last executing test programs:

1m25.353275921s ago: executing program 0 (id=32):
r0 = socket(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async)
sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) (async)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
fstat(r1, &(0x7f0000000040)) (async)
sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) (async)
syz_extract_tcp_res(&(0x7f0000000500), 0x9, 0x108) (async)
r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000086a0504030000000000010902240001000080000904000002030000000921000000fe"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x54, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)

1m22.329973637s ago: executing program 0 (id=52):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0)
r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
read(r4, &(0x7f0000000640)=""/201, 0xc9)
clock_getres(0x4, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r5 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r5)
keyctl$read(0xb, r5, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

1m22.19304925s ago: executing program 0 (id=54):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
fsopen(&(0x7f0000000000)='proc\x00', 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x9000})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil})

1m22.181285931s ago: executing program 0 (id=55):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b2ce40afd3fbc516138acf9b1cbf55dcc2ab929341e5b54f047afb19cb30555fb6041d0f30d3504898609622b98723c0c314b1601dc6f9ea3176b6735d38011efe5a66cc07ae9e61bf2c67ae165056d2e6807084ae5df3815667e28cd4122c2b21f61077f3ec40b89669b1652ccd2af2670eb00870a45300474b02eae7906828453af2a70f68c9c57ce01d54efad38eb22", @ANYRES16=0x0, @ANYRESDEC=0x0], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='3', 0x1)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, 0x0)
syz_io_uring_setup(0x1fcb, &(0x7f00000000c0)={0x0, 0x6c31, 0x10000, 0x3, 0x7d, 0x0, r1}, &(0x7f0000000180), 0x0, 0x0)
syz_ublk_setup_io_uring(0x256, 0x0, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r3)
socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x6, @private2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000001c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, '\x00', "1e0900", 'K\x00', "e4156c3254a52bee"}, 0x28)
sendto$inet6(r4, &(0x7f0000000200)="3218839b5103bb419ee146d119131d9ec3f47f5f6f4732065c4bbb95020212a0e4aee9a9cf1d33152347514096f32ba80cfac24bdd1d769332a4cb3c69a2f9d79cba1a6cdee2c8445a7182e087f9bd4ecefe2635d54d427a829ce5f06ce7b1087c65eea3b87caebcec62d86422ada56d6b05000000000000000627cddb97bbd73508bada65b4175750aaebb35aa5fe0c830e1a20909de3cf5d3262eea8af1a01101a33658566e1119761f96d122df20e00000000000000a8418b0ae49e8471f1b1fea1ef3eb22289979e8baac247f4115370e0c8799c56d5ed4eb3ffb60000000000002886e798193222ddac11210000", 0xf0, 0x11, 0x0, 0x0)
write$binfmt_elf64(r4, 0x0, 0x3fff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x9)

1m21.843296349s ago: executing program 0 (id=56):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[])
link(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='./file0\x00')
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xd7, 0x56a, 0xc6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x40, 0x7}}]}}, 0x0)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x14, r6, 0x303, 0x0, 0x25dfdbfd, {0x13}}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004064}, 0x48885)
fgetxattr(r1, &(0x7f00000005c0)=@random={'osx.', '/dev/fuse\x00'}, &(0x7f0000000640)=""/75, 0x4b)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)
mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
close_range(r0, r4, 0x0)

1m21.745243922s ago: executing program 0 (id=57):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendto(r0, &(0x7f0000000100)="0700bad5da0f7abb94ae529561beed4fbbaba97564c5f39e644541bd3a45cb9835bb2bff7fb568c90f15682d1efb94ac44443ff43aeecb3f5641f57198628519f8fb26ff23ad9413c2fef9d765ff2079940ce299bfb474772f2e6e153a474d5a6391b0", 0xfffffffffffffe68, 0x404c8d5, 0x0, 0xfffffeeb)
sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)='a', 0x1}], 0x1}}], 0x1, 0x80)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0xbfbb, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0xffffff7f, @loopback, 0x6}, 0x1c)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x4)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m21.698853703s ago: executing program 32 (id=57):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendto(r0, &(0x7f0000000100)="0700bad5da0f7abb94ae529561beed4fbbaba97564c5f39e644541bd3a45cb9835bb2bff7fb568c90f15682d1efb94ac44443ff43aeecb3f5641f57198628519f8fb26ff23ad9413c2fef9d765ff2079940ce299bfb474772f2e6e153a474d5a6391b0", 0xfffffffffffffe68, 0x404c8d5, 0x0, 0xfffffeeb)
sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)='a', 0x1}], 0x1}}], 0x1, 0x80)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0xbfbb, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0xffffff7f, @loopback, 0x6}, 0x1c)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x4)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m2.009192289s ago: executing program 3 (id=203):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x9, 0x7, 0x6, 0x7ffffffe, 0x7, 0x11, 0xe5, 0x3ff, 0xfffffffffffffc00, 0x80000001, 0x3, 0x8, 0x0, 0x5, 0x9, 0x84], 0x2, 0x28010})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000580)={{0x80a0000, 0xeeee0000, 0x10, 0xb, 0x3, 0x5, 0x4, 0x7, 0x0, 0x73, 0x19}, {0x70000, 0x2, 0x9, 0x2, 0x1, 0x43, 0x7f, 0x6, 0x5, 0x6, 0x82, 0xfb}, {0xdddd0000, 0xb000, 0x9, 0x5, 0x1, 0xd3, 0x0, 0x9, 0xff, 0x8, 0x8, 0x81}, {0x200000, 0xd000, 0x10, 0x6, 0x3, 0x2, 0xfd, 0xf8, 0xa, 0xa0, 0x9}, {0x4000, 0x2000, 0x8, 0x3, 0x45, 0x37, 0xab, 0x7f, 0x41, 0x83, 0xf4, 0x6}, {0xeeef0000, 0x191bd000, 0xc, 0x5, 0xb5, 0x6, 0x1, 0x4, 0x80, 0x13, 0x5, 0x40}, {0x6000, 0xba845000, 0xb, 0x5, 0x0, 0x0, 0x4, 0x3, 0x3, 0x7d, 0x2, 0x6c}, {0xc000, 0xeeef0000, 0xc, 0x2, 0xf, 0x7, 0x5, 0xe2, 0xff, 0x8, 0xf8, 0x6}, {0xe000, 0x5}, {0x3000, 0x2}, 0x80000035, 0x0, 0x41000, 0x42064, 0x400000006, 0x9000, 0x70000, [0x400000000000a2, 0x1000, 0x400000000063, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x9, 0x7, 0x6, 0x7ffffffe, 0x7, 0x11, 0xe5, 0x3ff, 0xfffffffffffffc00, 0x80000001, 0x3, 0x8, 0x0, 0x5, 0x9, 0x84], 0x2, 0x28010}) (async)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000580)={{0x80a0000, 0xeeee0000, 0x10, 0xb, 0x3, 0x5, 0x4, 0x7, 0x0, 0x73, 0x19}, {0x70000, 0x2, 0x9, 0x2, 0x1, 0x43, 0x7f, 0x6, 0x5, 0x6, 0x82, 0xfb}, {0xdddd0000, 0xb000, 0x9, 0x5, 0x1, 0xd3, 0x0, 0x9, 0xff, 0x8, 0x8, 0x81}, {0x200000, 0xd000, 0x10, 0x6, 0x3, 0x2, 0xfd, 0xf8, 0xa, 0xa0, 0x9}, {0x4000, 0x2000, 0x8, 0x3, 0x45, 0x37, 0xab, 0x7f, 0x41, 0x83, 0xf4, 0x6}, {0xeeef0000, 0x191bd000, 0xc, 0x5, 0xb5, 0x6, 0x1, 0x4, 0x80, 0x13, 0x5, 0x40}, {0x6000, 0xba845000, 0xb, 0x5, 0x0, 0x0, 0x4, 0x3, 0x3, 0x7d, 0x2, 0x6c}, {0xc000, 0xeeef0000, 0xc, 0x2, 0xf, 0x7, 0x5, 0xe2, 0xff, 0x8, 0xf8, 0x6}, {0xe000, 0x5}, {0x3000, 0x2}, 0x80000035, 0x0, 0x41000, 0x42064, 0x400000006, 0x9000, 0x70000, [0x400000000000a2, 0x1000, 0x400000000063, 0x7]}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

1m1.533472821s ago: executing program 3 (id=206):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0x8, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002080)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00')
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff)
r3 = getegid()
chown(&(0x7f0000000080)='./file0\x00', 0xee00, r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x70000, 0x0)
r4 = openat$cgroup_int(r0, &(0x7f0000000580)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x3c)

1m1.318870707s ago: executing program 3 (id=207):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000040))

1m1.317157787s ago: executing program 3 (id=208):
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, 0x1e, 0xe03, 0x70bd2b, 0x25dfdbfb, {0x7}, [@typed={0x16, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\x86\v\xd8\x7f:_\xa9\xe2\x00\xf7\x8a'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="2e0f785c7f06660fc7b503000000b9ec0200000f320f300f784e0026660fc7b69edf0000b8010000000f01c1ea53000000be00660f303e0fc75fab"}], 0x0, 0x9, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x8dff, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60c800, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x26000, 0xdddd1000, {}, 0x0, 0x5}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f3874000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000001a49000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b6e6f1b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"}})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m1.316861527s ago: executing program 3 (id=209):
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bind$bt_hci(r1, 0x0, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x170, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e21, 0x8001, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0xc0, 0x6, 0x4}, {}, {0x9}, 0x70bd29, 0x3503, 0xa, 0x2, 0x0, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0xfffc}}]}, 0x170}}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x170, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e21, 0x8001, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0xc0, 0x6, 0x4}, {}, {0x9}, 0x70bd29, 0x3503, 0xa, 0x2, 0x0, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0xfffc}}]}, 0x170}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000011000100000100dffddbdf25070000f616", @ANYBLOB], 0x34}], 0x1, 0x0, 0x0, 0x24044090}, 0x880)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@rnullb, 0xffffffffffffffff, 0x0) (async)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@rnullb, 0xffffffffffffffff, 0x0)

1m1.233254418s ago: executing program 3 (id=210):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead)
openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, &(0x7f0000000280))
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r7 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0)

46.09034018s ago: executing program 33 (id=210):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead)
openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, &(0x7f0000000280))
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r7 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0)

42.405639333s ago: executing program 1 (id=318):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
sendmmsg$unix(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="b01f01b588", 0x5}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x841}}], 0x2, 0x11)
pipe(&(0x7f0000000080))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]})

42.404019303s ago: executing program 1 (id=319):
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xaf6f, 0x41) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0xb2193decce28c75f, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) (rerun: 64)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbdc}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x63}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x2) (async, rerun: 64)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (rerun: 64)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400), 0x10400, 0x0) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) (rerun: 32)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000580)="54ba0baaf2469b27a96a9a18070908930291e7cdc4f8c3278760d02d11768839e2d7243199171e8d31e3272a372fd976aab8dbf115550e2bde0f3a553f705a2861ae393af06af95343de3c28546c44005975bd4fff7c6b670d3838a1b0e9d0c24fb59a71e5eedabee066ddb89b2ca6951bbbe03b751066c28a62e69131686671d6911b837c0a59674be37d4f1f57f49bb74ee3e777b487fe9b658a2c633e62a4f2c11cc5e5694bf6b3f1a00a2fdcacb22b6154cc1f6a34fb327c07f4c6644aa0626e03d40bed93392dd681308dfba396c54c095a6b25c8f85207d478b81eed15fddb92c6917453ed8c9aca3053849d", 0xef}], 0x1, 0x80000001, 0xf, 0x1)
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x8000000) (async)
r6 = syz_usb_connect$uac1(0x2, 0xb9, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x2b, 0x30, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x39}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x5, 0x4, [0xa, 0xa, 0x2, 0x3], 0x78}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x4, 0x4, 0x6}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x0, 0x6, "7fb8"}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0xff, "4cb16119"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x6, 0x4, {0x7, 0x25, 0x1, 0xc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x3, 0x1, 0x9}, @as_header={0x7, 0x24, 0x1, 0x3, 0x9, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x10, 0x6, 0x6, {0x7, 0x25, 0x1, 0x4, 0x81}}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x50, 0x7, 0x5, 0xff, 0xff, 0x76}, 0x2f, &(0x7f00000008c0)={0x5, 0xf, 0x2f, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "4b6222fa0b513742c1a9ccd1769892db"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x40, 0x3, 0x9, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x5, 0xe, 0x8000, 0x8}]}, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x423}}]})
syz_usb_control_io$uac1(r6, &(0x7f0000000a40)={0x14, &(0x7f0000000980)={0x20, 0x30, 0x46, {0x46, 0x23, "8251bc908bebfca9283037afd53c423e9573e7bdb5368dacf8a5b816f4476f75dfb5e4632603589ee20cf2aaba94c425f319fed1c57fff4d06c4a763c625c3c5cb08b0ac"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x0, 0x14, 0x5e, "e320cc5b406d2d858f249f892c4ca8869f91e27ff64ade5a80d0fe7caaaa82e75fb9ac217c117ac9e6495ca481cac5e3025190f17129a88bd3d86dd58c5bf6896e41f2453cd4f2995b1b971882ad5e3239f289237d69bc1b6da3b65b792c"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x39}, &(0x7f0000000b80)={0x20, 0x81, 0x1, "ec"}, &(0x7f0000000bc0)={0x20, 0x82, 0x2, "7c11"}, &(0x7f0000000c00)={0x20, 0x83, 0x2, "6e9e"}, &(0x7f0000000c40)={0x20, 0x84, 0x1, "cd"}, &(0x7f0000000c80)={0x20, 0x85, 0x3, "279a9c"}}) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000dc0)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r7, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1856}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20048800) (async)
write$P9_RCREATE(r0, &(0x7f0000000f00)={0x18, 0x73, 0x1, {{0x10, 0x1, 0x7}, 0x9}}, 0x18)
r9 = accept4$packet(r0, &(0x7f0000000f40)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f80)=0x14, 0x1000)
setsockopt$packet_int(r9, 0x107, 0x1f, &(0x7f0000000fc0)=0x5, 0x4)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x3c, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb8}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x4040000) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000011c0)={'syztnl1\x00', &(0x7f0000001140)={'ip6_vti0\x00', <r11=>r8, 0x29, 0x9, 0x8, 0x7, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x10, 0x8, 0xa00000, 0x5}})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14008490}, 0x84)
setsockopt(r3, 0xf, 0x6565, &(0x7f0000001300)="cc53b118d2638dae4c0390a9da06d2f0c720649b457d3abd8ba09450ff94d8ffca04cfc4bd712e11bca11da967c5774d711e24e9b3afb13cc93cff6e74af8487c57992e1b5a4d279b0fdcf39e0e921fd460ba3077e834d8f04b7ebf473e87b6deadd2410022f71e213b3d28757c04e3dcfeb3852c6d7d00272fb6ee84212ccc16ad305e6f206994b211b081328e688996a88", 0x92) (async)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f0000001400)={0xd4, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xb0, 0x2a, [@random={0x7, 0x70, "45b2d523074b4f320d4629f65fab0a0021f2999c6f0354c1c591ec353a6808af94be843d28e9417ab424e3bfb1d5907628d6a04733be70da1fd5710071dc83f304f8e8db0dca15ee4e762aacd1397d67ce60e65ffc061f5a5d98394249e616be20e50b305095ab11783b74d90aa4b645"}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x4, 0x49}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0xad, 0x3}}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x1, 0x1, @device_a, 0x4, 0xfffffffe, 0x4}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8040}, 0x24000000)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000015c0), r0) (rerun: 64)
sendmsg$TIPC_NL_MEDIA_SET(r12, &(0x7f0000001800)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001600)={0x1b8, r13, 0x104, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x54}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK={0x138, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9094}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xafe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa75}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x13b60872}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xaf66}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x792}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5dc0}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0xc080}, 0x0)
mkdirat(r4, &(0x7f0000001840)='./file0\x00', 0x33)

40.90985192s ago: executing program 1 (id=334):
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0x4010, 0x0, 0x0)

40.873486991s ago: executing program 1 (id=335):
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
ftruncate(0xffffffffffffffff, 0x51a9497) (async)
ftruncate(0xffffffffffffffff, 0x51a9497)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b501a, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
dup(r2) (async)
r3 = dup(r2)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0) (async)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)

40.770531004s ago: executing program 1 (id=336):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
sendmmsg$unix(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="b01f01b588", 0x5}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x841}}], 0x2, 0x11)
pipe(&(0x7f0000000080))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]})

40.711560495s ago: executing program 1 (id=337):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x16c0, 0x75e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0xc, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x8, 0x1, {0x22, 0xfe3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x81}}}}}]}}]}}, 0x0)
syz_usb_connect$uac3(0x6, 0xa8, &(0x7f0000000b80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x4249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0xa5, 0x0, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x1, 0x30, 0x4e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x5f, 0x3, 0x0, "3e816b"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x4, 0xe, 0x6, "13bb820c6f8794d6c8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x9, 0xd, {0xa, 0x25, 0x25, 0x101, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4d, 0x1, 0x63, 0x5, "82", "a5fd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf, 0x7, 0x6, {0xa, 0x25, 0x25, 0x3, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x200, 0x1, 0x8, 0x9, 0x8, 0x7}, 0x10, &(0x7f0000000c80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x6, 0x6, 0x1, 0x6, 0x5}]}, 0x1, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x455}}]})
syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x839, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x47, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x5, 0x3, {0x7, 0x25, 0x1, 0xc, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x30, 0x4, 0x80, 0x2, {0x7, 0x25, 0x1, 0x4, 0xa8, 0xf}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x0, 0x6, 0x5, 0x40, 0x7f}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12410000000000ff6a05974e2900010203010902240001010a60090904007f010301020009210100070122b8e65a5691936262950909"], &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x7, 0xe2, 0x8, 0x22}, 0x4d, &(0x7f0000000140)={0x5, 0xf, 0x4d, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x1, 0x1e000, 0x4, [0x30, 0x60cf, 0x3fd8, 0x3ff0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x3, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x180000, 0x0, 0x1, [0x1fe3fc0, 0xc030, 0xff3f00]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x0, 0x0, 0x27b0}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x44c}}, {0xc0, &(0x7f0000000a80)=ANY=[@ANYBLOB="c003885a49e490e7ab9b81f4efcf96a7c070d702146844f7a608b9ae9f4eed7ae1063a4a0db50cc380f39f0a15bbbe84a0ba8a7bf5d1efdf72bd8d3fa57688e54f6bf7edc51e8a912f36eb45968a4e696517b78f23faeb92c8f5ba1df74cd8f4d54cca6c78991bc8768b541be32229004382bc647e8379eb0ef543f1fb71a089461e68ae4feafe50e4d7581fea56f459d45a53f4e7938844197c7fdb011b6101a61b2eaf3e7516ecc831817a22b8cee26e30b9db4322b2ee7d2dc355f6fe473574d57ef2126b99a60abf9c1fdf95867c07692f3ba41116949103f2714d5663aa83e9ef"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x810}}]})
r0 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0xaf, 0x6, 0x2}, {0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x9, 0x4}, {0x9, 0x5, 0x1, 0x3, 0x3ff, 0xfe, 0xb}}}}}}]}}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="800100001000010000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000200000000000000000000000000001234320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020002000000000000000000480002006469676573745f6e756c6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002006369706865725f6e756c6c"], 0x180}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000800}, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x8001, &(0x7f00000009c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028d060000007d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c0300000000000000724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
r4 = socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000100)={'vlan0\x00', 0xec3})
syz_usb_control_io$sierra_net(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000440)={0x40, 0xc, 0xc, {0xc, 0xc, "596a0e1daa324ab233ee"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000500)={0x20, 0x10, 0xb5, "1cd758430f000e84b23eb03980d2a3821067719cbe38f13808d1a97288a59cba96b41621490ad18cdbf2cb5c3cf6c163f98b90c01d963b8f8d4826e7a34c1af7ce7f33c5efcc585dd1f495ca2b4c6f7e12488adc0df48d17b8d6c09feafb46f1fae823741f93b05c3460870842a9908e6a30c9ec2613a548d75d7fd3988fe9e418c032095a9fd31bc51ac173e2a8e8b9241bc536c0519ae7271339791800b3beccab809e471f13d793b6b743a73e52ee5134d90912"}, &(0x7f00000005c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000a00)={0x21, 0x0, 0x4, "747250be"}})

40.619203697s ago: executing program 34 (id=337):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x16c0, 0x75e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0xc, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x8, 0x1, {0x22, 0xfe3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x81}}}}}]}}]}}, 0x0)
syz_usb_connect$uac3(0x6, 0xa8, &(0x7f0000000b80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x4249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0xa5, 0x0, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x1, 0x30, 0x4e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x5f, 0x3, 0x0, "3e816b"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x4, 0xe, 0x6, "13bb820c6f8794d6c8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x9, 0xd, {0xa, 0x25, 0x25, 0x101, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4d, 0x1, 0x63, 0x5, "82", "a5fd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf, 0x7, 0x6, {0xa, 0x25, 0x25, 0x3, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x200, 0x1, 0x8, 0x9, 0x8, 0x7}, 0x10, &(0x7f0000000c80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x6, 0x6, 0x1, 0x6, 0x5}]}, 0x1, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x455}}]})
syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x839, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x47, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x5, 0x3, {0x7, 0x25, 0x1, 0xc, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x30, 0x4, 0x80, 0x2, {0x7, 0x25, 0x1, 0x4, 0xa8, 0xf}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x0, 0x6, 0x5, 0x40, 0x7f}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x807}}]})
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12410000000000ff6a05974e2900010203010902240001010a60090904007f010301020009210100070122b8e65a5691936262950909"], &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x7, 0xe2, 0x8, 0x22}, 0x4d, &(0x7f0000000140)={0x5, 0xf, 0x4d, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x1, 0x1e000, 0x4, [0x30, 0x60cf, 0x3fd8, 0x3ff0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x3, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x180000, 0x0, 0x1, [0x1fe3fc0, 0xc030, 0xff3f00]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x0, 0x0, 0x27b0}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x44c}}, {0xc0, &(0x7f0000000a80)=ANY=[@ANYBLOB="c003885a49e490e7ab9b81f4efcf96a7c070d702146844f7a608b9ae9f4eed7ae1063a4a0db50cc380f39f0a15bbbe84a0ba8a7bf5d1efdf72bd8d3fa57688e54f6bf7edc51e8a912f36eb45968a4e696517b78f23faeb92c8f5ba1df74cd8f4d54cca6c78991bc8768b541be32229004382bc647e8379eb0ef543f1fb71a089461e68ae4feafe50e4d7581fea56f459d45a53f4e7938844197c7fdb011b6101a61b2eaf3e7516ecc831817a22b8cee26e30b9db4322b2ee7d2dc355f6fe473574d57ef2126b99a60abf9c1fdf95867c07692f3ba41116949103f2714d5663aa83e9ef"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x810}}]})
r0 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0xaf, 0x6, 0x2}, {0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x9, 0x4}, {0x9, 0x5, 0x1, 0x3, 0x3ff, 0xfe, 0xb}}}}}}]}}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="800100001000010000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000200000000000000000000000000001234320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020002000000000000000000480002006469676573745f6e756c6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002006369706865725f6e756c6c"], 0x180}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000800}, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x8001, &(0x7f00000009c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028d060000007d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c0300000000000000724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
r4 = socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000100)={'vlan0\x00', 0xec3})
syz_usb_control_io$sierra_net(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000440)={0x40, 0xc, 0xc, {0xc, 0xc, "596a0e1daa324ab233ee"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000500)={0x20, 0x10, 0xb5, "1cd758430f000e84b23eb03980d2a3821067719cbe38f13808d1a97288a59cba96b41621490ad18cdbf2cb5c3cf6c163f98b90c01d963b8f8d4826e7a34c1af7ce7f33c5efcc585dd1f495ca2b4c6f7e12488adc0df48d17b8d6c09feafb46f1fae823741f93b05c3460870842a9908e6a30c9ec2613a548d75d7fd3988fe9e418c032095a9fd31bc51ac173e2a8e8b9241bc536c0519ae7271339791800b3beccab809e471f13d793b6b743a73e52ee5134d90912"}, &(0x7f00000005c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000a00)={0x21, 0x0, 0x4, "747250be"}})

5.102264322s ago: executing program 2 (id=643):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x3, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa5, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0xcf9, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x0, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x8, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x7, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0xa, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10022, 0x0)
recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/193, 0xc1}, {0x0}], 0x2, &(0x7f0000000700)=""/6, 0x6}, 0x40010040)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.753197931s ago: executing program 4 (id=649):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x3, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa5, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0xcf9, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x0, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x8, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x7, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0xa, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10022, 0x0)
recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)=@phonet, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/193, 0xc1}, {0x0}], 0x2, &(0x7f0000000700)=""/6, 0x6}, 0x40010040)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4.693541102s ago: executing program 4 (id=651):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000))
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2)
keyctl$clear(0x7, r1) (async)
keyctl$clear(0x7, r1)

4.528316886s ago: executing program 6 (id=654):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x4b564d04, 0x9}}], 0x20})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 2)

3.449194393s ago: executing program 4 (id=655):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x88f8}, @val={0x2, 0x6, 0x5, 0x6, 0x6, 0x8}, @eth={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@x25={0x805, {0x0, 0x7, 0xfd}}}}}, 0x1f)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0090000180c200000300000000000086dd694fd20300000000000000000000080000000000000000919ad798e075cad98450dba2c306937bbbff02"], 0x42)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44004c51)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

3.371025535s ago: executing program 4 (id=656):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000002000/0x1000)=nil, 0x1000}, 0x1})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
timer_create(0xfffffffd, 0x0, &(0x7f0000000000)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_gettime(r2, &(0x7f0000000080))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
setresgid(0x0, 0x0, 0xee01)
statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x40, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r5, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002240)={0x14, 0x1, 0x9, 0x3, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008811}, 0x4048800)
ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f0000000040))

3.339939466s ago: executing program 2 (id=657):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c, 0x0, 0x0, 0x4}, {0x6}]}, 0x10)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5)
pwrite64(r1, &(0x7f0000000100)='\n', 0x1, 0x8000c5b)
fallocate(r1, 0x10, 0x10000004000, 0x4002) (async)
fallocate(r1, 0x10, 0x10000004000, 0x4002)

3.277306628s ago: executing program 6 (id=658):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x4000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{<r3=>r1, &(0x7f0000000000)='\']/$&\\[.-\x9a--\x00', 0xa0080, &(0x7f0000000180)={@align=0x7, {0x2, 0x0, 0x1, 0x4}}, 0x3cd, &(0x7f00000001c0), &(0x7f0000000240)=0x7}, {[0x7fff, 0x7fff, 0x13f2, 0x8000]}, 0xc, 0xaf, &(0x7f0000000340)=""/175})
mkdirat(r3, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='ramfs\x00', 0x10, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
write(r4, 0x0, 0x0)
r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=[@wrmsr={0x65, 0x20, {0x372, 0x9}}], 0x20})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.277017468s ago: executing program 6 (id=659):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x3, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa5, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0xcf9, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x0, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x8, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x7, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0xa, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10022, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.276742948s ago: executing program 2 (id=660):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100100000040f80600b04000010203010902"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x604000)
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x40045506, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f0000000080)=0x4)

2.38052236s ago: executing program 6 (id=666):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x4b564d04, 0x9}}], 0x20})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 3)

1.147916831s ago: executing program 4 (id=668):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0x6, 0x4)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x1, 0x2, 0x54000, 0x1000, &(0x7f00007e3000/0x1000)=nil}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async)
sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x9, @remote, 0x8}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r0, 0x0, r5, 0x0, 0xf3a, 0x0)

1.138243201s ago: executing program 4 (id=669):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x74, 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0)
wait4(r0, &(0x7f0000000040), 0x1000000, &(0x7f0000000080))
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffff, 0x2}, 0x6)
setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0x20, 0x4)
ioctl$TCSBRKP(r1, 0x5425, 0x9)
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)

1.125873712s ago: executing program 5 (id=670):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0x1, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x4000], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x8, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000200)=' ')
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)=@acquire={0x134, 0x17, 0x505, 0x70bd28, 0x25dfdbfe, {{@in=@loopback, 0x4d3, 0xff}, @in=@remote, {@in=@multicast2, @in=@multicast2, 0x4e21, 0x9, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x6c}, {{@in=@loopback, @in6=@remote, 0x4e23, 0x1, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x128}, {0xffffffff, 0x4, 0x0, 0x2, 0xa004, 0x9, 0x7, 0xc6}, {0x6, 0x5, 0xb}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x3}, 0x0, 0x9, 0x8000, 0x70bd2b}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xd1}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000091}, 0x4004)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000100)={0x0, 0x4, 0x6, 0x0, 0x80010, 0xfffffffd})
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000a081000418e00000004fcff", 0x58}], 0x1)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x4b564d04, 0x9}}], 0x20})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

949.240826ms ago: executing program 2 (id=671):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]})

941.258587ms ago: executing program 2 (id=672):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 32)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 64)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0xd809839e65f39dea}, "50a76c25e19150c2", "0100", "af95ddae", "567e207ac3fa5496"}, 0x28)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x1, @local}, 0x4a, {0x2, 0x0, @local}}) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x840, @mcast1, 0x1000008}, 0x1c)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async)
sendmmsg$inet(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)='F', 0x1}], 0x1}}], 0x1, 0x24004c41) (async)
socket$inet6(0xa, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
io_setup(0x200, &(0x7f0000000340)=<r6=>0x0)
ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 32)
r7 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32)
io_setup(0x3ff, &(0x7f0000000500)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x2, r7, 0x0, 0x0, 0x4}]) (async, rerun: 32)
io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000440)={0x18, 0x7000000, 0x1f, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x3}]) (async, rerun: 32)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000)

361.912451ms ago: executing program 6 (id=673):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x88f8}, @val={0x2, 0x6, 0x5, 0x6, 0x6, 0x8}, @eth={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@x25={0x805, {0x0, 0x7, 0xfd, "bfba8f09bc047950095c0d0bee486785c708b9875d600dd8360062fda951efbb8810110e79e26ce4c018ce7605485c854f2c526d19b9a8c3fad1af35d6f264a44ab0de2fbf6da7c9cbfea59d"}}}}}, 0x6b)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0090000180c200000300000000000086dd694fd20300000000000000000000080000000000000000919ad798e075cad98450dba2c306937bbbff02"], 0x42)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44004c51)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

261.994534ms ago: executing program 6 (id=674):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x3, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa5, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0xcf9, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x0, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x8, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x7, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0xa, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10022, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

169.172406ms ago: executing program 5 (id=675):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x3, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa5, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0xcf9, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x0, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x8, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x7, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0xa, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10022, 0x0)
recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)=@phonet, 0x80, 0x0, 0x0, &(0x7f0000000700)=""/6, 0x6}, 0x40010040)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

144.787816ms ago: executing program 5 (id=676):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x4b564d04, 0x9}}], 0x20})
ioctl$KVM_RUN(r3, 0xae80, 0x25)

94.565318ms ago: executing program 5 (id=677):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000a, 0x40010, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00')
pread64(r0, &(0x7f0000000040)=""/102391, 0x18ff7, 0x8ca8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019040)=ANY=[@ANYBLOB="50010000100001000100000000f573a97f4556a84000000000000000000000000000000000000000000000000000200000000000000000000a00000000000000", @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000012343200000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff3400000a000000000000000000000060001200726663343130362867636d2861657729290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040))
mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x9, 0x6}, @mss={0x2, 0xfffffffa}, @sack_perm, @timestamp], 0x4)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8583, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x400448de, &(0x7f0000000040))

1.36981ms ago: executing program 5 (id=678):
r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
recvmsg$unix(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000040)
accept4$unix(r2, 0x0, &(0x7f0000000040), 0x430c81ff95e820ec)

947.74µs ago: executing program 2 (id=679):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f00000005c0)={0x0, r1, 0xffffffffffffffff, 0x8001, 0x1, '\x00', {0xfffffffffffff7c8, 0x6, 0xfff, 0x2, 0x43, 0x1, 0xffffffff, 0x8, {0x4, 0x6a09}, {0x9, 0x2}, {0x3, 0xffffff7f}, 0xffffffff00000000, 0x7, 0x4, 0x78d30f04, 0x7fffffff, 0xfd0b, 0x8001, 0x0, 0x800, 0x7f, '\x00', 0x40, 0x6, 0x2d0, 0xd}})
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r2, 0x0)
io_setup(0x5, &(0x7f00000000c0))
io_setup(0x4, &(0x7f0000000000))
r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000001c0)={r3, &(0x7f0000000040)='/selinux/load\x00', 0x4300, &(0x7f0000000100)={@_ha_fsid={[0x6, 0x4]}, {0xfffc, 0x4, 0x9, 0x400}}, 0xff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x200})
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={<r4=>r0, 0x3, 0x101, 0x2})
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f00000003c0)=0xe8)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f00000041c0)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
syz_fuse_handle_req(r6, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x1, 0x3, 0x8000009, 0x0, 0x80, {0x1, 0x80000000000, 0x1, 0xb, 0x3ff, 0xdbf, 0x10, 0x0, 0x80, 0x8000, 0x2, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f000000a280)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93a51fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab06218d5484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc822642255309b48f47a5b5ef49f69808b91bde955277b6525f55436ffeba0bfa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691925c94ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c841bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe458d0ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a782a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10d1328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430f5fb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aa1ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a9d7698b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1faa55d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a48d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f7613d237f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf557910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e006531836c2fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec800", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x90, 0x0, 0x8, {0x4, 0x100000000001, 0x6, 0x0, 0x0, 0x3881fffc, {0x5, 0x400fff, 0x47ffff, 0x0, 0x3, 0x5, 0xb, 0x0, 0x10000, 0x4000, 0x8, r8, r9, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f00000004c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@default_permissions}, {@allow_other}, {@allow_other}, {@default_permissions}], [{@fowner_gt}, {@hash}]}})

0s ago: executing program 5 (id=680):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]})

kernel console output (not intermixed with test programs):

 structure: name m, dev fc00
[   66.809074][ T1260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.245'.
[   66.854200][   T36] audit: type=1400 audit(1791324185.590:930): avc:  denied  { connect } for  pid=1261 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   66.876720][  T827] usb 5-1: USB disconnect, device number 10
[   66.960291][   T36] audit: type=1400 audit(1791324185.690:931): avc:  denied  { bind } for  pid=1265 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   67.029692][   T36] audit: type=1400 audit(1791324185.710:932): avc:  denied  { map } for  pid=1265 comm="syz.2.248" path="socket:[39188]" dev="sockfs" ino=39188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   67.088072][ T1270] FAULT_INJECTION: forcing a failure.
[   67.088072][ T1270] name failslab, interval 1, probability 0, space 0, times 0
[   67.111006][   T36] audit: type=1400 audit(1791324185.710:933): avc:  denied  { read } for  pid=1265 comm="syz.2.248" path="socket:[39188]" dev="sockfs" ino=39188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   67.138086][ T1270] CPU: 0 UID: 0 PID: 1270 Comm: syz.2.250 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[   67.138114][ T1270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   67.138129][ T1270] Call Trace:
[   67.138134][ T1270]  <TASK>
[   67.138141][ T1270]  __dump_stack+0x21/0x30
[   67.138179][ T1270]  dump_stack_lvl+0x140/0x1c0
[   67.138203][ T1270]  ? __cfi_dump_stack_lvl+0x10/0x10
[   67.138227][ T1270]  ? ref_tracker_alloc+0x356/0x5b0
[   67.138252][ T1270]  ? __cfi_ref_tracker_alloc+0x10/0x10
[   67.138275][ T1270]  ? __netlink_kernel_create+0x173/0x8a0
[   67.138300][ T1270]  ? rtnetlink_net_init+0xb2/0x140
[   67.138320][ T1270]  dump_stack+0x19/0x20
[   67.138343][ T1270]  should_fail_ex+0x3c2/0x510
[   67.138364][ T1270]  ? __netlink_kernel_create+0x2bb/0x8a0
[   67.138389][ T1270]  should_failslab+0xac/0x100
[   67.138412][ T1270]  __kmalloc_noprof+0x69/0x510
[   67.138429][ T1270]  ? sock_init_data_uid+0x5da/0x870
[   67.138448][ T1270]  ? __netlink_kernel_create+0x2bb/0x8a0
[   67.138473][ T1270]  __netlink_kernel_create+0x2bb/0x8a0
[   67.138498][ T1270]  ? __cfi___netlink_kernel_create+0x10/0x10
[   67.138523][ T1270]  ? __asan_memcpy+0x5a/0x80
[   67.138541][ T1270]  rtnetlink_net_init+0xb2/0x140
[   67.138560][ T1270]  ? __cfi_rtnetlink_net_init+0x10/0x10
[   67.138579][ T1270]  ? __cfi_rtnetlink_rcv+0x10/0x10
[   67.138599][ T1270]  ? __cfi_rtnetlink_bind+0x10/0x10
[   67.138618][ T1270]  ? __kasan_check_write+0x18/0x20
[   67.138635][ T1270]  ? __mutex_init+0xa6/0x1a0
[   67.138661][ T1270]  ops_init+0x302/0x5d0
[   67.138678][ T1270]  ? __kasan_check_write+0x18/0x20
[   67.138696][ T1270]  ? rwsem_read_trylock+0x275/0x5a0
[   67.138723][ T1270]  setup_net+0x227/0x9b0
[   67.138739][ T1270]  ? copy_net_ns+0xa20/0xa20
[   67.138756][ T1270]  ? down_read_killable+0x7f/0x100
[   67.138781][ T1270]  ? __cfi_down_read_killable+0x10/0x10
[   67.138807][ T1270]  copy_net_ns+0x4fc/0xa20
[   67.138824][ T1270]  create_new_namespaces+0x390/0x6f0
[   67.138851][ T1270]  unshare_nsproxy_namespaces+0x124/0x180
[   67.138878][ T1270]  ksys_unshare+0x4f9/0x920
[   67.138902][ T1270]  ? __cfi_ksys_unshare+0x10/0x10
[   67.138926][ T1270]  ? __kasan_check_write+0x18/0x20
[   67.138945][ T1270]  __x64_sys_unshare+0x3c/0x50
[   67.138969][ T1270]  x64_sys_call+0x2998/0x2ee0
[   67.138985][ T1270]  do_syscall_64+0x57/0xf0
[   67.139001][ T1270]  ? clear_bhb_loop+0x50/0xa0
[   67.139025][ T1270]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   67.139048][ T1270] RIP: 0033:0x7f9af659e199
[   67.139062][ T1270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.139077][ T1270] RSP: 002b:00007f9af73ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   67.139096][ T1270] RAX: ffffffffffffffda RBX: 00007f9af6825fa0 RCX: 00007f9af659e199
[   67.139109][ T1270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000
[   67.139120][ T1270] RBP: 00007f9af66358e0 R08: 0000000000000000 R09: 0000000000000000
[   67.139131][ T1270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.139141][ T1270] R13: 00007f9af6826038 R14: 00007f9af6825fa0 R15: 00007ffc832924c8
[   67.139161][ T1270]  </TASK>
[   67.659085][   T36] audit: type=1400 audit(1791324186.390:934): avc:  denied  { unmount } for  pid=499 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   67.737467][   T66] usb 2-1: USB disconnect, device number 15
[   67.789990][   T36] audit: type=1400 audit(1791324186.520:935): avc:  denied  { mounton } for  pid=1278 comm="syz.2.253" path="/52/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   67.813584][ T1280] FAULT_INJECTION: forcing a failure.
[   67.813584][ T1280] name failslab, interval 1, probability 0, space 0, times 0
[   67.826925][ T1279] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3)
[   67.838011][ T1279] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(4)
[   67.847942][ T1280] CPU: 0 UID: 0 PID: 1280 Comm: syz.1.251 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[   67.847966][ T1280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   67.847978][ T1280] Call Trace:
[   67.847983][ T1280]  <TASK>
[   67.847989][ T1280]  __dump_stack+0x21/0x30
[   67.848018][ T1280]  dump_stack_lvl+0x140/0x1c0
[   67.848043][ T1280]  ? __cfi_dump_stack_lvl+0x10/0x10
[   67.848067][ T1280]  ? __cfi_futex_wake_mark+0x10/0x10
[   67.848084][ T1280]  ? __kasan_check_read+0x15/0x20
[   67.848109][ T1280]  dump_stack+0x19/0x20
[   67.848133][ T1280]  should_fail_ex+0x3c2/0x510
[   67.848155][ T1280]  should_failslab+0xac/0x100
[   67.848178][ T1280]  __kmalloc_cache_noprof+0x41/0x470
[   67.848197][ T1280]  ? file_f_owner_allocate+0x92/0x220
[   67.848218][ T1280]  file_f_owner_allocate+0x92/0x220
[   67.848237][ T1280]  ? __kasan_check_write+0x18/0x20
[   67.848255][ T1280]  do_fcntl+0xbe2/0x1580
[   67.848275][ T1280]  ? __cfi_selinux_file_fcntl+0x10/0x10
[   67.848294][ T1280]  ? check_fcntl_cmd+0xb0/0xb0
[   67.848315][ T1280]  ? mutex_unlock+0x90/0x240
[   67.848340][ T1280]  ? bpf_lsm_file_fcntl+0xd/0x20
[   67.848364][ T1280]  ? security_file_fcntl+0x3e/0x110
[   67.848381][ T1280]  __se_sys_fcntl+0xe4/0x180
[   67.848401][ T1280]  __x64_sys_fcntl+0x7f/0xa0
[   67.848420][ T1280]  x64_sys_call+0x1cb3/0x2ee0
[   67.848436][ T1280]  do_syscall_64+0x57/0xf0
[   67.848453][ T1280]  ? clear_bhb_loop+0x50/0xa0
[   67.848477][ T1280]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   67.848499][ T1280] RIP: 0033:0x7f0a6739e199
[   67.848513][ T1280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.848527][ T1280] RSP: 002b:00007f0a6833a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[   67.848546][ T1280] RAX: ffffffffffffffda RBX: 00007f0a67625fa0 RCX: 00007f0a6739e199
[   67.848559][ T1280] RDX: 00002000000023c0 RSI: 000000000000000f RDI: 0000000000000004
[   67.848570][ T1280] RBP: 00007f0a674358e0 R08: 0000000000000000 R09: 0000000000000000
[   67.848581][ T1280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.848592][ T1280] R13: 00007f0a67626038 R14: 00007f0a67625fa0 R15: 00007ffc5c6d4b38
[   67.848606][ T1280]  </TASK>
[   68.352147][  T827] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   68.432177][   T66] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   68.502142][  T827] usb 3-1: Using ep0 maxpacket: 16
[   68.508378][  T827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.519683][  T827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.539753][  T827] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   68.562346][  T827] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   68.582999][  T827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.593719][   T66] usb 2-1: Using ep0 maxpacket: 32
[   68.604412][   T66] usb 2-1: unable to get BOS descriptor or descriptor too short
[   68.622348][   T66] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[   68.638961][   T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   68.661198][  T827] usb 3-1: config 0 descriptor??
[   68.670049][   T36] audit: type=1400 audit(1791324187.400:936): avc:  denied  { mount } for  pid=1289 comm="syz.4.257" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   68.727026][   T66] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[   68.755329][   T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.777690][   T66] usb 2-1: Product: syz
[   68.781911][   T66] usb 2-1: Manufacturer: syz
[   68.796878][   T66] usb 2-1: SerialNumber: syz
[   69.012190][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   69.020543][   T36] audit: type=1400 audit(1791324187.750:937): avc:  denied  { write } for  pid=1284 comm="syz.1.254" name="sockstat" dev="proc" ino=4026532323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   69.056061][ T1285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.072368][ T1285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.091991][ T1285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.113335][ T1297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.123050][ T1287] FAULT_INJECTION: forcing a failure.
[   69.123050][ T1287] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   69.146428][ T1287] CPU: 0 UID: 0 PID: 1287 Comm: syz.2.256 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[   69.146457][ T1287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   69.146468][ T1287] Call Trace:
[   69.146474][ T1287]  <TASK>
[   69.146480][ T1287]  __dump_stack+0x21/0x30
[   69.146514][ T1287]  dump_stack_lvl+0x140/0x1c0
[   69.146539][ T1287]  ? __cfi_dump_stack_lvl+0x10/0x10
[   69.146565][ T1287]  dump_stack+0x19/0x20
[   69.146588][ T1287]  should_fail_ex+0x3c2/0x510
[   69.146610][ T1287]  should_fail+0xf/0x20
[   69.146629][ T1287]  should_fail_usercopy+0x1e/0x30
[   69.146652][ T1287]  _copy_to_user+0x24/0xa0
[   69.146678][ T1287]  put_timespec64+0xc9/0x130
[   69.146702][ T1287]  ? __cfi_put_timespec64+0x10/0x10
[   69.146729][ T1287]  __x64_sys_recvmmsg+0x1de/0x250
[   69.146746][ T1287]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[   69.146763][ T1287]  ? switch_fpu_return+0x12/0x20
[   69.146785][ T1287]  x64_sys_call+0x292c/0x2ee0
[   69.146800][ T1287]  do_syscall_64+0x57/0xf0
[   69.146818][ T1287]  ? clear_bhb_loop+0x50/0xa0
[   69.146842][ T1287]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   69.146865][ T1287] RIP: 0033:0x7f9af659e199
[   69.146879][ T1287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.146894][ T1287] RSP: 002b:00007f9af73ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   69.146913][ T1287] RAX: ffffffffffffffda RBX: 00007f9af6825fa0 RCX: 00007f9af659e199
[   69.146926][ T1287] RDX: 0000000000000001 RSI: 00002000000037c0 RDI: 0000000000000005
[   69.146937][ T1287] RBP: 00007f9af66358e0 R08: 0000200000003700 R09: 0000000000000000
[   69.146948][ T1287] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000
[   69.146959][ T1287] R13: 00007f9af6826038 R14: 00007f9af6825fa0 R15: 00007ffc832924c8
[   69.146974][ T1287]  </TASK>
[   69.148377][  T827] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[   69.342991][ T1285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.351627][    T9] usb 5-1: device descriptor read/64, error -71
[   69.368539][ T1297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.555250][   T66] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3)
[   69.585020][   T66] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3)
[   69.602689][   T66] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3)
[   69.611169][   T66] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[   69.619060][  T827] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[   69.636920][  T827] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[   69.652174][    T9] usb 5-1: device descriptor read/64, error -71
[   69.658693][  T827] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[   69.667584][   T66] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3)
[   69.682763][   T66] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3)
[   69.692342][  T827] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[   69.699576][  T827] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[   69.717445][   T66] usb 2-1: 3:0: failed to get current value for ch 1 (-71)
[   69.727019][   T66] usb 2-1: 3:0: failed to get current value for ch 2 (-71)
[   69.742171][  T827] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[   69.750105][   T66] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[   69.759608][  T827] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[   69.773473][   T66] usb 2-1: 3:0: cannot get min/max values for control 12 (id 3)
[   69.791345][  T827] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[   69.799353][   T66] usb 2-1: 3:0: cannot get min/max values for control 12 (id 3)
[   69.818516][  T827] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input8
[   69.852282][   T66] usb 2-1: USB disconnect, device number 16
[   69.867116][  T827] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   69.892157][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   69.922390][  T827] usb 3-1: USB disconnect, device number 22
[   70.042179][    T9] usb 5-1: device descriptor read/64, error -71
[   70.282218][    T9] usb 5-1: device descriptor read/64, error -71
[   70.380735][   T36] audit: type=1400 audit(1791324189.110:938): avc:  denied  { remount } for  pid=1307 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   70.408131][    T9] usb usb5-port1: attempt power cycle
[   70.463256][  T630] Bluetooth: hci0: Frame reassembly failed (-84)
[   70.762145][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   70.794981][    T9] usb 5-1: device descriptor read/8, error -71
[   70.933106][    T9] usb 5-1: device descriptor read/8, error -71
[   71.172178][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   71.203074][    T9] usb 5-1: device descriptor read/8, error -71
[   71.333062][    T9] usb 5-1: device descriptor read/8, error -71
[   71.442222][    T9] usb usb5-port1: unable to enumerate USB device
[   71.647158][   T36] audit: type=1400 audit(1791324190.380:939): avc:  denied  { write } for  pid=1322 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   71.702506][   T36] audit: type=1400 audit(1791324190.380:940): avc:  denied  { accept } for  pid=1322 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   71.857298][ T1330] 9pnet_fd: Insufficient options for proto=fd
[   71.932178][  T494] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   72.103754][  T494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.122148][  T494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.142284][  T494] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   72.151423][  T494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.180275][  T494] usb 2-1: config 0 descriptor??
[   72.232183][  T827] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[   72.383132][  T827] usb 5-1: config 1 has an invalid interface number: 110 but max is 0
[   72.402153][  T827] usb 5-1: config 1 has no interface number 0
[   72.408375][  T827] usb 5-1: config 1 interface 110 altsetting 5 endpoint 0x5 has invalid maxpacket 1024, setting to 8
[   72.429704][  T827] usb 5-1: config 1 interface 110 altsetting 5 endpoint 0xE has invalid maxpacket 32, setting to 8
[   72.460780][  T827] usb 5-1: config 1 interface 110 has no altsetting 0
[   72.472734][  T827] usb 5-1: string descriptor 0 read error: -22
[   72.479043][  T827] usb 5-1: New USB device found, idVendor=06cd, idProduct=011b, bcdDevice=f3.96
[   72.498452][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   72.504617][  T334] Bluetooth: hci0: command 0x1003 tx timeout
[   72.512323][  T827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.534807][ T1332] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   72.593852][  T494] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x2
[   72.605405][  T494] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[   72.748202][ T1332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.768687][ T1332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.993718][ T1327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.012332][ T1327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.231421][ T1327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.250938][ T1327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.263311][  T494] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device
[   73.270728][  T494] pyra 0003:1E7D:2CF6.0007: couldn't install mouse
[   73.288572][  T494] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71
[   73.312400][   T66] usb 5-1: USB disconnect, device number 15
[   73.350175][   T36] audit: type=1400 audit(1791324192.060:941): avc:  denied  { map } for  pid=1334 comm="syz.4.270" path="/56/dev/sda" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   73.385894][  T494] usb 2-1: USB disconnect, device number 17
[   73.462994][ T1315] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   73.534116][   T36] audit: type=1400 audit(1791324192.270:942): avc:  denied  { remount } for  pid=1341 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   73.696581][ T1357] netlink: 'syz.2.276': attribute type 4 has an invalid length.
[   73.724442][ T1358] netlink: 'syz.2.276': attribute type 4 has an invalid length.
[   73.749364][ T1357] netlink: 'syz.2.276': attribute type 4 has an invalid length.
[   73.777733][ T1358] netlink: 'syz.2.276': attribute type 4 has an invalid length.
[   73.821434][   T36] audit: type=1400 audit(1791324192.550:943): avc:  denied  { getopt } for  pid=1356 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   74.129039][ T1369] cgroup: release_agent respecified
[   74.473929][   T36] audit: type=1400 audit(1791324193.210:944): avc:  denied  { getopt } for  pid=1374 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   74.512167][   T66] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   74.702549][   T66] usb 3-1: New USB device found, idVendor=0e41, idProduct=5058, bcdDevice= 0.40
[   74.721775][   T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.750593][ T1385] netlink: 'syz.4.283': attribute type 4 has an invalid length.
[   74.760471][   T66] usb 3-1: Product: Е
[   74.772139][   T66] usb 3-1: Manufacturer: 
[   74.776757][   T66] usb 3-1: SerialNumber: syz
[   74.876481][  T950] Bluetooth: hci0: Frame reassembly failed (-84)
[   74.959363][ T1390] rust_binder: 1389:1390 failed to claim space for a BINDER_TYPE_PTR (offset: 120, limit: 120, size: 4)
[   74.972174][   T36] audit: type=1400 audit(1791324193.690:945): avc:  denied  { transfer } for  pid=1389 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   75.011779][ T1390] rust_binder: 1389:1390 error while translating object: EINVAL
[   75.054390][   T36] audit: type=1400 audit(1791324193.750:946): avc:  denied  { mounton } for  pid=1372 comm="syz.2.280" path="/65/file0" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   75.087418][ T1390] rust_binder: Failure in copy_transaction_data: EINVAL
[   75.087445][ T1390] rust_binder: 1389:1390 transaction call to 1389:0 failed EINVAL, code 0 size 96-24
[   75.146380][   T36] audit: type=1400 audit(1791324193.750:947): avc:  denied  { audit_control } for  pid=1372 comm="syz.2.280" capability=30  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   75.232162][   T36] audit: type=1400 audit(1791324193.750:948): avc:  denied  { append } for  pid=1372 comm="syz.2.280" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   75.427317][   T66] usb 3-1: MIDIStreaming interface descriptor not found
[   75.440868][   T66] usb 3-1: USB disconnect, device number 23
[   75.883315][ T1398] Config c/1 of g1 needs at least one function.
[   75.889626][ T1398] udc dummy_udc.0: failed to start g1: -22
[   75.902176][ T1398] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[   75.927779][ T1398] UDC core: g1: couldn't find an available UDC or it's busy
[   76.619928][ T1413] overlayfs: failed to resolve './file1': -2
[   76.892295][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   76.898463][  T334] Bluetooth: hci0: command 0x1003 tx timeout
[   76.975431][  T364] Bluetooth: hci1: Frame reassembly failed (-84)
[   77.251700][ T1432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6262 sclass=netlink_route_socket pid=1432 comm=syz.1.297
[   77.423550][  T630] bridge_slave_1: left allmulticast mode
[   77.430688][  T630] bridge_slave_1: left promiscuous mode
[   77.436792][  T630] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.444523][  T630] bridge_slave_0: left allmulticast mode
[   77.450438][  T630] bridge_slave_0: left promiscuous mode
[   77.456528][  T630] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.515943][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.523390][ T1437] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.530465][ T1437] bridge_slave_0: entered allmulticast mode
[   77.537230][ T1437] bridge_slave_0: entered promiscuous mode
[   77.544292][  T630] veth1_macvtap: left promiscuous mode
[   77.550169][  T630] veth0_vlan: left promiscuous mode
[   77.601351][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.610352][ T1437] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.620332][ T1437] bridge_slave_1: entered allmulticast mode
[   77.630381][   T66] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[   77.639579][ T1437] bridge_slave_1: entered promiscuous mode
[   77.689591][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.696680][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.703977][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.711015][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.718558][ T1385] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   77.743769][ T1442] overlayfs: failed to resolve './file1': -2
[   77.774214][ T1445] Invalid logical block size (2)
[   77.783544][  T364] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.791002][  T364] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.803596][   T66] usb 2-1: unable to get BOS descriptor or descriptor too short
[   77.811686][   T66] usb 2-1: not running at top speed; connect to a high speed hub
[   77.833042][  T364] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.840118][  T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.855661][   T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.875090][   T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   77.886367][  T364] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.893462][  T364] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.911847][   T66] usb 2-1: string descriptor 0 read error: -22
[   77.919369][ T1437] veth0_vlan: entered promiscuous mode
[   77.925253][   T66] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   77.940192][   T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.950946][ T1437] veth1_macvtap: entered promiscuous mode
[   77.963863][   T66] usb 2-1: 0:2 : does not exist
[   77.982887][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   77.982900][   T36] audit: type=1400 audit(1791324196.720:954): avc:  denied  { mounton } for  pid=1437 comm="syz-executor" path="/root/syzkaller.0AsVbS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   78.438524][   T36] audit: type=1400 audit(1791324197.170:955): avc:  denied  { bind } for  pid=1455 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   78.770160][   T36] audit: type=1400 audit(1791324197.500:956): avc:  denied  { setattr } for  pid=1435 comm="syz.1.299" name="sda" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   78.794292][ T1436] FAULT_INJECTION: forcing a failure.
[   78.794292][ T1436] name failslab, interval 1, probability 0, space 0, times 0
[   78.807058][ T1436] CPU: 0 UID: 0 PID: 1436 Comm: syz.1.299 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[   78.807084][ T1436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   78.807096][ T1436] Call Trace:
[   78.807102][ T1436]  <TASK>
[   78.807108][ T1436]  __dump_stack+0x21/0x30
[   78.807139][ T1436]  dump_stack_lvl+0x140/0x1c0
[   78.807163][ T1436]  ? __cfi_dump_stack_lvl+0x10/0x10
[   78.807190][ T1436]  ? pcpu_memcg_post_alloc_hook+0x202/0x2e0
[   78.807213][ T1436]  ? mutex_unlock+0x90/0x240
[   78.807235][ T1436]  ? pcpu_alloc_noprof+0x1440/0x1440
[   78.807256][ T1436]  dump_stack+0x19/0x20
[   78.807279][ T1436]  should_fail_ex+0x3c2/0x510
[   78.807302][ T1436]  should_failslab+0xac/0x100
[   78.807324][ T1436]  kmem_cache_alloc_noprof+0x42/0x410
[   78.807342][ T1436]  ? __kasan_check_write+0x18/0x20
[   78.807360][ T1436]  ? alloc_vfsmnt+0x31/0x610
[   78.807385][ T1436]  ? __cfi__raw_spin_lock+0x10/0x10
[   78.807403][ T1436]  alloc_vfsmnt+0x31/0x610
[   78.807428][ T1436]  clone_mnt+0x6e/0xbe0
[   78.807444][ T1436]  copy_tree+0x43d/0xcb0
[   78.807461][ T1436]  copy_mnt_ns+0x186/0x8f0
[   78.807479][ T1436]  ? kmem_cache_alloc_noprof+0x1e2/0x410
[   78.807497][ T1436]  ? create_new_namespaces+0x48/0x6f0
[   78.807524][ T1436]  create_new_namespaces+0xd9/0x6f0
[   78.807551][ T1436]  unshare_nsproxy_namespaces+0x124/0x180
[   78.807578][ T1436]  ksys_unshare+0x4f9/0x920
[   78.807601][ T1436]  ? fput+0x1a4/0x230
[   78.807625][ T1436]  ? __cfi_ksys_unshare+0x10/0x10
[   78.807649][ T1436]  ? __kasan_check_write+0x18/0x20
[   78.807667][ T1436]  __x64_sys_unshare+0x3c/0x50
[   78.807691][ T1436]  x64_sys_call+0x2998/0x2ee0
[   78.807707][ T1436]  do_syscall_64+0x57/0xf0
[   78.807724][ T1436]  ? clear_bhb_loop+0x50/0xa0
[   78.807748][ T1436]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   78.807770][ T1436] RIP: 0033:0x7f0a6739e199
[   78.807785][ T1436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.807799][ T1436] RSP: 002b:00007f0a6833a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   78.807817][ T1436] RAX: ffffffffffffffda RBX: 00007f0a67625fa0 RCX: 00007f0a6739e199
[   78.807831][ T1436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400
[   78.807842][ T1436] RBP: 00007f0a674358e0 R08: 0000000000000000 R09: 0000000000000000
[   78.807860][ T1436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   78.807871][ T1436] R13: 00007f0a67626038 R14: 00007f0a67625fa0 R15: 00007ffc5c6d4b38
[   78.807886][ T1436]  </TASK>
[   78.808641][ T1436] overlayfs: unescaped trailing colons in lowerdir mount option.
[   79.089226][  T334] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   79.106569][ T1466] overlayfs: failed to resolve './file1': -2
[   79.137412][   T36] audit: type=1400 audit(1791324197.870:957): avc:  denied  { sqpoll } for  pid=1470 comm="syz.5.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   79.166979][   T66] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   79.178066][   T66] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[   79.189429][   T66] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[   79.211404][   T66] usb 2-1: USB disconnect, device number 18
[   79.362163][  T827] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[   79.513212][  T827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.524239][  T827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.534392][  T827] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   79.544189][  T827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.554741][  T827] usb 3-1: config 0 descriptor??
[   79.696965][ T1481] FAULT_INJECTION: forcing a failure.
[   79.696965][ T1481] name fail_futex, interval 1, probability 0, space 0, times 0
[   79.710809][ T1481] CPU: 0 UID: 0 PID: 1481 Comm: syz.1.312 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[   79.710834][ T1481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   79.710845][ T1481] Call Trace:
[   79.710851][ T1481]  <TASK>
[   79.710857][ T1481]  __dump_stack+0x21/0x30
[   79.710886][ T1481]  dump_stack_lvl+0x140/0x1c0
[   79.710912][ T1481]  ? __cfi_dump_stack_lvl+0x10/0x10
[   79.710937][ T1481]  dump_stack+0x19/0x20
[   79.710959][ T1481]  should_fail_ex+0x3c2/0x510
[   79.710980][ T1481]  should_fail+0xf/0x20
[   79.710999][ T1481]  get_futex_key+0x178/0x940
[   79.711021][ T1481]  ? __cfi___futex_wait+0x10/0x10
[   79.711036][ T1481]  ? __cfi_get_futex_key+0x10/0x10
[   79.711057][ T1481]  ? __cfi_futex_wake_mark+0x10/0x10
[   79.711072][ T1481]  futex_wake+0x150/0x950
[   79.711092][ T1481]  ? do_brk_flags+0x1dc/0x1050
[   79.711112][ T1481]  ? __cfi_futex_wake+0x10/0x10
[   79.711128][ T1481]  ? mas_prev_slot+0xb6b/0xc20
[   79.711153][ T1481]  do_futex+0x37d/0x510
[   79.711175][ T1481]  ? __cfi_do_futex+0x10/0x10
[   79.711197][ T1481]  ? __se_sys_brk+0x45f/0xfa0
[   79.711214][ T1481]  __se_sys_futex+0x13c/0x320
[   79.711236][ T1481]  ? __x64_sys_brk+0x60/0x60
[   79.711253][ T1481]  ? __x64_sys_futex+0x110/0x110
[   79.711277][ T1481]  __x64_sys_futex+0xe9/0x110
[   79.711300][ T1481]  x64_sys_call+0x227f/0x2ee0
[   79.711315][ T1481]  do_syscall_64+0x57/0xf0
[   79.711331][ T1481]  ? clear_bhb_loop+0x50/0xa0
[   79.711354][ T1481]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   79.711376][ T1481] RIP: 0033:0x7f0a6739e199
[   79.711390][ T1481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.711404][ T1481] RSP: 002b:00007f0a6833a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   79.711422][ T1481] RAX: ffffffffffffffda RBX: 00007f0a67625fa8 RCX: 00007f0a6739e199
[   79.711434][ T1481] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0a67625fac
[   79.711446][ T1481] RBP: 00007f0a67625fa0 R08: 4000000000000000 R09: 0000000000000000
[   79.711457][ T1481] R10: 0000555589957000 R11: 0000000000000246 R12: 0000000000000000
[   79.711468][ T1481] R13: 00007f0a67626038 R14: 00007ffc5c6d4a50 R15: 00007ffc5c6d4b38
[   79.711482][ T1481]  </TASK>
[   79.983121][ T1485] netlink: 'syz.1.313': attribute type 4 has an invalid length.
[   80.136942][  T827] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[   80.144418][  T827] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[   80.151807][  T827] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[   80.159234][  T827] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[   80.166650][  T827] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[   80.182061][  T827] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[   80.376959][  T827] playstation 0003:054C:0DF2.0008: Invalid byte count transferred, expected 20 got 0
[   80.386645][  T827] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -22
[   80.396044][  T827] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense
[   80.405009][  T827] playstation 0003:054C:0DF2.0008: Failed to create dualsense.
[   80.413956][  T827] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22
[   80.579188][   T66] usb 3-1: USB disconnect, device number 24
[   80.732168][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   80.896001][ T1501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1501 comm=syz.1.317
[   80.927633][ T1507] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   80.937710][ T1507] overlayfs: failed to get uuid (89/file1, err=-13); falling back to uuid=null.
[   81.108357][ T1517] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   81.118709][ T1516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.321'.
[   81.213084][   T66] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[   81.253385][   T36] audit: type=1400 audit(1791324199.990:958): avc:  denied  { nlmsg_write } for  pid=1521 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   81.383519][   T66] usb 2-1: not running at top speed; connect to a high speed hub
[   81.402988][   T66] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[   81.433126][   T66] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   81.455516][   T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.480822][   T66] usb 2-1: Product: syz
[   81.494313][   T66] usb 2-1: Manufacturer: syz
[   81.507827][   T66] usb 2-1: SerialNumber: syz
[   81.673917][ T1463] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   81.773894][   T36] audit: type=1400 audit(1791324200.500:959): avc:  denied  { unmount } for  pid=499 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   81.869640][ T1540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.904863][ T1540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.929059][   T66] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc
[   81.937412][   T36] audit: type=1400 audit(1791324200.670:960): avc:  denied  { read } for  pid=1545 comm="syz.5.330" name="file2" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   81.962585][   T66] usb 2-1: 2:1 : unknown format tag 0x1 is detected.  processed as MPEG.
[   81.990561][   T66] usb 2-1: found format II with max.bitrate = 5, frame size=3
[   82.013693][   T66] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   82.031340][   T36] audit: type=1400 audit(1791324200.670:961): avc:  denied  { open } for  pid=1545 comm="syz.5.330" path="/9/file2" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   82.070473][   T66] usb 2-1: unit 4 not found!
[   82.092263][   T66] usb 2-1: USB disconnect, device number 19
[   82.112222][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   82.125314][  T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   82.143414][   T36] audit: type=1400 audit(1791324200.740:962): avc:  denied  { create } for  pid=1547 comm="syz.5.331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[   82.293526][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[   82.301960][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.312475][    T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   82.329386][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   82.341748][    T9] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40
[   82.351164][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.359382][    T9] usb 5-1: Product: syz
[   82.363783][    T9] usb 5-1: Manufacturer: syz
[   82.368457][    T9] usb 5-1: SerialNumber: syz
[   82.454875][   T36] audit: type=1400 audit(1791324201.190:963): avc:  denied  { map } for  pid=1554 comm="syz.1.334" path="pipe:[2625]" dev="pipefs" ino=2625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   82.580814][    T9] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor
[   82.590022][    T9] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 3
[   82.600376][    T9] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[   82.610862][    T9] usb 5-1: unit 2 not found!
[   82.616731][  T630] bridge_slave_1: left allmulticast mode
[   82.622705][  T630] bridge_slave_1: left promiscuous mode
[   82.628334][  T630] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.642903][    T9] usb 5-1: unit 0 not found!
[   82.667082][    T9] usb 5-1: USB disconnect, device number 16
[   82.677017][  T630] bridge_slave_0: left allmulticast mode
[   82.705838][  T630] bridge_slave_0: left promiscuous mode
[   82.711484][  T630] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.833947][  T630] veth1_macvtap: left promiscuous mode
[   82.839495][  T630] veth0_vlan: left promiscuous mode
[   82.881242][ T1567] SELinux:  policydb magic number 0x10 does not match expected magic number 0xf97cff8c
[   82.903397][ T1567] SELinux: failed to load policy
[   83.020274][ T1566] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.027903][ T1566] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.035282][ T1566] bridge_slave_0: entered allmulticast mode
[   83.041668][ T1566] bridge_slave_0: entered promiscuous mode
[   83.048739][ T1566] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.056901][ T1566] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.064192][ T1566] bridge_slave_1: entered allmulticast mode
[   83.070547][ T1566] bridge_slave_1: entered promiscuous mode
[   83.165373][ T1566] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.172480][ T1566] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.179986][ T1566] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.187056][ T1566] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.202224][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   83.219740][  T630] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.227657][  T630] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.244848][  T630] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.251932][  T630] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.260147][  T630] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.267229][  T630] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.286964][ T1566] veth0_vlan: entered promiscuous mode
[   83.301487][ T1566] veth1_macvtap: entered promiscuous mode
[   83.336118][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   83.336132][   T36] audit: type=1400 audit(1791324202.070:966): avc:  denied  { write } for  pid=1586 comm="syz.6.338" path="socket:[42653]" dev="sockfs" ino=42653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   83.365849][    T9] usb 6-1: device descriptor read/64, error -71
[   83.612471][    T9] usb 6-1: device descriptor read/64, error -71
[   83.753267][ T1596] usb usb9: usbfs: process 1596 (syz.2.348) did not claim interface 0 before use
[   83.852302][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   83.888111][   T36] audit: type=1400 audit(1791324202.620:967): avc:  denied  { map } for  pid=1597 comm="syz.6.349" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   83.924535][ T1601] ptp ptp0: new virtual clock ptp1
[   83.934048][ T1601] ptp ptp0: new virtual clock ptp2
[   83.942073][ T1601] ptp ptp0: new virtual clock ptp3
[   83.950192][ T1601] ptp ptp0: new virtual clock ptp4
[   83.955827][ T1601] ptp ptp0: guarantee physical clock free running
[   83.963108][ T1601] ptp ptp0: delete virtual clock ptp4
[   83.982153][    T9] usb 6-1: device descriptor read/64, error -71
[   83.992743][ T1601] ptp ptp0: delete virtual clock ptp3
[   84.003259][ T1601] ptp ptp0: delete virtual clock ptp2
[   84.009959][ T1601] ptp ptp0: guarantee physical clock free running
[   84.016830][   T66] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[   84.105750][ T1618] overlayfs: conflicting lowerdir path
[   84.158522][ T1620] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   84.168223][ T1620] overlayfs: failed to get uuid (5/file1, err=-13); falling back to uuid=null.
[   84.179101][   T66] usb 3-1: unable to get BOS descriptor or descriptor too short
[   84.192942][   T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.211034][   T66] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40
[   84.222196][    T9] usb 6-1: device descriptor read/64, error -71
[   84.228498][   T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.236767][   T66] usb 3-1: Product: syz
[   84.240930][   T66] usb 3-1: Manufacturer: syz
[   84.245727][   T66] usb 3-1: SerialNumber: syz
[   84.332401][    T9] usb usb6-port1: attempt power cycle
[   84.442171][  T827] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   84.460436][   T66] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   84.472055][   T66] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[   84.488914][   T66] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22
[   84.502180][  T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   84.519270][   T66] usb 3-1: USB disconnect, device number 25
[   84.604796][  T827] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   84.614250][  T827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.622435][  T827] usb 7-1: Product: syz
[   84.626862][  T827] usb 7-1: Manufacturer: syz
[   84.631557][  T827] usb 7-1: SerialNumber: syz
[   84.672193][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   84.693197][    T9] usb 6-1: device descriptor read/8, error -71
[   84.823169][    T9] usb 6-1: device descriptor read/8, error -71
[   84.854131][  T827] usb 7-1: USB disconnect, device number 2
[   85.062605][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   85.083168][    T9] usb 6-1: device descriptor read/8, error -71
[   85.212711][ T1585] Bluetooth: hci0: Opcode 0x0c20 failed: -110
[   85.219814][    T9] usb 6-1: device descriptor read/8, error -71
[   85.332249][    T9] usb usb6-port1: unable to enumerate USB device
[   85.472159][  T827] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[   85.602196][  T827] usb 5-1: device descriptor read/64, error -71
[   85.842174][  T827] usb 5-1: device descriptor read/64, error -71
[   86.082328][  T827] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[   86.212414][  T827] usb 5-1: device descriptor read/64, error -71
[   86.339699][ T1649] batadv_slave_0: entered promiscuous mode
[   86.358082][ T1649] usb usb8: usbfs: process 1649 (syz.2.362) did not claim interface 0 before use
[   86.392452][ T1648] batadv_slave_0: left promiscuous mode
[   86.433693][ T1651] netlink: 196 bytes leftover after parsing attributes in process `syz.2.363'.
[   86.462226][  T827] usb 5-1: device descriptor read/64, error -71
[   86.582225][  T827] usb usb5-port1: attempt power cycle
[   86.932175][  T827] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[   86.944587][ T1659] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   86.954133][ T1659] overlayfs: failed to get uuid (10/file1, err=-13); falling back to uuid=null.
[   86.983091][  T827] usb 5-1: device descriptor read/8, error -71
[   87.113087][  T827] usb 5-1: device descriptor read/8, error -71
[   87.132331][  T383] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   87.160373][ T1665] netlink: 24 bytes leftover after parsing attributes in process `syz.6.367'.
[   87.170860][  T630] Bluetooth: hci0: Frame reassembly failed (-84)
[   87.293254][  T383] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.311360][  T383] usb 6-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00
[   87.325626][  T383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.333924][  T383] usb 6-1: Product: syz
[   87.338133][  T383] usb 6-1: Manufacturer: syz
[   87.342930][  T383] usb 6-1: SerialNumber: syz
[   87.352134][  T827] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[   87.373525][  T827] usb 5-1: device descriptor read/8, error -71
[   87.503262][  T827] usb 5-1: device descriptor read/8, error -71
[   87.562968][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   87.575263][ T1657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.585489][ T1657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.594375][ T1657] netlink: 'syz.5.364': attribute type 12 has an invalid length.
[   87.602908][   T36] audit: type=1400 audit(1791324206.340:968): avc:  denied  { ioctl } for  pid=1656 comm="syz.5.364" path="socket:[43530]" dev="sockfs" ino=43530 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   87.629266][  T827] usb usb5-port1: unable to enumerate USB device
[   87.734433][   T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   87.743652][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.751692][   T10] usb 3-1: Product: syz
[   87.756230][   T10] usb 3-1: Manufacturer: syz
[   87.760856][   T10] usb 3-1: SerialNumber: syz
[   88.162138][  T383] usb 6-1: failed to enable PITCH for EP 0x1
[   88.202146][  T383] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1
[   88.220183][  T383] usb 6-1: USB disconnect, device number 6
[   88.278964][   T36] audit: type=1400 audit(1791324207.010:969): avc:  denied  { mounton } for  pid=1672 comm="syz.4.370" path="/proc/245/net/netfilter" dev="proc" ino=4026532657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[   88.304522][ T1673] netlink: 'syz.4.370': attribute type 4 has an invalid length.
[   88.324447][ T1673] netlink: 'syz.4.370': attribute type 6 has an invalid length.
[   88.341117][ T1673] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.370'.
[   88.358619][ T1675] batadv_slave_0: entered promiscuous mode
[   88.372178][   T10] rust_binder: 1672: undelivered death notification, 0000000000000000
[   88.390298][ T1675] usb usb8: usbfs: process 1675 (syz.5.371) did not claim interface 0 before use
[   88.422454][ T1674] batadv_slave_0: left promiscuous mode
[   88.642167][  T827] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[   88.732347][  T383] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[   88.793594][  T827] usb 5-1: unable to get BOS descriptor or descriptor too short
[   88.803427][  T827] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40
[   88.812843][  T827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.820950][  T827] usb 5-1: Product: syz
[   88.825562][  T827] usb 5-1: Manufacturer: syz
[   88.830166][  T827] usb 5-1: SerialNumber: syz
[   88.883178][  T383] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[   88.894522][  T383] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   88.905708][  T383] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 13
[   88.919713][  T383] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   88.928953][  T383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   88.937291][  T383] usb 6-1: SerialNumber: syz
[   88.945989][ T1681] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   88.953443][ T1681] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   89.041504][ T1684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.050749][ T1684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.064450][  T827] usb 5-1: USB disconnect, device number 21
[   89.162307][  T383] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[   89.175234][  T383] usb 6-1: USB disconnect, device number 7
[   89.212328][ T1464] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   89.218467][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[   89.575234][ T1686] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   89.584739][ T1686] overlayfs: failed to get uuid (78/file1, err=-13); falling back to uuid=null.
[   89.718148][ T1695] ./dev/sda1: Can't lookup blockdev
[   89.725076][   T36] audit: type=1400 audit(1791324208.460:970): avc:  denied  { bind } for  pid=1696 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   89.745971][ T1695] SELinux:  Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped).
[   89.757020][ T1697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.379'.
[   89.776205][ T1697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'.
[   89.785378][   T36] audit: type=1400 audit(1791324208.500:971): avc:  denied  { relabelto } for  pid=1694 comm="syz.5.378" name="mnt" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[   89.815019][ T1698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'.
[   89.826485][   T36] audit: type=1400 audit(1791324208.500:972): avc:  denied  { associate } for  pid=1694 comm="syz.5.378" name="mnt" dev="tmpfs" ino=131 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0"
[   89.882142][   T36] audit: type=1400 audit(1791324208.590:973): avc:  denied  { rmdir } for  pid=1437 comm="syz-executor" name="mnt" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[   89.910607][ T1703] batadv_slave_0: entered promiscuous mode
[   89.929540][ T1703] usb usb8: usbfs: process 1703 (syz.4.381) did not claim interface 0 before use
[   89.972402][ T1702] batadv_slave_0: left promiscuous mode
[   90.008791][ T1708] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   90.018277][ T1708] overlayfs: failed to get uuid (84/file1, err=-13); falling back to uuid=null.
[   90.048329][ T1713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   90.097424][ T1665] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   90.222148][  T827] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   90.315582][  T383] usb 3-1: USB disconnect, device number 26
[   90.372309][  T827] usb 6-1: Using ep0 maxpacket: 8
[   90.383176][  T827] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[   90.394717][  T827] usb 6-1: config 179 has no interface number 0
[   90.407688][  T827] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   90.430528][  T827] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   90.452149][    T9] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[   90.461762][  T827] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   90.484847][  T827] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   90.515177][  T827] usb 6-1: config 179 interface 65 has no altsetting 0
[   90.532002][  T827] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   90.541389][  T827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.559604][  T827] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input9
[   90.582149][    T9] usb 7-1: device descriptor read/64, error -71
[   90.612234][   T96] input input9: unable to receive magic message: -110
[   90.620430][  T319] input input9: unable to receive magic message: -32
[   90.640001][   T96] input input9: unable to receive magic message: -32
[   90.659905][   T96] input input9: unable to receive magic message: -32
[   90.707915][ T1735] batadv_slave_0: entered promiscuous mode
[   90.718728][ T1735] usb usb8: usbfs: process 1735 (syz.2.390) did not claim interface 0 before use
[   90.742584][ T1734] batadv_slave_0: left promiscuous mode
[   90.771016][ T1740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'.
[   90.790599][ T1740] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   90.809524][ T1740] overlayfs: failed to set uuid (89/file1, err=-13); falling back to uuid=null.
[   90.822280][    T9] usb 7-1: device descriptor read/64, error -71
[   90.842944][ T1742] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   90.852706][ T1742] overlayfs: failed to get uuid (90/file1, err=-13); falling back to uuid=null.
[   90.881144][  T630] Bluetooth: hci0: Frame reassembly failed (-84)
[   90.892530][ T1744] netlink: 'syz.2.393': attribute type 3 has an invalid length.
[   90.915096][  T827] usb 6-1: USB disconnect, device number 8
[   90.915130][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   90.930192][  T827] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   90.956461][ T1748] netlink: 'syz.4.394': attribute type 46 has an invalid length.
[   90.974626][   T36] audit: type=1326 audit(1791324209.710:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.4.394" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60bfb9e199 code=0x0
[   91.062157][    T9] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[   91.192290][    T9] usb 7-1: device descriptor read/64, error -71
[   91.362810][   T36] audit: type=1400 audit(1791324210.100:975): avc:  denied  { bind } for  pid=1750 comm="syz.5.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   91.452145][    T9] usb 7-1: device descriptor read/64, error -71
[   91.497363][ T1761] batadv_slave_0: entered promiscuous mode
[   91.507734][ T1761] usb usb8: usbfs: process 1761 (syz.5.399) did not claim interface 0 before use
[   91.533433][ T1760] batadv_slave_0: left promiscuous mode
[   91.562397][    T9] usb usb7-port1: attempt power cycle
[   91.574957][ T1765] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   91.584640][ T1765] overlayfs: failed to get uuid (29/file1, err=-13); falling back to uuid=null.
[   91.655042][ T1771] netlink: 'syz.5.403': attribute type 58 has an invalid length.
[   91.665574][   T36] audit: type=1400 audit(1791324210.400:976): avc:  denied  { map } for  pid=1770 comm="syz.5.403" path="socket:[44645]" dev="sockfs" ino=44645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   91.704107][   T36] audit: type=1400 audit(1791324210.400:977): avc:  denied  { read } for  pid=1770 comm="syz.5.403" path="socket:[44645]" dev="sockfs" ino=44645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   91.794979][   T36] audit: type=1400 audit(1791324210.530:978): avc:  denied  { read } for  pid=1774 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   91.912144][    T9] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[   91.942225][   T66] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   91.951527][    T9] usb 7-1: device descriptor read/8, error -71
[   92.053515][   T36] audit: type=1400 audit(1791324210.790:979): avc:  denied  { map } for  pid=1779 comm="syz.4.407" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[   92.113170][   T66] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   92.124938][    T9] usb 7-1: device descriptor read/8, error -71
[   92.135183][   T66] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   92.156083][   T66] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   92.179532][   T66] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   92.198597][   T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.219784][ T1773] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   92.362150][    T9] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[   92.393142][    T9] usb 7-1: device descriptor read/8, error -71
[   92.523159][    T9] usb 7-1: device descriptor read/8, error -71
[   92.632248][    T9] usb usb7-port1: unable to enumerate USB device
[   92.892151][ T1464] Bluetooth: hci0: command 0x1003 tx timeout
[   92.898252][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   92.924756][ T1784] batadv_slave_0: entered promiscuous mode
[   92.943770][ T1784] usb usb8: usbfs: process 1784 (syz.2.408) did not claim interface 0 before use
[   92.992523][ T1783] batadv_slave_0: left promiscuous mode
[   93.127688][ T1795] netlink: 'syz.4.412': attribute type 58 has an invalid length.
[   93.582348][   T66] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[   93.590451][   T66] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input10
[   93.613535][   T66] usb 6-1: USB disconnect, device number 9
[   93.619403][    C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   93.915513][   T61] device offline error, dev sda, sector 1229110 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   93.926118][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 153638)
[   93.937706][   T61] Buffer I/O error on device sda1, logical block 153600
[   93.944794][   T61] device offline error, dev sda, sector 1229614 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   93.955318][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 153701)
[   93.966924][   T61] Buffer I/O error on device sda1, logical block 153663
[   93.973941][   T61] device offline error, dev sda, sector 1237270 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2
[   93.984576][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 154658)
[   93.996191][  T950] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2035, error -5)
[   94.008888][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 154659)
[   94.020475][   T61] device offline error, dev sda, sector 1241326 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2
[   94.031025][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 155165)
[   94.042707][   T61] device offline error, dev sda, sector 1196342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   94.057153][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 149542)
[   94.068765][   T61] Buffer I/O error on device sda1, logical block 149504
[   94.075763][   T61] device offline error, dev sda, sector 1196846 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   94.087610][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 149605)
[   94.099227][   T61] Buffer I/O error on device sda1, logical block 149567
[   94.106229][   T61] device offline error, dev sda, sector 1204502 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   94.116767][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 150562)
[   94.129485][  T630] device offline error, dev sda, sector 1212726 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[   94.140071][   T61] Buffer I/O error on device sda1, logical block 150524
[   94.147037][   T61] Buffer I/O error on device sda1, logical block 150525
[   94.154394][   T61] Buffer I/O error on device sda1, logical block 150526
[   94.161343][   T61] Buffer I/O error on device sda1, logical block 150527
[   94.168355][   T61] device offline error, dev sda, sector 1208486 op 0x1:(WRITE) flags 0x0 phys_seg 17 prio class 2
[   94.178986][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 151060)
[   94.202159][  T950] Buffer I/O error on device sda1, logical block 154620
[   94.209365][  T630] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2034 starting block 151590)
[   94.221260][  T950] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2035, error -5)
[   94.234022][  T630] Buffer I/O error on device sda1, logical block 151552
[   94.241080][  T950] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2032, error -5)
[   94.253933][  T630] device offline error, dev sda, sector 1126710 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   94.274412][  T950] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2034, error -5)
[   94.306780][  T950] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2028, error -5)
[   94.348002][  T950] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2027, error -5)
[   94.361285][ T1814] buffer_io_error: 12 callbacks suppressed
[   94.361298][ T1814] Buffer I/O error on dev sda1, logical block 33724, lost async page write
[   94.383576][   T74] Aborting journal on device sda1-8.
[   94.392321][   T74] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[   94.410381][ T1818] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.5.415: Detected aborted journal
[   94.422182][  T950] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm kworker/u8:26: Detected aborted journal
[   94.440915][   T74] JBD2: I/O error when updating journal superblock for sda1-8.
[   94.451295][  T287] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal
[   94.462731][   T61] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[   94.470982][  T950] EXT4-fs (sda1): I/O error while writing superblock
[   94.478146][ T1818] EXT4-fs (sda1): previous I/O error to superblock detected
[   94.485636][  T950] EXT4-fs (sda1): Remounting filesystem read-only
[   94.492516][ T1818] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[   94.500778][  T950] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2035; err -30
[   94.511668][  T287] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[   94.586823][ T1814] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   94.638507][ T1828] batadv_slave_0: entered promiscuous mode
[   94.650850][ T1828] batadv_slave_0: left promiscuous mode
[   94.669124][ T1828] usb usb8: usbfs: process 1828 (syz.5.417) did not claim interface 0 before use
[   94.734078][   T36] kauditd_printk_skb: 7 callbacks suppressed
[   94.734105][   T36] audit: type=1400 audit(1791324213.470:987): avc:  denied  { ioctl } for  pid=1829 comm="syz.5.418" path="socket:[45338]" dev="sockfs" ino=45338 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   95.612261][   T66] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   95.773934][   T66] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[   95.792212][   T66] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[   95.813031][   T66] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   95.832155][   T66] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[   95.863645][   T66] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[   95.873541][   T66] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.891271][   T66] usb 7-1: Product: syz
[   95.896127][   T66] usb 7-1: Manufacturer: syz
[   95.900779][   T66] usb 7-1: SerialNumber: syz
[   95.910299][   T66] usb 7-1: config 0 descriptor??
[   95.929928][   T66] ums-isd200 7-1:0.0: USB Mass Storage device detected
[   96.132142][   T66] scsi host1: usb-storage 7-1:0.0
[   96.144312][   T66] usb 7-1: USB disconnect, device number 7
[   96.181805][ T1855] netlink: 44 bytes leftover after parsing attributes in process `syz.2.425'.
[   96.304028][ T1863] batadv_slave_0: entered promiscuous mode
[   96.310288][ T1863] batadv_slave_0: left promiscuous mode
[   96.318742][ T1863] usb usb8: usbfs: process 1863 (syz.2.427) did not claim interface 0 before use
[   96.692590][   T36] audit: type=1400 audit(1791324215.430:988): avc:  denied  { mounton } for  pid=1876 comm="syz.6.433" path="/21/file0" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   96.742904][   T66] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[   96.812152][ T1830] Bluetooth: hci0: Opcode 0x0c20 failed: -110
[   96.912196][   T66] usb 5-1: Using ep0 maxpacket: 32
[   96.929426][   T66] usb 5-1: unable to get BOS descriptor or descriptor too short
[   96.942705][ T1892] netlink: 'syz.6.437': attribute type 13 has an invalid length.
[   96.956054][   T66] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.971147][ T1892] virtio_net virtio1 eth0: refused to change device tx_queue_len
[   96.984750][   T66] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   97.004105][   T66] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   97.016537][   T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.032354][   T66] usb 5-1: Product: syz
[   97.040921][   T66] usb 5-1: Manufacturer: syz
[   97.051166][   T66] usb 5-1: SerialNumber: syz
[   97.064177][   T66] usb 5-1: selecting invalid altsetting 1
[   97.087951][  T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   97.106109][  T827] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   97.170586][   T36] audit: type=1400 audit(1791324215.900:989): avc:  denied  { read } for  pid=1891 comm="syz.6.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   97.212806][   T36] audit: type=1400 audit(1791324215.930:990): avc:  denied  { map } for  pid=1891 comm="syz.6.437" path="socket:[46351]" dev="sockfs" ino=46351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   97.252287][  T827] usb 6-1: device descriptor read/64, error -71
[   97.269629][ T1873] Write-error on swap-device (8:0:792446)
Oct  6 22:03:36 syzkaller kern.alert kernel: [   97.269629][ T1873] Write-error on swap-device ([   97.284394][ T1873] Write-error on swap-device (8:0:792454)
8:0:792446)
Oct  6 22:03:36 syzkaller kern.alert kernel: [   97.284394][ T1873] Write-error on swap-device (8:0:792454)
[   97.305195][ T1873] Write-error on swap-device (8:0:792462)
Oct  6 22:03:36 syzkaller kern.alert kernel: [   97.305195][ T18[   97.317634][ T1873] Write-error on swap-device (8:0:792470)
73] Write-error on swap-device (8:0:792462)
Oct  6 22:03:36 syzkaller kern.aler[   97.330687][ T1873] Write-error on swap-device (8:0:792478)
t kernel: [   97.317634][ T1873] Write-error on swap-device (8:0:792470)
Oct  6 22:03:36 syzkaller kern.alert kernel: [   97.330687][ T1873] Write-error on swap-device (8:0:792478)
[   97.357238][ T1873] Write-error on swap-device (8:0:792486)
Oct  6 22:03:36 syzkaller kern.alert kernel: [   97.357238][ T1873] Write-error [   97.370765][ T1873] Write-error on swap-device (8:0:792494)
on swap-device (8:0:792486)
Oct  6 22:03:36 syzkaller kern.alert kernel: [   97.370765][ T1873] Write-error on [   97.386236][ T1873] Write-error on swap-device (8:0:792502)
swap-device (8:0:792494)
Oct  6 22:03:36 syzkaller kern.alert kernel: [   97.386236][ T1873] Wr[   97.399552][ T1873] Write-error on swap-device (8:0:792510)
ite-error on swap-device (8:0:792502)
Oct  6 22:03:36 syzkaller kern.alert kernel: [   97.399552][ T1873] Write[   97.415112][ T1873] Write-error on swap-device (8:0:792518)
-error on swap-device (8:0:792510)
Oct  6 22:03:36 syzkaller kern.alert kernel: [   97.415112][ T1873] Write-error on swap-device (8:0:792518)
[   97.502132][  T827] usb 6-1: device descriptor read/64, error -71
[   97.532033][ T1900] batadv_slave_0: entered promiscuous mode
[   97.544694][ T1900] batadv_slave_0: left promiscuous mode
[   97.561628][ T1900] usb usb8: usbfs: process 1900 (syz.2.439) did not claim interface 0 before use
[   97.742135][  T827] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   97.872133][  T827] usb 6-1: device descriptor read/64, error -71
[   98.122135][  T827] usb 6-1: device descriptor read/64, error -71
[   98.242848][  T827] usb usb6-port1: attempt power cycle
[   98.602130][  T827] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   98.643145][  T827] usb 6-1: device descriptor read/8, error -71
[   98.783107][  T827] usb 6-1: device descriptor read/8, error -71
[   99.037627][  T827] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   99.073793][  T827] usb 6-1: device descriptor read/8, error -71
[   99.124978][ T1925] netlink: 25 bytes leftover after parsing attributes in process `syz.2.447'.
[   99.144970][   T36] audit: type=1400 audit(1791324217.880:991): avc:  denied  { mounton } for  pid=1924 comm="syz.2.447" path="/109/debug/tracing/trace_pipe" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   99.171736][ T1926] 9pnet_fd: Insufficient options for proto=fd
[   99.183506][ T1925] 9pnet_fd: Insufficient options for proto=fd
[   99.196222][ T1927] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.447'.
[   99.223081][  T827] usb 6-1: device descriptor read/8, error -71
[   99.245642][ T1930] batadv_slave_0: entered promiscuous mode
[   99.263695][ T1930] usb usb8: usbfs: process 1930 (syz.2.448) did not claim interface 0 before use
[   99.311759][ T1929] batadv_slave_0: left promiscuous mode
[   99.332223][  T827] usb usb6-port1: unable to enumerate USB device
[   99.390654][ T1934] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   99.422204][ T1934] overlayfs: failed to get uuid (112/file1, err=-13); falling back to uuid=null.
[   99.501215][   T36] audit: type=1400 audit(1791324218.230:992): avc:  denied  { name_bind } for  pid=1937 comm="syz.6.452" src=65535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   99.583240][  T827] usb 5-1: USB disconnect, device number 22
[   99.802155][   T66] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   99.952122][   T66] usb 3-1: Using ep0 maxpacket: 32
[   99.961871][   T66] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   99.983101][   T66] usb 3-1: config 0 has no interface number 0
[  100.001467][   T66] usb 3-1: config 0 interface 184 has no altsetting 0
[  100.023749][   T66] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  100.045963][   T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.071455][   T66] usb 3-1: Product: syz
[  100.085217][   T66] usb 3-1: Manufacturer: syz
[  100.099602][   T66] usb 3-1: SerialNumber: syz
[  100.118458][   T66] usb 3-1: config 0 descriptor??
[  100.133484][   T66] smsc75xx v1.0.0
[  100.336979][   T66] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  100.366686][   T66] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  100.396375][   T66] usb 3-1: USB disconnect, device number 27
[  100.598988][ T1956] batadv_slave_0: entered promiscuous mode
[  100.616335][ T1956] usb usb8: usbfs: process 1956 (syz.4.457) did not claim interface 0 before use
[  100.652461][ T1955] batadv_slave_0: left promiscuous mode
[  100.705612][ T1960] overlayfs: failed to resolve './file0': -2
[  101.102134][   T66] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  101.242138][   T66] usb 3-1: device descriptor read/64, error -71
[  101.492130][   T66] usb 3-1: device descriptor read/64, error -71
[  101.532119][ T1938] Bluetooth: hci0: Opcode 0x0c20 failed: -110
[  101.585965][ T1981] Unsupported ieee802154 address type: 0
[  101.598825][   T36] audit: type=1400 audit(1791324220.330:993): avc:  denied  { execute } for  pid=1980 comm="syz.6.465" name="file0" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  101.669169][   T36] audit: type=1400 audit(1791324220.350:994): avc:  denied  { execute_no_trans } for  pid=1980 comm="syz.6.465" path="/27/file0" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  101.698327][ T1983] batadv_slave_0: entered promiscuous mode
[  101.714884][ T1983] usb usb8: usbfs: process 1983 (syz.6.466) did not claim interface 0 before use
[  101.752475][ T1982] batadv_slave_0: left promiscuous mode
[  101.762135][   T66] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  101.823671][ T1987] overlayfs: failed to resolve './file0': -2
[  101.857157][ T1989] SELinux: security_context_str_to_sid () failed with errno=-22
[  101.864906][   T36] audit: type=1400 audit(1791324220.590:995): avc:  denied  { remount } for  pid=1988 comm="syz.6.469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  101.894472][   T66] usb 3-1: device descriptor read/64, error -71
[  102.142134][   T66] usb 3-1: device descriptor read/64, error -71
[  102.216621][  T950] Bluetooth: hci0: Frame reassembly failed (-84)
[  102.252222][   T66] usb usb3-port1: attempt power cycle
[  102.379673][ T2010] usb usb8: usbfs: process 2010 (syz.4.475) did not claim interface 0 before use
[  102.492533][ T2014] ./dev/sda1: Can't lookup blockdev
[  102.505318][   T36] audit: type=1400 audit(1791324221.240:996): avc:  denied  { mounton } for  pid=2013 comm="syz.4.477" path="/106/mnt" dev="tmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  102.532204][ T2014] ./dev/sda1: Can't lookup blockdev
[  102.612658][   T66] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  102.643111][   T66] usb 3-1: device descriptor read/8, error -71
[  102.774722][   T66] usb 3-1: device descriptor read/8, error -71
[  102.816080][ T2028] overlayfs: failed to resolve './file0': -2
[  103.022276][   T66] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  103.053924][   T66] usb 3-1: device descriptor read/8, error -71
[  103.082127][  T827] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  103.183081][   T66] usb 3-1: device descriptor read/8, error -71
[  103.242136][  T827] usb 6-1: Using ep0 maxpacket: 32
[  103.252906][  T827] usb 6-1: unable to get BOS descriptor or descriptor too short
[  103.261277][  T827] usb 6-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config
[  103.275098][  T827] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  103.296796][   T66] usb usb3-port1: unable to enumerate USB device
[  103.308873][  T827] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  103.323889][  T827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.340647][  T827] usb 6-1: Product: syz
[  103.349321][  T827] usb 6-1: Manufacturer: syz
[  103.358437][  T827] usb 6-1: SerialNumber: syz
[  103.596711][  T827] usb 6-1: MIDIStreaming interface descriptor not found
[  103.608125][ T2036] ./dev/sda1: Can't lookup blockdev
[  103.615033][  T827] usb 6-1: USB disconnect, device number 14
[  103.912280][    T9] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  104.063194][    T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  104.071319][    T9] usb 5-1: config 0 has no interface number 0
[  104.077609][    T9] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  104.088596][    T9] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  104.100578][    T9] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[  104.120050][    T9] usb 5-1: config 0 interface 2 has no altsetting 0
[  104.132759][ T2044] usb usb8: usbfs: process 2044 (syz.5.484) did not claim interface 0 before use
[  104.143464][    T9] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  104.154808][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.163131][    T9] usb 5-1: Product: syz
[  104.167351][    T9] usb 5-1: Manufacturer: syz
[  104.171972][    T9] usb 5-1: SerialNumber: syz
[  104.185216][    T9] usb 5-1: config 0 descriptor??
[  104.197856][ T2036] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  104.205240][ T2036] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  104.252155][ T1464] Bluetooth: hci0: command 0x1003 tx timeout
[  104.258223][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  104.280153][ T2050] overlayfs: failed to resolve './file0': -2
[  104.642133][  T827] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  104.803158][  T827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.822755][  T827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.843822][  T827] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  104.872132][  T827] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  104.891191][  T827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.911925][  T827] usb 6-1: config 0 descriptor??
[  105.327605][  T827] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  105.347055][  T827] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  105.361541][ T2066] udevd[2066]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[  105.490018][ T2068] usb usb8: usbfs: process 2068 (syz.2.493) did not claim interface 0 before use
[  105.539630][ T2062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.556582][ T2062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.574160][  T827] usb 6-1: USB disconnect, device number 15
[  106.069217][   T36] audit: type=1326 audit(1791324224.800:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.6.492" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771879e199 code=0x7fc00000
[  106.132605][ T2078] overlayfs: failed to resolve './file0': -2
[  106.140775][   T36] audit: type=1400 audit(1791324224.850:998): avc:  denied  { mount } for  pid=2075 comm="syz.6.496" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  106.208203][   T36] audit: type=1400 audit(1791324224.850:999): avc:  denied  { watch } for  pid=2075 comm="syz.6.496" path="/39" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  106.266150][   T36] audit: type=1400 audit(1791324224.860:1000): avc:  denied  { unmount } for  pid=1566 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  106.447969][ T2095] usb usb8: usbfs: process 2095 (syz.2.502) did not claim interface 0 before use
[  106.525321][    T9] usb 5-1: USB disconnect, device number 23
[  106.564359][  T950] Bluetooth: hci0: Frame reassembly failed (-84)
[  106.847040][ T2107] overlayfs: failed to resolve './file0': -2
[  107.089695][ T2117] usb usb8: usbfs: process 2117 (syz.2.511) did not claim interface 0 before use
[  107.247982][ T2129] overlayfs: failed to resolve './file0': -2
[  107.340171][ T2139] usb usb8: usbfs: process 2139 (syz.5.520) did not claim interface 0 before use
[  107.482323][   T36] audit: type=1326 audit(1791324226.220:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.5.524" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff05bf9e199 code=0x0
[  107.533859][ T2154] overlayfs: failed to resolve './file0': -2
[  107.742735][ T2168] batadv_slave_0: entered promiscuous mode
[  107.760924][ T2168] usb usb8: usbfs: process 2168 (syz.5.530) did not claim interface 0 before use
[  107.802459][ T2167] batadv_slave_0: left promiscuous mode
[  107.862964][   T36] audit: type=1400 audit(1791324226.600:1002): avc:  denied  { read write } for  pid=2171 comm="syz.5.532" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  107.936542][   T36] audit: type=1400 audit(1791324226.620:1003): avc:  denied  { open } for  pid=2171 comm="syz.5.532" path="/67/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  107.987441][ T2177] overlayfs: failed to resolve './file0': -2
[  108.010758][   T36] audit: type=1400 audit(1791324226.650:1004): avc:  denied  { create } for  pid=2173 comm="syz.5.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  108.572195][ T1464] Bluetooth: hci0: command 0x1003 tx timeout
[  108.578285][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  108.733437][ T2192] batadv_slave_0: entered promiscuous mode
[  108.751221][ T2192] usb usb8: usbfs: process 2192 (syz.5.539) did not claim interface 0 before use
[  108.792465][ T2191] batadv_slave_0: left promiscuous mode
[  109.383911][ T2219] batadv_slave_0: entered promiscuous mode
[  109.393111][ T2219] usb usb8: usbfs: process 2219 (syz.6.548) did not claim interface 0 before use
[  109.422466][ T2218] batadv_slave_0: left promiscuous mode
[  109.549377][ T2100] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  109.703978][ T2251] batadv_slave_0: entered promiscuous mode
[  109.713012][ T2251] usb usb8: usbfs: process 2251 (syz.4.557) did not claim interface 0 before use
[  109.742538][ T2250] batadv_slave_0: left promiscuous mode
[  109.812158][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  109.850857][  T951] Bluetooth: hci0: Frame reassembly failed (-84)
[  109.858240][  T951] Bluetooth: hci0: Frame reassembly failed (-84)
[  109.865017][ T2262] FAULT_INJECTION: forcing a failure.
[  109.865017][ T2262] name failslab, interval 1, probability 0, space 0, times 0
[  109.877978][ T2262] CPU: 0 UID: 0 PID: 2262 Comm: syz.4.561 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[  109.878003][ T2262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  109.878014][ T2262] Call Trace:
[  109.878019][ T2262]  <TASK>
[  109.878026][ T2262]  __dump_stack+0x21/0x30
[  109.878055][ T2262]  dump_stack_lvl+0x140/0x1c0
[  109.878080][ T2262]  ? __cfi_dump_stack_lvl+0x10/0x10
[  109.878105][ T2262]  ? selinux_kernfs_init_security+0x14b/0x4b0
[  109.878126][ T2262]  dump_stack+0x19/0x20
[  109.878149][ T2262]  should_fail_ex+0x3c2/0x510
[  109.878171][ T2262]  should_failslab+0xac/0x100
[  109.878193][ T2262]  kmem_cache_alloc_noprof+0x42/0x410
[  109.878212][ T2262]  ? __kernfs_new_node+0xf1/0x740
[  109.878235][ T2262]  ? bpf_lsm_kernfs_init_security+0xd/0x20
[  109.878260][ T2262]  __kernfs_new_node+0xf1/0x740
[  109.878282][ T2262]  ? __kasan_check_write+0x18/0x20
[  109.878307][ T2262]  ? kernfs_new_node+0x280/0x280
[  109.878329][ T2262]  ? down_write+0xee/0x2b0
[  109.878353][ T2262]  ? __cfi_down_write+0x10/0x10
[  109.878377][ T2262]  ? __kasan_check_write+0x18/0x20
[  109.878395][ T2262]  ? up_write+0x66/0x280
[  109.878421][ T2262]  ? kernfs_activate+0x1ee/0x200
[  109.878446][ T2262]  kernfs_new_node+0x154/0x280
[  109.878469][ T2262]  __kernfs_create_file+0x52/0x280
[  109.878485][ T2262]  sysfs_add_file_mode_ns+0x1d2/0x280
[  109.878503][ T2262]  internal_create_group+0x66c/0xe70
[  109.878524][ T2262]  ? __kasan_check_write+0x18/0x20
[  109.878543][ T2262]  ? sysfs_create_group+0x40/0x40
[  109.878564][ T2262]  ? kernfs_activate+0x1ee/0x200
[  109.878588][ T2262]  sysfs_create_groups+0x5c/0x130
[  109.878609][ T2262]  device_add_attrs+0x12d/0x850
[  109.878625][ T2262]  ? device_add_class_symlinks+0x260/0x260
[  109.878641][ T2262]  ? __kasan_check_write+0x18/0x20
[  109.878658][ T2262]  ? kobject_put+0x1cc/0x2a0
[  109.878682][ T2262]  ? device_add_class_symlinks+0x22e/0x260
[  109.878699][ T2262]  device_add+0x4db/0xbf0
[  109.878713][ T2262]  input_register_device+0x9af/0x1080
[  109.878743][ T2262]  uinput_create_device+0x416/0x670
[  109.878768][ T2262]  uinput_ioctl_handler+0x3ea/0x1360
[  109.878789][ T2262]  ? uinput_release+0x70/0x70
[  109.878807][ T2262]  ? mutex_unlock+0x90/0x240
[  109.878831][ T2262]  ? __fget_files+0x2bc/0x330
[  109.878855][ T2262]  uinput_ioctl+0x2c/0x40
[  109.878872][ T2262]  ? __cfi_uinput_ioctl+0x10/0x10
[  109.878891][ T2262]  __se_sys_ioctl+0x123/0x1b0
[  109.878913][ T2262]  __x64_sys_ioctl+0x7f/0xa0
[  109.878934][ T2262]  x64_sys_call+0x1878/0x2ee0
[  109.878950][ T2262]  do_syscall_64+0x57/0xf0
[  109.878968][ T2262]  ? clear_bhb_loop+0x50/0xa0
[  109.878991][ T2262]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  109.879014][ T2262] RIP: 0033:0x7f60bfb9e199
[  109.879028][ T2262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.879043][ T2262] RSP: 002b:00007f60c09ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  109.879061][ T2262] RAX: ffffffffffffffda RBX: 00007f60bfe25fa0 RCX: 00007f60bfb9e199
[  109.879074][ T2262] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  109.879084][ T2262] RBP: 00007f60bfc358e0 R08: 0000000000000000 R09: 0000000000000000
[  109.879095][ T2262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.879105][ T2262] R13: 00007f60bfe26038 R14: 00007f60bfe25fa0 R15: 00007ffe4ef1d748
[  109.879120][ T2262]  </TASK>
[  110.292127][    T9] usb 7-1: Using ep0 maxpacket: 16
[  110.306921][ T2268] fuse: Unknown parameter '000000000000000000060x00000000000000030x00000000000000090000000000000000000000000000000000000005'
[  110.330084][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.341091][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.350856][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  110.363647][    T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  110.372687][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.382570][    T9] usb 7-1: config 0 descriptor??
[  110.390072][  T827] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  110.493978][ T2275] batadv_slave_0: entered promiscuous mode
[  110.503591][ T2275] usb usb8: usbfs: process 2275 (syz.2.566) did not claim interface 0 before use
[  110.532517][ T2274] batadv_slave_0: left promiscuous mode
[  110.599934][ T2285] syz.2.570 (2285): drop_caches: 0
[  110.720544][ T2237] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=808464432 (1616928864 ns) > initial count (512 ns). Using initial count to start timer.
[  110.842145][  T383] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  110.941544][    T9] microsoft 0003:045E:07DA.000A: item fetching failed at offset 19/34
[  110.950307][    T9] microsoft 0003:045E:07DA.000A: parse failed
[  110.956684][    T9] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22
[  110.994976][  T383] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  111.015915][  T383] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  111.038641][  T383] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  111.056567][  T383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.066069][  T383] usb 3-1: Product: syz
[  111.074785][  T383] usb 3-1: Manufacturer: syz
[  111.084724][  T383] usb 3-1: SerialNumber: syz
[  111.301027][ T2285] FAULT_INJECTION: forcing a failure.
[  111.301027][ T2285] name failslab, interval 1, probability 0, space 0, times 0
[  111.321795][ T2285] CPU: 0 UID: 0 PID: 2285 Comm: syz.2.570 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[  111.321827][ T2285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  111.321840][ T2285] Call Trace:
[  111.321846][ T2285]  <TASK>
[  111.321853][ T2285]  __dump_stack+0x21/0x30
[  111.321886][ T2285]  dump_stack_lvl+0x140/0x1c0
[  111.321913][ T2285]  ? __cfi_dump_stack_lvl+0x10/0x10
[  111.321941][ T2285]  ? selinux_kernfs_init_security+0x14b/0x4b0
[  111.321964][ T2285]  dump_stack+0x19/0x20
[  111.321990][ T2285]  should_fail_ex+0x3c2/0x510
[  111.322015][ T2285]  should_failslab+0xac/0x100
[  111.322040][ T2285]  kmem_cache_alloc_noprof+0x42/0x410
[  111.322060][ T2285]  ? __kasan_check_write+0x18/0x20
[  111.322080][ T2285]  ? __kernfs_new_node+0xf1/0x740
[  111.322107][ T2285]  ? bpf_lsm_kernfs_init_security+0xd/0x20
[  111.322134][ T2285]  __kernfs_new_node+0xf1/0x740
[  111.322159][ T2285]  ? __kasan_check_write+0x18/0x20
[  111.322180][ T2285]  ? kernfs_new_node+0x280/0x280
[  111.322204][ T2285]  ? down_write+0xee/0x2b0
[  111.322232][ T2285]  ? __cfi_down_write+0x10/0x10
[  111.322259][ T2285]  ? __kasan_check_write+0x18/0x20
[  111.322278][ T2285]  ? up_write+0x66/0x280
[  111.322322][ T2285]  ? kernfs_activate+0x1ee/0x200
[  111.322349][ T2285]  kernfs_new_node+0x154/0x280
[  111.322375][ T2285]  __kernfs_create_file+0x52/0x280
[  111.322392][ T2285]  sysfs_add_file_mode_ns+0x1d2/0x280
[  111.322412][ T2285]  sysfs_merge_group+0x184/0x330
[  111.322436][ T2285]  ? __cfi_sysfs_merge_group+0x10/0x10
[  111.322460][ T2285]  dpm_sysfs_add+0xe4/0x280
[  111.322495][ T2285]  device_add+0x521/0xbf0
[  111.322515][ T2285]  netdev_register_kobject+0x196/0x330
[  111.322538][ T2285]  register_netdevice+0x1042/0x1a80
[  111.322565][ T2285]  ? __kmalloc_cache_noprof+0x23c/0x470
[  111.322594][ T2285]  ? __cfi_register_netdevice+0x10/0x10
[  111.322617][ T2285]  tun_set_iff+0x828/0xec0
[  111.322639][ T2285]  __tun_chr_ioctl+0x852/0x1fb0
[  111.322661][ T2285]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  111.322682][ T2285]  ? tun_flow_create+0x400/0x400
[  111.322702][ T2285]  ? kvfree_call_rcu+0x40e/0x730
[  111.322730][ T2285]  ? __fget_files+0x2bc/0x330
[  111.322759][ T2285]  tun_chr_ioctl+0x2e/0x40
[  111.322782][ T2285]  ? __cfi_tun_chr_ioctl+0x10/0x10
[  111.322801][ T2285]  __se_sys_ioctl+0x123/0x1b0
[  111.322826][ T2285]  __x64_sys_ioctl+0x7f/0xa0
[  111.322850][ T2285]  x64_sys_call+0x1878/0x2ee0
[  111.322868][ T2285]  do_syscall_64+0x57/0xf0
[  111.322887][ T2285]  ? clear_bhb_loop+0x50/0xa0
[  111.322913][ T2285]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  111.322943][ T2285] RIP: 0033:0x7f9af659e199
[  111.322959][ T2285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.322975][ T2285] RSP: 002b:00007f9af73ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.322998][ T2285] RAX: ffffffffffffffda RBX: 00007f9af6825fa0 RCX: 00007f9af659e199
[  111.323013][ T2285] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000007
[  111.323026][ T2285] RBP: 00007f9af66358e0 R08: 0000000000000000 R09: 0000000000000000
[  111.323038][ T2285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.323049][ T2285] R13: 00007f9af6826038 R14: 00007f9af6825fa0 R15: 00007ffc832924c8
[  111.323066][ T2285]  </TASK>
[  111.648013][ T2304] batadv_slave_0: entered promiscuous mode
[  111.657117][ T2304] usb usb8: usbfs: process 2304 (syz.5.575) did not claim interface 0 before use
[  111.674223][  T383] cdc_ncm 3-1:1.0: bind() failure
[  111.680240][  T383] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  111.687533][ T2303] batadv_slave_0: left promiscuous mode
[  111.747262][  T383] cdc_ncm 3-1:1.1: bind() failure
[  111.808984][  T383] usb 3-1: USB disconnect, device number 32
[  111.827666][ T2323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=2323 comm=syz.5.581
[  111.851249][ T2325] netlink: 'syz.5.582': attribute type 28 has an invalid length.
[  111.870544][ T1464] Bluetooth: hci0: command 0x1003 tx timeout
[  111.876590][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  112.408642][ T2331] batadv_slave_0: entered promiscuous mode
[  112.425761][ T2331] usb usb8: usbfs: process 2331 (syz.2.584) did not claim interface 0 before use
[  112.462470][ T2330] batadv_slave_0: left promiscuous mode
[  112.479162][ T2337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.586'.
[  112.554471][  T383] usb 7-1: USB disconnect, device number 8
[  112.611458][   T36] audit: type=1400 audit(1791324231.340:1005): avc:  denied  { listen } for  pid=2336 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  112.692212][   T36] audit: type=1400 audit(1791324231.340:1006): avc:  denied  { create } for  pid=2336 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  112.846846][ T2262] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  112.946829][ T2367] batadv_slave_0: entered promiscuous mode
[  112.955673][ T2367] usb usb8: usbfs: process 2367 (syz.4.594) did not claim interface 0 before use
[  112.982510][ T2366] batadv_slave_0: left promiscuous mode
[  113.022139][  T827] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  113.173205][  T827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.184229][  T827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.194185][  T827] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  113.207263][  T827] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  113.216495][  T827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.225821][  T827] usb 3-1: config 0 descriptor??
[  113.575924][   T36] audit: type=1400 audit(1791324232.310:1007): avc:  denied  { read } for  pid=2378 comm="syz.4.598" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  113.635897][  T827] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  113.657203][  T827] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  113.678706][ T2384] udevd[2384]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[  113.726301][  T951] Bluetooth: hci0: Frame reassembly failed (-84)
[  113.733892][ T2388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2388 comm=syz.6.600
[  113.952135][  T383] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  114.103125][  T383] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.116515][  T383] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  114.135352][  T383] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  114.154286][  T383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.347067][ T2401] batadv_slave_0: entered promiscuous mode
[  114.366516][ T2401] usb usb8: usbfs: process 2401 (syz.5.604) did not claim interface 0 before use
[  114.380670][  T383] usb 5-1: USB disconnect, device number 24
[  114.422519][ T2400] batadv_slave_0: left promiscuous mode
[  114.482820][   T36] audit: type=1326 audit(1791324233.220:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.5.605" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff05bf9e199 code=0x0
[  114.588594][ T2406] overlayfs: failed to resolve './file1': -2
[  114.937712][  T827] usb 3-1: USB disconnect, device number 33
[  115.076901][ T2429] batadv_slave_0: entered promiscuous mode
[  115.099381][ T2429] usb usb8: usbfs: process 2429 (syz.4.613) did not claim interface 0 before use
[  115.152477][ T2428] batadv_slave_0: left promiscuous mode
[  115.271795][ T2434] overlayfs: failed to resolve './file1': -2
[  115.484407][ T2447] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  115.764838][ T2458] batadv_slave_0: entered promiscuous mode
[  115.772156][ T1464] Bluetooth: hci0: command 0x1003 tx timeout
[  115.778197][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  115.794338][  T827] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  115.807660][ T2458] usb usb8: usbfs: process 2458 (syz.2.622) did not claim interface 0 before use
[  115.839230][ T2463] overlayfs: failed to resolve './file1': -2
[  115.856804][ T2457] batadv_slave_0: left promiscuous mode
[  115.900834][   T36] audit: type=1400 audit(1791324234.630:1009): avc:  denied  { listen } for  pid=2465 comm="syz.6.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  115.942273][  T827] usb 5-1: device descriptor read/64, error -71
[  115.966260][   T36] audit: type=1400 audit(1791324234.630:1010): avc:  denied  { accept } for  pid=2465 comm="syz.6.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  116.192127][  T827] usb 5-1: device descriptor read/64, error -71
[  116.211039][  T951] Bluetooth: hci0: Frame reassembly failed (-84)
[  116.432130][  T827] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  116.582140][  T827] usb 5-1: device descriptor read/64, error -71
[  116.832157][  T827] usb 5-1: device descriptor read/64, error -71
[  116.886271][ T2502] batadv_slave_0: entered promiscuous mode
[  116.903751][ T2502] usb usb8: usbfs: process 2502 (syz.2.636) did not claim interface 0 before use
[  116.942522][ T2501] batadv_slave_0: left promiscuous mode
[  116.952224][  T827] usb usb5-port1: attempt power cycle
[  117.000140][ T2504] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  117.034963][   T36] audit: type=1400 audit(1791324235.770:1011): avc:  denied  { write } for  pid=2503 comm="syz.2.637" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  117.112119][   T36] audit: type=1400 audit(1791324235.800:1012): avc:  denied  { read } for  pid=2506 comm="syz.6.638" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  117.173492][   T36] audit: type=1400 audit(1791324235.800:1013): avc:  denied  { open } for  pid=2506 comm="syz.6.638" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  117.332126][  T827] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  117.365886][ T2520] FAULT_INJECTION: forcing a failure.
[  117.365886][ T2520] name failslab, interval 1, probability 0, space 0, times 0
[  117.385457][  T827] usb 5-1: device descriptor read/8, error -71
[  117.399451][ T2520] CPU: 0 UID: 0 PID: 2520 Comm: syz.6.642 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[  117.399478][ T2520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  117.399489][ T2520] Call Trace:
[  117.399494][ T2520]  <TASK>
[  117.399500][ T2520]  __dump_stack+0x21/0x30
[  117.399529][ T2520]  dump_stack_lvl+0x140/0x1c0
[  117.399552][ T2520]  ? __cfi_dump_stack_lvl+0x10/0x10
[  117.399575][ T2520]  ? avc_has_perm+0x155/0x240
[  117.399597][ T2520]  ? __cfi_avc_has_perm+0x10/0x10
[  117.399618][ T2520]  dump_stack+0x19/0x20
[  117.399640][ T2520]  should_fail_ex+0x3c2/0x510
[  117.399662][ T2520]  should_failslab+0xac/0x100
[  117.399683][ T2520]  __kmalloc_cache_noprof+0x41/0x470
[  117.399701][ T2520]  ? vhost_task_create+0x12c/0x3f0
[  117.399720][ T2520]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  117.399740][ T2520]  vhost_task_create+0x12c/0x3f0
[  117.399757][ T2520]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  117.399778][ T2520]  ? __cfi_vhost_task_create+0x10/0x10
[  117.399797][ T2520]  ? __cfi_vhost_task_fn+0x10/0x10
[  117.399814][ T2520]  ? __kasan_check_write+0x18/0x20
[  117.399831][ T2520]  ? mutex_lock+0x97/0x1d0
[  117.399852][ T2520]  ? __cfi_mutex_lock+0x10/0x10
[  117.399872][ T2520]  ? kernel_text_address+0xa9/0xe0
[  117.399897][ T2520]  kvm_mmu_post_init_vm+0x161/0x300
[  117.399921][ T2520]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  117.399944][ T2520]  ? _parse_integer_limit+0x195/0x1e0
[  117.399964][ T2520]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  117.399987][ T2520]  ? kstrtoull+0x13b/0x1e0
[  117.400005][ T2520]  ? kstrtouint+0x78/0xf0
[  117.400023][ T2520]  ? ioctl_has_perm+0x1bc/0x500
[  117.400048][ T2520]  ? __asan_memcpy+0x5a/0x80
[  117.400065][ T2520]  ? ioctl_has_perm+0x408/0x500
[  117.400082][ T2520]  ? has_cap_mac_admin+0xd0/0xd0
[  117.400099][ T2520]  ? __kasan_check_write+0x18/0x20
[  117.400116][ T2520]  ? mutex_lock_killable+0x97/0x1d0
[  117.400138][ T2520]  ? __cfi_mutex_lock_killable+0x10/0x10
[  117.400160][ T2520]  ? proc_fail_nth_write+0x184/0x220
[  117.400186][ T2520]  kvm_vcpu_ioctl+0xa43/0x1000
[  117.400203][ T2520]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  117.400219][ T2520]  ? __cfi_vfs_write+0x10/0x10
[  117.400237][ T2520]  ? __kasan_check_write+0x18/0x20
[  117.400254][ T2520]  ? mutex_unlock+0x90/0x240
[  117.400274][ T2520]  ? __cfi_mutex_unlock+0x10/0x10
[  117.400297][ T2520]  ? __fget_files+0x2bc/0x330
[  117.400318][ T2520]  ? bpf_lsm_file_ioctl+0xd/0x20
[  117.400340][ T2520]  ? security_file_ioctl+0x3e/0x110
[  117.400356][ T2520]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  117.400371][ T2520]  __se_sys_ioctl+0x123/0x1b0
[  117.400393][ T2520]  __x64_sys_ioctl+0x7f/0xa0
[  117.400413][ T2520]  x64_sys_call+0x1878/0x2ee0
[  117.400428][ T2520]  do_syscall_64+0x57/0xf0
[  117.400445][ T2520]  ? clear_bhb_loop+0x50/0xa0
[  117.400467][ T2520]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  117.400491][ T2520] RIP: 0033:0x7f771879e199
[  117.400505][ T2520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.400519][ T2520] RSP: 002b:00007f771964f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  117.400537][ T2520] RAX: ffffffffffffffda RBX: 00007f7718a25fa0 RCX: 00007f771879e199
[  117.400549][ T2520] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  117.400560][ T2520] RBP: 00007f771964f090 R08: 0000000000000000 R09: 0000000000000000
[  117.400570][ T2520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.400580][ T2520] R13: 00007f7718a26038 R14: 00007f7718a25fa0 R15: 00007ffdb8514b78
[  117.400594][ T2520]  </TASK>
[  118.288024][  T827] usb 5-1: device descriptor read/8, error -71
[  118.309216][ T1464] Bluetooth: hci0: command 0x1003 tx timeout
[  118.315425][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  118.340972][ T2527] batadv_slave_0: entered promiscuous mode
[  118.350935][ T2527] usb usb8: usbfs: process 2527 (syz.6.645) did not claim interface 0 before use
[  118.394873][ T2526] batadv_slave_0: left promiscuous mode
[  118.562132][  T827] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  118.754581][ T2559] netlink: 72 bytes leftover after parsing attributes in process `syz.6.652'.
[  118.852956][ T2564] FAULT_INJECTION: forcing a failure.
[  118.852956][ T2564] name failslab, interval 1, probability 0, space 0, times 0
[  118.878591][ T2564] CPU: 0 UID: 0 PID: 2564 Comm: syz.6.654 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[  118.878617][ T2564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  118.878628][ T2564] Call Trace:
[  118.878634][ T2564]  <TASK>
[  118.878642][ T2564]  __dump_stack+0x21/0x30
[  118.878671][ T2564]  dump_stack_lvl+0x140/0x1c0
[  118.878695][ T2564]  ? __cfi_dump_stack_lvl+0x10/0x10
[  118.878723][ T2564]  dump_stack+0x19/0x20
[  118.878745][ T2564]  should_fail_ex+0x3c2/0x510
[  118.878766][ T2564]  should_failslab+0xac/0x100
[  118.878788][ T2564]  kmem_cache_alloc_node_noprof+0x45/0x420
[  118.878807][ T2564]  ? dup_task_struct+0xc1/0xd80
[  118.878829][ T2564]  ? kasan_save_alloc_info+0x3a/0x50
[  118.878844][ T2564]  ? __kasan_kmalloc+0x96/0xb0
[  118.878865][ T2564]  ? __kmalloc_cache_noprof+0x23c/0x470
[  118.878893][ T2564]  dup_task_struct+0xc1/0xd80
[  118.878914][ T2564]  ? __kasan_check_write+0x18/0x20
[  118.878930][ T2564]  ? _raw_spin_lock_irq+0x93/0x120
[  118.878948][ T2564]  ? copy_process+0x3350/0x3350
[  118.878971][ T2564]  ? __kasan_check_write+0x18/0x20
[  118.878988][ T2564]  copy_process+0x57c/0x3350
[  118.879011][ T2564]  ? kasan_save_alloc_info+0x3a/0x50
[  118.879026][ T2564]  ? __cfi_copy_process+0x10/0x10
[  118.879046][ T2564]  ? __kmalloc_cache_noprof+0x23c/0x470
[  118.879064][ T2564]  ? __kasan_check_write+0x18/0x20
[  118.879081][ T2564]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  118.879101][ T2564]  vhost_task_create+0x1f7/0x3f0
[  118.879119][ T2564]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  118.879140][ T2564]  ? __cfi_vhost_task_create+0x10/0x10
[  118.879158][ T2564]  ? __cfi_vhost_task_fn+0x10/0x10
[  118.879175][ T2564]  ? __kasan_check_write+0x18/0x20
[  118.879191][ T2564]  ? mutex_lock+0x97/0x1d0
[  118.879212][ T2564]  ? __cfi_mutex_lock+0x10/0x10
[  118.879232][ T2564]  ? kernel_text_address+0xa9/0xe0
[  118.879255][ T2564]  kvm_mmu_post_init_vm+0x161/0x300
[  118.879280][ T2564]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  118.879302][ T2564]  ? _parse_integer_limit+0x195/0x1e0
[  118.879322][ T2564]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  118.879345][ T2564]  ? kstrtoull+0x13b/0x1e0
[  118.879362][ T2564]  ? kstrtouint+0x78/0xf0
[  118.879380][ T2564]  ? ioctl_has_perm+0x1bc/0x500
[  118.879397][ T2564]  ? __asan_memcpy+0x5a/0x80
[  118.879414][ T2564]  ? ioctl_has_perm+0x408/0x500
[  118.879431][ T2564]  ? has_cap_mac_admin+0xd0/0xd0
[  118.879448][ T2564]  ? __kasan_check_write+0x18/0x20
[  118.879464][ T2564]  ? mutex_lock_killable+0x97/0x1d0
[  118.879486][ T2564]  ? __cfi_mutex_lock_killable+0x10/0x10
[  118.879508][ T2564]  ? proc_fail_nth_write+0x184/0x220
[  118.879534][ T2564]  kvm_vcpu_ioctl+0xa43/0x1000
[  118.879551][ T2564]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  118.879567][ T2564]  ? __cfi_vfs_write+0x10/0x10
[  118.879585][ T2564]  ? __kasan_check_write+0x18/0x20
[  118.879601][ T2564]  ? mutex_unlock+0x90/0x240
[  118.879621][ T2564]  ? __cfi_mutex_unlock+0x10/0x10
[  118.879644][ T2564]  ? __fget_files+0x2bc/0x330
[  118.879665][ T2564]  ? bpf_lsm_file_ioctl+0xd/0x20
[  118.879686][ T2564]  ? security_file_ioctl+0x3e/0x110
[  118.879702][ T2564]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  118.879718][ T2564]  __se_sys_ioctl+0x123/0x1b0
[  118.879739][ T2564]  __x64_sys_ioctl+0x7f/0xa0
[  118.879759][ T2564]  x64_sys_call+0x1878/0x2ee0
[  118.879774][ T2564]  do_syscall_64+0x57/0xf0
[  118.879790][ T2564]  ? clear_bhb_loop+0x50/0xa0
[  118.879813][ T2564]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  118.879835][ T2564] RIP: 0033:0x7f771879e199
[  118.879849][ T2564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.879863][ T2564] RSP: 002b:00007f771964f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  118.879886][ T2564] RAX: ffffffffffffffda RBX: 00007f7718a25fa0 RCX: 00007f771879e199
[  118.879898][ T2564] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  118.879909][ T2564] RBP: 00007f771964f090 R08: 0000000000000000 R09: 0000000000000000
[  118.879919][ T2564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.879929][ T2564] R13: 00007f7718a26038 R14: 00007f7718a25fa0 R15: 00007ffdb8514b78
[  118.879944][ T2564]  </TASK>
[  119.835914][  T827] usb 5-1: device not accepting address 28, error -71
[  119.892208][  T827] usb usb5-port1: unable to enumerate USB device
[  119.910103][ T2566] batadv_slave_0: entered promiscuous mode
[  119.947396][ T2566] usb usb8: usbfs: process 2566 (syz.4.655) did not claim interface 0 before use
[  119.972467][ T2565] batadv_slave_0: left promiscuous mode
[  119.992377][  T951] Bluetooth: hci0: Frame reassembly failed (-84)
[  120.021316][ T2570] overlay: filesystem on ./file0 not supported as upperdir
[  120.312140][  T383] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  120.440441][ T2589] batadv_slave_0: entered promiscuous mode
[  120.457534][ T2589] usb usb8: usbfs: process 2589 (syz.5.664) did not claim interface 0 before use
[  120.473113][  T383] usb 3-1: config 0 has no interfaces?
[  120.479979][  T383] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  120.494205][  T383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.511904][  T383] usb 3-1: Product: syz
[  120.520680][  T383] usb 3-1: Manufacturer: syz
[  120.525669][ T2588] batadv_slave_0: left promiscuous mode
[  120.541392][  T383] usb 3-1: SerialNumber: syz
[  120.558834][  T383] usb 3-1: config 0 descriptor??
[  120.982287][ T2578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.002746][ T2578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.011505][ T2595] FAULT_INJECTION: forcing a failure.
[  121.011505][ T2595] name failslab, interval 1, probability 0, space 0, times 0
[  121.037014][  T383] usb 3-1: USB disconnect, device number 34
[  121.045722][   T36] audit: type=1400 audit(1791324239.770:1014): avc:  denied  { ioctl } for  pid=2577 comm="syz.2.660" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  121.074839][ T2595] CPU: 0 UID: 0 PID: 2595 Comm: syz.6.666 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[  121.074864][ T2595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  121.074876][ T2595] Call Trace:
[  121.074881][ T2595]  <TASK>
[  121.074889][ T2595]  __dump_stack+0x21/0x30
[  121.074919][ T2595]  dump_stack_lvl+0x140/0x1c0
[  121.074943][ T2595]  ? __cfi_dump_stack_lvl+0x10/0x10
[  121.074969][ T2595]  dump_stack+0x19/0x20
[  121.074990][ T2595]  should_fail_ex+0x3c2/0x510
[  121.075012][ T2595]  should_failslab+0xac/0x100
[  121.075033][ T2595]  __kmalloc_cache_node_noprof+0x46/0x430
[  121.075053][ T2595]  ? __get_vm_area_node+0x150/0x390
[  121.075077][ T2595]  ? kasan_save_alloc_info+0x3a/0x50
[  121.075093][ T2595]  ? __kasan_slab_alloc+0x73/0x90
[  121.075113][ T2595]  ? kmem_cache_alloc_node_noprof+0x1ca/0x420
[  121.075132][ T2595]  __get_vm_area_node+0x150/0x390
[  121.075157][ T2595]  __vmalloc_node_range_noprof+0x340/0x1300
[  121.075172][ T2595]  ? copy_process+0x57c/0x3350
[  121.075197][ T2595]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  121.075213][ T2595]  ? kasan_save_alloc_info+0x3a/0x50
[  121.075229][ T2595]  ? __kasan_slab_alloc+0x73/0x90
[  121.075249][ T2595]  ? arch_dup_task_struct+0x5b/0xe0
[  121.075274][ T2595]  ? __asan_memcpy+0x5a/0x80
[  121.075291][ T2595]  dup_task_struct+0x5d6/0xd80
[  121.075311][ T2595]  ? copy_process+0x57c/0x3350
[  121.075331][ T2595]  ? _raw_spin_lock_irq+0x93/0x120
[  121.075349][ T2595]  ? copy_process+0x3350/0x3350
[  121.075369][ T2595]  ? __kasan_check_write+0x18/0x20
[  121.075386][ T2595]  copy_process+0x57c/0x3350
[  121.075409][ T2595]  ? kasan_save_alloc_info+0x3a/0x50
[  121.075424][ T2595]  ? __cfi_copy_process+0x10/0x10
[  121.075444][ T2595]  ? __kmalloc_cache_noprof+0x23c/0x470
[  121.075462][ T2595]  ? __kasan_check_write+0x18/0x20
[  121.075479][ T2595]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  121.075498][ T2595]  vhost_task_create+0x1f7/0x3f0
[  121.075516][ T2595]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  121.075536][ T2595]  ? __cfi_vhost_task_create+0x10/0x10
[  121.075554][ T2595]  ? __cfi_vhost_task_fn+0x10/0x10
[  121.075582][ T2595]  ? __kasan_check_write+0x18/0x20
[  121.075598][ T2595]  ? mutex_lock+0x97/0x1d0
[  121.075619][ T2595]  ? __cfi_mutex_lock+0x10/0x10
[  121.075639][ T2595]  ? kernel_text_address+0xa9/0xe0
[  121.075663][ T2595]  kvm_mmu_post_init_vm+0x161/0x300
[  121.075687][ T2595]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  121.075710][ T2595]  ? _parse_integer_limit+0x195/0x1e0
[  121.075730][ T2595]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  121.075753][ T2595]  ? kstrtoull+0x13b/0x1e0
[  121.075771][ T2595]  ? kstrtouint+0x78/0xf0
[  121.075789][ T2595]  ? ioctl_has_perm+0x1bc/0x500
[  121.075806][ T2595]  ? __asan_memcpy+0x5a/0x80
[  121.075823][ T2595]  ? ioctl_has_perm+0x408/0x500
[  121.075840][ T2595]  ? has_cap_mac_admin+0xd0/0xd0
[  121.075857][ T2595]  ? __kasan_check_write+0x18/0x20
[  121.075873][ T2595]  ? mutex_lock_killable+0x97/0x1d0
[  121.075900][ T2595]  ? __cfi_mutex_lock_killable+0x10/0x10
[  121.075922][ T2595]  ? proc_fail_nth_write+0x184/0x220
[  121.075949][ T2595]  kvm_vcpu_ioctl+0xa43/0x1000
[  121.075966][ T2595]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  121.075982][ T2595]  ? __cfi_vfs_write+0x10/0x10
[  121.076000][ T2595]  ? __kasan_check_write+0x18/0x20
[  121.076016][ T2595]  ? mutex_unlock+0x90/0x240
[  121.076036][ T2595]  ? __cfi_mutex_unlock+0x10/0x10
[  121.076059][ T2595]  ? __fget_files+0x2bc/0x330
[  121.076080][ T2595]  ? bpf_lsm_file_ioctl+0xd/0x20
[  121.076105][ T2595]  ? security_file_ioctl+0x3e/0x110
[  121.076122][ T2595]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  121.076138][ T2595]  __se_sys_ioctl+0x123/0x1b0
[  121.076160][ T2595]  __x64_sys_ioctl+0x7f/0xa0
[  121.076180][ T2595]  x64_sys_call+0x1878/0x2ee0
[  121.076195][ T2595]  do_syscall_64+0x57/0xf0
[  121.076212][ T2595]  ? clear_bhb_loop+0x50/0xa0
[  121.076234][ T2595]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  121.076256][ T2595] RIP: 0033:0x7f771879e199
[  121.076270][ T2595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.076284][ T2595] RSP: 002b:00007f771964f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.076302][ T2595] RAX: ffffffffffffffda RBX: 00007f7718a25fa0 RCX: 00007f771879e199
[  121.076314][ T2595] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  121.076325][ T2595] RBP: 00007f771964f090 R08: 0000000000000000 R09: 0000000000000000
[  121.076335][ T2595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.076345][ T2595] R13: 00007f7718a26038 R14: 00007f7718a25fa0 R15: 00007ffdb8514b78
[  121.076359][ T2595]  </TASK>
[  121.076400][ T2595] syz.6.666: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0
[  121.666817][ T2595] CPU: 0 UID: 0 PID: 2595 Comm: syz.6.666 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[  121.666843][ T2595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  121.666854][ T2595] Call Trace:
[  121.666860][ T2595]  <TASK>
[  121.666866][ T2595]  __dump_stack+0x21/0x30
[  121.666894][ T2595]  dump_stack_lvl+0x140/0x1c0
[  121.666918][ T2595]  ? __cfi_dump_stack_lvl+0x10/0x10
[  121.666942][ T2595]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  121.666963][ T2595]  dump_stack+0x19/0x20
[  121.666985][ T2595]  warn_alloc+0x1e7/0x2c0
[  121.667009][ T2595]  ? __kasan_kmalloc+0x28/0xb0
[  121.667030][ T2595]  ? __cfi_warn_alloc+0x10/0x10
[  121.667053][ T2595]  ? __get_vm_area_node+0x150/0x390
[  121.667077][ T2595]  ? kasan_save_alloc_info+0x3a/0x50
[  121.667094][ T2595]  ? __get_vm_area_node+0x382/0x390
[  121.667119][ T2595]  __vmalloc_node_range_noprof+0x365/0x1300
[  121.667139][ T2595]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  121.667156][ T2595]  ? kasan_save_alloc_info+0x3a/0x50
[  121.667171][ T2595]  ? __kasan_slab_alloc+0x73/0x90
[  121.667192][ T2595]  ? arch_dup_task_struct+0x5b/0xe0
[  121.667218][ T2595]  ? __asan_memcpy+0x5a/0x80
[  121.667235][ T2595]  dup_task_struct+0x5d6/0xd80
[  121.667256][ T2595]  ? copy_process+0x57c/0x3350
[  121.667276][ T2595]  ? _raw_spin_lock_irq+0x93/0x120
[  121.667299][ T2595]  ? copy_process+0x3350/0x3350
[  121.667320][ T2595]  ? __kasan_check_write+0x18/0x20
[  121.667338][ T2595]  copy_process+0x57c/0x3350
[  121.667361][ T2595]  ? kasan_save_alloc_info+0x3a/0x50
[  121.667376][ T2595]  ? __cfi_copy_process+0x10/0x10
[  121.667397][ T2595]  ? __kmalloc_cache_noprof+0x23c/0x470
[  121.667416][ T2595]  ? __kasan_check_write+0x18/0x20
[  121.667432][ T2595]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  121.667453][ T2595]  vhost_task_create+0x1f7/0x3f0
[  121.667471][ T2595]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  121.667492][ T2595]  ? __cfi_vhost_task_create+0x10/0x10
[  121.667510][ T2595]  ? __cfi_vhost_task_fn+0x10/0x10
[  121.667527][ T2595]  ? __kasan_check_write+0x18/0x20
[  121.667544][ T2595]  ? mutex_lock+0x97/0x1d0
[  121.667569][ T2595]  ? __cfi_mutex_lock+0x10/0x10
[  121.667590][ T2595]  ? kernel_text_address+0xa9/0xe0
[  121.667614][ T2595]  kvm_mmu_post_init_vm+0x161/0x300
[  121.667639][ T2595]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  121.667668][ T2595]  ? _parse_integer_limit+0x195/0x1e0
[  121.667688][ T2595]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  121.667711][ T2595]  ? kstrtoull+0x13b/0x1e0
[  121.667729][ T2595]  ? kstrtouint+0x78/0xf0
[  121.667748][ T2595]  ? ioctl_has_perm+0x1bc/0x500
[  121.667765][ T2595]  ? __asan_memcpy+0x5a/0x80
[  121.667782][ T2595]  ? ioctl_has_perm+0x408/0x500
[  121.667799][ T2595]  ? has_cap_mac_admin+0xd0/0xd0
[  121.667817][ T2595]  ? __kasan_check_write+0x18/0x20
[  121.667833][ T2595]  ? mutex_lock_killable+0x97/0x1d0
[  121.667857][ T2595]  ? __cfi_mutex_lock_killable+0x10/0x10
[  121.667879][ T2595]  ? proc_fail_nth_write+0x184/0x220
[  121.667906][ T2595]  kvm_vcpu_ioctl+0xa43/0x1000
[  121.667923][ T2595]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  121.667940][ T2595]  ? __cfi_vfs_write+0x10/0x10
[  121.667957][ T2595]  ? __kasan_check_write+0x18/0x20
[  121.667974][ T2595]  ? mutex_unlock+0x90/0x240
[  121.667994][ T2595]  ? __cfi_mutex_unlock+0x10/0x10
[  121.668016][ T2595]  ? __fget_files+0x2bc/0x330
[  121.668037][ T2595]  ? bpf_lsm_file_ioctl+0xd/0x20
[  121.668059][ T2595]  ? security_file_ioctl+0x3e/0x110
[  121.668076][ T2595]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  121.668091][ T2595]  __se_sys_ioctl+0x123/0x1b0
[  121.668113][ T2595]  __x64_sys_ioctl+0x7f/0xa0
[  121.668133][ T2595]  x64_sys_call+0x1878/0x2ee0
[  121.668148][ T2595]  do_syscall_64+0x57/0xf0
[  121.668165][ T2595]  ? clear_bhb_loop+0x50/0xa0
[  121.668187][ T2595]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  121.668209][ T2595] RIP: 0033:0x7f771879e199
[  121.668222][ T2595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.668235][ T2595] RSP: 002b:00007f771964f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.668253][ T2595] RAX: ffffffffffffffda RBX: 00007f7718a25fa0 RCX: 00007f771879e199
[  121.668265][ T2595] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  121.668275][ T2595] RBP: 00007f771964f090 R08: 0000000000000000 R09: 0000000000000000
[  121.668285][ T2595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.668295][ T2595] R13: 00007f7718a26038 R14: 00007f7718a25fa0 R15: 00007ffdb8514b78
[  121.668308][ T2595]  </TASK>
[  121.668349][ T2595] Mem-Info:
[  122.125891][ T1464] Bluetooth: hci0: command 0x1003 tx timeout
[  122.131961][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  122.161585][ T2595] active_anon:23037 inactive_anon:4130 isolated_anon:0
[  122.161585][ T2595]  active_file:16515 inactive_file:1683 isolated_file:0
[  122.161585][ T2595]  unevictable:9 dirty:311 writeback:0
[  122.161585][ T2595]  slab_reclaimable:7870 slab_unreclaimable:68885
[  122.161585][ T2595]  mapped:24961 shmem:15616 pagetables:1192
[  122.161585][ T2595]  sec_pagetables:3 bounce:0
[  122.161585][ T2595]  kernel_misc_reclaimable:0
[  122.161585][ T2595]  free:1510099 free_pcp:2083 free_cma:0
[  122.261628][ T2595] Node 0 active_anon:94424kB inactive_anon:16520kB active_file:66060kB inactive_file:6732kB unevictable:6148kB isolated(anon):0kB isolated(file):0kB mapped:99844kB dirty:1244kB writeback:0kB shmem:62464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB writeback_tmp:0kB kernel_stack:5824kB pagetables:5028kB sec_pagetables:12kB all_unreclaimable? no
[  122.305421][ T2595] DMA32 free:2959164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963372kB mlocked:0kB bounce:0kB free_pcp:4208kB local_pcp:4208kB free_cma:0kB
[  122.440885][ T2595] lowmem_reserve[]: 0 3921 3921
[  122.475560][ T2595] Normal free:3069704kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:98304kB inactive_anon:16520kB active_file:66060kB inactive_file:6732kB unevictable:0kB writepending:1244kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:8088kB local_pcp:8088kB free_cma:0kB
[  122.595399][ T2595] lowmem_reserve[]: 0 0 0
[  122.609623][ T2595] DMA32: 5*4kB (M) 3*8kB (M) 5*16kB (M) 6*32kB (M) 4*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 5*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2959164kB
[  122.659472][ T2595] Normal: 1*4kB (E) 2*8kB (UE) 142*16kB (UME) 172*32kB (UME) 415*64kB (UM) 113*128kB (UME) 30*256kB (UM) 31*512kB (UME) 37*1024kB (UME) 10*2048kB (UE) 715*4096kB (UM) = 3059380kB
[  122.695857][ T2595] 40749 total pagecache pages
[  122.705942][ T2595] 4053 pages in swap cache
[  122.715897][ T2595] Free swap  = 60720kB
[  122.724352][ T2595] Total swap = 124996kB
[  122.732208][ T2595] 2097051 pages RAM
[  122.740380][ T2595] 0 pages HighMem/MovableOnly
[  122.750458][ T2595] 352242 pages reserved
[  122.758989][ T2595] 0 pages cma reserved
[  122.770570][ T2595] Memory allocations:
[  122.779681][ T2595]          0 B        0 init/main.c:1477 func:do_initcalls
[  122.794678][ T2595]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  122.811250][ T2595]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  122.827822][ T2595]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  122.843578][ T2595]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  122.860116][ T2595]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  122.878862][ T2595]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  122.895587][ T2595]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  122.911603][ T2595]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  122.928227][ T2595]          0 B        0 init/initramfs.c:101 func:find_link
[  123.004115][ T2634] batadv_slave_0: entered promiscuous mode
[  123.022279][ T2634] usb usb8: usbfs: process 2634 (syz.6.673) did not claim interface 0 before use
[  123.062445][ T2633] batadv_slave_0: left promiscuous mode
[  123.266920][ T2646] netlink: 96 bytes leftover after parsing attributes in process `syz.5.677'.
[  123.357778][ T2650] ------------[ cut here ]------------
[  123.363333][ T2650] WARNING: CPU: 0 PID: 2650 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0
[  123.372919][ T2650] Modules linked in:
[  123.376831][ T2650] CPU: 0 UID: 0 PID: 2650 Comm: syz.2.679 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[  123.388358][ T2650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  123.398476][ T2650] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0
[  123.404520][ T2650] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 05 ce 0b 06 00 0f 85 c2 00 00 00 c6 05 f8 cd 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24
[  123.424259][ T2650] RSP: 0018:ffffc900053b7640 EFLAGS: 00010246
[  123.430352][ T2650] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000
[  123.438376][ T2650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900053b76f8
[  123.446379][ T2650] RBP: ffffc900053b7780 R08: ffffc900053b76f7 R09: 0000000000000000
[  123.454396][ T2650] R10: ffffc900053b76e0 R11: fffff52000a76edf R12: ffffc900053b7680
[  123.462676][ T2650] R13: dffffc0000000000 R14: 1ffff92000a76ecc R15: 0000000000000000
[  123.470663][ T2650] FS:  00007f9af73ed6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  123.479705][ T2650] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  123.486357][ T2650] CR2: 0000200000001000 CR3: 00000001167ba000 CR4: 00000000003526b0
[  123.494384][ T2650] DR0: 0000000000000002 DR1: 00000000000001f8 DR2: 0000000000000002
[  123.502393][ T2650] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  123.510387][ T2650] Call Trace:
[  123.513701][ T2650]  <TASK>
[  123.516640][ T2650]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  123.522412][ T2650]  ? __kasan_slab_alloc+0x73/0x90
[  123.527539][ T2650]  ? kmem_cache_alloc_noprof+0x1e2/0x410
[  123.533273][ T2650]  ? hashtab_init+0xd6/0x1f0
[  123.537903][ T2650]  ___kmalloc_large_node+0x81/0x220
[  123.543138][ T2650]  ? hashtab_init+0xd6/0x1f0
[  123.547749][ T2650]  __kmalloc_large_node_noprof+0x1e/0xd0
[  123.553407][ T2650]  ? hashtab_init+0xd6/0x1f0
[  123.558110][ T2650]  __kmalloc_noprof+0x326/0x510
[  123.562987][ T2650]  ? __cfi_ebitmap_read+0x10/0x10
[  123.568033][ T2650]  hashtab_init+0xd6/0x1f0
[  123.572492][ T2650]  ? policydb_read+0x865/0x2860
[  123.577364][ T2650]  symtab_init+0x44/0x70
[  123.581616][ T2650]  policydb_read+0x8e1/0x2860
[  123.586328][ T2650]  ? __kasan_kmalloc+0x96/0xb0
[  123.591109][ T2650]  ? __cfi_policydb_read+0x10/0x10
[  123.596243][ T2650]  ? security_load_policy+0x130/0x12d0
[  123.601815][ T2650]  security_load_policy+0x16a/0x12d0
[  123.607139][ T2650]  ? irqentry_exit+0x4a/0x60
[  123.611742][ T2650]  ? __kasan_check_write+0x18/0x20
[  123.616876][ T2650]  ? mutex_lock+0x97/0x1d0
[  123.621317][ T2650]  ? __cfi_security_load_policy+0x10/0x10
[  123.627070][ T2650]  ? rep_movs_alternative+0x4a/0xa0
[  123.632301][ T2650]  sel_write_load+0x258/0x600
[  123.636984][ T2650]  ? __cfi_sel_write_load+0x10/0x10
[  123.642232][ T2650]  ? bpf_lsm_file_permission+0xd/0x20
[  123.647632][ T2650]  ? __cfi_sel_write_load+0x10/0x10
[  123.652849][ T2650]  vfs_write+0x3c4/0xfd0
[  123.657094][ T2650]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  123.662658][ T2650]  ? __cfi_vfs_write+0x10/0x10
[  123.667430][ T2650]  ? __kasan_check_write+0x18/0x20
[  123.672568][ T2650]  ? mutex_lock+0x97/0x1d0
[  123.676995][ T2650]  ? __cfi_mutex_lock+0x10/0x10
[  123.681882][ T2650]  ksys_write+0x145/0x260
[  123.686241][ T2650]  ? xfd_validate_state+0x68/0x140
[  123.691371][ T2650]  ? __cfi_ksys_write+0x10/0x10
[  123.696259][ T2650]  ? __kasan_check_write+0x18/0x20
[  123.701388][ T2650]  ? fpregs_restore_userregs+0x11c/0x260
[  123.707050][ T2650]  __x64_sys_write+0x7f/0x90
[  123.711651][ T2650]  x64_sys_call+0x271c/0x2ee0
[  123.716348][ T2650]  do_syscall_64+0x57/0xf0
[  123.720767][ T2650]  ? clear_bhb_loop+0x50/0xa0
[  123.725491][ T2650]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  123.731494][ T2650] RIP: 0033:0x7f9af659e199
[  123.735924][ T2650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.755551][ T2650] RSP: 002b:00007f9af73ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  123.763984][ T2650] RAX: ffffffffffffffda RBX: 00007f9af6825fa0 RCX: 00007f9af659e199
[  123.771957][ T2650] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003
[  123.779945][ T2650] RBP: 00007f9af66358e0 R08: 0000000000000000 R09: 0000000000000000
[  123.787936][ T2650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.795937][ T2650] R13: 00007f9af6826038 R14: 00007f9af6825fa0 R15: 00007ffc832924c8
[  123.803939][ T2650]  </TASK>
[  123.806957][ T2650] ---[ end trace 0000000000000000 ]---
[  124.108590][ T2650] SELinux: failed to load policy