00:03:47 executing program 0:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

00:03:47 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) (async)

00:03:47 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 11)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:47 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:47 executing program 0:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

[  227.687249][T28202] FAULT_INJECTION: forcing a failure.
[  227.687249][T28202] name failslab, interval 1, probability 0, space 0, times 0
[  227.690758][T28202] CPU: 1 PID: 28202 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  227.693811][T28202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  227.696565][T28202] Call trace:
[  227.697444][T28202]  dump_backtrace+0x1b8/0x1e4
[  227.698708][T28202]  show_stack+0x2c/0x3c
[  227.699757][T28202]  dump_stack_lvl+0xd0/0x124
[  227.700920][T28202]  dump_stack+0x1c/0x28
[  227.702064][T28202]  should_fail_ex+0x3b0/0x50c
[  227.703276][T28202]  __should_failslab+0xc8/0x128
[  227.704537][T28202]  should_failslab+0x10/0x28
[  227.705754][T28202]  kmalloc_trace+0x80/0x49c
[  227.706920][T28202]  nci_hci_allocate+0x58/0x248
[  227.708112][T28202]  nci_allocate_device+0x1d4/0x324
00:03:47 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

[  227.709413][T28202]  virtual_ncidev_open+0x84/0x1bc
[  227.710739][T28202]  misc_open+0x2f0/0x368
[  227.711802][T28202]  chrdev_open+0x3c8/0x4dc
[  227.712952][T28202]  do_dentry_open+0x778/0x12b4
[  227.714199][T28202]  vfs_open+0x7c/0x90
[  227.715204][T28202]  path_openat+0x1f6c/0x2830
[  227.716391][T28202]  do_filp_open+0x1bc/0x3cc
[  227.717577][T28202]  do_sys_openat2+0x124/0x1b8
[  227.718751][T28202]  __arm64_sys_openat+0x1f0/0x240
[  227.720035][T28202]  invoke_syscall+0x98/0x2b8
[  227.721251][T28202]  el0_svc_common+0x130/0x23c
[  227.722494][T28202]  do_el0_svc+0x48/0x58
[  227.723624][T28202]  el0_svc+0x54/0x158
[  227.724640][T28202]  el0t_64_sync_handler+0x84/0xfc
[  227.725958][T28202]  el0t_64_sync+0x190/0x194
00:03:47 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0)

00:03:47 executing program 0:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

[  228.206702][T28218] FAULT_INJECTION: forcing a failure.
00:03:48 executing program 2:
geteuid() (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff}) (rerun: 32)
recvmsg$unix(r0, &(0x7f0000000740)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f00000003c0)=""/238, 0xee}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000600)=""/31, 0x1f}, {&(0x7f0000000640)=""/61, 0x3d}], 0x8, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x80)
sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="ea7ee5e76ff26da1aa91185e20fe3f4210a9e9f44fd5e5281e74397544a0376f2ad7bf5bbe74cc8d442f61d339f0df6693e97074b8aa5320581e709a2dacabb63b52037bc942e2604e3580f7e5fd58b8fca61680150ef2d009316ed502bf5bd32137724047af0f148b7fb8fbb294f1ea8bc7f2b62f760808a9799a2807ab99cd417ac891e3004ca5cf63fb0d8ff7713fb0eb698ab18cdd7e7dc9f3d6f5b17b6b43b8eee09b94449d", 0xa8}, {&(0x7f0000000100)="0fce91aa8314163bac16680574bd59e72738b345cf9e337e00a7825fc4", 0x1d}], 0x2}, 0x4)

00:03:48 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 12)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:48 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:48 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="860100000001000000180000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'})

00:03:48 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

[  228.206702][T28218] name failslab, interval 1, probability 0, space 0, times 0
[  228.211687][T28218] CPU: 1 PID: 28218 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  228.214625][T28218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  228.217204][T28218] Call trace:
[  228.218023][T28218]  dump_backtrace+0x1b8/0x1e4
00:03:48 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="860100000001000000180000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="860100000001000000180000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) (async)

[  228.219149][T28218]  show_stack+0x2c/0x3c
[  228.220205][T28218]  dump_stack_lvl+0xd0/0x124
[  228.221376][T28218]  dump_stack+0x1c/0x28
[  228.222409][T28218]  should_fail_ex+0x3b0/0x50c
[  228.223648][T28218]  __should_failslab+0xc8/0x128
[  228.224897][T28218]  should_failslab+0x10/0x28
[  228.226049][T28218]  kmalloc_trace+0x80/0x49c
[  228.227254][T28218]  alloc_workqueue+0x15c/0xf70
[  228.228437][T28218]  nci_register_device+0x1ec/0x7c4
[  228.229704][T28218]  virtual_ncidev_open+0x13c/0x1bc
[  228.230946][T28218]  misc_open+0x2f0/0x368
[  228.232015][T28218]  chrdev_open+0x3c8/0x4dc
[  228.233118][T28218]  do_dentry_open+0x778/0x12b4
[  228.234330][T28218]  vfs_open+0x7c/0x90
[  228.235357][T28218]  path_openat+0x1f6c/0x2830
00:03:48 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="860100000001000000180000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'})

[  228.236600][T28218]  do_filp_open+0x1bc/0x3cc
[  228.237741][T28218]  do_sys_openat2+0x124/0x1b8
[  228.238974][T28218]  __arm64_sys_openat+0x1f0/0x240
[  228.240344][T28218]  invoke_syscall+0x98/0x2b8
[  228.241552][T28218]  el0_svc_common+0x130/0x23c
[  228.242730][T28218]  do_el0_svc+0x48/0x58
[  228.243873][T28218]  el0_svc+0x54/0x158
[  228.244896][T28218]  el0t_64_sync_handler+0x84/0xfc
[  228.246255][T28218]  el0t_64_sync+0x190/0x194
00:03:48 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 13)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:48 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x53}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0)

00:03:48 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="860100000001000000180000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'})

[  228.281720][T28238] FAULT_INJECTION: forcing a failure.
[  228.281720][T28238] name failslab, interval 1, probability 0, space 0, times 0
00:03:48 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

[  228.284911][T28238] CPU: 1 PID: 28238 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  228.287737][T28238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  228.290300][T28238] Call trace:
[  228.291137][T28238]  dump_backtrace+0x1b8/0x1e4
00:03:48 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="860100000001000000180000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'})

[  228.292371][T28238]  show_stack+0x2c/0x3c
[  228.293448][T28238]  dump_stack_lvl+0xd0/0x124
[  228.294663][T28238]  dump_stack+0x1c/0x28
[  228.295790][T28238]  should_fail_ex+0x3b0/0x50c
[  228.297023][T28238]  __should_failslab+0xc8/0x128
[  228.298316][T28238]  should_failslab+0x10/0x28
[  228.299623][T28238]  kmalloc_trace+0x80/0x49c
[  228.300860][T28238]  alloc_workqueue+0x1c4/0xf70
[  228.302081][T28238]  nci_register_device+0x1ec/0x7c4
[  228.303433][T28238]  virtual_ncidev_open+0x13c/0x1bc
00:03:48 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="860100000001000000180000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'})

[  228.304739][T28238]  misc_open+0x2f0/0x368
[  228.305789][T28238]  chrdev_open+0x3c8/0x4dc
[  228.306918][T28238]  do_dentry_open+0x778/0x12b4
[  228.308174][T28238]  vfs_open+0x7c/0x90
[  228.309220][T28238]  path_openat+0x1f6c/0x2830
[  228.310448][T28238]  do_filp_open+0x1bc/0x3cc
[  228.311646][T28238]  do_sys_openat2+0x124/0x1b8
[  228.312809][T28238]  __arm64_sys_openat+0x1f0/0x240
[  228.314167][T28238]  invoke_syscall+0x98/0x2b8
[  228.315365][T28238]  el0_svc_common+0x130/0x23c
[  228.316581][T28238]  do_el0_svc+0x48/0x58
[  228.317678][T28238]  el0_svc+0x54/0x158
00:03:48 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0)

[  228.318674][T28238]  el0t_64_sync_handler+0x84/0xfc
[  228.319973][T28238]  el0t_64_sync+0x190/0x194
00:03:48 executing program 3:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) (async)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x53}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0)

00:03:48 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 14)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

[  228.348790][T28263] FAULT_INJECTION: forcing a failure.
00:03:48 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0)

[  228.348790][T28263] name failslab, interval 1, probability 0, space 0, times 0
00:03:48 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x53}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x53}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) (async)

00:03:48 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

[  228.357636][T28263] CPU: 0 PID: 28263 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  228.360740][T28263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  228.363369][T28263] Call trace:
[  228.364212][T28263]  dump_backtrace+0x1b8/0x1e4
[  228.365371][T28263]  show_stack+0x2c/0x3c
[  228.366399][T28263]  dump_stack_lvl+0xd0/0x124
[  228.367679][T28263]  dump_stack+0x1c/0x28
[  228.368774][T28263]  should_fail_ex+0x3b0/0x50c
[  228.369991][T28263]  __should_failslab+0xc8/0x128
[  228.371250][T28263]  should_failslab+0x10/0x28
[  228.372450][T28263]  __kmalloc_node_track_caller+0x110/0x620
[  228.373996][T28263]  kvasprintf+0x108/0x1dc
[  228.375094][T28263]  kasprintf+0xe0/0x12c
[  228.376235][T28263]  alloc_workqueue+0x448/0xf70
[  228.377514][T28263]  nci_register_device+0x1ec/0x7c4
[  228.378849][T28263]  virtual_ncidev_open+0x13c/0x1bc
[  228.380182][T28263]  misc_open+0x2f0/0x368
[  228.381268][T28263]  chrdev_open+0x3c8/0x4dc
[  228.382387][T28263]  do_dentry_open+0x778/0x12b4
[  228.383677][T28263]  vfs_open+0x7c/0x90
[  228.384689][T28263]  path_openat+0x1f6c/0x2830
[  228.385889][T28263]  do_filp_open+0x1bc/0x3cc
[  228.387076][T28263]  do_sys_openat2+0x124/0x1b8
[  228.388301][T28263]  __arm64_sys_openat+0x1f0/0x240
[  228.389617][T28263]  invoke_syscall+0x98/0x2b8
[  228.390886][T28263]  el0_svc_common+0x130/0x23c
[  228.392134][T28263]  do_el0_svc+0x48/0x58
00:03:48 executing program 0:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0)

00:03:48 executing program 0:
openat$autofs(0xffffffffffffff9c, 0x0, 0x105100, 0x0)

[  228.393269][T28263]  el0_svc+0x54/0x158
[  228.394326][T28263]  el0t_64_sync_handler+0x84/0xfc
[  228.395680][T28263]  el0t_64_sync+0x190/0x194
00:03:48 executing program 0:
openat$autofs(0xffffffffffffff9c, 0x0, 0x105100, 0x0)

00:03:48 executing program 0:
openat$autofs(0xffffffffffffff9c, 0x0, 0x105100, 0x0)

00:03:48 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (fail_nth: 15)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:03:48 executing program 0:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

[  228.435131][T28290] FAULT_INJECTION: forcing a failure.
[  228.435131][T28290] name failslab, interval 1, probability 0, space 0, times 0
[  228.438380][T28290] CPU: 0 PID: 28290 Comm: syz-executor.4 Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  228.441227][T28290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  228.443785][T28290] Call trace:
00:03:48 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="c2000000000000002e2f66696c6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616100"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0)

[  228.444598][T28290]  dump_backtrace+0x1b8/0x1e4
[  228.445788][T28290]  show_stack+0x2c/0x3c
[  228.446863][T28290]  dump_stack_lvl+0xd0/0x124
[  228.448050][T28290]  dump_stack+0x1c/0x28
[  228.449196][T28290]  should_fail_ex+0x3b0/0x50c
[  228.450461][T28290]  __should_failslab+0xc8/0x128
[  228.451791][T28290]  should_failslab+0x10/0x28
[  228.453019][T28290]  __kmalloc+0x114/0x5d4
[  228.454109][T28290]  apply_wqattrs_prepare+0x114/0x948
[  228.455455][T28290]  apply_workqueue_attrs+0xc4/0x170
00:03:48 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="c2000000000000002e2f66696c6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616100"]) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0)

[  228.456807][T28290]  alloc_workqueue+0xa08/0xf70
[  228.458044][T28290]  nci_register_device+0x1ec/0x7c4
[  228.459334][T28290]  virtual_ncidev_open+0x13c/0x1bc
[  228.460718][T28290]  misc_open+0x2f0/0x368
[  228.461844][T28290]  chrdev_open+0x3c8/0x4dc
[  228.462952][T28290]  do_dentry_open+0x778/0x12b4
[  228.464257][T28290]  vfs_open+0x7c/0x90
[  228.465309][T28290]  path_openat+0x1f6c/0x2830
[  228.466490][T28290]  do_filp_open+0x1bc/0x3cc
[  228.467697][T28290]  do_sys_openat2+0x124/0x1b8
[  228.468897][T28290]  __arm64_sys_openat+0x1f0/0x240
[  228.470218][T28290]  invoke_syscall+0x98/0x2b8
[  228.471418][T28290]  el0_svc_common+0x130/0x23c
[  228.472626][T28290]  do_el0_svc+0x48/0x58
[  228.473758][T28290]  el0_svc+0x54/0x158
[  228.474772][T28290]  el0t_64_sync_handler+0x84/0xfc
[  228.476084][T28290]  el0t_64_sync+0x190/0x194
00:03:48 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="c2000000000000002e2f66696c6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616100"]) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0)

00:03:48 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:03:48 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000022c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
clock_gettime(0x0, &(0x7f0000002b40))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002c80), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000002d00)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
r3 = io_uring_setup(0x27c5, &(0x7f0000000000)={0x0, 0x2946, 0x40, 0x3, 0x309})
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})
sendto$unix(r0, &(0x7f0000000140)="e1c4c2d2ec97db59418da15e2e6631d1f9f2f8a2d9a928b4c0d368594259d549a0cee8a74b74160339c761c89dfdd1c505879fb9e54250788f28092716fcc13b2602287fa9efb90a1aa79d1c4817534f8c894406763d6ba14a", 0x59, 0x4000075, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

00:03:49 executing program 2:
geteuid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000740)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f00000003c0)=""/238, 0xee}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000600)=""/31, 0x1f}, {&(0x7f0000000640)=""/61, 0x3d}], 0x8, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x80) (async)
sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="ea7ee5e76ff26da1aa91185e20fe3f4210a9e9f44fd5e5281e74397544a0376f2ad7bf5bbe74cc8d442f61d339f0df6693e97074b8aa5320581e709a2dacabb63b52037bc942e2604e3580f7e5fd58b8fca61680150ef2d009316ed502bf5bd32137724047af0f148b7fb8fbb294f1ea8bc7f2b62f760808a9799a2807ab99cd417ac891e3004ca5cf63fb0d8ff7713fb0eb698ab18cdd7e7dc9f3d6f5b17b6b43b8eee09b94449d", 0xa8}, {&(0x7f0000000100)="0fce91aa8314163bac16680574bd59e72738b345cf9e337e00a7825fc4", 0x1d}], 0x2}, 0x4)

00:03:49 executing program 2:
geteuid()
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80)
ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x7c3)

00:03:49 executing program 2:
geteuid()
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80)
ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x7c3) (async)
ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x7c3)

00:03:49 executing program 2:
geteuid() (async)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80)
ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x7c3)

00:03:49 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x701080, 0x0)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
geteuid()

00:03:49 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x701080, 0x0)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
geteuid()
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x701080, 0x0) (async)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
geteuid() (async)

00:03:49 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x701080, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
geteuid()

00:03:49 executing program 2:
geteuid()
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x52ae}}, './file0\x00'})
recvmmsg$unix(r0, &(0x7f0000003640)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000100)=""/216, 0xd8}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000640)=""/34, 0x22}], 0x9, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/212, 0xd4}, {&(0x7f0000000900)=""/183, 0xb7}, {&(0x7f00000009c0)=""/209, 0xd1}], 0x3, &(0x7f0000000b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c00)=""/45, 0x2d}], 0x1, &(0x7f0000000c80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x160}}, {{&(0x7f0000000e00), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/22, 0x16}, {&(0x7f0000001ec0)=""/73, 0x49}, {&(0x7f0000001f40)=""/65, 0x41}, {&(0x7f0000001fc0)=""/100, 0x64}, {&(0x7f0000002040)=""/82, 0x52}, {&(0x7f00000020c0)=""/19, 0x13}, {&(0x7f0000002100)=""/67, 0x43}, {&(0x7f0000002180)}], 0x9, &(0x7f0000002280)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000002400)=@abs, 0x6e, &(0x7f0000003600)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/86, 0x56}, {&(0x7f0000003500)=""/193, 0xc1}], 0x3}}], 0x5, 0x40000020, &(0x7f0000003780))

00:03:49 executing program 2:
geteuid() (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x52ae}}, './file0\x00'})
recvmmsg$unix(r0, &(0x7f0000003640)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000100)=""/216, 0xd8}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000640)=""/34, 0x22}], 0x9, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/212, 0xd4}, {&(0x7f0000000900)=""/183, 0xb7}, {&(0x7f00000009c0)=""/209, 0xd1}], 0x3, &(0x7f0000000b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c00)=""/45, 0x2d}], 0x1, &(0x7f0000000c80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x160}}, {{&(0x7f0000000e00), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/22, 0x16}, {&(0x7f0000001ec0)=""/73, 0x49}, {&(0x7f0000001f40)=""/65, 0x41}, {&(0x7f0000001fc0)=""/100, 0x64}, {&(0x7f0000002040)=""/82, 0x52}, {&(0x7f00000020c0)=""/19, 0x13}, {&(0x7f0000002100)=""/67, 0x43}, {&(0x7f0000002180)}], 0x9, &(0x7f0000002280)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000002400)=@abs, 0x6e, &(0x7f0000003600)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/86, 0x56}, {&(0x7f0000003500)=""/193, 0xc1}], 0x3}}], 0x5, 0x40000020, &(0x7f0000003780))

00:03:50 executing program 2:
geteuid() (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x52ae}}, './file0\x00'}) (rerun: 64)
recvmmsg$unix(r0, &(0x7f0000003640)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000100)=""/216, 0xd8}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000640)=""/34, 0x22}], 0x9, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/212, 0xd4}, {&(0x7f0000000900)=""/183, 0xb7}, {&(0x7f00000009c0)=""/209, 0xd1}], 0x3, &(0x7f0000000b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c00)=""/45, 0x2d}], 0x1, &(0x7f0000000c80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x160}}, {{&(0x7f0000000e00), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/22, 0x16}, {&(0x7f0000001ec0)=""/73, 0x49}, {&(0x7f0000001f40)=""/65, 0x41}, {&(0x7f0000001fc0)=""/100, 0x64}, {&(0x7f0000002040)=""/82, 0x52}, {&(0x7f00000020c0)=""/19, 0x13}, {&(0x7f0000002100)=""/67, 0x43}, {&(0x7f0000002180)}], 0x9, &(0x7f0000002280)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000002400)=@abs, 0x6e, &(0x7f0000003600)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/86, 0x56}, {&(0x7f0000003500)=""/193, 0xc1}], 0x3}}], 0x5, 0x40000020, &(0x7f0000003780))

00:03:50 executing program 2:
geteuid()
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xc2}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x2, 0x8})
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=<r4=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'})

00:03:50 executing program 2:
geteuid() (async)
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xc2}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x2, 0x8}) (async)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r3 = geteuid() (async, rerun: 32)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=<r4=>0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'})

00:03:50 executing program 2:
geteuid() (async)
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xc2}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x2, 0x8}) (async)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r3 = geteuid() (async)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=<r4=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'})

00:03:50 executing program 2:
geteuid()
geteuid()

00:03:50 executing program 2:
geteuid() (async)
geteuid()

00:03:50 executing program 2:
geteuid()
geteuid()

00:03:50 executing program 2:
r0 = geteuid()
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = geteuid()
getresgid(&(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {r5, r6}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {r0, r6}}, './file0\x00'})

[  238.574293][    T8] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested
[  238.580318][    T8] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2
[  238.582947][    T8] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw
[  248.802075][ T2253] ieee802154 phy0 wpan0: encryption failed: -22
[  248.803844][ T2253] ieee802154 phy1 wpan1: encryption failed: -22
00:04:18 executing program 4:
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

00:04:18 executing program 0:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

00:04:18 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = geteuid()
getresgid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {r1, r2}}, './file0\x00'})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x8}, 0xfffffff7, 0x0, &(0x7f0000000140)="b91ee6bcc639f6cc179d8c3f1e5e94a903", 0x11, 0x7, 0x4, 0xdb98, 0x101, 0x5, &(0x7f0000000180)="803f38cf98c784e9329935565d591a9966996a6f9821eef1cf4aec0a7ea36ed6b7cf5025e4fcfacf5296fc3102b1d30e"})
accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000002c0)={0x3, 0xffffffff, 0xb886, 0x7f, 0xe0, 0x1})
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
msgget$private(0x0, 0xc)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r1, r4)
syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0xc1)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
msgsnd(0x0, &(0x7f0000004e80)={0x3, "7c74a2362632029918eeeb610fd0ffadf3caae2e2a5724cac0ce3ebe991b39983a254f32e1b26f09ed7cc50479286f71a54865d8e30c306e85"}, 0x41, 0x800)

00:04:18 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000022c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'}) (rerun: 64)
clock_gettime(0x0, &(0x7f0000002b40)) (async, rerun: 64)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002c80), 0x0, 0x0) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000002d00)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'}) (async)
r3 = io_uring_setup(0x27c5, &(0x7f0000000000)={0x0, 0x2946, 0x40, 0x3, 0x309}) (async)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) (async, rerun: 64)
sendto$unix(r0, &(0x7f0000000140)="e1c4c2d2ec97db59418da15e2e6631d1f9f2f8a2d9a928b4c0d368594259d549a0cee8a74b74160339c761c89dfdd1c505879fb9e54250788f28092716fcc13b2602287fa9efb90a1aa79d1c4817534f8c894406763d6ba14a", 0x59, 0x4000075, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (rerun: 64)

00:04:20 executing program 2:
r0 = geteuid() (async)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async, rerun: 32)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = geteuid()
getresgid(&(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {r5, r6}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {r0, r6}}, './file0\x00'})

[  300.006441][    T8] usb 1-1: no suitable firmware found!
[  300.007875][    T8] usb 1-1: ath9k_htc: Failed to get firmware htc_9271.fw
[  300.010184][ T6240] usb 1-1: ath9k_htc: USB layer deinitialized
[  310.242792][ T2253] ieee802154 phy0 wpan0: encryption failed: -22
[  310.244468][ T2253] ieee802154 phy1 wpan1: encryption failed: -22
[  371.682000][ T2253] ieee802154 phy0 wpan0: encryption failed: -22
[  371.683632][ T2253] ieee802154 phy1 wpan1: encryption failed: -22
[  383.841768][   T29] INFO: task syz-executor.4:28290 blocked for more than 143 seconds.
[  383.843980][   T29]       Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  383.846223][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  383.848477][   T29] task:syz-executor.4  state:D stack:0     pid:28290 tgid:28288 ppid:6197   flags:0x0000000d
[  383.851193][   T29] Call trace:
[  383.854588][   T29]  __switch_to+0x314/0x560
[  383.855739][   T29]  __schedule+0x1498/0x24b4
[  383.856952][   T29]  schedule+0xb8/0x19c
[  383.858031][   T29]  schedule_timeout+0xb8/0x348
[  383.859366][   T29]  do_wait_for_common+0x30c/0x468
[  383.860701][   T29]  wait_for_completion+0x48/0x60
[  383.862043][   T29]  kthread_flush_worker+0x214/0x2d4
[  383.863431][   T29]  alloc_workqueue+0xa30/0xf70
[  383.864734][   T29]  nci_register_device+0x1ec/0x7c4
[  383.866115][   T29]  virtual_ncidev_open+0x13c/0x1bc
[  383.867431][   T29]  misc_open+0x2f0/0x368
[  383.868519][   T29]  chrdev_open+0x3c8/0x4dc
[  383.869725][   T29]  do_dentry_open+0x778/0x12b4
[  383.870995][   T29]  vfs_open+0x7c/0x90
[  383.873783][   T29]  path_openat+0x1f6c/0x2830
[  383.874954][   T29]  do_filp_open+0x1bc/0x3cc
[  383.876112][   T29]  do_sys_openat2+0x124/0x1b8
[  383.877332][   T29]  __arm64_sys_openat+0x1f0/0x240
[  383.878639][   T29]  invoke_syscall+0x98/0x2b8
[  383.879827][   T29]  el0_svc_common+0x130/0x23c
[  383.881056][   T29]  do_el0_svc+0x48/0x58
[  383.882202][   T29]  el0_svc+0x54/0x158
[  383.883219][   T29]  el0t_64_sync_handler+0x84/0xfc
[  383.884508][   T29]  el0t_64_sync+0x190/0x194
[  383.885730][   T29] INFO: task syz-executor.0:28292 blocked for more than 143 seconds.
[  383.887807][   T29]       Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  383.890028][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  383.894041][   T29] task:syz-executor.0  state:D stack:0     pid:28292 tgid:28291 ppid:6191   flags:0x0000000d
[  383.896704][   T29] Call trace:
[  383.897519][   T29]  __switch_to+0x314/0x560
[  383.898684][   T29]  __schedule+0x1498/0x24b4
[  383.899867][   T29]  schedule+0xb8/0x19c
[  383.900937][   T29]  schedule_preempt_disabled+0x18/0x2c
[  383.902890][   T29]  __mutex_lock_common+0xbd8/0x21a0
[  383.904305][   T29]  mutex_lock_nested+0x2c/0x38
[  383.905555][   T29]  misc_open+0x6c/0x368
[  383.906634][   T29]  chrdev_open+0x3c8/0x4dc
[  383.907773][   T29]  do_dentry_open+0x778/0x12b4
[  383.909032][   T29]  vfs_open+0x7c/0x90
[  383.910313][   T29]  path_openat+0x1f6c/0x2830
[  383.911543][   T29]  do_filp_open+0x1bc/0x3cc
[  383.914731][   T29]  do_sys_openat2+0x124/0x1b8
[  383.915942][   T29]  __arm64_sys_openat+0x1f0/0x240
[  383.917243][   T29]  invoke_syscall+0x98/0x2b8
[  383.918429][   T29]  el0_svc_common+0x130/0x23c
[  383.919619][   T29]  do_el0_svc+0x48/0x58
[  383.920705][   T29]  el0_svc+0x54/0x158
[  383.921891][   T29]  el0t_64_sync_handler+0x84/0xfc
[  383.923129][   T29]  el0t_64_sync+0x190/0x194
[  383.924255][   T29] INFO: task syz-executor.1:28304 blocked for more than 143 seconds.
[  383.926317][   T29]       Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  383.928509][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  383.930799][   T29] task:syz-executor.1  state:D stack:0     pid:28304 tgid:28302 ppid:6194   flags:0x00000005
[  383.933650][   T29] Call trace:
[  383.934513][   T29]  __switch_to+0x314/0x560
[  383.935622][   T29]  __schedule+0x1498/0x24b4
[  383.936761][   T29]  schedule+0xb8/0x19c
[  383.937757][   T29]  schedule_preempt_disabled+0x18/0x2c
[  383.939194][   T29]  __mutex_lock_common+0xbd8/0x21a0
[  383.940522][   T29]  mutex_lock_nested+0x2c/0x38
[  383.941786][   T29]  misc_open+0x6c/0x368
[  383.942809][   T29]  chrdev_open+0x3c8/0x4dc
[  383.943927][   T29]  do_dentry_open+0x778/0x12b4
[  383.945206][   T29]  vfs_open+0x7c/0x90
[  383.946238][   T29]  path_openat+0x1f6c/0x2830
[  383.947386][   T29]  do_filp_open+0x1bc/0x3cc
[  383.948546][   T29]  do_sys_openat2+0x124/0x1b8
[  383.949759][   T29]  __arm64_sys_openat+0x1f0/0x240
[  383.951073][   T29]  invoke_syscall+0x98/0x2b8
[  383.952294][   T29]  el0_svc_common+0x130/0x23c
[  383.953470][   T29]  do_el0_svc+0x48/0x58
[  383.954550][   T29]  el0_svc+0x54/0x158
[  383.955644][   T29]  el0t_64_sync_handler+0x84/0xfc
[  383.956916][   T29]  el0t_64_sync+0x190/0x194
[  383.958122][   T29] INFO: task syz-executor.3:28305 blocked for more than 143 seconds.
[  383.960136][   T29]       Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  383.962397][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  383.964685][   T29] task:syz-executor.3  state:D stack:0     pid:28305 tgid:28303 ppid:6201   flags:0x00000005
[  383.967263][   T29] Call trace:
[  383.968093][   T29]  __switch_to+0x314/0x560
[  383.969277][   T29]  __schedule+0x1498/0x24b4
[  383.970443][   T29]  schedule+0xb8/0x19c
[  383.971427][   T29]  schedule_preempt_disabled+0x18/0x2c
[  383.972898][   T29]  __mutex_lock_common+0xbd8/0x21a0
[  383.974251][   T29]  mutex_lock_nested+0x2c/0x38
[  383.975514][   T29]  misc_open+0x6c/0x368
[  383.976600][   T29]  chrdev_open+0x3c8/0x4dc
[  383.977771][   T29]  do_dentry_open+0x778/0x12b4
[  383.978976][   T29]  vfs_open+0x7c/0x90
[  383.979974][   T29]  path_openat+0x1f6c/0x2830
[  383.981185][   T29]  do_filp_open+0x1bc/0x3cc
[  383.982389][   T29]  do_sys_openat2+0x124/0x1b8
[  383.983632][   T29]  __arm64_sys_openat+0x1f0/0x240
[  383.984938][   T29]  invoke_syscall+0x98/0x2b8
[  383.986136][   T29]  el0_svc_common+0x130/0x23c
[  383.987329][   T29]  do_el0_svc+0x48/0x58
[  383.988394][   T29]  el0_svc+0x54/0x158
[  383.989397][   T29]  el0t_64_sync_handler+0x84/0xfc
[  383.990689][   T29]  el0t_64_sync+0x190/0x194
[  383.991911][   T29] INFO: task syz-executor.3:28307 blocked for more than 143 seconds.
[  383.993934][   T29]       Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  383.996129][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  383.998365][   T29] task:syz-executor.3  state:D stack:0     pid:28307 tgid:28303 ppid:6201   flags:0x00000045
[  384.001019][   T29] Call trace:
[  384.002217][   T29]  __switch_to+0x314/0x560
[  384.003362][   T29]  __schedule+0x1498/0x24b4
[  384.004498][   T29]  schedule+0xb8/0x19c
[  384.005581][   T29]  schedule_preempt_disabled+0x18/0x2c
[  384.007016][   T29]  __mutex_lock_common+0xbd8/0x21a0
[  384.008361][   T29]  mutex_lock_nested+0x2c/0x38
[  384.009586][   T29]  misc_open+0x6c/0x368
[  384.010690][   T29]  chrdev_open+0x3c8/0x4dc
[  384.012599][   T29]  do_dentry_open+0x778/0x12b4
[  384.013867][   T29]  vfs_open+0x7c/0x90
[  384.014885][   T29]  path_openat+0x1f6c/0x2830
[  384.016089][   T29]  do_filp_open+0x1bc/0x3cc
[  384.017231][   T29]  do_sys_openat2+0x124/0x1b8
[  384.018410][   T29]  __arm64_sys_openat+0x1f0/0x240
[  384.019718][   T29]  invoke_syscall+0x98/0x2b8
[  384.020881][   T29]  el0_svc_common+0x130/0x23c
[  384.023894][   T29]  do_el0_svc+0x48/0x58
[  384.025032][   T29]  el0_svc+0x54/0x158
[  384.026048][   T29]  el0t_64_sync_handler+0x84/0xfc
[  384.027325][   T29]  el0t_64_sync+0x190/0x194
[  384.028449][   T29] INFO: task syz-executor.2:28354 blocked for more than 143 seconds.
[  384.030515][   T29]       Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  384.032779][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  384.035051][   T29] task:syz-executor.2  state:D stack:0     pid:28354 tgid:28353 ppid:6198   flags:0x00000005
[  384.037728][   T29] Call trace:
[  384.038574][   T29]  __switch_to+0x314/0x560
[  384.039724][   T29]  __schedule+0x1498/0x24b4
[  384.040898][   T29]  schedule+0xb8/0x19c
[  384.042025][   T29]  schedule_preempt_disabled+0x18/0x2c
[  384.043473][   T29]  __mutex_lock_common+0xbd8/0x21a0
[  384.044876][   T29]  mutex_lock_nested+0x2c/0x38
[  384.046136][   T29]  misc_open+0x6c/0x368
[  384.047139][   T29]  chrdev_open+0x3c8/0x4dc
[  384.048278][   T29]  do_dentry_open+0x778/0x12b4
[  384.049413][   T29]  vfs_open+0x7c/0x90
[  384.050365][   T29]  path_openat+0x1f6c/0x2830
[  384.051523][   T29]  do_filp_open+0x1bc/0x3cc
[  384.052723][   T29]  do_sys_openat2+0x124/0x1b8
[  384.053842][   T29]  __arm64_sys_openat+0x1f0/0x240
[  384.055103][   T29]  invoke_syscall+0x98/0x2b8
[  384.056194][   T29]  el0_svc_common+0x130/0x23c
[  384.057317][   T29]  do_el0_svc+0x48/0x58
[  384.058340][   T29]  el0_svc+0x54/0x158
[  384.059315][   T29]  el0t_64_sync_handler+0x84/0xfc
[  384.060551][   T29]  el0t_64_sync+0x190/0x194
[  384.061751][   T29] INFO: task syz-executor.2:28355 blocked for more than 143 seconds.
[  384.063741][   T29]       Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  384.065734][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  384.067830][   T29] task:syz-executor.2  state:D stack:0     pid:28355 tgid:28353 ppid:6198   flags:0x00000005
[  384.070335][   T29] Call trace:
[  384.071187][   T29]  __switch_to+0x314/0x560
[  384.072336][   T29]  __schedule+0x1498/0x24b4
[  384.073431][   T29]  schedule+0xb8/0x19c
[  384.074446][   T29]  schedule_preempt_disabled+0x18/0x2c
[  384.075815][   T29]  __mutex_lock_common+0xbd8/0x21a0
[  384.077050][   T29]  mutex_lock_nested+0x2c/0x38
[  384.078264][   T29]  misc_open+0x6c/0x368
[  384.079307][   T29]  chrdev_open+0x3c8/0x4dc
[  384.080364][   T29]  do_dentry_open+0x778/0x12b4
[  384.081594][   T29]  vfs_open+0x7c/0x90
[  384.082940][   T29]  path_openat+0x1f6c/0x2830
[  384.084109][   T29]  do_filp_open+0x1bc/0x3cc
[  384.085296][   T29]  do_sys_openat2+0x124/0x1b8
[  384.086426][   T29]  __arm64_sys_openat+0x1f0/0x240
[  384.087730][   T29]  invoke_syscall+0x98/0x2b8
[  384.088900][   T29]  el0_svc_common+0x130/0x23c
[  384.090013][   T29]  do_el0_svc+0x48/0x58
[  384.091085][   T29]  el0_svc+0x54/0x158
[  384.092024][   T29]  el0t_64_sync_handler+0x84/0xfc
[  384.093282][   T29]  el0t_64_sync+0x190/0x194
[  384.094436][   T29] INFO: task syz-executor.2:28356 blocked for more than 143 seconds.
[  384.096403][   T29]       Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  384.098418][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  384.100536][   T29] task:syz-executor.2  state:D stack:0     pid:28356 tgid:28353 ppid:6198   flags:0x00000005
[  384.103228][   T29] Call trace:
[  384.104051][   T29]  __switch_to+0x314/0x560
[  384.105098][   T29]  __schedule+0x1498/0x24b4
[  384.106255][   T29]  schedule+0xb8/0x19c
[  384.107267][   T29]  schedule_preempt_disabled+0x18/0x2c
[  384.108698][   T29]  __mutex_lock_common+0xbd8/0x21a0
[  384.109982][   T29]  mutex_lock_nested+0x2c/0x38
[  384.111171][   T29]  misc_open+0x6c/0x368
[  384.112239][   T29]  chrdev_open+0x3c8/0x4dc
[  384.113367][   T29]  do_dentry_open+0x778/0x12b4
[  384.114854][   T29]  vfs_open+0x7c/0x90
[  384.115898][   T29]  path_openat+0x1f6c/0x2830
[  384.117045][   T29]  do_filp_open+0x1bc/0x3cc
[  384.118185][   T29]  do_sys_openat2+0x124/0x1b8
[  384.119377][   T29]  __arm64_sys_openat+0x1f0/0x240
[  384.120645][   T29]  invoke_syscall+0x98/0x2b8
[  384.122297][   T29]  el0_svc_common+0x130/0x23c
[  384.123487][   T29]  do_el0_svc+0x48/0x58
[  384.124512][   T29]  el0_svc+0x54/0x158
[  384.125448][   T29]  el0t_64_sync_handler+0x84/0xfc
[  384.126750][   T29]  el0t_64_sync+0x190/0x194
[  384.127945][   T29] INFO: lockdep is turned off.
[  384.129111][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  384.130813][   T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G    B              6.8.0-rc4-syzkaller-g905b00721763 #0
[  384.133558][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  384.136203][   T29] Call trace:
[  384.137001][   T29]  dump_backtrace+0x1b8/0x1e4
[  384.138186][   T29]  show_stack+0x2c/0x3c
[  384.139239][   T29]  dump_stack_lvl+0xd0/0x124
[  384.140348][   T29]  dump_stack+0x1c/0x28
[  384.141399][   T29]  panic+0x30c/0x88c
[  384.142376][   T29]  hung_task_panic+0x0/0x2c
[  384.143572][   T29]  kthread+0x288/0x310
[  384.144545][   T29]  ret_from_fork+0x10/0x20
[  384.145690][   T29] SMP: stopping secondary CPUs
[  384.146910][   T29] Kernel Offset: disabled
[  384.148019][   T29] CPU features: 0x0,00000040,e004004a,21017203
[  384.149565][   T29] Memory Limit: none
[  384.727643][   T29] Rebooting in 86400 seconds..