last executing test programs:

6.273742768s ago: executing program 3 (id=4):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)
sendmsg$nl_xfrm(r0, 0x0, 0x90)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000280))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/zram0/disksize\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='1', 0x1) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f00000001c0)="01", 0x36, 0x7ff)
close(r2) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f00000001000132428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000030000004e", @ANYRES32=0x0], 0xf0}}, 0x804) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001b66fb1b313ba36db000a0000000400000014000100fd010000000000000000000000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0)

6.1757753s ago: executing program 3 (id=5):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x1, 0x7})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000000)='./bus\x00')
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40)
write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4608080b02000100000000000002000600000000809d01000038000000c50200000004000000012000000003000c006d0f000000008530242621cabb522b2420c9b48f203ca03ff161131aa99f6bbe47ebd78d880151aa807ed8ba80e81ee28cf6fefb2516caf2cc58c81c7a3a6dcdfc769f9b65f6c1af7e41a4395a355bb5507ae319ed70e39d115f60f9ecba78fb6de6bd391bd847d25ecd4fdbba7794ddf549096afef3423ce8e9d3d905b313df32b02a995787d2099d0fba3379"], 0x38)
close(r0)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x1})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2, 0x0)
write$binfmt_register(r1, &(0x7f0000000240)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x8000000000000001, 0x3a, '&]-', 0x3a, '))(!\'+.@:\xc4', 0x3a, './my_sys/bus/pci/devices/0000:00:01.0/config/file0', 0x3a, [0x46]}, 0x60)
read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, <r2=>0x0}, 0x2020)
r3 = getpgrp(0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0xfffffffe, 0x48000000, 0x4, 0x0, 0x0})
readv(r5, &(0x7f0000000200)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/171, 0xab}], 0x2)
fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x8f8ecdc9f3deb63c, 0x0, 0x8, 0xe, r3})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r7 = syz_clone(0x20011000, &(0x7f0000000940)="12be72a2d92fcb10e3d558c469e1c35ed28f088435266e9d23c0d940bcb9d3c0ea67f2fd302e03dd9413526704", 0x2d, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYBLOB="b86ed06f3f6f62ea8cde3409175391a1c1a919529f203c6f2b4c5d8d97678d44084b6092b3f742f5ac50181d057268426f55cd4b5a49535e2c07414809770b445f63", @ANYRESDEC=r2, @ANYRES16=r7], 0x1fc}, 0x1, 0x0, 0x0, 0x810}, 0x4080)
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff})
bind$unix(r8, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
fsetxattr$trusted_overlay_redirect(r8, &(0x7f00000001c0), &(0x7f00000002c0)='./file1\x00', 0x8, 0x0)

5.976215395s ago: executing program 0 (id=8):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x67869000) (async)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) (async)
fadvise64(r0, 0x2, 0x4, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) (async, rerun: 32)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) (async, rerun: 32)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

5.858040698s ago: executing program 0 (id=9):
setfsgid(0xee00)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020)

5.848785298s ago: executing program 0 (id=10):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = inotify_init1(0x800)
sync_file_range(r1, 0x31d6afbf, 0x400010004, 0x9)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000680015"], 0x1c}], 0x1}, 0x4000080)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB="bb6454", @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYRES8=r1, @ANYRESHEX=r2, @ANYBLOB=',\x00'])
read$FUSE(r6, &(0x7f0000006e80)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2082)
statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0, 0x100, 0x0)
write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1b515543, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x2, r8, r9, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r6, &(0x7f0000002280)={0x2020, 0x0, <r10=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r6, &(0x7f0000002200)={0x10, 0x0, r10}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
setxattr$security_evm(&(0x7f00000021c0)='./file0/file0\x00', &(0x7f0000002240), 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r11, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x3, 0x2, 0x2, '\x00', 0x38bd2394})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

5.663951643s ago: executing program 0 (id=11):
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000)
r0 = syz_clone(0x204000, &(0x7f0000000000)="48a16b033d27768cb9fbeecb16ae009579e83b42ef4ea74736eb4683b9aeb221bb3f47cfcbcd82cf08cdc2fcdbbc12dc2824a778c114ebc5971dd9078f6d0f83f5f9824887132b29ebe7e710d52f03cc168bb08a", 0x54, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="3079f5f921cb21a3b58f271760fb91d5fbe9c1c762ab248419") (async)
r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xe92e43f91f9eb4f7})
mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x1ff) (async)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffb000/0x4000)=nil) (async)
prlimit64(r0, 0x1, 0x0, &(0x7f0000000200)) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async)
ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000480)={&(0x7f0000000400)='\x00', &(0x7f0000000440)='syz0\x00', 0x6}) (async)
pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
write$P9_RLERROR(r5, &(0x7f0000000500)={0xc, 0x7, 0x1, {0x3, ',{#'}}, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x190, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x834cafddbeebd451}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x190}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000000)
syz_clone(0x80000000, &(0x7f00000007c0)="829ea0ab7dd78207adf5a615d99609af2799685498ccf53cff85e6c56ea8293784fb223f6ca12b", 0x27, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="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")
r7 = socket$netlink(0x10, 0x3, 0x1) (async)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000018c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x58, r8, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x48014}, 0x4008010) (async)
sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
getsockname$inet6(r7, &(0x7f0000001b00)={0xa, 0x0, 0x0, @local}, &(0x7f0000001b40)=0x1c) (async)
r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf64(r9, &(0x7f0000001b80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x81, 0x4, 0x8, 0x101, 0x2, 0x3, 0x8, 0x295, 0x40, 0x125, 0xfffffffb, 0x1000, 0x38, 0x1, 0xfff, 0x3, 0x7}, [{0x70000000, 0x8001, 0x100000000, 0x9, 0x8, 0x56f6, 0x3}], "96fa58b5e00c3119c0bb6c45d76d47eec7f31bb43c3aadcca0de1dc77c0d4b8fa31dbb45b93e561b1198848b9d47ab4b12837df6278c84a0cd171414ce2bffa828b377933daade81d3f9e1dd5fe802cece0a8a6633d74c78d20849ae38800f6279935d7d401700dcb21c5c323668f9affdd5387c60f5a5d85740f4b412406d4b9a3e649364b176ee1a45a2e7c5114745621c9402cb9622c53303b3cfde0596edb50784bd67061db430ceda93cbcf8d3b80280c5422925cdbe468d0ece92133bd2dc4ece9f5f45daa9839f8e3d520de9d4af76c4db33236d7c1330f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb53) (async)
socket$inet(0x2, 0x80000, 0x2)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002700)='./binderfs2/custom0\x00', 0x2, 0x0)
ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000002740)={0xd1, 0xfffffffffffffffc, 0x2, 0x0, 0x0, [{{r7}, 0x77}, {{r7}, 0x10000}]})
getsockopt$IP6T_SO_GET_REVISION_TARGET(r10, 0x29, 0x45, &(0x7f00000027c0)={'HL\x00'}, &(0x7f0000002800)=0x1e) (async)
recvmmsg(r7, &(0x7f00000046c0)=[{{&(0x7f0000002840)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000028c0)=""/242, 0xf2}, {&(0x7f00000029c0)=""/188, 0xbc}], 0x2, &(0x7f0000002ac0)=""/187, 0xbb}, 0x10}, {{&(0x7f0000002b80)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002c00)=""/20, 0x14}, {&(0x7f0000002c40)=""/136, 0x88}, {&(0x7f0000002d00)=""/119, 0x77}], 0x3, &(0x7f0000002dc0)=""/122, 0x7a}, 0x9}, {{&(0x7f0000002e40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000004100)=[{&(0x7f0000002ec0)=""/248, 0xf8}, {&(0x7f0000002fc0)=""/130, 0x82}, {&(0x7f0000003080)=""/52, 0x34}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)}], 0x5, &(0x7f0000004180)=""/114, 0x72}, 0xf0}, {{&(0x7f0000004200)=@x25, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004280)=""/40, 0x28}, {&(0x7f00000042c0)=""/254, 0xfe}], 0x2, &(0x7f0000004400)=""/190, 0xbe}, 0x7}, {{&(0x7f00000044c0)=@tipc=@name, 0x80, &(0x7f0000004640)=[{&(0x7f0000004540)=""/138, 0x8a}, {&(0x7f0000004600)=""/37, 0x25}], 0x2, &(0x7f0000004680)=""/48, 0x30}, 0xd908}], 0x5, 0x100, &(0x7f0000004800))

5.583910694s ago: executing program 0 (id=12):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x4, 0xb7, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x94, 0x40, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x38}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x201, 0x3, 0x2, 0x400, 0xa, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x404, 0x6, 0x8, 0x1, 0xe2, 0xca}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x4, "65f1"}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x4, "0271"}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x7, "c31c6e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x7c, 0xf, "a06b9ba75bb0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x3, 0x7, {0x7, 0x25, 0x1, 0x4, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xb8, 0x5, 0x3, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x75, 0x1, 0x48, {0x7, 0x25, 0x1, 0x0, 0x2, 0xd9aa}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x2, 0x8, 0x5, 0x40, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0xed, &(0x7f00000001c0)=@string={0xed, 0x3, "66987e98283493d6fbb9a13982fbbe8e43eae5ccb69061ee323c86d9128949bdf8a3c8cd7951da2f4ac3cdf59023a00433b92cafdbd86509e3d33b8f27d748f75f59f338f436eb55cb49790938e1e015338ef1744acc718d91f0efc9ff6a6c003362cdd9ebd990971f81640c266bf8e6636efd80bf2e0829e88c3b9c3048849241ad22131c24fc1812fbd0d34d1c7377a29b9088e0a6d78f59463336b18aa6979eb3239b9dcca465af24116c5203b567b9ddad8382954bb752a546cd55d898519804d4f9b099f03f9a95b77464e2f45d87f600b46dc2c5fbc6b3c0784b407af73ca1014f02a4faa758ba31"}}]})
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000002500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/194, 0xc2, 0x0, &(0x7f0000001500)=""/4096, 0x1000}, &(0x7f0000002540)=0x40)
fsopen(0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x602, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="0000641d6b6203f939878a88760000000000", @ANYRESHEX=r3, @ANYBLOB=',\x00'])
sendmmsg$inet6(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405)
exit(0x0)
sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}})
landlock_create_ruleset(&(0x7f0000000080)={0x8000, 0x300}, 0x18, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

5.316084861s ago: executing program 3 (id=15):
syz_usb_connect$uac3(0x3, 0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100300000010820582054000010203010902740003010f6003080b0002010130000904000000010130000a2401050a00e58a000009040100000102300009040101010102300006240201000709050109100090060f0a2525040000000a040009040200ffff023000090402010101023000090506"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x40000, 0x4)

5.262495582s ago: executing program 3 (id=17):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x17c}, 0x1, 0x0, 0x0, 0x4000004}, 0xf7dbebca9ce41145)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000000)=0x4, 0x4)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r8 = syz_ublk_setup_io_uring(0x11e, &(0x7f00000000c0)={0x0, 0xe7b2, 0x2, 0x3, 0xad}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000340))
ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f00000004c0)={0x2, 0x9d1, &(0x7f0000000280)="5de2e1b0d36b8e89ead7eff0dc7068c0baaf2eb64e3ae357cad870da5c9070c8e07f6d6629fe9b01c09ec4a0eacac4393bcc5fa36c08c94ccf8a353bd24f81842669bf3e3f48f56a4a5c38f0bc822de644335d595110bef741094db384f1ba53937368197fab47c2dd22c1a09fbbfc0783", &(0x7f00000003c0)="8393c4c26559af6df29772df6dcbef6f0c5103697ad7adf135202fea39ed1da7fd4b1bf997d944c38fe21208843906df8576240b5cefbaf337c1a6a9734fd08bd91e310c7f5cec13d78157ae0d4e405845ad990b71a599328422df44465cd2cb9eda9ce487f6dc1ffc790fc89ea2d6e13694dbe8849186e3ba17337f1fa75789bf", 0x71, 0x81})
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000040)={0x1})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_io_uring_setup(0x7ca4, &(0x7f0000000500)={0x0, 0x1000001c, 0x27, 0x2, 0x24f, 0x0, r8}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000))

5.209859283s ago: executing program 32 (id=17):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x17c}, 0x1, 0x0, 0x0, 0x4000004}, 0xf7dbebca9ce41145)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000000)=0x4, 0x4)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r8 = syz_ublk_setup_io_uring(0x11e, &(0x7f00000000c0)={0x0, 0xe7b2, 0x2, 0x3, 0xad}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000340))
ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f00000004c0)={0x2, 0x9d1, &(0x7f0000000280)="5de2e1b0d36b8e89ead7eff0dc7068c0baaf2eb64e3ae357cad870da5c9070c8e07f6d6629fe9b01c09ec4a0eacac4393bcc5fa36c08c94ccf8a353bd24f81842669bf3e3f48f56a4a5c38f0bc822de644335d595110bef741094db384f1ba53937368197fab47c2dd22c1a09fbbfc0783", &(0x7f00000003c0)="8393c4c26559af6df29772df6dcbef6f0c5103697ad7adf135202fea39ed1da7fd4b1bf997d944c38fe21208843906df8576240b5cefbaf337c1a6a9734fd08bd91e310c7f5cec13d78157ae0d4e405845ad990b71a599328422df44465cd2cb9eda9ce487f6dc1ffc790fc89ea2d6e13694dbe8849186e3ba17337f1fa75789bf", 0x71, 0x81})
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000040)={0x1})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_io_uring_setup(0x7ca4, &(0x7f0000000500)={0x0, 0x1000001c, 0x27, 0x2, 0x24f, 0x0, r8}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000))

4.463070741s ago: executing program 4 (id=18):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0xfff, 0x4, 0x4, 0x800b, 0x7, "ea710000000000f9000000024200000200", 0x4000000, 0x8000400})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000011000100000100dffddbdf25d0e6cb2a16"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f00000005c0)=[@transaction={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4.302158885s ago: executing program 4 (id=21):
syz_usb_connect(0x3, 0x5f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xdb, 0x46, 0xc5, 0x10, 0x4c8, 0x720, 0x4c06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x2, 0x3, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0x69, 0x2, 0x0, 0xfb, 0x65, 0xbc, 0x8}}, {{0x9, 0x4, 0xa4, 0xe8, 0x0, 0xe, 0x1, 0x0, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x29}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x2, 0x5, [0x7, 0xa, 0x3, 0x9, 0x3], 0x8}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x1, 0x5, 0xe}]}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x7, 0x4, 0x1}]}]}}]}}]}}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8})
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x100000000000000)
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x24840, &(0x7f0000000280)={[{@no_bf_readahead}, {@readahead={'readahead', 0x3d, 0xb707}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x80}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x1b90}}, {}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x9}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}], [{@appraise_type}, {@flag='dirsync'}, {@euid_lt={'euid<', r0}}, {@hash}]})

3.097086614s ago: executing program 4 (id=28):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x1, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x3}, {0x50000, 0xf000, 0xd, 0x5, 0x3, 0x8, 0xff, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x25000, 0x4000, 0xb, 0x6, 0x6, 0x3, 0x20, 0x5, 0x0, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0xb, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0x4, 0x3, 0x0, 0x3, 0x0, 0xde, 0x9, 0x5, 0x0, 0x3, 0x30}, {0x200000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8004000, 0x6000, 0x6, 0x8, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0xd000, 0xb}, 0x50000, 0x0, 0x0, 0x140000, 0x5, 0x8000, 0xe000, [0x6, 0x6, 0x5, 0xe]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xa, 0x0, 0x0, 0x0, 0x10, 0x0, 0xfc, 0x80, 0x9, 0x2, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x25dfdbfe, {{{@in=@broadcast, @in=@broadcast}, {0x0, 0x20, 0xfffffffffffffffe, 0x0, 0x2, 0xc, 0x0, 0x3}, {}, 0x0, 0x0, 0x0, 0x1}}, [@mark={0xc}]}, 0xcc}}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x25dfdbfe, {{{@in=@broadcast, @in=@broadcast}, {0x0, 0x20, 0xfffffffffffffffe, 0x0, 0x2, 0xc, 0x0, 0x3}, {}, 0x0, 0x0, 0x0, 0x1}}, [@mark={0xc}]}, 0xcc}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000780)={0x0, {{0xa, 0x4e20, 0x7, @mcast2, 0x4}}, 0x1}, 0x90)
r5 = syz_usb_connect(0x1, 0x117, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xe9, 0xfc, 0x64, 0x20, 0x4e2, 0x1414, 0x689, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x105, 0x1, 0x2, 0x5, 0x40, 0xb, "", [{{0x9, 0x4, 0xe5, 0x14, 0x0, 0x2, 0x2e, 0x59, 0x25, [@generic={0xf3, 0x11, "41ab89eaab179b934dd8af5412d9de0c04bbf559211daedfd589dba977a652a43d94cf9ea94b9945db1afa71f0b09bee4dbbfec0709bbba808d23dcbb5fe2566434a201fb98ba9832d3ffaef8b4285fcc20da3d007167308de71fec0653c7ed9b4c0eb0c45040498c0b53460ba5d84e45685ff82c7128b743019481fbaae2d6e7e98b4666d333e42f251fe1dd236fa9056c08bfa4d14e99e11cc4ded4c1763895c509069236c03ba93534032df4e8e051f736e247b131714dd51b9509904e8adb095fd9ff070cda6621b225187f0057b2168e483c81b5631ab43acad854c105a972aa24080725b66503611332af7314fe0"}]}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0})
ioperm(0x3, 0x7, 0x7) (async)
ioperm(0x3, 0x7, 0x7)
syz_usb_connect$midi(0x0, 0xf5, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x1, 0x1, 0x80, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0xd2, [@midi_out_jack={0x15, 0x24, 0x3, 0x2, 0xbe, 0x7, [{0x7, 0x3}, {0x0, 0x62}, {0x4, 0xfd}, {0x7, 0xf7}, {0x78}, {0x0, 0x6}, {0x7, 0x10}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x4, 0x9}, @midi_out_jack={0x19, 0x24, 0x3, 0x1, 0x1, 0x9, [{0x19, 0x2}, {0x0, 0x80}, {0x80, 0x5}, {0x8}, {0x2, 0x6}, {0x7, 0x3}, {0x1, 0x7f}, {0x3, 0x2}, {0x7f, 0xf8}], 0x8}, @midi_out_jack={0x11, 0x24, 0x3, 0x0, 0xbf, 0x5, [{0x8, 0x3}, {0x3}, {0x1, 0x38}, {0x7, 0x2}, {0x31, 0x9}], 0x9}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x0, 0x2, [{0x5, 0x1}, {0x6, 0x2}], 0xf}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x8, 0x9}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0x6, 0x2, [{0x5, 0x1}, {0x2, 0x7b}], 0x3}, @midi_out_jack={0x17, 0x24, 0x3, 0x2, 0x6, 0x8, [{0x42, 0xa3}, {0x8}, {0x3, 0xf}, {0x9, 0x2}, {0xf, 0x8}, {0x5, 0xd3}, {0x7, 0xfe}, {0x7, 0x40}], 0x4}], [{{0x9, 0x5, 0xf, 0x10, 0x20, 0x5, 0xa6, 0x5, {0x4}}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xb, 0xa1, 0xf0, {0x12, 0x25, 0x1, 0xe, "7f652bfb92c62c212085a44f2cf5"}}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x2, 0x4, 0x1, {0x6, 0x25, 0x1, 0x2, "7d02"}}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x10, 0x40, 0x9, {0x5, 0x25, 0x1, 0x1, "a8"}}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x10, 0x8, 0xa, {0xb, 0x25, 0x1, 0x7, "d80ad43637b63d"}}}]}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x1f, 0xae, 0x1, 0x10}, 0x13, &(0x7f00000005c0)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x1, 0x1, 0x9, 0x9}, @ptm_cap={0x3}]}, 0xa, [{0xb8, &(0x7f0000000600)=@string={0xb8, 0x3, "dd9a8cd69cacf46b6b9699d7e3105b2124c537e783356c1269170c13e56135c3adf4cc16685bcf04ce2ea5642b6498bf832d64a22e81c35ed69fcc68c90f0ace2bfb37d6a5cdac17f0fdae78c62a65e39bb56b4fed4cb51b3319f1f3c9edc0a3d089d5d99f4f3f5ff52ab146aec4725d071fe15dced5f6c7c0c67e5670421e7b23e5f4f273897e9d0f0f0b9d961005f6ad6bb6d8fcefc673ecd6aa376630250335e36336da3097daec65efa445bf0eeed32130c4b6b4"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x2401}}, {0x57, &(0x7f0000000840)=@string={0x57, 0x3, "ee096a1808a1638d6bcf1a0fc5af51f74f6a5428b354ea2805636933ac286ff82e85d9e3143569e47f9f94b5a590d501a95283a5e928f3b116b1b35594fbabc9c3e20e196ecc2c4c53b08e746262a322019cfe0609"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x860}}, {0xb9, &(0x7f0000000980)=@string={0xb9, 0x3, "bca50dafb7d3e0fa773b9ce7fe653be08a33b18a42230b97aeea6f2dcd5ba95646201096f8381879c0509ad3a27e5c19a077da15305ab5ab0afa9beb2b82655388e87c4b0fb847d638afeaef46dc9fac3e9c4a2821793e17dcc93f669de3a60c0e6953e4f6bb7ea4b609e4c80aa2d2c9b8308b9bfc98ac98dca0379a224be51aadef6fb6376b68c1ad85614e6f56a5d4b2570470502405db6ed70865612705fab6f75d23331047173a91417e8ef4a20bf3f4274c9db070"}}, {0x2d, &(0x7f0000000a40)=@string={0x2d, 0x3, "a3a3af026745b580bee6604b8cee263889ae48abbabc7c2304670e74b8b6d64bf36e4105351975d39c0041"}}, {0x52, &(0x7f0000000b00)=@string={0x52, 0x3, "0f75c14b51f9c16a3987240f5ae4525ea4d03a21680d9ea70bdd23b7f61730d0678b3dca820b608efdfd818d870bab3dec5e76a444905edd772c0c9e6fadf7d469e26ab2137afeaa23cfd5c46d2bbc30"}}, {0xc5, &(0x7f0000000b80)=@string={0xc5, 0x3, "c19ba04d18deeb171c63b3f73e68c6894c9671172620a2a63d7e1995ab080444fd20778dc3a8bfda3ba0de3305adb616dd954e1bcc614b51cdfae1768368fc2f9bcc40064c85f84ef7d4518c1614d2db50c0f98b100bb8010d7b8b00b50569460f5f2352adf2dad13598cee4b7974719321b43182683d196d7a0518a2c8bb211e9a1920375ad60328a80204adb09df276b7b99e3f5c190e366da8b272ef407baa8909d54c81ec2e12b83dbad1a509c2338726740fcff98ebfaa1fc1e58e1af54bc11ca"}}]})
ioperm(0x8, 0x5, 0x4) (async)
ioperm(0x8, 0x5, 0x4)
syz_usb_control_io$rtl8150(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x0, 0x11, 0x8, {0x8, 0x24, "ec82f27200b4"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x20, 0x9, 0x46, "8dc3edcbcdfe1d340ac515e0b7d23cc4d9bb70ef700a0ac8e37eef435a4eba2926e30273347a96d411e6084c46b8b6a90a391150efe8f4cfa4473970171536d362e95181eca3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000003c0)=ANY=[@ANYBLOB="c005010000002e126bb956f4717e007660ec9252832d08f17a0dd9d93101905e0300c997d5b0d696fbd5afccae8bd00de3acc13a1a2524c5bb65e98d3c1195eb118f22ca4620ac042a32f9370f5f233b09ebeeaa75a385a7f9126c77142d3ba7c466fbd5dd90b6ee130221f0fb1be20db862025b5e9ba61cae71bf1536f763e8e39b3834fad5e2de029660ac832fc39ddb6c573849b90e232b24bb29e99e0de9cb33f9bf74245e8ebb8f5a5501e657a6f00cd4f6fb78c2b27f67e4"], &(0x7f0000000340)={0x40, 0x5, 0x6, "0ac587672b83"}})

2.584267017s ago: executing program 0 (id=29):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x18, 0x0, &(0x7f0000000200)={0x1820, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'})
r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r5, 0x1000006)
fcntl$addseals(r5, 0x409, 0x7)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x7})
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x4077d, &(0x7f0000e68000)={0x2, 0x4e20, @local}, 0xffffffffffffff9a)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x17d}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7", 0xa5}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="7a7262ebbadcd6d70e4a2a0e92807cbacbaf1825df0b68eb423034edeb804cb3fa8817e5caf838d4c0e37b661cc240f230ec07c8cc297b78", 0x38}, {&(0x7f00000002c0)="1c063cf8e1c05b3286459c56d77a43484c208206d46cb73604a90947e9b6073bfaa076289cdb103febf9", 0x2a}], 0x2}}], 0x3, 0x2090)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x5, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x1004, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0xc1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
fchdir(r1)
syz_usb_control_io(r6, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x40, 0x6, 0x28, {0x28, 0x30, "1bfe5579d783eaf027e5f5b16790f75ccf6c390ed76cb06d1e146ae6cc45e7a7b07280d67030"}}, 0x0, &(0x7f0000000240)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x2}]}}, 0x0, 0x0}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001ac0), 0x101000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x36)
write(r4, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee1", 0x2f0)

2.05146575s ago: executing program 2 (id=31):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0)
io_setup(0x2, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, r0, 0x0, 0x0, 0x800, 0x0, 0x6, r0}])
openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x224280, 0x8c, 0x2}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
setreuid(0x0, 0xee01)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@redirect_dir_on}], [], 0x2c})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1.976741282s ago: executing program 2 (id=32):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x5003000, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0xc001)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000000080102000000000000000000000004060002400a0100074000000005080006400000000508000540000000040600024088fb00004400048008000140000000060800014000000400080006400000000508000140000000090800074000006c3408000340000000080800034000000003080006400001"], 0x84}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000)
r1 = socket(0x1, 0x3, 0x9)
sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a0443000b0018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000380)={0x100000000000029f, 0x0, [{0x863, 0x0, 0x80}, {0xa83, 0x0, 0x9023}, {0x29e}, {0xa59, 0x0, 0x6}, {0x39d, 0x0, 0x4e}, {0x60a, 0x0, 0x89}, {0xc001103d, 0x0, 0x81}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee01)
tkill(r4, 0x12)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r6 = signalfd4(r1, &(0x7f0000000000)={[0x8]}, 0x8, 0x80800)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r11, &(0x7f000087e000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x480, 0x0, 0xd8100011e57ed3}]})
sendmmsg$inet(r8, &(0x7f00000000c0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e2b, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000c00109f0c888b843aab700810200"/34], 0x18}}], 0x2, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, r7, 0x358, 0xffff8881f6e0f000)
unlinkat(r6, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x200)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})

1.903921234s ago: executing program 2 (id=33):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0)
r2 = syz_clone(0x840000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r3, 0xff02)
r4 = dup(r1)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x40043d0d, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r6, 0x28f43000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="66baf80cb84cc6838bef66bafc0cedc74424000a000100c7442402e91f0000c7442406000000000f01142488854e4800000f01c348b800000000000000000f23c00f21f83503000d000f23f848b800000000000001000f23c80f21f835040060000f23f8c4c1fd2ea000800000f20faef3460f8b000000002e64460fc7771e"}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r10, r11, 0x0, 0x20000023898)
close(0x3)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r9, r12, &(0x7f00004aa000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x485, 0x0, 0x20000165}]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1.818419086s ago: executing program 1 (id=34):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x81, 0x800, {0x0, 0xea60}, {}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x1, 0x944, 0xffffffff, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x2f, 0x3, 0x0, 0x0, "f1b68c3e70a5d4bb02ab9dd1826faf62d4bcfd6c350a928a417ccf61f72b6378965ff4776ad1e8e0b6d8bc529caeb5e8ff90381a02e9b1826bd45bc45cb236d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8050)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x200000000000000)
syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000000835120882400001020301090269000301002000080b0101010520070904000000010120000924012e0b0609000209040100"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56e, 0xfd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x6, 0x6, {0x9, 0x21, 0x562f, 0x21, 0x1, {0x22, 0x8eb}}, {{{0x9, 0x5, 0x81, 0x3, 0xc, 0x5, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x20, 0xff, 0x6, 0x30, 0x60}, 0x31, &(0x7f00000001c0)={0x5, 0xf, 0x31, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x0, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x1, 0xcd}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x52, "a30f556213d93086adcc0dd739887dea"}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3c25}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x443}}, {0x4a, &(0x7f00000002c0)=@string={0x4a, 0x3, "49625b16d5180eea9bd32139ab6293db7cac24f0eeb68b8cfb410fcae2513391093f8b1f58760da5ec8d5ee0a279e944450e015297860b7f269f9523c00eee161b7682cc2bd90e7d"}}, {0x45, &(0x7f0000000340)=@string={0x45, 0x3, "d545854f70b9ea48d1b2e7b287478a9e1b2b6cbe0754fe30e59a6f03dffd910efe0bf4d5e127ed4909775a7c394ab90f181c7373c902596f88840c581030fc27d71bc7"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3c01}}]})
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x7}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x59}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c010000100007000080000000000000e0000002000000000000000000000000fe8000000000000000000000000000aaffff0000000000000000002002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000000002b000010fe8000000000000000000000000000aa0000000000000000000000000000000006000000000000000000000000000000000000000200000000000000000000000000000000000000030000000000000000040000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a00024070000000000000004c0014006362636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20080005}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c503, 0x20)
fchdir(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

1.332123088s ago: executing program 2 (id=35):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x7, &(0x7f0000000000)=0xfffffc00, 0xffffffffffffffde)

1.266839309s ago: executing program 2 (id=36):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101402, 0x0, 0x2}, 0x18)
mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x2)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0001332564aa11f6bbf44d00000000008984", 0x39}], 0x1)

1.266470169s ago: executing program 2 (id=37):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000440)={0x18, &(0x7f0000000b40)={0x0, 0x23, 0x29, {0x29, 0x30, "d0269c69d59d984dcce5238cdcd74ef82d71bc78e9d61a9f86c4d508a78d3f8b545de2ae053856"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x404})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x410080)
ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000100)=0xff22)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})
syz_usb_control_io(r0, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000004e40)={0xfb, 0x15, 0x7, 0x98, "4d514462949299fa5de8b405eb000100"})
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022050000fecd0090"], 0x0}, 0x0)

455.031429ms ago: executing program 1 (id=38):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4098, 0x1002}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0)

442.253959ms ago: executing program 1 (id=39):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'ip6tnl0\x00', {0x8012}, 0x4})
r1 = memfd_create(&(0x7f0000000980)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7\xc6yE\xa8\xd6A\xe8*\xedEd\x14m|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6E&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/717, 0x1)
ftruncate(r1, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2000003, 0x1010, r0, 0x2000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x5, [0x3, 0x0, 0x10000, 0x6, 0x7, 0x8]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f00003d9000/0x1000)=nil)

387.95032ms ago: executing program 1 (id=40):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
setuid(0xee01)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0x69}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x20000006)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x7b, 0x2, 0xff, 0x3}}], 0x68})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000340)={0x3, 0x0, [{0x862, 0x0, 0x26a}, {0xb0f, 0x0, 0x7}, {0x269, 0x0, 0x49d}]})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB="800100001200010a28bd7000000000000700000004003700660169802000088004006a800400ac800c00e10003000000000000000400088004005680080041"], 0x180}}, 0x0)
read(r5, &(0x7f0000001280)=""/4107, 0x100b)
sendto$packet(r5, &(0x7f0000000080)="b8c3a5e3d7fabc650f21aa830aa639e6e2b8ac929dd76b59f1ecfd7d9065a156f9683bcfc127584846c6d4dfbf79f6eeae67eeab6237f82db60df6a09023b5d2129b0570899600c1403a928250c2bf94e015eed286cf1ea2e869322bd4875625615c4a44862203c370b84845bc014ae044f649e91cad6876dedeb190b9317dd7b54285bd524bb2087980def9c9a9ad8f5c6094ff52141c341db28e1852eafe03d1d6f8805f617140993621b1f19f9ec5de28c244998f3b0acf5df05f5a10c380f6cce4d0", 0xc4, 0x0, 0x0, 0x0)
bind$bt_hci(r5, &(0x7f0000000180)={0x1f, 0x3, 0x2}, 0x6)

383.219611ms ago: executing program 1 (id=41):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
r0 = socket(0x25, 0x5, 0x62)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x1f1e) (async)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async)
futex(0x0, 0x3, 0x80000001, 0x0, 0x0, 0x100001) (async)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async)
recvmmsg$unix(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1}, 0x7}], 0x1, 0x40000182, 0x0) (async)
close(r1) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0) (async)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x3000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
read$FUSE(r3, &(0x7f0000012640)={0x2020}, 0x2020)
read$FUSE(r3, &(0x7f0000014680)={0x2020}, 0x2020) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r2, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1000004, 0x319}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6c71, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0xffffffde}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e78, 0x8000, 0x1, 0x310}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=','], 0x2c}}, 0x40)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000015c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10ffffffff00ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800)

315.208502ms ago: executing program 1 (id=42):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'xfrm0\x00', <r1=>0x0})
socket$inet6(0xa, 0x80001, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe847}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = socket(0xa, 0x3, 0x87)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'sit0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@local, 0x18, r8})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4f, r1})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="20012f"], 0x0})
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0))

0s ago: executing program 4 (id=43):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x3b, 0x4, 0x4e8, 0x318, 0x318, 0x400, 0x400, 0x318, 0x400, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0xfff0, 0x6, 0x1, 0x0, "35b4ad40bdfbf638f87c15884914d96ba36668c2bcf83371f0be12d484b725153201d48d5a757b6499999923740c3cee63801e9781a47666e585017e15a44496"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x538)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@arm64={0x2, 0x8, 0x7, '\x00', 0x3})
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x0)

kernel console output (not intermixed with test programs):

[    6.673193][   T36] audit: type=1400 audit(1786812150.920:58): avc:  denied  { read } for  pid=202 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1

syzkaller
syzkaller login: [   13.635775][   T36] audit: type=1400 audit(1786812157.900:59): avc:  denied  { transition } for  pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   13.638898][   T36] audit: type=1400 audit(1786812157.900:60): avc:  denied  { noatsecure } for  pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   13.641825][   T36] audit: type=1400 audit(1786812157.900:61): avc:  denied  { write } for  pid=232 comm="sh" path="pipe:[2668]" dev="pipefs" ino=2668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   13.645101][   T36] audit: type=1400 audit(1786812157.900:62): avc:  denied  { rlimitinh } for  pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   13.647968][   T36] audit: type=1400 audit(1786812157.900:63): avc:  denied  { siginh } for  pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts.
[   21.099967][   T36] audit: type=1400 audit(1786812165.360:64): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.101088][  T286] cgroup: Unknown subsys name 'net'
[   21.122632][   T36] audit: type=1400 audit(1786812165.360:65): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.150135][   T36] audit: type=1400 audit(1786812165.400:66): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.150308][  T286] cgroup: Unknown subsys name 'devices'
[   21.275630][  T286] cgroup: Unknown subsys name 'hugetlb'
[   21.281287][  T286] cgroup: Unknown subsys name 'rlimit'
[   21.373989][   T36] audit: type=1400 audit(1786812165.640:67): avc:  denied  { setattr } for  pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.397244][   T36] audit: type=1400 audit(1786812165.640:68): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.405718][  T288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.422328][   T36] audit: type=1400 audit(1786812165.640:69): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   21.454185][   T36] audit: type=1400 audit(1786812165.700:70): avc:  denied  { relabelto } for  pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.479897][   T36] audit: type=1400 audit(1786812165.700:71): avc:  denied  { write } for  pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.514808][   T36] audit: type=1400 audit(1786812165.780:72): avc:  denied  { read } for  pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.540788][   T36] audit: type=1400 audit(1786812165.780:73): avc:  denied  { open } for  pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.541092][  T286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.327234][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.334403][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.341474][  T295] bridge_slave_0: entered allmulticast mode
[   22.348328][  T295] bridge_slave_0: entered promiscuous mode
[   22.359460][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.366553][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.373660][  T293] bridge_slave_0: entered allmulticast mode
[   22.379802][  T293] bridge_slave_0: entered promiscuous mode
[   22.387869][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.395022][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.402188][  T293] bridge_slave_1: entered allmulticast mode
[   22.408535][  T293] bridge_slave_1: entered promiscuous mode
[   22.414687][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.421738][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.428847][  T295] bridge_slave_1: entered allmulticast mode
[   22.435031][  T295] bridge_slave_1: entered promiscuous mode
[   22.494396][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.501576][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.508809][  T294] bridge_slave_0: entered allmulticast mode
[   22.515066][  T294] bridge_slave_0: entered promiscuous mode
[   22.534739][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.541802][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.549090][  T294] bridge_slave_1: entered allmulticast mode
[   22.555386][  T294] bridge_slave_1: entered promiscuous mode
[   22.561389][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.568480][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.575631][  T296] bridge_slave_0: entered allmulticast mode
[   22.581780][  T296] bridge_slave_0: entered promiscuous mode
[   22.590837][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.597915][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.605019][  T296] bridge_slave_1: entered allmulticast mode
[   22.611773][  T296] bridge_slave_1: entered promiscuous mode
[   22.736569][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.743667][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.750945][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.758019][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.772172][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.779256][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.786578][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.793607][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.811292][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.818372][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.825674][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.832699][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.864741][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.871889][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.879176][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.886219][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.899777][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.907451][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.914715][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.921898][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.929669][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.936982][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.944455][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.951723][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.985590][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.992638][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.000340][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.007404][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.015310][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.022689][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.030508][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.037576][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.045248][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.052379][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.059993][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.067039][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.096600][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.103679][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.114149][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.121226][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.150736][  T295] veth0_vlan: entered promiscuous mode
[   23.173463][  T294] veth0_vlan: entered promiscuous mode
[   23.187184][  T295] veth1_macvtap: entered promiscuous mode
[   23.212502][  T296] veth0_vlan: entered promiscuous mode
[   23.220179][  T293] veth0_vlan: entered promiscuous mode
[   23.227738][  T294] veth1_macvtap: entered promiscuous mode
[   23.246298][  T296] veth1_macvtap: entered promiscuous mode
[   23.257292][  T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   23.281804][  T293] veth1_macvtap: entered promiscuous mode
[   23.359419][  T323] Can't allocate a compression stream
[   23.365635][  T323] zram: Cannot initialise lzo-rle compressing backend
[   23.432635][  T334] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.543708][  T310] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   23.694511][  T310] usb 3-1: not running at top speed; connect to a high speed hub
[   23.703229][  T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   23.714806][  T310] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   23.719101][  T347] =======================================================
[   23.719101][  T347] WARNING: The mand mount option has been deprecated and
[   23.719101][  T347]          and is ignored by this kernel. Remove the mand
[   23.719101][  T347]          option from the mount to silence this warning.
[   23.719101][  T347] =======================================================
[   23.723974][  T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   23.775787][  T310] usb 3-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   23.776273][  T349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   23.782768][  T310] usb 3-1: No streaming interface found for terminal 2.
[   23.854223][  T350] fuse: Unknown parameter '»dT0x0000000000000009'
[   24.009608][  T314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   24.033809][  T314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   24.042654][  T310] usb 3-1: USB disconnect, device number 2
[   24.231311][  T366] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   24.248355][   T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   24.355643][   T13] bridge_slave_1: left allmulticast mode
[   24.361338][   T13] bridge_slave_1: left promiscuous mode
[   24.376956][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.622001][   T13] bridge_slave_0: left allmulticast mode
[   24.633640][   T13] bridge_slave_0: left promiscuous mode
[   24.639295][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.646830][   T66] usb 1-1: Using ep0 maxpacket: 16
[   24.656599][   T66] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   24.689620][   T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   24.703240][   T66] usb 1-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00
[   24.719314][   T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.728727][   T66] usb 1-1: config 0 descriptor??
[   24.750341][  T378] netlink: 'syz.2.19': attribute type 58 has an invalid length.
[   24.790093][   T13] veth1_macvtap: left promiscuous mode
[   24.795674][   T13] veth0_vlan: left promiscuous mode
[   24.850246][  T381] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.857608][  T381] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.868764][  T381] bridge_slave_0: entered allmulticast mode
[   24.875865][  T381] bridge_slave_0: entered promiscuous mode
[   24.882361][  T381] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.889785][  T381] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.897018][  T381] bridge_slave_1: entered allmulticast mode
[   24.903303][  T381] bridge_slave_1: entered promiscuous mode
[   24.940757][  T359] 9pnet_fd: Insufficient options for proto=fd
[   24.943683][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   24.957808][  T381] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.964995][  T381] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.972330][  T381] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.979377][  T381] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.002760][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.010153][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.013636][  T380] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   25.027645][  T309] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.034729][  T309] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.045058][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.052253][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.077806][  T381] veth0_vlan: entered promiscuous mode
[   25.090377][  T381] veth1_macvtap: entered promiscuous mode
[   25.103628][   T10] usb 2-1: Using ep0 maxpacket: 32
[   25.114579][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   25.126114][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   25.136298][   T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   25.145571][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.158263][   T10] usb 2-1: config 0 descriptor??
[   25.163243][  T391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18'.
[   25.172921][  T391] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.181862][  T391] bridge_slave_0 (unregistering): left allmulticast mode
[   25.182340][  T380] usb 3-1: unable to get BOS descriptor or descriptor too short
[   25.189337][  T391] bridge_slave_0 (unregistering): left promiscuous mode
[   25.197272][  T380] usb 3-1: not running at top speed; connect to a high speed hub
[   25.204648][  T391] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.212663][  T380] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4
[   25.229790][  T380] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4
[   25.243750][  T380] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40
[   25.252864][  T380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.261214][  T380] usb 3-1: Product: syz
[   25.265478][  T380] usb 3-1: Manufacturer: syz
[   25.270077][  T380] usb 3-1: SerialNumber: syz
[   25.489185][  T378] kvm: pic: non byte write
[   25.499824][  T380] usb 3-1: Audio class v2/v3 interfaces need an interface association
[   25.510812][  T380] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   25.522713][  T380] usb 3-1: USB disconnect, device number 3
[   25.532229][  T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   25.553629][  T383] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   25.566063][  T379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   25.575108][  T379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   25.584545][   T10] usbhid 2-1:0.0: can't add hid device: -71
[   25.590518][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   25.599584][   T10] usb 2-1: USB disconnect, device number 2
[   25.703622][  T383] usb 5-1: Using ep0 maxpacket: 16
[   25.710154][  T383] usb 5-1: unable to get BOS descriptor or descriptor too short
[   25.718517][  T383] usb 5-1: config 3 has an invalid interface number: 105 but max is 1
[   25.726909][  T383] usb 5-1: config 3 has an invalid interface number: 164 but max is 1
[   25.735195][  T383] usb 5-1: config 3 has no interface number 0
[   25.741309][  T383] usb 5-1: config 3 has no interface number 1
[   25.747504][  T383] usb 5-1: config 3 interface 105 has no altsetting 0
[   25.754322][  T383] usb 5-1: config 3 interface 164 has no altsetting 0
[   25.762459][  T383] usb 5-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06
[   25.771870][  T383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.780584][  T383] usb 5-1: Product: syz
[   25.785118][  T383] usb 5-1: Manufacturer: syz
[   25.789751][  T383] usb 5-1: SerialNumber: syz
[   25.996668][  T394] capability: warning: `syz.4.21' uses deprecated v2 capabilities in a way that may be insecure
[   26.012017][  T383] uvcvideo 5-1:3.164: Found multiple Units with ID 5
[   26.019525][  T383] uvcvideo 5-1:3.164: Found multiple Units with ID 1
[   26.026606][  T383] usb 5-1: Found UVC 0.03 device syz (04c8:0720)
[   26.033035][  T383] uvcvideo 5-1:3.164: Entity type for entity Output 65535 was not initialized!
[   26.042140][  T383] uvcvideo 5-1:3.164: Entity type for entity Input 65535 was not initialized!
[   26.051279][  T383] usb 5-1: Failed to create links for entity 65535
[   26.057833][  T383] usb 5-1: Failed to register entities (-22).
[   26.066574][  T383] usb 5-1: USB disconnect, device number 2
[   26.099334][  T397] overlay: Unknown parameter 'euid'
[   26.177384][  T409] kvm: kvm [406]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4
[   26.248426][   T36] kauditd_printk_skb: 82 callbacks suppressed
[   26.248443][   T36] audit: type=1400 audit(1786812170.510:156): avc:  denied  { write } for  pid=412 comm="syz.2.27" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   26.299479][  T414] dummy_hcd dummy_hcd.0: remove, state 1
[   26.305261][  T414] usb usb1: USB disconnect, device number 1
[   26.433616][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   26.575244][   T36] audit: type=1400 audit(1786812170.840:157): avc:  denied  { nlmsg_write } for  pid=416 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   26.595601][   T10] usb 2-1: Using ep0 maxpacket: 8
[   26.602023][   T10] usb 2-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   26.615396][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[   26.622041][   T10] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[   26.631351][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.640048][   T10] usb 2-1: config 0 descriptor??
[   26.833653][   T31] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[   26.983642][   T31] usb 5-1: Invalid ep0 maxpacket: 32
[   27.025278][   T66] usb 1-1: USB disconnect, device number 2
[   27.040738][   T36] audit: type=1400 audit(1786812171.300:158): avc:  denied  { read } for  pid=420 comm="syz.0.29" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   27.043440][  T421] rust_binder: Failure in copy_transaction_data: EFAULT
[   27.065094][  T421] rust_binder: 420:421 transaction call to 420:0 failed EFAULT, code 0 size 8192-24
[   27.066243][   T36] audit: type=1400 audit(1786812171.300:159): avc:  denied  { open } for  pid=420 comm="syz.0.29" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   27.085816][  T414] dummy_hcd dummy_hcd.0: stopped
[   27.106139][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.114927][  T414] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[   27.117670][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.123918][   T31] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[   27.131351][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.147380][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.153684][   T36] audit: type=1400 audit(1786812171.300:160): avc:  denied  { ioctl } for  pid=420 comm="syz.0.29" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   27.180264][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.180864][   T36] audit: type=1400 audit(1786812171.300:161): avc:  denied  { set_context_mgr } for  pid=420 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   27.187717][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.207949][   T36] audit: type=1400 audit(1786812171.300:162): avc:  denied  { map } for  pid=420 comm="syz.0.29" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   27.214688][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.239128][   T36] audit: type=1400 audit(1786812171.300:163): avc:  denied  { call } for  pid=420 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   27.246078][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.271694][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.272854][   T36] audit: type=1400 audit(1786812171.340:164): avc:  denied  { name_bind } for  pid=420 comm="syz.0.29" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   27.279188][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.309027][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.309611][   T31] usb 5-1: Invalid ep0 maxpacket: 32
[   27.319546][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.322538][   T31] usb usb5-port1: attempt power cycle
[   27.330193][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.335622][   T36] audit: type=1400 audit(1786812171.340:165): avc:  denied  { node_bind } for  pid=420 comm="syz.0.29" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   27.342793][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.372152][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.380102][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.387791][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.397799][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.405954][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.413609][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.421015][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.436074][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.443653][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.451069][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.459175][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.466592][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.474079][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.481452][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.488877][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.496282][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.503686][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.511096][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.518527][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.525931][   T10] playstation 0003:054C:09CC.0001: unknown main item tag 0x0
[   27.534124][   T10] playstation 0003:054C:09CC.0001: hidraw0: USB HID v0.dc Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0
[   27.603959][   T10] playstation 0003:054C:09CC.0001: Failed to retrieve feature with reportID 18: -71
[   27.613444][   T10] playstation 0003:054C:09CC.0001: Failed to retrieve DualShock4 pairing info: -71
[   27.622856][   T10] playstation 0003:054C:09CC.0001: Failed to get MAC address from DualShock4
[   27.631942][   T10] playstation 0003:054C:09CC.0001: Failed to create dualshock4.
[   27.641599][   T10] playstation 0003:054C:09CC.0001: probe with driver playstation failed with error -71
[   27.659489][   T10] usb 2-1: USB disconnect, device number 3
[   27.673620][   T31] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[   27.703952][   T31] usb 5-1: Invalid ep0 maxpacket: 32
[   27.833745][   T31] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[   27.863999][   T31] usb 5-1: Invalid ep0 maxpacket: 32
[   27.869401][   T31] usb usb5-port1: unable to enumerate USB device
[   28.123651][   T10] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[   28.285806][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   28.296291][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   28.306801][   T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   28.317608][  T441] netlink: 'syz.2.36': attribute type 63 has an invalid length.
[   28.318416][   T10] usb 2-1: string descriptor 0 read error: -22
[   28.325572][  T441] netlink: 5 bytes leftover after parsing attributes in process `syz.2.36'.
[   28.331520][   T10] usb 2-1: New USB device found, idVendor=1235, idProduct=8208, bcdDevice= 0.40
[   28.350082][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.362206][   T10] usb 2-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8208); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[   28.377162][   T10] usb 2-1: Error initialising Clarett USB Mixer Driver: -22
[   28.386295][   T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   28.463348][  T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   28.569116][  T437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   28.578083][  T437] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   28.586547][  T437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.34'.
[   28.593663][  T388] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   28.743665][  T388] usb 3-1: Using ep0 maxpacket: 32
[   28.749981][  T388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   28.760972][  T388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   28.770787][  T388] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   28.779974][  T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.788541][  T388] usb 3-1: config 0 descriptor??
[   28.794481][  T388] hub 3-1:0.0: USB hub found
[   28.995223][  T388] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   29.145026][   T31] usb 2-1: USB disconnect, device number 4
[   29.192622][  T449] netlink: 316 bytes leftover after parsing attributes in process `syz.1.40'.
[   29.202082][  T449] netlink: 316 bytes leftover after parsing attributes in process `syz.1.40'.
[   29.203322][  T443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.219613][  T443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.488606][  T443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.497165][  T443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.593618][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   29.605569][  T470] x_tables: unsorted underflow at hook 1
[   29.706468][  T388] usbhid 3-1:0.0: can't add hid device: -71
[   29.712536][  T388] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   29.734085][  T388] usb 3-1: USB disconnect, device number 4
[   29.744736][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.755778][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.765561][   T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[   29.774722][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.783253][   T10] usb 2-1: config 0 descriptor??
[   29.933633][   T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   30.046728][  T420] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI
[   30.059337][  T420] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   30.067885][  T420] CPU: 0 UID: 0 PID: 420 Comm: syz.0.29 Not tainted syzkaller #0 119f1c0cd44458c2ddc7f806e6d4d2dd11ae7dae
[   30.079431][  T420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   30.089488][  T420] RIP: 0010:set_link_state+0x2a/0x1240
[   30.093818][   T31] usb 5-1: device descriptor read/64, error -71
[   30.094942][  T420] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 0d e1 cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 68 a5 26 fe 4d 8b 75 00 49 8d 95 93
[   30.094961][  T420] RSP: 0018:ffffc9000c0f7718 EFLAGS: 00010046
[   30.127161][  T420] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811687df00
[   30.135223][  T420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   30.143196][  T420] RBP: ffffc9000c0f77a0 R08: 0000000000000003 R09: 0000000000000004
[   30.151238][  T420] R10: dffffc0000000000 R11: fffff5200181eee0 R12: 0000000000000000
[   30.159303][  T420] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881037b4000
[   30.167282][  T420] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   30.176200][  T420] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   30.182773][  T420] CR2: 00007f1db55eb7c0 CR3: 00000000074aa000 CR4: 00000000003526b0
[   30.190741][  T420] Call Trace:
[   30.194027][  T420]  <TASK>
[   30.196942][  T420]  ? __kasan_check_write+0x18/0x20
[   30.202040][  T420]  dummy_pullup+0xd1/0x130
[   30.206444][  T420]  ? __cfi_dummy_pullup+0x10/0x10
[   30.211459][  T420]  usb_gadget_disconnect_locked+0x14e/0x400
[   30.217335][  T420]  gadget_unbind_driver+0xaf/0x3f0
[   30.222431][  T420]  ? __cfi_gadget_unbind_driver+0x10/0x10
[   30.228147][  T420]  device_release_driver_internal+0x4ad/0x830
[   30.234295][  T420]  driver_detach+0x1f5/0x2d0
[   30.238888][  T420]  bus_remove_driver+0x254/0x2b0
[   30.243825][  T420]  driver_unregister+0x79/0xb0
[   30.248588][  T420]  usb_gadget_unregister_driver+0x52/0x80
[   30.254305][  T420]  raw_release+0xdb/0x280
[   30.258633][  T420]  ? __cfi_raw_release+0x10/0x10
[   30.263558][  T420]  __fput+0x208/0xa30
[   30.267543][  T420]  ____fput+0x20/0x30
[   30.271510][  T420]  task_work_run+0x1e8/0x260
[   30.276083][  T420]  ? __cfi_task_work_run+0x10/0x10
[   30.281182][  T420]  ? __kasan_check_write+0x18/0x20
[   30.286279][  T420]  do_exit+0xa46/0x2850
[   30.290423][  T420]  ? hrtimer_cancel+0x31/0x60
[   30.295099][  T420]  ? __cfi_do_exit+0x10/0x10
[   30.299702][  T420]  ? futex_wait+0x23c/0x7c0
[   30.304185][  T420]  ? __cfi_futex_wait+0x10/0x10
[   30.309024][  T420]  ? __kasan_check_write+0x18/0x20
[   30.314118][  T420]  ? _raw_spin_lock_irq+0x93/0x120
[   30.319213][  T420]  do_group_exit+0x21f/0x2f0
[   30.323791][  T420]  ? __kasan_check_write+0x18/0x20
[   30.328885][  T420]  ? recalc_sigpending+0x184/0x1d0
[   30.333998][  T420]  get_signal+0x134c/0x1490
[   30.338490][  T420]  arch_do_signal_or_restart+0xbc/0x700
[   30.344028][  T420]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[   30.350199][  T420]  syscall_exit_to_user_mode+0x57/0xb0
[   30.355671][  T420]  do_syscall_64+0x63/0xf0
[   30.360107][  T420]  ? clear_bhb_loop+0x50/0xa0
[   30.364808][  T420]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   30.370697][  T420] RIP: 0033:0x7f043079e0d9
[   30.375123][  T420] Code: Unable to access opcode bytes at 0x7f043079e0af.
[   30.382123][  T420] RSP: 002b:00007ffec17919a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   30.383668][   T31] usb 5-1: device descriptor read/64, error -71
[   30.390520][  T420] RAX: fffffffffffffdfc RBX: 00000000000069b0 RCX: 00007f043079e0d9
[   30.390539][  T420] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0430a25fac
[   30.390551][  T420] RBP: 0000000000000bea R08: 4000000000000000 R09: 0000000000000000
[   30.420629][  T420] R10: 00007ffec1791ab0 R11: 0000000000000246 R12: 00007ffec1791ad0
[   30.428589][  T420] R13: 00007f0430a25fac R14: 000000000000759a R15: 00007ffec1791ab0
[   30.436552][  T420]  </TASK>
[   30.439558][  T420] Modules linked in:
[   30.443448][  T420] ---[ end trace 0000000000000000 ]---
[   30.448889][  T420] RIP: 0010:set_link_state+0x2a/0x1240
[   30.454426][  T420] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 0d e1 cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 68 a5 26 fe 4d 8b 75 00 49 8d 95 93
[   30.474017][  T420] RSP: 0018:ffffc9000c0f7718 EFLAGS: 00010046
[   30.480161][  T420] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811687df00
[   30.488119][  T420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   30.496089][  T420] RBP: ffffc9000c0f77a0 R08: 0000000000000003 R09: 0000000000000004
[   30.504041][  T420] R10: dffffc0000000000 R11: fffff5200181eee0 R12: 0000000000000000
[   30.512082][  T420] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881037b4000
[   30.520146][  T420] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   30.529056][  T420] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   30.535633][  T420] CR2: 00007f1db55eb7c0 CR3: 00000000074aa000 CR4: 00000000003526b0
[   30.543689][  T420] Kernel panic - not syncing: Fatal exception
[   30.551944][  T420] Kernel Offset: disabled
[   30.556277][  T420] Rebooting in 86400 seconds..