last executing test programs:

9m18.610943911s ago: executing program 32 (id=22478):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCRMFF(r3, 0x4004550e, 0x0)

9m18.206577694s ago: executing program 33 (id=22489):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0)

9m17.218397529s ago: executing program 34 (id=22526):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
write(r4, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmsg$IPVS_CMD_SET_DEST(r6, 0x0, 0x0)

9m16.499426798s ago: executing program 35 (id=22541):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)

9m16.209656945s ago: executing program 36 (id=22548):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r2, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
rt_sigaction(0x2f, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))

9m13.836486277s ago: executing program 37 (id=22658):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYBLOB="0a0006000802"], 0x58}}, 0x0)

8m11.245008401s ago: executing program 38 (id=23986):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x80, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0xb3a6, 0x0, 0xffffffffffffffff, 0xa, 0xd], 0x0, 0x141d01})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8m11.051680702s ago: executing program 39 (id=23995):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='8'], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

8m10.664258433s ago: executing program 40 (id=24002):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(r3, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000004000000ac1414bb000000000000000000000000fe8000050000000000000000000000bb00000000000000000200000f00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000001007000000000000008bffffffffffffff0000000000000000000000000000000002000000000000000000000000000000fcffffffffffffff000000000000000002000000000000000000000000200000000000000000000000000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

8m8.091007427s ago: executing program 41 (id=24082):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r2, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
getrusage(0xffffffffffffffff, &(0x7f0000000000))

8m7.656198101s ago: executing program 42 (id=24089):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
pselect6(0x40, &(0x7f0000000100)={0x8, 0x7fff, 0x4, 0x7fffffff, 0x2, 0x5, 0x90a4, 0x600000}, 0x0, &(0x7f0000000200)={0x101, 0xfa, 0x1000, 0x4, 0x4, 0x0, 0x4, 0x6}, 0x0, 0x0)

7m57.415548823s ago: executing program 43 (id=24398):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}})

7m51.117498934s ago: executing program 44 (id=24530):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1})
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

7m51.071690587s ago: executing program 0 (id=24533):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(r5, &(0x7f00000000c0), 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

7m50.957978093s ago: executing program 0 (id=24535):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='\a\x00\x00'], 0x14}}, 0x0)

7m50.939533914s ago: executing program 0 (id=24536):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000140))

7m50.863115059s ago: executing program 0 (id=24537):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0)

7m50.862693468s ago: executing program 0 (id=24538):
rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f00000000c0))
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
sendmmsg$inet6(r4, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804)
r5 = socket(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)

7m50.709232917s ago: executing program 0 (id=24540):
rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

7m50.676323599s ago: executing program 45 (id=24540):
rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

7m46.335591161s ago: executing program 9 (id=24650):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)

7m46.093659525s ago: executing program 9 (id=24658):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
write$P9_RMKNOD(r2, 0x0, 0x0)
r5 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r5, &(0x7f0000000140)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa0100ff, @loopback}}}], 0x20}}], 0x1, 0x48c0)

7m46.041677328s ago: executing program 9 (id=24659):
rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x800, 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)

7m46.041396848s ago: executing program 9 (id=24661):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0)

7m46.041197448s ago: executing program 9 (id=24662):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x8002]}}, 0x0, 0x8, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(r2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x800)

7m45.945184873s ago: executing program 9 (id=24664):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r1, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r5, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0)

7m45.898232666s ago: executing program 46 (id=24664):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r1, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r5, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0)

7m44.02841515s ago: executing program 7 (id=24754):
rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
lseek(r7, 0x4, 0x1)

7m43.975963253s ago: executing program 7 (id=24756):
rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x400000000000051, 0x4040041)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1)

7m43.951788904s ago: executing program 7 (id=24759):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)

7m43.951485614s ago: executing program 4 (id=24760):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x38, 0x0, '\x00\x00\x00\x00\x00\x00\x00'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}]}, 0x80}, 0x1, 0x7}, 0x4008000)

7m43.925811825s ago: executing program 7 (id=24761):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, 0x0, 0x0, 0x8014)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0)

7m43.895218747s ago: executing program 7 (id=24763):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
write$P9_RMKNOD(r2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

7m43.894919217s ago: executing program 4 (id=24764):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000240)=0x2, 0x4)

7m43.866896969s ago: executing program 4 (id=24766):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100"])

7m43.821173872s ago: executing program 7 (id=24768):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
write$P9_RMKNOD(r1, 0x0, 0x0)
r4 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000000140)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa0100ff, @loopback}}}], 0x20}}], 0x1, 0x48c0)

7m43.798455433s ago: executing program 47 (id=24768):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
write$P9_RMKNOD(r1, 0x0, 0x0)
r4 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000000140)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa0100ff, @loopback}}}], 0x20}}], 0x1, 0x48c0)

7m43.780465844s ago: executing program 4 (id=24772):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000440), 0x0, 0x8014)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0)

7m43.762978234s ago: executing program 4 (id=24773):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='k', 0x1}], 0x1)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0)
setgroups(0x1, &(0x7f00000001c0)=[0x0])

7m43.66920949s ago: executing program 4 (id=24774):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000009380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000008640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
r6 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r9, 0x1}], 0x1, 0x0, 0x0, 0x3)
close_range(r5, r7, 0x0)

7m43.659715961s ago: executing program 48 (id=24774):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000009380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000008640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
r6 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r9, 0x1}], 0x1, 0x0, 0x0, 0x3)
close_range(r5, r7, 0x0)

7m43.445793133s ago: executing program 6 (id=24777):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
write$P9_RMKNOD(r2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

7m43.331263499s ago: executing program 6 (id=24778):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0xb0098000)
write(r6, 0x0, 0x0)

7m43.30961982s ago: executing program 6 (id=24779):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
pselect6(0x40, &(0x7f0000000100)={0x8, 0x7fff, 0x4, 0x7fffffff, 0x2, 0x5, 0x90a4, 0x600000}, 0x0, &(0x7f0000000200)={0x101, 0xfa, 0x1000, 0x4, 0x4, 0x0, 0x4, 0x6}, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

7m43.290915031s ago: executing program 6 (id=24780):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000440), 0x0, 0x8014)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0)

7m43.270609572s ago: executing program 6 (id=24781):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x800, 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)

7m43.121266131s ago: executing program 6 (id=24782):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000140))

7m43.106546661s ago: executing program 49 (id=24782):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000140))

2m39.058303326s ago: executing program 2 (id=32960):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)

2m39.057923686s ago: executing program 2 (id=32961):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x50}}, 0x0)

2m39.014233128s ago: executing program 2 (id=32964):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
write$cgroup_int(r5, &(0x7f0000000240)=0x2, 0x12)

2m38.9593061s ago: executing program 2 (id=32969):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)

2m38.928926172s ago: executing program 2 (id=32971):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0)

2m38.541102039s ago: executing program 2 (id=32978):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)

2m38.51086702s ago: executing program 50 (id=32978):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)

2.117872438s ago: executing program 8 (id=37266):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)

1.801148191s ago: executing program 5 (id=37277):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000"], 0x18}, 0x8810)

1.59547234s ago: executing program 8 (id=37278):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(r4, 0x0, 0x0)
unshare(0x62020000)

1.442462687s ago: executing program 5 (id=37285):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
write$P9_RMKNOD(r2, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet(r6, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x488d5)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r7], 0x118)

1.442059307s ago: executing program 3 (id=37286):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)

1.14605569s ago: executing program 5 (id=37288):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
epoll_create1(0x0)

1.089934422s ago: executing program 5 (id=37289):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r2, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYBLOB])

1.089462212s ago: executing program 8 (id=37290):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r2, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r5, &(0x7f0000003c00), 0x0, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
fchown(0xffffffffffffffff, 0x0, 0x0)

1.088883942s ago: executing program 5 (id=37291):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x13, r1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c)
listen(r2, 0x5)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c)
accept(r2, &(0x7f00000001c0)=@sco, 0x0)

925.886ms ago: executing program 8 (id=37292):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x40, 0x37, 0xfc, 0x9}, {0x28, 0x1, 0xf7, 0xfffff034}, {0x6, 0x6, 0x2, 0x1057c}]}, 0x10)

925.54461ms ago: executing program 3 (id=37293):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0)
copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)

901.067301ms ago: executing program 3 (id=37294):
rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r4, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup3(r5, r6, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x11})

841.344893ms ago: executing program 3 (id=37296):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
write$P9_RMKNOD(r2, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet(r6, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x488d5)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r7], 0x118)

821.990424ms ago: executing program 3 (id=37298):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(r4, 0x0, 0x0)
unshare(0x62020000)

369.153044ms ago: executing program 3 (id=37299):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
write(r3, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mount$incfs(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000200)='./cgroup\x00', &(0x7f00000001c0), 0x1014000, 0x0)

307.400866ms ago: executing program 1 (id=37300):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r2, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r5, &(0x7f0000003c00), 0x0, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
fchown(0xffffffffffffffff, 0x0, 0x0)

270.931508ms ago: executing program 8 (id=37301):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

217.196501ms ago: executing program 1 (id=37302):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0)
copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)

217.000561ms ago: executing program 1 (id=37303):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
epoll_create1(0x0)

176.414052ms ago: executing program 1 (id=37304):
rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r4, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup3(r5, r6, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x11})

159.573423ms ago: executing program 5 (id=37305):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r2, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = dup(r8)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}})

103.300086ms ago: executing program 1 (id=37306):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x103002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="57c8", 0x2}], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)

102.770786ms ago: executing program 1 (id=37307):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r2, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}})

0s ago: executing program 8 (id=37308):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, 0x0, 0x0, 0x4)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224000100000000090400000103010000092100000001220100090581"], 0x0)
syz_usb_ep_write(r5, 0x81, 0x0, 0x0)

kernel console output (not intermixed with test programs):

e number 0
[ 1242.730378][ T2295] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1242.760372][ T2295] usb 2-1: config 129 interface 135 has no altsetting 0
[ 1242.778967][ T2295] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1242.788186][ T2295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1242.806310][ T2295] usb 2-1: Product: syz
[ 1242.810589][ T2295] usb 2-1: Manufacturer: syz
[ 1242.815213][ T2295] usb 2-1: SerialNumber: syz
[ 1243.036187][ T2295] usb 2-1: USB disconnect, device number 30
[ 1243.373702][ T3439] loop5: detected capacity change from 0 to 7
[ 1243.772445][ T3461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31919'.
[ 1245.213244][ T3542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31955'.
[ 1245.530383][ T4721] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1245.701582][ T4721] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1245.710939][ T4721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1245.723280][ T4721] usb 3-1: config 0 descriptor??
[ 1246.234850][ T3593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1088
[ 1247.063977][ T3638] netlink: 24 bytes leftover after parsing attributes in process `syz.8.32002'.
[ 1247.344685][ T3663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.32012'.
[ 1247.551094][ T5781] usb 6-1: new low-speed USB device number 61 using dummy_hcd
[ 1247.721841][ T5781] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1247.730401][ T5781] usb 6-1: config 129 has an invalid interface number: 48 but max is 1
[ 1247.738756][ T5781] usb 6-1: config 129 has an invalid interface number: 131 but max is 1
[ 1247.747187][ T5781] usb 6-1: config 129 has no interface number 0
[ 1247.753514][ T5781] usb 6-1: config 129 has no interface number 1
[ 1247.759867][ T5781] usb 6-1: config 129 interface 48 has no altsetting 0
[ 1247.766812][ T5781] usb 6-1: config 129 interface 131 has no altsetting 0
[ 1247.776043][ T5781] usb 6-1: string descriptor 0 read error: -22
[ 1247.782349][ T5781] usb 6-1: New USB device found, idVendor=0c52, idProduct=2102, bcdDevice= 0.15
[ 1247.791576][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1247.802312][ T5781] ftdi_sio 6-1:129.48: FTDI USB Serial Device converter detected
[ 1247.810689][ T5781] usb 6-1: Detected SIO
[ 1247.819407][ T5781] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1247.839156][ T5781] ftdi_sio 6-1:129.131: FTDI USB Serial Device converter detected
[ 1247.850980][ T5781] usb 6-1: Detected SIO
[ 1247.857499][ T5781] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB1
[ 1248.003409][ T5781] usb 6-1: USB disconnect, device number 61
[ 1248.013479][ T5781] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1248.023496][ T5781] ftdi_sio 6-1:129.48: device disconnected
[ 1248.030248][ T5781] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1
[ 1248.039908][ T5781] ftdi_sio 6-1:129.131: device disconnected
[ 1248.313848][   T31] usb 3-1: USB disconnect, device number 35
[ 1249.080394][ T3730] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=63 sclass=netlink_xfrm_socket pid=3730 comm=syz.1.32042
[ 1249.984770][ T3778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:354
[ 1250.695419][ T3809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1052
[ 1254.892070][  T330] bridge_slave_1: left allmulticast mode
[ 1254.917501][  T330] bridge_slave_1: left promiscuous mode
[ 1254.927668][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1254.950924][  T330] bridge_slave_0: left allmulticast mode
[ 1254.956607][  T330] bridge_slave_0: left promiscuous mode
[ 1254.990910][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1255.179585][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1255.210449][ T4046] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1255.217835][ T4046] bridge_slave_0: entered allmulticast mode
[ 1255.224944][ T4046] bridge_slave_0: entered promiscuous mode
[ 1255.241558][  T330] veth1_macvtap: left promiscuous mode
[ 1255.247111][  T330] veth0_vlan: left promiscuous mode
[ 1255.386936][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1255.398615][ T4046] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1255.419202][ T4046] bridge_slave_1: entered allmulticast mode
[ 1255.433274][ T4046] bridge_slave_1: entered promiscuous mode
[ 1255.594875][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1255.601988][ T4046] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1255.609289][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1255.616361][ T4046] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1255.690876][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1255.708468][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1255.733150][  T331] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1255.740219][  T331] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1255.761882][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1255.768969][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1255.851477][ T4046] veth0_vlan: entered promiscuous mode
[ 1255.877854][ T4046] veth1_macvtap: entered promiscuous mode
[ 1257.111407][ T4126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.32221'.
[ 1257.760436][ T5781] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1257.921858][ T5781] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1257.937062][ T5781] usb 6-1: config 129 has an invalid interface number: 135 but max is 0
[ 1257.945860][ T5781] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[ 1257.966996][ T5781] usb 6-1: config 129 has no interface number 0
[ 1257.980367][ T5781] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1258.010377][ T5781] usb 6-1: config 129 interface 135 has no altsetting 0
[ 1258.028865][ T5781] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1258.040519][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1258.058839][ T5781] usb 6-1: Product: syz
[ 1258.068803][ T5781] usb 6-1: Manufacturer: syz
[ 1258.078889][ T5781] usb 6-1: SerialNumber: syz
[ 1258.292351][ T5781] usb 6-1: USB disconnect, device number 62
[ 1258.819225][   T36] audit: type=1400 audit(2000000745.070:434): avc:  denied  { write } for  pid=4199 comm="syz.5.32255" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1261.011575][ T4265] Invalid logical block size (1)
[ 1261.304416][ T4313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:478
[ 1261.426669][ T4321] netlink: 'syz.2.32312': attribute type 4 has an invalid length.
[ 1262.123225][ T4405] loop5: detected capacity change from 0 to 7
[ 1262.211647][   T36] audit: type=1326 audit(2000000748.470:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.8.32343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f678ef8f6c9 code=0x0
[ 1263.592729][ T4444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:521
[ 1263.920305][   T36] audit: type=1400 audit(2000000750.170:436): avc:  denied  { mounton } for  pid=4468 comm="syz.1.32382" path="/70/file0" dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[ 1264.690436][ T5781] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[ 1264.860356][ T5781] usb 9-1: Using ep0 maxpacket: 16
[ 1264.879458][ T5781] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1264.900551][ T5781] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1264.925185][ T5781] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1264.951997][ T5781] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1264.970455][ T5781] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1264.998971][ T5781] usb 9-1: config 0 descriptor??
[ 1265.413544][ T5781] usbhid 9-1:0.0: can't add hid device: -71
[ 1265.419533][ T5781] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1265.437624][ T5781] usb 9-1: USB disconnect, device number 62
[ 1267.440918][ T4656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:567
[ 1268.090387][ T2078] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1268.270391][ T2078] usb 2-1: Using ep0 maxpacket: 16
[ 1268.280138][ T2078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1268.291382][ T2078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1268.310539][ T2078] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1268.340371][ T2078] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1268.359777][ T2078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1268.379131][ T2078] usb 2-1: config 0 descriptor??
[ 1268.592044][ T2078] usbhid 2-1:0.0: can't add hid device: -71
[ 1268.598171][ T2078] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1268.624688][ T2078] usb 2-1: USB disconnect, device number 31
[ 1269.800546][ T4770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:607
[ 1270.500803][ T4810] loop5: detected capacity change from 0 to 7
[ 1271.681523][ T4883] loop5: detected capacity change from 0 to 7
[ 1272.194482][ T4920] loop5: detected capacity change from 0 to 7
[ 1273.027840][ T4943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:409
[ 1275.031098][ T4995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1255
[ 1277.163641][ T5046] loop5: detected capacity change from 0 to 7
[ 1277.831157][  T684] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1277.937219][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1277.944525][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1277.951766][ T5103] bridge_slave_0: entered allmulticast mode
[ 1277.958241][ T5103] bridge_slave_0: entered promiscuous mode
[ 1277.965789][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1277.973156][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1277.980294][ T5103] bridge_slave_1: entered allmulticast mode
[ 1277.986797][ T5103] bridge_slave_1: entered promiscuous mode
[ 1278.010422][  T684] usb 3-1: Using ep0 maxpacket: 16
[ 1278.019952][  T684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1278.031336][  T684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1278.052110][  T684] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1278.065286][  T684] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1278.084136][  T684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1278.108052][  T684] usb 3-1: config 0 descriptor??
[ 1278.135179][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1278.142307][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1278.149718][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1278.156818][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1278.192063][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1278.199553][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1278.215634][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1278.222726][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1278.241552][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1278.248611][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1278.268533][  T330] bridge_slave_1: left allmulticast mode
[ 1278.280371][  T330] bridge_slave_1: left promiscuous mode
[ 1278.286061][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1278.311067][  T330] bridge_slave_0: left allmulticast mode
[ 1278.327211][  T330] bridge_slave_0: left promiscuous mode
[ 1278.333022][  T684] usbhid 3-1:0.0: can't add hid device: -71
[ 1278.339011][  T684] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1278.347376][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1278.356306][  T684] usb 3-1: USB disconnect, device number 36
[ 1278.467039][ T5103] veth0_vlan: entered promiscuous mode
[ 1278.496645][ T5103] veth1_macvtap: entered promiscuous mode
[ 1278.513909][  T330] veth1_macvtap: left promiscuous mode
[ 1278.519466][  T330] veth0_vlan: left promiscuous mode
[ 1278.917808][ T5136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:703
[ 1279.220381][ T5781] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[ 1279.390371][ T5781] usb 9-1: Using ep0 maxpacket: 16
[ 1279.401245][ T5781] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1279.430366][ T5781] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1279.460371][ T5781] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1279.483494][ T5781] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1279.510490][ T5781] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.523115][ T5781] usb 9-1: config 0 descriptor??
[ 1279.930520][ T5781] usbhid 9-1:0.0: can't add hid device: -71
[ 1279.936588][ T5781] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1279.951115][ T5781] usb 9-1: USB disconnect, device number 63
[ 1280.311655][ T5196] loop5: detected capacity change from 0 to 7
[ 1281.775254][ T5254] loop5: detected capacity change from 0 to 7
[ 1282.120480][ T5781] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1282.219941][ T5323] loop5: detected capacity change from 0 to 7
[ 1282.304848][ T5781] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1282.337302][ T5781] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1282.352532][ T5781] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1282.378012][ T5781] usb 6-1: Manufacturer: syz
[ 1282.410439][ T5781] usb 6-1: config 0 descriptor??
[ 1282.421395][ T5781] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1282.626092][   T31] usb 6-1: USB disconnect, device number 63
[ 1283.180409][    T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1283.340435][    T9] usb 3-1: Using ep0 maxpacket: 16
[ 1283.356867][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1283.377997][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1283.397937][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1283.420462][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1283.440081][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1283.459346][    T9] usb 3-1: config 0 descriptor??
[ 1283.879123][    T9] usbhid 3-1:0.0: can't add hid device: -71
[ 1283.888763][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1283.920923][    T9] usb 3-1: USB disconnect, device number 37
[ 1284.211953][ T5447] loop5: detected capacity change from 0 to 7
[ 1284.730389][ T5781] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[ 1284.881745][ T5781] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1284.890863][ T5781] usb 9-1: config 129 has an invalid interface number: 135 but max is 0
[ 1284.909469][ T5781] usb 9-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[ 1284.920164][ T5781] usb 9-1: config 129 has no interface number 0
[ 1284.940189][ T5781] usb 9-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1284.960360][ T5781] usb 9-1: config 129 interface 135 has no altsetting 0
[ 1284.969141][ T5781] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1284.978520][ T5781] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1284.986701][ T5781] usb 9-1: Product: syz
[ 1285.000353][ T5781] usb 9-1: Manufacturer: syz
[ 1285.005525][ T5781] usb 9-1: SerialNumber: syz
[ 1285.070374][    T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1285.215697][ T5781] usb 9-1: USB disconnect, device number 64
[ 1285.250350][    T9] usb 3-1: Using ep0 maxpacket: 16
[ 1285.256676][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1285.277783][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1285.297833][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1285.320995][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1285.330161][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1285.359230][    T9] usb 3-1: config 0 descriptor??
[ 1285.781731][    T9] usbhid 3-1:0.0: can't add hid device: -71
[ 1285.789272][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1285.808640][    T9] usb 3-1: USB disconnect, device number 38
[ 1287.260372][   T31] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[ 1287.420355][   T31] usb 9-1: Using ep0 maxpacket: 16
[ 1287.431084][   T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1287.460361][   T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1287.480393][   T31] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1287.500514][   T31] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1287.519903][   T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1287.539088][   T31] usb 9-1: config 0 descriptor??
[ 1287.953041][   T31] usbhid 9-1:0.0: can't add hid device: -71
[ 1287.959047][   T31] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1287.973474][   T31] usb 9-1: USB disconnect, device number 65
[ 1288.119809][ T5542] netlink: 68 bytes leftover after parsing attributes in process `syz.5.32878'.
[ 1288.906528][   T36] audit: type=1400 audit(2000000775.150:437): avc:  denied  { sendto } for  pid=5602 comm="syz.5.32906" path="socket:[511118]" dev="sockfs" ino=511118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1289.354896][ T5615] netlink: 'syz.8.32913': attribute type 4 has an invalid length.
[ 1289.370340][ T5615] netlink: 17 bytes leftover after parsing attributes in process `syz.8.32913'.
[ 1291.574781][   T12] bridge_slave_1: left allmulticast mode
[ 1291.590397][   T12] bridge_slave_1: left promiscuous mode
[ 1291.596206][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1291.614283][   T12] bridge_slave_0: left allmulticast mode
[ 1291.619959][   T12] bridge_slave_0: left promiscuous mode
[ 1291.640421][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1291.762810][   T12] veth1_macvtap: left promiscuous mode
[ 1291.768375][   T12] veth0_vlan: left promiscuous mode
[ 1291.790354][  T684] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1291.961164][  T684] usb 2-1: Using ep0 maxpacket: 32
[ 1291.968959][  T684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1291.980433][  T684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1291.990256][  T684] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1291.999841][  T684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1292.011460][  T684] usb 2-1: config 0 descriptor??
[ 1292.022605][  T684] hub 2-1:0.0: USB hub found
[ 1292.120856][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1292.127962][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1292.135910][ T5761] bridge_slave_0: entered allmulticast mode
[ 1292.142593][ T5761] bridge_slave_0: entered promiscuous mode
[ 1292.149373][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1292.157168][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1292.164539][ T5761] bridge_slave_1: entered allmulticast mode
[ 1292.171622][ T5761] bridge_slave_1: entered promiscuous mode
[ 1292.219816][  T684] hub 2-1:0.0: 1 port detected
[ 1292.263718][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1292.270815][ T5761] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1292.278113][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1292.285203][ T5761] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1292.317964][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1292.325867][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1292.338124][  T331] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1292.345207][  T331] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1292.354597][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1292.361676][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1292.401218][ T5761] veth0_vlan: entered promiscuous mode
[ 1292.415949][ T5761] veth1_macvtap: entered promiscuous mode
[ 1292.823526][  T684] hub 2-1:0.0: activate --> -90
[ 1293.224953][  T684] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 1293.232577][ T2078] usb 2-1: USB disconnect, device number 32
[ 1293.238567][  T684] usb 2-1-port1: connect-debounce failed
[ 1293.290371][   T45] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[ 1293.414792][ T5852] fuse: Bad value for 'fd'
[ 1293.440382][   T45] usb 9-1: Using ep0 maxpacket: 16
[ 1293.448177][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1293.452422][ T5855] loop5: detected capacity change from 0 to 7
[ 1293.465505][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1293.481207][   T45] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1293.504282][   T45] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1293.520346][   T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1293.539397][   T45] usb 9-1: config 0 descriptor??
[ 1293.794986][ T5879] fuse: Bad value for 'fd'
[ 1293.811654][ T5877] loop5: detected capacity change from 0 to 7
[ 1293.947029][   T45] usbhid 9-1:0.0: can't add hid device: -71
[ 1293.963219][   T45] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1293.984146][   T45] usb 9-1: USB disconnect, device number 66
[ 1294.980357][   T45] usb 9-1: new high-speed USB device number 67 using dummy_hcd
[ 1295.140364][   T45] usb 9-1: Using ep0 maxpacket: 16
[ 1295.147551][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1295.168717][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1295.188701][   T45] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1295.217625][   T45] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1295.231421][   T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1295.250762][   T45] usb 9-1: config 0 descriptor??
[ 1295.610371][  T684] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1295.660413][   T45] usbhid 9-1:0.0: can't add hid device: -71
[ 1295.666388][   T45] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1295.685183][   T45] usb 9-1: USB disconnect, device number 67
[ 1295.760393][  T684] usb 2-1: Using ep0 maxpacket: 16
[ 1295.768106][  T684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1295.779379][  T684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1295.789526][  T684] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1295.802586][  T684] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1295.811872][  T684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1295.821201][  T684] usb 2-1: config 0 descriptor??
[ 1296.032808][  T684] usbhid 2-1:0.0: can't add hid device: -71
[ 1296.040073][  T684] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1296.051694][  T684] usb 2-1: USB disconnect, device number 33
[ 1296.740390][ T4721] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1296.892876][ T4721] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1296.902559][ T4721] usb 4-1: config 129 has an invalid interface number: 135 but max is 0
[ 1296.912155][ T4721] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[ 1296.923033][ T4721] usb 4-1: config 129 has no interface number 0
[ 1296.929371][ T4721] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1296.943106][ T4721] usb 4-1: config 129 interface 135 has no altsetting 0
[ 1296.952179][ T4721] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1296.961434][ T4721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1296.969699][ T4721] usb 4-1: Product: syz
[ 1296.974132][ T4721] usb 4-1: Manufacturer: syz
[ 1296.979247][ T4721] usb 4-1: SerialNumber: syz
[ 1297.192042][ T4721] usb 4-1: USB disconnect, device number 111
[ 1299.868105][   T36] audit: type=1400 audit(2000000786.120:438): avc:  denied  { mount } for  pid=6357 comm="syz.1.33261" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1300.110470][ T2078] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1300.280406][ T2078] usb 4-1: Using ep0 maxpacket: 16
[ 1300.286796][ T2078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1300.298622][ T2078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1300.308651][ T2078] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1300.321844][ T2078] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1300.331020][ T2078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1300.339893][ T2078] usb 4-1: config 0 descriptor??
[ 1300.554843][ T2078] usbhid 4-1:0.0: can't add hid device: -71
[ 1300.561672][ T2078] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1300.573900][ T2078] usb 4-1: USB disconnect, device number 112
[ 1301.280392][   T31] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1301.441693][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1301.460835][   T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1301.480402][   T31] usb 6-1: config 0 has no interfaces?
[ 1301.487646][   T31] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1301.500339][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1301.518770][   T31] usb 6-1: Product: syz
[ 1301.529168][   T31] usb 6-1: Manufacturer: syz
[ 1301.539017][   T31] usb 6-1: SerialNumber: syz
[ 1301.549804][   T31] usb 6-1: config 0 descriptor??
[ 1301.762768][   T31] usb 6-1: USB disconnect, device number 64
[ 1301.851040][ T6493] loop5: detected capacity change from 0 to 7
[ 1301.956655][ T6499] rust_binder: 154: no such ref 0
[ 1302.303709][ T6527] Invalid logical block size (1)
[ 1302.726002][ T6571] Invalid logical block size (1)
[ 1302.740349][   T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1302.900389][   T31] usb 2-1: Using ep0 maxpacket: 32
[ 1302.915917][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1302.926804][ T6583] rust_binder: 194: no such ref 0
[ 1302.943390][   T31] usb 2-1: New USB device found, idVendor=0a5c, idProduct=0bdc, bcdDevice=ae.30
[ 1302.971071][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1302.988639][   T31] usb 2-1: config 0 descriptor??
[ 1303.203950][ T4721] usb 2-1: USB disconnect, device number 34
[ 1303.238463][ T6625] Invalid logical block size (1)
[ 1304.170390][ T6691] loop5: detected capacity change from 0 to 7
[ 1304.590358][  T684] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1304.760376][  T684] usb 2-1: Using ep0 maxpacket: 16
[ 1304.766706][  T684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1304.787844][  T684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1304.807756][  T684] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1304.836101][  T684] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1304.850345][  T684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1304.869322][  T684] usb 2-1: config 0 descriptor??
[ 1305.093068][  T684] usbhid 2-1:0.0: can't add hid device: -71
[ 1305.099117][  T684] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1305.122175][  T684] usb 2-1: USB disconnect, device number 35
[ 1305.290400][   T31] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1305.441697][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1305.458011][   T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1305.472461][   T31] usb 6-1: config 0 has no interfaces?
[ 1305.482852][   T31] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1305.492420][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1305.500440][   T31] usb 6-1: Product: syz
[ 1305.504658][   T31] usb 6-1: Manufacturer: syz
[ 1305.509248][   T31] usb 6-1: SerialNumber: syz
[ 1305.515082][   T31] usb 6-1: config 0 descriptor??
[ 1305.726733][   T31] usb 6-1: USB disconnect, device number 65
[ 1306.167540][ T6783] fuse: Unknown parameter 'r'
[ 1306.480389][ T2078] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1306.640336][ T2078] usb 4-1: Using ep0 maxpacket: 16
[ 1306.660836][ T2078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1306.680353][ T2078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1306.698582][ T2078] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1306.720438][ T2078] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1306.739764][ T2078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1306.758931][ T2078] usb 4-1: config 0 descriptor??
[ 1306.930243][ T6811] rust_binder: 404: no such ref 0
[ 1307.179402][ T2078] usbhid 4-1:0.0: can't add hid device: -71
[ 1307.197581][ T2078] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1307.206863][ T2078] usb 4-1: USB disconnect, device number 113
[ 1307.510395][  T684] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1307.521965][ T6869] rust_binder: 896: no such ref 0
[ 1307.661934][  T684] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1307.670511][  T684] usb 2-1: config 129 has an invalid interface number: 135 but max is 0
[ 1307.678884][  T684] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[ 1307.699377][  T684] usb 2-1: config 129 has no interface number 0
[ 1307.711924][  T684] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1307.731631][  T684] usb 2-1: config 129 interface 135 has no altsetting 0
[ 1307.742247][  T684] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1307.760530][  T684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1307.778776][  T684] usb 2-1: Product: syz
[ 1307.783308][  T684] usb 2-1: Manufacturer: syz
[ 1307.788072][  T684] usb 2-1: SerialNumber: syz
[ 1308.005579][  T684] usb 2-1: USB disconnect, device number 36
[ 1309.336679][ T6914] rust_binder: 296: no such ref 0
[ 1309.436154][ T6922] rust_binder: 300: no such ref 0
[ 1309.481170][   T45] usb 9-1: new high-speed USB device number 68 using dummy_hcd
[ 1309.547560][ T6937] rust_binder: 308: no such ref 0
[ 1309.651696][   T45] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1309.661664][   T45] usb 9-1: config 129 has an invalid interface number: 135 but max is 0
[ 1309.680952][   T45] usb 9-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[ 1309.692131][   T45] usb 9-1: config 129 has no interface number 0
[ 1309.698446][   T45] usb 9-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1309.730349][   T45] usb 9-1: config 129 interface 135 has no altsetting 0
[ 1309.741879][   T45] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1309.751144][   T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1309.759151][   T45] usb 9-1: Product: syz
[ 1309.770517][   T45] usb 9-1: Manufacturer: syz
[ 1309.780363][   T45] usb 9-1: SerialNumber: syz
[ 1309.993809][   T45] usb 9-1: USB disconnect, device number 68
[ 1312.487787][ T7061] loop5: detected capacity change from 0 to 7
[ 1312.850685][ T4721] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1313.010369][ T4721] usb 2-1: Using ep0 maxpacket: 16
[ 1313.016785][ T4721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1313.027986][ T4721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1313.038045][ T4721] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1313.051094][ T4721] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1313.065916][ T4721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1313.077888][ T4721] usb 2-1: config 0 descriptor??
[ 1313.287324][ T4721] usbhid 2-1:0.0: can't add hid device: -71
[ 1313.299509][ T4721] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1313.312018][ T4721] usb 2-1: USB disconnect, device number 37
[ 1313.511389][ T7107] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer.
[ 1313.734886][ T7138] loop5: detected capacity change from 0 to 7
[ 1314.060376][   T45] usb 9-1: new high-speed USB device number 69 using dummy_hcd
[ 1314.210352][   T45] usb 9-1: Using ep0 maxpacket: 8
[ 1314.216611][   T45] usb 9-1: config 0 has an invalid interface number: 155 but max is 0
[ 1314.228800][   T45] usb 9-1: config 0 has no interface number 0
[ 1314.236766][   T45] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=b3.78
[ 1314.250466][   T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1314.268550][   T45] usb 9-1: Product: syz
[ 1314.277491][   T45] usb 9-1: Manufacturer: syz
[ 1314.285500][   T45] usb 9-1: SerialNumber: syz
[ 1314.296288][   T45] usb 9-1: config 0 descriptor??
[ 1314.344790][ T7166] rust_binder: 487: no such ref 0
[ 1314.512974][   T45] usbserial_generic 9-1:0.155: The "generic" usb-serial driver is only for testing and one-off prototypes.
[ 1314.530133][   T45] usbserial_generic 9-1:0.155: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[ 1314.541172][   T45] usbserial_generic 9-1:0.155: device has no bulk endpoints
[ 1314.549500][   T45] usb 9-1: USB disconnect, device number 69
[ 1314.763125][  T331] bridge_slave_1: left allmulticast mode
[ 1314.768868][  T331] bridge_slave_1: left promiscuous mode
[ 1314.774528][  T331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1314.782189][  T331] bridge_slave_0: left allmulticast mode
[ 1314.787854][  T331] bridge_slave_0: left promiscuous mode
[ 1314.793554][  T331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1314.892495][  T331] veth1_macvtap: left promiscuous mode
[ 1314.898037][  T331] veth0_vlan: left promiscuous mode
[ 1315.055204][ T7212] loop5: detected capacity change from 0 to 7
[ 1315.225249][ T7228] rust_binder: 808: no such ref 0
[ 1315.330363][   T36] audit: type=1400 audit(2000000801.580:439): avc:  denied  { getattr } for  pid=7242 comm="syz.8.33676" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=525575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1315.401266][ T7255] rust_binder: 987: no such ref 0
[ 1315.583034][ T7277] rust_binder: 517: no such ref 0
[ 1316.609323][ T7355] Invalid logical block size (1)
[ 1316.730221][ T7369] rust_binder: 442: no such ref 0
[ 1317.495416][ T7402] loop5: detected capacity change from 0 to 7
[ 1317.682743][ T7413] rust_binder: 1014: no such ref 0
[ 1318.050345][   T31] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1318.210417][   T31] usb 6-1: Using ep0 maxpacket: 16
[ 1318.221476][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1318.240385][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1318.260354][   T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1318.283403][   T31] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1318.302605][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1318.321145][   T31] usb 6-1: config 0 descriptor??
[ 1318.535465][   T31] usbhid 6-1:0.0: can't add hid device: -71
[ 1318.543313][   T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1318.563534][   T31] usb 6-1: USB disconnect, device number 66
[ 1318.579710][ T7463] loop5: detected capacity change from 0 to 7
[ 1318.744067][ T7477] rust_binder: 1034: no such ref 0
[ 1319.094226][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.33793'.
[ 1319.115259][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.33793'.
[ 1319.810345][   T31] usb 9-1: new high-speed USB device number 70 using dummy_hcd
[ 1319.970340][   T31] usb 9-1: Using ep0 maxpacket: 16
[ 1319.981442][   T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1319.992473][   T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1320.010399][   T31] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1320.033376][   T31] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1320.050337][   T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1320.068787][   T31] usb 9-1: config 0 descriptor??
[ 1320.136673][ T7547] loop5: detected capacity change from 0 to 7
[ 1320.477554][   T31] usbhid 9-1:0.0: can't add hid device: -71
[ 1320.490384][   T31] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1320.501297][   T31] usb 9-1: USB disconnect, device number 70
[ 1321.430437][   T31] usb 9-1: new high-speed USB device number 71 using dummy_hcd
[ 1321.540379][   T45] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1321.580343][   T31] usb 9-1: Using ep0 maxpacket: 16
[ 1321.586709][   T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1321.597730][   T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1321.607512][   T31] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1321.620532][   T31] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1321.629572][   T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1321.637643][ T5781] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1321.646090][   T31] usb 9-1: config 0 descriptor??
[ 1321.700340][   T45] usb 6-1: Using ep0 maxpacket: 16
[ 1321.706536][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1321.717503][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1321.727457][   T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1321.740336][   T45] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1321.749386][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1321.758256][   T45] usb 6-1: config 0 descriptor??
[ 1321.801757][ T5781] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1321.810253][ T5781] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1321.820464][ T5781] usb 4-1: config 0 has no interfaces?
[ 1321.827296][ T5781] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1321.836497][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.844630][ T5781] usb 4-1: Product: syz
[ 1321.848821][ T5781] usb 4-1: Manufacturer: syz
[ 1321.853855][ T5781] usb 4-1: SerialNumber: syz
[ 1321.859393][ T5781] usb 4-1: config 0 descriptor??
[ 1321.966868][   T45] usbhid 6-1:0.0: can't add hid device: -71
[ 1321.973973][   T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1321.983947][   T45] usb 6-1: USB disconnect, device number 67
[ 1322.055381][   T31] usbhid 9-1:0.0: can't add hid device: -71
[ 1322.061455][   T31] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1322.066781][ T2078] usb 4-1: USB disconnect, device number 114
[ 1322.072286][   T31] usb 9-1: USB disconnect, device number 71
[ 1322.710472][ T7624] netlink: 68 bytes leftover after parsing attributes in process `syz.8.33860'.
[ 1323.441741][ T7646] rust_binder: 903: no such ref 0
[ 1324.163351][ T7691] netlink: 112 bytes leftover after parsing attributes in process `syz.8.33892'.
[ 1325.594542][ T7751] rust_binder: 1110: no such ref 2
[ 1326.122489][ T7778] rust_binder: 549: no such ref 0
[ 1326.486775][ T7796] netlink: 68 bytes leftover after parsing attributes in process `syz.3.33943'.
[ 1326.653434][ T7806] loop5: detected capacity change from 0 to 7
[ 1327.421623][ T7859] netlink: 68 bytes leftover after parsing attributes in process `syz.5.33973'.
[ 1327.720383][   T45] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1327.880335][   T45] usb 6-1: Using ep0 maxpacket: 16
[ 1327.891602][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1327.902573][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1327.920365][   T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1327.950350][   T45] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1327.969574][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1327.989893][   T45] usb 6-1: config 0 descriptor??
[ 1328.095453][ T7885] rust_binder: 596: no such ref 0
[ 1328.208819][   T45] usbhid 6-1:0.0: can't add hid device: -71
[ 1328.214998][   T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1328.233065][   T45] usb 6-1: USB disconnect, device number 68
[ 1328.800368][ T7927] netlink: 68 bytes leftover after parsing attributes in process `syz.8.34006'.
[ 1328.849153][ T7932] Invalid logical block size (1)
[ 1329.230603][   T45] usb 9-1: new high-speed USB device number 72 using dummy_hcd
[ 1329.374237][ T7975] rust_binder: 976: no such ref 0
[ 1329.400350][   T45] usb 9-1: Using ep0 maxpacket: 16
[ 1329.410526][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1329.425879][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1329.435967][   T45] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1329.449029][   T45] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1329.458304][   T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1329.478430][   T45] usb 9-1: config 0 descriptor??
[ 1329.733254][ T7997] netlink: 68 bytes leftover after parsing attributes in process `syz.5.34037'.
[ 1329.891406][   T45] usbhid 9-1:0.0: can't add hid device: -71
[ 1329.900367][   T45] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1329.919260][   T45] usb 9-1: USB disconnect, device number 72
[ 1330.400356][ T2078] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1330.411976][   T45] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1330.551828][ T2078] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1330.561432][ T2078] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1330.574761][ T2078] usb 4-1: config 0 has no interfaces?
[ 1330.581643][   T45] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1330.581734][ T2078] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1330.600553][   T45] usb 2-1: config 129 has an invalid interface number: 135 but max is 0
[ 1330.600949][ T2078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1330.617021][   T45] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[ 1330.617045][   T45] usb 2-1: config 129 has no interface number 0
[ 1330.617068][   T45] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1330.617095][   T45] usb 2-1: config 129 interface 135 has no altsetting 0
[ 1330.654138][ T2078] usb 4-1: Product: syz
[ 1330.658416][ T2078] usb 4-1: Manufacturer: syz
[ 1330.663206][ T2078] usb 4-1: SerialNumber: syz
[ 1330.667989][   T45] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1330.672800][ T2078] usb 4-1: config 0 descriptor??
[ 1330.687406][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1330.700366][   T45] usb 2-1: Product: syz
[ 1330.704539][   T45] usb 2-1: Manufacturer: syz
[ 1330.719288][   T45] usb 2-1: SerialNumber: syz
[ 1330.780331][ T5781] usb 9-1: new high-speed USB device number 73 using dummy_hcd
[ 1330.886885][ T4721] usb 4-1: USB disconnect, device number 115
[ 1330.930194][   T45] usb 2-1: USB disconnect, device number 38
[ 1330.940365][ T5781] usb 9-1: Using ep0 maxpacket: 16
[ 1330.952218][ T5781] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1330.970338][ T5781] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1330.990204][ T5781] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1331.010341][ T5781] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1331.029557][ T5781] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1331.040443][ T5781] usb 9-1: config 0 descriptor??
[ 1331.449600][ T5781] usbhid 9-1:0.0: can't add hid device: -71
[ 1331.460022][ T5781] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1331.480924][ T5781] usb 9-1: USB disconnect, device number 73
[ 1331.578602][ T8096] netlink: 68 bytes leftover after parsing attributes in process `syz.1.34086'.
[ 1331.610040][ T8100] rust_binder: 1000: no such ref 0
[ 1331.871324][ T8129] rust_binder: 639: no such ref 0
[ 1332.809780][ T8173] Invalid logical block size (1)
[ 1332.850353][ T4721] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1333.021411][ T4721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1333.039598][ T4721] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1333.040598][ T8190] Invalid logical block size (1)
[ 1333.049531][ T4721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1333.064238][ T4721] usb 2-1: config 0 descriptor??
[ 1333.070188][ T4721] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1333.285506][   T45] usb 2-1: USB disconnect, device number 39
[ 1333.790306][ T8225] rust_binder: 667: no such ref 0
[ 1334.160370][   T45] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1334.311518][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1334.321856][   T45] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1334.331218][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1334.340820][   T45] usb 2-1: config 0 descriptor??
[ 1334.347059][   T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1334.548233][ T4721] usb 2-1: USB disconnect, device number 40
[ 1335.092038][ T8290] netlink: 68 bytes leftover after parsing attributes in process `syz.1.34178'.
[ 1336.380388][ T4721] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1336.531580][ T4721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1336.541523][ T4721] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1336.550908][ T4721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1336.560426][ T4721] usb 4-1: config 0 descriptor??
[ 1336.570998][ T4721] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1336.619265][ T8314] rust_binder: 1034: no such ref 0
[ 1336.643138][ T8316] netlink: 68 bytes leftover after parsing attributes in process `syz.1.34191'.
[ 1336.770032][ T4721] usb 4-1: USB disconnect, device number 116
[ 1336.991384][ T8349] netlink: 68 bytes leftover after parsing attributes in process `syz.5.34203'.
[ 1337.364124][ T8366] rust_binder: 720: no such ref 0
[ 1337.724420][  T684] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1337.842682][ T8412] syzkaller0: entered allmulticast mode
[ 1337.890365][  T684] usb 4-1: Using ep0 maxpacket: 16
[ 1337.902584][  T684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1337.918421][  T684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1337.932442][  T684] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1337.945416][  T684] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1337.954614][  T684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1337.969893][  T684] usb 4-1: config 0 descriptor??
[ 1338.188599][  T684] usbhid 4-1:0.0: can't add hid device: -71
[ 1338.200382][  T684] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1338.217707][  T684] usb 4-1: USB disconnect, device number 117
[ 1338.652286][ T8451] rust_binder: 1084: no such ref 0
[ 1338.980636][ T8476] rust_binder: 740: no such ref 0
[ 1339.098799][ T8491] netlink: 68 bytes leftover after parsing attributes in process `syz.5.34271'.
[ 1339.193861][ T8502] rust_binder: 893: no such ref 0
[ 1340.073058][ T8561] netlink: 'syz.5.34305': attribute type 4 has an invalid length.
[ 1340.580348][ T5781] usb 9-1: new high-speed USB device number 74 using dummy_hcd
[ 1340.751764][ T5781] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1340.762287][ T5781] usb 9-1: config 129 has an invalid interface number: 135 but max is 0
[ 1340.773049][ T5781] usb 9-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[ 1340.800337][ T5781] usb 9-1: config 129 has no interface number 0
[ 1340.806741][ T5781] usb 9-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1340.840686][ T5781] usb 9-1: config 129 interface 135 has no altsetting 0
[ 1340.849063][ T5781] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1340.858414][ T5781] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1340.876965][ T5781] usb 9-1: Product: syz
[ 1340.881391][ T5781] usb 9-1: Manufacturer: syz
[ 1340.886012][ T5781] usb 9-1: SerialNumber: syz
[ 1341.106273][ T5781] usb 9-1: USB disconnect, device number 74
[ 1341.132100][ T8621] netlink: 'syz.5.34333': attribute type 4 has an invalid length.
[ 1342.645747][ T8737] netlink: 68 bytes leftover after parsing attributes in process `syz.8.34389'.
[ 1343.190349][ T4721] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1343.207920][ T8755] rust_binder: 993: no such ref 0
[ 1343.361511][ T4721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1343.371390][ T4721] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1343.380704][ T4721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.390140][ T4721] usb 2-1: config 0 descriptor??
[ 1343.400714][ T4721] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1343.601147][ T4721] usb 2-1: USB disconnect, device number 41
[ 1343.659884][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1343.667051][ T8773] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1343.674275][ T8773] bridge_slave_0: entered allmulticast mode
[ 1343.681019][ T8773] bridge_slave_0: entered promiscuous mode
[ 1343.688358][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1343.695548][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1343.702803][ T8773] bridge_slave_1: entered allmulticast mode
[ 1343.709107][ T8773] bridge_slave_1: entered promiscuous mode
[ 1343.762272][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1343.769362][ T8773] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1343.776715][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1343.783783][ T8773] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1343.811478][  T331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1343.823029][  T331] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1343.830100][  T331] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1343.863235][ T8773] veth0_vlan: entered promiscuous mode
[ 1343.877446][ T8773] veth1_macvtap: entered promiscuous mode
[ 1343.893582][  T330] bridge_slave_1: left allmulticast mode
[ 1343.899264][  T330] bridge_slave_1: left promiscuous mode
[ 1343.905736][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1343.914611][  T330] bridge_slave_0: left allmulticast mode
[ 1343.920380][  T330] bridge_slave_0: left promiscuous mode
[ 1343.926137][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1344.023498][  T330] veth1_macvtap: left promiscuous mode
[ 1344.029117][  T330] veth0_vlan: left promiscuous mode
[ 1345.250409][   T45] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1345.410395][   T45] usb 6-1: Using ep0 maxpacket: 16
[ 1345.416782][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1345.427832][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1345.437665][   T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1345.462569][   T45] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1345.471904][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1345.482271][   T45] usb 6-1: config 0 descriptor??
[ 1345.697403][ T8904] netlink: 'syz.8.34462': attribute type 4 has an invalid length.
[ 1345.773251][ T8910] netlink: 68 bytes leftover after parsing attributes in process `syz.8.34465'.
[ 1345.893242][   T45] usbhid 6-1:0.0: can't add hid device: -71
[ 1345.910429][   T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1345.928799][   T45] usb 6-1: USB disconnect, device number 69
[ 1346.089970][ T8922] rust_binder: 837: no such ref 0
[ 1346.228805][ T8938] rust_binder: 853: no such ref 0
[ 1346.279819][ T8942] netlink: 68 bytes leftover after parsing attributes in process `syz.1.34474'.
[ 1346.433537][ T8959] rust_binder: 1036: no such ref 0
[ 1346.591625][ T8979] rust_binder: 1224: no such ref 0
[ 1347.611771][ T9050] netlink: 68 bytes leftover after parsing attributes in process `syz.5.34534'.
[ 1347.927709][ T9066] netlink: 68 bytes leftover after parsing attributes in process `syz.5.34543'.
[ 1348.131782][ T9085] netlink: 68 bytes leftover after parsing attributes in process `syz.1.34552'.
[ 1348.762294][ T9119] netlink: 68 bytes leftover after parsing attributes in process `syz.3.34561'.
[ 1349.397062][ T9151] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1349.404349][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1349.411524][ T9151] bridge_slave_0: entered allmulticast mode
[ 1349.417937][ T9151] bridge_slave_0: entered promiscuous mode
[ 1349.425201][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1349.432664][ T9151] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1349.439795][ T9151] bridge_slave_1: entered allmulticast mode
[ 1349.446251][ T9151] bridge_slave_1: entered promiscuous mode
[ 1349.468549][  T330] bridge_slave_1: left allmulticast mode
[ 1349.474574][  T330] bridge_slave_1: left promiscuous mode
[ 1349.480235][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1349.488295][  T330] bridge_slave_0: left allmulticast mode
[ 1349.494077][  T330] bridge_slave_0: left promiscuous mode
[ 1349.499744][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1349.628798][  T330] veth1_macvtap: left promiscuous mode
[ 1349.634407][  T330] veth0_vlan: left promiscuous mode
[ 1349.716261][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1349.723370][ T9151] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1349.730695][ T9151] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1349.737737][ T9151] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1349.771970][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1349.779327][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1349.789200][  T331] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1349.796317][  T331] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1349.806435][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1349.813524][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1349.846672][ T9151] veth0_vlan: entered promiscuous mode
[ 1349.861156][ T9151] veth1_macvtap: entered promiscuous mode
[ 1350.063027][ T9219] netlink: 104 bytes leftover after parsing attributes in process `syz.8.34611'.
[ 1350.563131][ T9268] netlink: 68 bytes leftover after parsing attributes in process `syz.1.34635'.
[ 1350.910342][  T684] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1350.946105][ T9288] netlink: 68 bytes leftover after parsing attributes in process `syz.8.34645'.
[ 1351.063009][  T684] usb 2-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a
[ 1351.072177][  T684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1351.080183][  T684] usb 2-1: Product: syz
[ 1351.086314][  T684] usb 2-1: Manufacturer: syz
[ 1351.091124][  T684] usb 2-1: SerialNumber: syz
[ 1351.096517][  T684] usb 2-1: config 0 descriptor??
[ 1351.306230][  T684] usb 2-1: USB disconnect, device number 42
[ 1351.943860][ T9316] netlink: 68 bytes leftover after parsing attributes in process `syz.3.34659'.
[ 1352.140411][  T684] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1352.300318][  T684] usb 2-1: Using ep0 maxpacket: 16
[ 1352.317588][  T684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1352.338699][  T684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1352.353944][  T684] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1352.380323][  T684] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1352.399532][  T684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1352.420624][  T684] usb 2-1: config 0 descriptor??
[ 1352.634255][  T684] usbhid 2-1:0.0: can't add hid device: -71
[ 1352.640272][  T684] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1352.667760][  T684] usb 2-1: USB disconnect, device number 43
[ 1352.710978][ T9336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34669'.
[ 1353.068913][ T9357] netlink: 16 bytes leftover after parsing attributes in process `syz.8.34679'.
[ 1353.301302][ T9372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34688'.
[ 1353.582101][ T9398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34698'.
[ 1353.600335][ T5781] usb 9-1: new high-speed USB device number 75 using dummy_hcd
[ 1353.760379][ T5781] usb 9-1: Using ep0 maxpacket: 16
[ 1353.767262][ T5781] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1353.778509][ T5781] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1353.788620][ T5781] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1353.801601][   T45] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1353.810109][ T5781] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1353.819603][ T5781] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1353.829800][ T5781] usb 9-1: config 0 descriptor??
[ 1353.867894][ T9416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34707'.
[ 1353.970331][   T45] usb 6-1: Using ep0 maxpacket: 16
[ 1353.979846][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1354.000326][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1354.020192][   T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1354.037322][   T45] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1354.047985][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1354.056545][ T5781] usbhid 9-1:0.0: can't add hid device: -71
[ 1354.062692][ T5781] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1354.073701][   T45] usb 6-1: config 0 descriptor??
[ 1354.080015][ T5781] usb 9-1: USB disconnect, device number 75
[ 1354.100760][ T9430] 9pnet_fd: Insufficient options for proto=fd
[ 1354.161856][ T9442] rust_binder: Write failure EFAULT in pid:64
[ 1354.480510][   T45] usbhid 6-1:0.0: can't add hid device: -71
[ 1354.493786][   T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1354.502823][   T45] usb 6-1: USB disconnect, device number 70
[ 1354.928271][ T9534] netlink: 'syz.8.34763': attribute type 4 has an invalid length.
[ 1356.240345][   T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1356.401772][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1356.420403][   T10] usb 2-1: config 129 has an invalid interface number: 135 but max is 0
[ 1356.428789][   T10] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[ 1356.459402][   T10] usb 2-1: config 129 has no interface number 0
[ 1356.465873][   T10] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1356.499390][   T10] usb 2-1: config 129 interface 135 has no altsetting 0
[ 1356.508041][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1356.517336][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1356.537400][   T10] usb 2-1: Product: syz
[ 1356.541623][   T10] usb 2-1: Manufacturer: syz
[ 1356.546235][   T10] usb 2-1: SerialNumber: syz
[ 1356.771308][   T10] usb 2-1: USB disconnect, device number 44
[ 1357.244555][ T9745] netlink: 'syz.3.34862': attribute type 4 has an invalid length.
[ 1358.352098][ T9793] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1358.534938][ T9800] netlink: 68 bytes leftover after parsing attributes in process `syz.8.34888'.
[ 1358.955748][ T9821] netlink: 68 bytes leftover after parsing attributes in process `syz.3.34897'.
[ 1359.095683][ T9837] netlink: 68 bytes leftover after parsing attributes in process `syz.3.34906'.
[ 1359.255130][ T9857] netlink: 68 bytes leftover after parsing attributes in process `syz.1.34915'.
[ 1359.515103][ T9877] netlink: 68 bytes leftover after parsing attributes in process `syz.1.34925'.
[ 1359.570922][ T9881] netlink: 'syz.5.34928': attribute type 4 has an invalid length.
[ 1359.730569][ T9901] netlink: 68 bytes leftover after parsing attributes in process `syz.3.34937'.
[ 1359.950324][ T5781] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1360.080354][ T5781] usb 6-1: device descriptor read/64, error -71
[ 1360.340606][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34945'.
[ 1360.349660][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34945'.
[ 1360.350350][ T5781] usb 6-1: device descriptor read/64, error -71
[ 1360.600381][ T5781] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1360.760354][ T5781] usb 6-1: device descriptor read/64, error -71
[ 1361.020325][ T5781] usb 6-1: device descriptor read/64, error -71
[ 1361.130427][ T5781] usb usb6-port1: attempt power cycle
[ 1361.480561][ T5781] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1361.501766][ T5781] usb 6-1: device descriptor read/8, error -71
[ 1361.631388][ T5781] usb 6-1: device descriptor read/8, error -71
[ 1361.870950][ T5781] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1361.891387][ T5781] usb 6-1: device descriptor read/8, error -71
[ 1362.021380][ T5781] usb 6-1: device descriptor read/8, error -71
[ 1362.130432][ T5781] usb usb6-port1: unable to enumerate USB device
[ 1363.660360][ T4721] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1363.790328][ T4721] usb 4-1: device descriptor read/64, error -71
[ 1364.041116][ T4721] usb 4-1: device descriptor read/64, error -71
[ 1364.280372][ T4721] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1364.420335][ T4721] usb 4-1: device descriptor read/64, error -71
[ 1364.670332][ T4721] usb 4-1: device descriptor read/64, error -71
[ 1364.780465][ T4721] usb usb4-port1: attempt power cycle
[ 1365.130350][ T4721] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1365.151511][ T4721] usb 4-1: device descriptor read/8, error -71
[ 1365.281307][ T4721] usb 4-1: device descriptor read/8, error -71
[ 1365.530375][ T4721] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1365.563549][ T4721] usb 4-1: device descriptor read/8, error -71
[ 1365.711334][ T4721] usb 4-1: device descriptor read/8, error -71
[ 1365.820443][ T4721] usb usb4-port1: unable to enumerate USB device
[ 1366.496642][T10157] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1366.519966][T10157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1366.532530][T10157] bridge_slave_0: entered allmulticast mode
[ 1366.544435][T10157] bridge_slave_0: entered promiscuous mode
[ 1366.566331][T10157] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1366.573489][T10157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1366.582433][T10157] bridge_slave_1: entered allmulticast mode
[ 1366.588884][T10157] bridge_slave_1: entered promiscuous mode
[ 1366.616195][   T12] bridge_slave_1: left allmulticast mode
[ 1366.625433][   T12] bridge_slave_1: left promiscuous mode
[ 1366.638711][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1366.656207][   T12] bridge_slave_0: left allmulticast mode
[ 1366.661955][   T12] bridge_slave_0: left promiscuous mode
[ 1366.667603][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1366.810730][T10157] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1366.817916][T10157] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1366.825250][T10157] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1366.832306][T10157] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1366.883018][   T12] veth1_macvtap: left promiscuous mode
[ 1366.888589][   T12] veth0_vlan: left promiscuous mode
[ 1367.010040][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1367.027606][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1367.043633][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1367.050728][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1367.064196][  T330] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1367.071274][  T330] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1367.132111][T10157] veth0_vlan: entered promiscuous mode
[ 1367.140865][ T2078] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 1367.167292][T10157] veth1_macvtap: entered promiscuous mode
[ 1367.290371][ T2078] usb 4-1: device descriptor read/64, error -71
[ 1367.550532][ T2078] usb 4-1: device descriptor read/64, error -71
[ 1367.746380][T10196] fuse: Bad value for 'fd'
[ 1367.810329][ T2078] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1367.940334][ T2078] usb 4-1: device descriptor read/64, error -71
[ 1368.000832][T10216] fuse: Bad value for 'fd'
[ 1368.072218][T10223] netlink: 'syz.8.35087': attribute type 11 has an invalid length.
[ 1368.080152][T10223] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.35087'.
[ 1368.190376][ T2078] usb 4-1: device descriptor read/64, error -71
[ 1368.224578][T10232] netlink: 'syz.8.35090': attribute type 4 has an invalid length.
[ 1368.310535][ T2078] usb usb4-port1: attempt power cycle
[ 1368.523378][T10252] netlink: 'syz.8.35099': attribute type 4 has an invalid length.
[ 1368.650445][ T2078] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1368.671878][ T2078] usb 4-1: device descriptor read/8, error -71
[ 1368.698012][T10272] netlink: 'syz.1.35110': attribute type 4 has an invalid length.
[ 1368.805660][T10283] netlink: 'syz.8.35114': attribute type 11 has an invalid length.
[ 1368.813679][T10283] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.35114'.
[ 1368.821409][ T2078] usb 4-1: device descriptor read/8, error -71
[ 1369.070327][ T2078] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1369.101381][ T2078] usb 4-1: device descriptor read/8, error -71
[ 1369.231445][ T2078] usb 4-1: device descriptor read/8, error -71
[ 1369.340481][ T2078] usb usb4-port1: unable to enumerate USB device
[ 1369.442993][T10303] netlink: 'syz.1.35124': attribute type 11 has an invalid length.
[ 1369.451015][T10303] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.35124'.
[ 1370.185916][T10399] devtmpfs: Unknown parameter 'usrquota_inode_hardlimit'
[ 1370.190368][   T36] audit: type=1400 audit(2000000856.440:440): avc:  denied  { mount } for  pid=10397 comm="syz.1.35167" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 1370.231575][   T36] audit: type=1400 audit(2000000856.440:441): avc:  denied  { remount } for  pid=10397 comm="syz.1.35167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 1370.265154][   T36] audit: type=1400 audit(2000000856.450:442): avc:  denied  { unmount } for  pid=9151 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 1370.330378][  T684] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1370.480328][  T684] usb 4-1: device descriptor read/64, error -71
[ 1370.610381][ T2295] usb 9-1: new high-speed USB device number 76 using dummy_hcd
[ 1370.720338][  T684] usb 4-1: device descriptor read/64, error -71
[ 1370.760341][ T2295] usb 9-1: Using ep0 maxpacket: 16
[ 1370.771627][ T2295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1370.782872][ T2295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1370.792871][ T2295] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1370.805876][ T2295] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1370.815112][ T2295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1370.825529][ T2295] usb 9-1: config 0 descriptor??
[ 1370.970328][  T684] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1371.100384][  T684] usb 4-1: device descriptor read/64, error -71
[ 1371.233664][ T2295] usbhid 9-1:0.0: can't add hid device: -71
[ 1371.239684][ T2295] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1371.250736][ T2295] usb 9-1: USB disconnect, device number 76
[ 1371.321636][T10473] netlink: 'syz.1.35202': attribute type 11 has an invalid length.
[ 1371.329640][T10473] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.35202'.
[ 1371.350345][  T684] usb 4-1: device descriptor read/64, error -71
[ 1371.471276][  T684] usb usb4-port1: attempt power cycle
[ 1371.830329][  T684] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1371.861348][  T684] usb 4-1: device descriptor read/8, error -71
[ 1371.991559][  T684] usb 4-1: device descriptor read/8, error -71
[ 1372.250346][  T684] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1372.291354][  T684] usb 4-1: device descriptor read/8, error -71
[ 1372.431334][  T684] usb 4-1: device descriptor read/8, error -71
[ 1372.560461][  T684] usb usb4-port1: unable to enumerate USB device
[ 1372.731692][T10549] netlink: 'syz.5.35238': attribute type 4 has an invalid length.
[ 1373.410324][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1373.540336][   T10] usb 4-1: device descriptor read/64, error -71
[ 1373.790354][   T10] usb 4-1: device descriptor read/64, error -71
[ 1373.838497][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35267'.
[ 1374.030346][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1374.030345][ T2295] usb 9-1: new high-speed USB device number 77 using dummy_hcd
[ 1374.180347][   T10] usb 4-1: device descriptor read/64, error -71
[ 1374.181411][ T2295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1374.206653][ T2295] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1374.216718][ T2295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1374.231019][ T2295] usb 9-1: config 0 descriptor??
[ 1374.241345][ T2295] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1374.440600][   T10] usb 4-1: device descriptor read/64, error -71
[ 1374.443932][ T2295] usb 9-1: USB disconnect, device number 77
[ 1374.560425][   T10] usb usb4-port1: attempt power cycle
[ 1374.910353][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1374.931463][   T10] usb 4-1: device descriptor read/8, error -71
[ 1375.061467][   T10] usb 4-1: device descriptor read/8, error -71
[ 1375.070707][T10661] netlink: 'syz.5.35293': attribute type 11 has an invalid length.
[ 1375.087855][T10661] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.35293'.
[ 1375.097352][T10664] netlink: 'syz.8.35295': attribute type 4 has an invalid length.
[ 1375.300367][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1375.331485][   T10] usb 4-1: device descriptor read/8, error -71
[ 1375.380351][ T2295] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1375.471513][   T10] usb 4-1: device descriptor read/8, error -71
[ 1375.541331][ T2295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1375.560318][ T2295] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1375.579618][ T2295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1375.590438][   T10] usb usb4-port1: unable to enumerate USB device
[ 1375.600512][ T2295] usb 6-1: config 0 descriptor??
[ 1375.606314][ T2295] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1375.672431][T10683] netlink: 'syz.8.35304': attribute type 4 has an invalid length.
[ 1375.815573][ T2295] usb 6-1: USB disconnect, device number 75
[ 1375.861454][T10702] netlink: 'syz.8.35313': attribute type 4 has an invalid length.
[ 1376.161563][T10724] netlink: 'syz.8.35323': attribute type 4 has an invalid length.
[ 1376.636248][T10753] netlink: 'syz.1.35334': attribute type 4 has an invalid length.
[ 1376.703076][ T4721] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1376.850342][ T4721] usb 4-1: device descriptor read/64, error -71
[ 1377.090330][ T4721] usb 4-1: device descriptor read/64, error -71
[ 1377.340352][ T4721] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1377.470317][ T4721] usb 4-1: device descriptor read/64, error -71
[ 1377.511249][T10772] netlink: 'syz.8.35346': attribute type 4 has an invalid length.
[ 1377.740325][ T4721] usb 4-1: device descriptor read/64, error -71
[ 1377.860492][ T4721] usb usb4-port1: attempt power cycle
[ 1378.240314][ T4721] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1378.281449][ T4721] usb 4-1: device descriptor read/8, error -71
[ 1378.421306][ T4721] usb 4-1: device descriptor read/8, error -71
[ 1378.671421][T10831] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1378.680358][ T4721] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1378.713737][ T4721] usb 4-1: device descriptor read/8, error -71
[ 1378.844715][ T4721] usb 4-1: device descriptor read/8, error -71
[ 1378.950504][T10847] netlink: 'syz.5.35380': attribute type 4 has an invalid length.
[ 1378.970428][ T4721] usb usb4-port1: unable to enumerate USB device
[ 1379.204350][T10869] netlink: 'syz.5.35390': attribute type 4 has an invalid length.
[ 1379.419381][T10891] netlink: 'syz.1.35401': attribute type 4 has an invalid length.
[ 1379.616227][T10911] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1379.750395][ T4721] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1379.923018][ T4721] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1379.932867][ T4721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1379.950309][ T4721] usb 2-1: config 0 has no interfaces?
[ 1379.957812][ T4721] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1379.967174][ T4721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1379.984994][ T4721] usb 2-1: Product: syz
[ 1379.997263][ T4721] usb 2-1: Manufacturer: syz
[ 1380.002105][ T4721] usb 2-1: SerialNumber: syz
[ 1380.012493][ T4721] usb 2-1: config 0 descriptor??
[ 1380.104425][T10943] netlink: 'syz.3.35427': attribute type 11 has an invalid length.
[ 1380.112445][T10943] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.35427'.
[ 1380.219795][ T4721] usb 2-1: USB disconnect, device number 45
[ 1380.504197][T10961] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1380.520317][T10961] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1380.527926][T10961] bridge_slave_0: entered allmulticast mode
[ 1380.534503][T10961] bridge_slave_0: entered promiscuous mode
[ 1380.541314][T10961] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1380.548377][T10961] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1380.555727][T10961] bridge_slave_1: entered allmulticast mode
[ 1380.562289][T10961] bridge_slave_1: entered promiscuous mode
[ 1380.683589][T10961] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1380.690708][T10961] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1380.698118][T10961] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1380.705212][T10961] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1380.734311][   T46] bridge_slave_1: left allmulticast mode
[ 1380.740030][   T46] bridge_slave_1: left promiscuous mode
[ 1380.746300][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1380.754951][   T46] bridge_slave_0: left allmulticast mode
[ 1380.762410][   T46] bridge_slave_0: left promiscuous mode
[ 1380.768061][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1380.835603][T10987] fuse: Bad value for 'user_id'
[ 1380.844621][  T331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1380.850374][T10987] fuse: Bad value for 'user_id'
[ 1380.860792][  T331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1380.871109][  T331] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1380.878168][  T331] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1380.917207][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1380.924333][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1380.940184][   T46] veth1_macvtap: left promiscuous mode
[ 1380.948372][   T46] veth0_vlan: left promiscuous mode
[ 1381.076992][T10961] veth0_vlan: entered promiscuous mode
[ 1381.100711][T10961] veth1_macvtap: entered promiscuous mode
[ 1381.180353][ T5781] usb 9-1: new high-speed USB device number 78 using dummy_hcd
[ 1381.336045][T11021] fuse: Bad value for 'fd'
[ 1381.341793][ T5781] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1381.350664][ T5781] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1381.360978][ T5781] usb 9-1: config 0 has no interfaces?
[ 1381.372166][ T5781] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1381.381311][ T5781] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1381.391467][ T5781] usb 9-1: Product: syz
[ 1381.395671][ T5781] usb 9-1: Manufacturer: syz
[ 1381.410323][ T5781] usb 9-1: SerialNumber: syz
[ 1381.425158][ T5781] usb 9-1: config 0 descriptor??
[ 1381.632721][ T5781] usb 9-1: USB disconnect, device number 78
[ 1382.722057][T11103] fuse: Invalid rootmode
[ 1384.980449][T11220] fuse: Unknown parameter 'use00000000000000000000'
[ 1386.899875][T11302] netlink: 'syz.8.35594': attribute type 4 has an invalid length.
[ 1387.213315][T11323] netlink: 'syz.5.35604': attribute type 4 has an invalid length.
[ 1387.936850][T11337] netlink: 'syz.1.35611': attribute type 11 has an invalid length.
[ 1387.970321][T11337] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.35611'.
[ 1388.120519][T11343] netlink: 'syz.1.35613': attribute type 4 has an invalid length.
[ 1388.310347][ T2295] usb 9-1: new high-speed USB device number 79 using dummy_hcd
[ 1388.473289][ T2295] usb 9-1: Using ep0 maxpacket: 16
[ 1388.481069][ T2295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1388.500300][ T2295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1388.510124][ T2295] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1388.533078][ T2295] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1388.550308][ T2295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1388.568738][ T2295] usb 9-1: config 0 descriptor??
[ 1388.965022][T11371] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1388.976437][ T2295] usbhid 9-1:0.0: can't add hid device: -71
[ 1388.982462][ T2295] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1388.995965][ T2295] usb 9-1: USB disconnect, device number 79
[ 1389.801094][T11451] fuse: Bad value for 'fd'
[ 1390.252290][T11472] fuse: Unknown parameter '0x0000000000000006'
[ 1391.000347][   T45] usb 9-1: new high-speed USB device number 80 using dummy_hcd
[ 1391.162064][   T45] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1391.170806][   T45] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1391.181055][   T45] usb 9-1: config 0 has no interfaces?
[ 1391.188087][   T45] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1391.207292][   T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1391.220293][   T45] usb 9-1: Product: syz
[ 1391.224481][   T45] usb 9-1: Manufacturer: syz
[ 1391.239236][   T45] usb 9-1: SerialNumber: syz
[ 1391.244654][   T45] usb 9-1: config 0 descriptor??
[ 1391.419698][T11563] netlink: 'syz.5.35717': attribute type 4 has an invalid length.
[ 1391.451812][ T5781] usb 9-1: USB disconnect, device number 80
[ 1391.500371][   T45] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1391.660320][   T45] usb 2-1: Using ep0 maxpacket: 16
[ 1391.666917][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1391.678201][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1391.688194][   T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1391.701273][   T45] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1391.726192][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1391.741803][   T45] usb 2-1: config 0 descriptor??
[ 1392.018216][T11607] fuse: Unknown parameter '0x0000000000000006'
[ 1392.160698][   T45] usbhid 2-1:0.0: can't add hid device: -71
[ 1392.166787][   T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1392.190389][   T45] usb 2-1: USB disconnect, device number 46
[ 1392.831875][T11650] netlink: 72 bytes leftover after parsing attributes in process `syz.1.35758'.
[ 1394.300365][   T31] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1394.451776][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1394.468211][   T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1394.479498][   T31] usb 6-1: config 0 has no interfaces?
[ 1394.499288][   T31] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1394.511967][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1394.527973][   T31] usb 6-1: Product: syz
[ 1394.536958][   T31] usb 6-1: Manufacturer: syz
[ 1394.552072][   T31] usb 6-1: SerialNumber: syz
[ 1394.565675][   T31] usb 6-1: config 0 descriptor??
[ 1394.778024][   T31] usb 6-1: USB disconnect, device number 76
[ 1394.826455][T11811] netlink: 'syz.1.35833': attribute type 11 has an invalid length.
[ 1394.835173][T11811] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.35833'.
[ 1395.880348][ T4721] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1396.071683][ T4721] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1396.090671][ T4721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1396.110312][ T4721] usb 2-1: config 0 has no interfaces?
[ 1396.117296][ T4721] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1396.126484][ T4721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1396.144664][ T4721] usb 2-1: Product: syz
[ 1396.159011][ T4721] usb 2-1: Manufacturer: syz
[ 1396.163742][ T4721] usb 2-1: SerialNumber: syz
[ 1396.174818][ T4721] usb 2-1: config 0 descriptor??
[ 1396.401001][   T10] usb 2-1: USB disconnect, device number 47
[ 1396.920435][T11876] netlink: 'syz.1.35866': attribute type 4 has an invalid length.
[ 1396.928396][T11876] netlink: 'syz.1.35866': attribute type 5 has an invalid length.
[ 1396.936285][T11876] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.35866'.
[ 1397.557191][T11904] netlink: 'syz.8.35879': attribute type 4 has an invalid length.
[ 1397.570555][T11904] netlink: 'syz.8.35879': attribute type 5 has an invalid length.
[ 1397.583972][T11904] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.35879'.
[ 1397.632131][T11913] netlink: 20 bytes leftover after parsing attributes in process `syz.8.35882'.
[ 1398.150334][ T4721] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1398.301445][ T4721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1398.311335][ T4721] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1398.320677][ T4721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1398.330533][ T4721] usb 4-1: config 0 descriptor??
[ 1398.340039][ T4721] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1398.541758][ T4721] usb 4-1: USB disconnect, device number 12
[ 1398.950319][   T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1398.972022][T11951] netlink: 'syz.5.35901': attribute type 11 has an invalid length.
[ 1398.990100][T11951] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.35901'.
[ 1399.130311][   T10] usb 2-1: Using ep0 maxpacket: 16
[ 1399.141433][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1399.162753][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1399.172783][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1399.186626][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1399.196309][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1399.205427][   T10] usb 2-1: config 0 descriptor??
[ 1399.615280][   T10] usbhid 2-1:0.0: can't add hid device: -71
[ 1399.623182][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1399.636359][   T10] usb 2-1: USB disconnect, device number 48
[ 1399.720369][T12016] netlink: 'syz.8.35931': attribute type 4 has an invalid length.
[ 1399.728267][T12016] netlink: 'syz.8.35931': attribute type 5 has an invalid length.
[ 1399.736154][T12016] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.35931'.
[ 1400.068180][T12059] netlink: 'syz.8.35952': attribute type 11 has an invalid length.
[ 1400.076282][T12059] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.35952'.
[ 1400.209700][T12073] netlink: 'syz.1.35959': attribute type 4 has an invalid length.
[ 1400.217738][T12073] netlink: 'syz.1.35959': attribute type 5 has an invalid length.
[ 1400.225908][T12073] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.35959'.
[ 1400.288284][T12077] netlink: 'syz.1.35961': attribute type 11 has an invalid length.
[ 1400.313613][T12077] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.35961'.
[ 1400.600424][T12104] netlink: 'syz.5.35973': attribute type 11 has an invalid length.
[ 1400.619642][T12104] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.35973'.
[ 1400.998051][T12126] netlink: 'syz.1.35983': attribute type 4 has an invalid length.
[ 1401.006109][T12126] netlink: 'syz.1.35983': attribute type 5 has an invalid length.
[ 1401.014301][T12126] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.35983'.
[ 1401.140302][   T31] usb 9-1: new high-speed USB device number 81 using dummy_hcd
[ 1401.301365][   T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1401.320305][   T31] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1401.329437][   T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1401.340468][   T31] usb 9-1: config 0 descriptor??
[ 1401.350243][   T31] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1401.548767][   T31] usb 9-1: USB disconnect, device number 81
[ 1401.582643][T12138] netlink: 68 bytes leftover after parsing attributes in process `syz.5.35989'.
[ 1401.861220][T12164] netlink: 'syz.5.36001': attribute type 4 has an invalid length.
[ 1401.869069][T12164] netlink: 'syz.5.36001': attribute type 5 has an invalid length.
[ 1401.877701][T12164] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.36001'.
[ 1402.758903][T12235] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true
[ 1402.784514][T12241] futex_wake_op: syz.3.36036 tries to shift op by -1; fix this program
[ 1403.160313][   T45] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1403.331641][   T45] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1403.343453][   T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1403.360321][   T45] usb 6-1: config 0 has no interfaces?
[ 1403.372872][   T45] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1403.384198][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1403.400315][   T45] usb 6-1: Product: syz
[ 1403.408907][   T45] usb 6-1: Manufacturer: syz
[ 1403.418312][   T45] usb 6-1: SerialNumber: syz
[ 1403.429163][   T45] usb 6-1: config 0 descriptor??
[ 1403.641773][   T45] usb 6-1: USB disconnect, device number 77
[ 1403.972899][T12327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:917
[ 1404.392390][T12344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:341
[ 1404.571863][T12363] 9pnet_fd: Insufficient options for proto=fd
[ 1404.716758][T12369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:974
[ 1405.730337][   T36] audit: type=1400 audit(2000000891.980:443): avc:  denied  { bind } for  pid=12409 comm="syz.3.36115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1405.782809][T12414] netlink: 'syz.3.36116': attribute type 4 has an invalid length.
[ 1405.790319][   T36] audit: type=1400 audit(2000000891.980:444): avc:  denied  { name_bind } for  pid=12409 comm="syz.3.36115" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[ 1405.798076][T12414] netlink: 'syz.3.36116': attribute type 5 has an invalid length.
[ 1405.830297][   T36] audit: type=1400 audit(2000000891.980:445): avc:  denied  { node_bind } for  pid=12409 comm="syz.3.36115" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[ 1405.832931][T12414] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.36116'.
[ 1406.152841][T12447] netlink: 'syz.3.36131': attribute type 4 has an invalid length.
[ 1406.160743][T12447] netlink: 'syz.3.36131': attribute type 5 has an invalid length.
[ 1406.168573][T12447] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.36131'.
[ 1406.210987][ T5781] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1406.320835][T12461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1001
[ 1406.371983][ T5781] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1406.409797][ T5781] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1406.420012][ T5781] usb 6-1: config 0 has no interfaces?
[ 1406.431510][ T5781] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1406.440612][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1406.448596][ T5781] usb 6-1: Product: syz
[ 1406.470295][ T5781] usb 6-1: Manufacturer: syz
[ 1406.474960][ T5781] usb 6-1: SerialNumber: syz
[ 1406.485256][ T5781] usb 6-1: config 0 descriptor??
[ 1406.518714][T12469] netlink: 'syz.3.36141': attribute type 4 has an invalid length.
[ 1406.526687][T12469] netlink: 'syz.3.36141': attribute type 5 has an invalid length.
[ 1406.534824][T12469] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.36141'.
[ 1406.697542][ T5781] usb 6-1: USB disconnect, device number 78
[ 1407.040309][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1407.194188][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1407.210925][   T10] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1407.218557][   T10] usb 4-1: can't read configurations, error -71
[ 1407.269294][T12514] SELinux:  Context system_u:object_r:power_device_t:s0 is not valid (left unmapped).
[ 1407.282292][   T36] audit: type=1400 audit(2000000893.540:446): avc:  denied  { relabelto } for  pid=12513 comm="syz.1.36162" name="cgroup" dev="tmpfs" ino=2956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:power_device_t:s0"
[ 1407.323197][   T36] audit: type=1400 audit(2000000893.560:447): avc:  denied  { associate } for  pid=12513 comm="syz.1.36162" name="cgroup" dev="tmpfs" ino=2956 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:power_device_t:s0"
[ 1407.353474][   T36] audit: type=1400 audit(2000000893.570:448): avc:  denied  { unlink } for  pid=9151 comm="syz-executor" name="cgroup" dev="tmpfs" ino=2956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:power_device_t:s0"
[ 1407.536640][T12529] netlink: 'syz.8.36167': attribute type 4 has an invalid length.
[ 1407.544577][T12529] netlink: 'syz.8.36167': attribute type 5 has an invalid length.
[ 1407.552678][T12529] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.36167'.
[ 1407.680342][ T5781] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1407.841611][ T5781] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1407.859880][ T5781] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1407.880274][ T5781] usb 6-1: config 0 has no interfaces?
[ 1407.887403][ T5781] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1407.896623][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1407.914745][ T5781] usb 6-1: Product: syz
[ 1407.929053][ T5781] usb 6-1: Manufacturer: syz
[ 1407.933778][ T5781] usb 6-1: SerialNumber: syz
[ 1407.940540][ T5781] usb 6-1: config 0 descriptor??
[ 1408.090347][   T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1408.150079][ T2295] usb 6-1: USB disconnect, device number 79
[ 1408.251479][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1408.262162][   T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1408.279374][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1408.296388][   T10] usb 4-1: config 0 descriptor??
[ 1408.304641][   T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1408.419564][T12575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1034
[ 1408.504121][   T10] usb 4-1: USB disconnect, device number 14
[ 1408.617366][T12595] netlink: 'syz.1.36200': attribute type 11 has an invalid length.
[ 1408.627910][T12595] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.36200'.
[ 1409.003540][T12652] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1409.003649][T12652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:520
[ 1409.430307][ T5781] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1409.611381][ T5781] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1409.630312][ T5781] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1409.649583][ T5781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1409.668311][ T5781] usb 6-1: config 0 descriptor??
[ 1409.676449][ T5781] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1409.878656][ T5781] usb 6-1: USB disconnect, device number 80
[ 1410.660309][ T5781] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1410.810307][ T5781] usb 6-1: Using ep0 maxpacket: 16
[ 1410.821376][ T5781] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1410.840554][ T5781] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1410.860307][ T5781] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1410.883316][ T5781] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1410.902720][ T5781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1410.933337][ T5781] usb 6-1: config 0 descriptor??
[ 1411.144452][ T5781] usbhid 6-1:0.0: can't add hid device: -71
[ 1411.160374][ T5781] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1411.179068][ T5781] usb 6-1: USB disconnect, device number 81
[ 1411.670308][ T5781] usb 9-1: new high-speed USB device number 82 using dummy_hcd
[ 1411.841539][ T5781] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1411.862454][ T5781] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1411.886798][ T5781] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1411.900595][ T5781] usb 9-1: config 0 descriptor??
[ 1411.916916][ T5781] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1412.111990][ T2295] usb 9-1: USB disconnect, device number 82
[ 1412.115160][T12776] netlink: 'syz.1.36288': attribute type 4 has an invalid length.
[ 1412.125842][T12776] netlink: 'syz.1.36288': attribute type 5 has an invalid length.
[ 1412.133675][T12776] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.36288'.
[ 1412.160360][   T45] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1412.310308][   T45] usb 6-1: Using ep0 maxpacket: 16
[ 1412.316805][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1412.328391][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1412.338390][   T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1412.351467][   T45] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1412.360680][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1412.370505][   T45] usb 6-1: config 0 descriptor??
[ 1412.647817][T12795] netlink: 'syz.8.36298': attribute type 4 has an invalid length.
[ 1412.655819][T12795] netlink: 'syz.8.36298': attribute type 5 has an invalid length.
[ 1412.664098][T12795] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.36298'.
[ 1412.716825][T12801] netlink: 68 bytes leftover after parsing attributes in process `syz.1.36297'.
[ 1412.782733][   T45] usbhid 6-1:0.0: can't add hid device: -71
[ 1412.800289][   T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1412.811083][   T45] usb 6-1: USB disconnect, device number 82
[ 1413.104497][T12836] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true
[ 1413.600296][ T2295] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1413.782090][ T2295] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1413.798870][ T2295] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1413.811599][T12875] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1413.811671][T12875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1065
[ 1413.818149][ T2295] usb 6-1: config 0 has no interfaces?
[ 1413.844974][ T2295] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[ 1413.854102][ T2295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1413.870301][ T2295] usb 6-1: Product: syz
[ 1413.877843][ T2295] usb 6-1: Manufacturer: syz
[ 1413.887794][ T2295] usb 6-1: SerialNumber: syz
[ 1413.897636][ T2295] usb 6-1: config 0 descriptor??
[ 1413.904158][T12881] netlink: 'syz.8.36338': attribute type 4 has an invalid length.
[ 1413.912049][T12881] netlink: 'syz.8.36338': attribute type 5 has an invalid length.
[ 1413.919931][T12881] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.36338'.
[ 1414.131907][ T2295] usb 6-1: USB disconnect, device number 83
[ 1414.281103][T12913] netlink: 'syz.8.36354': attribute type 4 has an invalid length.
[ 1414.289045][T12913] netlink: 'syz.8.36354': attribute type 5 has an invalid length.
[ 1414.296982][T12913] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.36354'.
[ 1414.340343][  T684] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1414.491394][  T684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1414.520351][  T684] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1414.529980][  T684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1414.548678][  T684] usb 4-1: config 0 descriptor??
[ 1414.554884][  T684] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1414.756585][  T684] usb 4-1: USB disconnect, device number 15
[ 1415.943208][T12998] netlink: 'syz.8.36395': attribute type 4 has an invalid length.
[ 1415.960322][T12998] netlink: 'syz.8.36395': attribute type 5 has an invalid length.
[ 1415.970322][T12998] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.36395'.
[ 1416.113358][T13007] netlink: 68 bytes leftover after parsing attributes in process `syz.8.36401'.
[ 1416.149139][T13009] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.36403'.
[ 1416.610355][ T2295] usb 9-1: new high-speed USB device number 83 using dummy_hcd
[ 1416.760452][ T2295] usb 9-1: Using ep0 maxpacket: 16
[ 1416.768662][ T2295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1416.789907][ T2295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1416.810289][ T2295] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1416.829061][ T2295] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1416.848331][ T2295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1416.864717][ T2295] usb 9-1: config 0 descriptor??
[ 1417.284256][ T2295] usbhid 9-1:0.0: can't add hid device: -71
[ 1417.290425][ T2295] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1417.309289][ T2295] usb 9-1: USB disconnect, device number 83
[ 1417.813110][T13062] validate_nla: 1 callbacks suppressed
[ 1417.813131][T13062] netlink: 'syz.8.36427': attribute type 11 has an invalid length.
[ 1417.840325][T13062] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.36427'.
[ 1417.876073][T13066] netlink: 'syz.8.36429': attribute type 4 has an invalid length.
[ 1417.890837][T13066] netlink: 'syz.8.36429': attribute type 5 has an invalid length.
[ 1417.898809][T13066] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.36429'.
[ 1418.280311][ T2295] usb 9-1: new high-speed USB device number 84 using dummy_hcd
[ 1418.440467][ T2295] usb 9-1: Using ep0 maxpacket: 16
[ 1418.451388][ T2295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1418.472486][ T2295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1418.500302][ T2295] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1418.513404][ T2295] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1418.530310][ T2295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1418.549232][ T2295] usb 9-1: config 0 descriptor??
[ 1418.899252][T13090] netlink: 'syz.3.36441': attribute type 4 has an invalid length.
[ 1418.907169][T13090] netlink: 'syz.3.36441': attribute type 5 has an invalid length.
[ 1418.915039][T13090] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.36441'.
[ 1418.964748][ T2295] usbhid 9-1:0.0: can't add hid device: -71
[ 1418.980340][ T2295] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1419.004662][ T2295] usb 9-1: USB disconnect, device number 84
[ 1419.231356][T13121] netlink: 188 bytes leftover after parsing attributes in process `syz.5.36455'.
[ 1419.547436][T13141] netlink: 188 bytes leftover after parsing attributes in process `syz.5.36465'.
[ 1419.840404][   T36] audit: type=1400 audit(2000000906.100:449): avc:  denied  { mount } for  pid=13160 comm="syz.3.36476" name="/" dev="configfs" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 1419.870469][   T45] usb 9-1: new high-speed USB device number 85 using dummy_hcd
[ 1419.888336][   T36] audit: type=1400 audit(2000000906.120:450): avc:  denied  { search } for  pid=13160 comm="syz.3.36476" name="/" dev="configfs" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1419.919440][T13165] netlink: 188 bytes leftover after parsing attributes in process `syz.3.36478'.
[ 1419.939155][   T36] audit: type=1400 audit(2000000906.120:451): avc:  denied  { read } for  pid=13160 comm="syz.3.36476" name="/" dev="configfs" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1419.968532][   T36] audit: type=1400 audit(2000000906.120:452): avc:  denied  { open } for  pid=13160 comm="syz.3.36476" path="/" dev="configfs" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1420.020320][   T45] usb 9-1: Using ep0 maxpacket: 16
[ 1420.031288][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1420.042429][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1420.052442][   T45] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1420.075433][   T45] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1420.090289][   T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1420.110340][   T45] usb 9-1: config 0 descriptor??
[ 1420.218636][T13197] netlink: 'syz.1.36492': attribute type 4 has an invalid length.
[ 1420.226619][T13197] netlink: 'syz.1.36492': attribute type 5 has an invalid length.
[ 1420.234515][T13197] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.36492'.
[ 1420.518846][   T45] usbhid 9-1:0.0: can't add hid device: -71
[ 1420.525523][   T45] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1420.536805][   T45] usb 9-1: USB disconnect, device number 85
[ 1421.414720][T13275] netlink: 68 bytes leftover after parsing attributes in process `syz.5.36529'.
[ 1421.470287][   T36] audit: type=1400 audit(2000000907.720:453): avc:  denied  { execmem } for  pid=13278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1421.636795][  T331] bridge_slave_1: left allmulticast mode
[ 1421.642976][  T331] bridge_slave_1: left promiscuous mode
[ 1421.650766][  T331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1421.664222][  T331] bridge_slave_0: left allmulticast mode
[ 1421.673171][  T331] bridge_slave_0: left promiscuous mode
[ 1421.685778][  T331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1421.842989][T13279] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1421.855620][T13279] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1421.863063][T13279] bridge_slave_0: entered allmulticast mode
[ 1421.870127][T13279] bridge_slave_0: entered promiscuous mode
[ 1421.887442][T13279] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1421.894674][T13279] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1421.910443][T13279] bridge_slave_1: entered allmulticast mode
[ 1421.920862][T13279] bridge_slave_1: entered promiscuous mode
[ 1421.933960][  T331] veth1_macvtap: left promiscuous mode
[ 1421.949874][  T331] veth0_vlan: left promiscuous mode
[ 1422.222519][T13279] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1422.229601][T13279] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1422.236923][T13279] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1422.243993][T13279] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1422.308128][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1422.316584][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1422.344061][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1422.351160][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1422.369130][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1422.376232][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1422.423877][T13279] veth0_vlan: entered promiscuous mode
[ 1422.437498][T13279] veth1_macvtap: entered promiscuous mode
[ 1422.584399][T13327] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true
[ 1424.001706][T13392] netlink: 'syz.5.36582': attribute type 4 has an invalid length.
[ 1424.050312][T13392] netlink: 'syz.5.36582': attribute type 5 has an invalid length.
[ 1424.068335][T13392] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.36582'.
[ 1425.302064][T13456] netlink: 188 bytes leftover after parsing attributes in process `syz.3.36612'.
[ 1425.931945][T13486] netlink: 'syz.5.36626': attribute type 4 has an invalid length.
[ 1425.947387][T13486] netlink: 'syz.5.36626': attribute type 5 has an invalid length.
[ 1425.955503][T13486] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.36626'.
[ 1426.087592][T13489] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1426.100387][T13489] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1426.112507][T13489] bridge_slave_0: entered allmulticast mode
[ 1426.123316][T13489] bridge_slave_0: entered promiscuous mode
[ 1426.132854][T13489] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1426.139951][T13489] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1426.147131][T13489] bridge_slave_1: entered allmulticast mode
[ 1426.153614][T13489] bridge_slave_1: entered promiscuous mode
[ 1426.284835][T13489] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1426.291948][T13489] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1426.299264][T13489] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1426.306340][T13489] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1426.365986][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1426.373358][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1426.392953][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1426.400027][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1426.417184][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1426.424274][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1426.465361][T13489] veth0_vlan: entered promiscuous mode
[ 1426.487969][T13489] veth1_macvtap: entered promiscuous mode
[ 1426.669989][T13536] netlink: 68 bytes leftover after parsing attributes in process `syz.1.36644'.
[ 1427.333357][T13556] netlink: 188 bytes leftover after parsing attributes in process `syz.5.36655'.
[ 1427.664669][T13578] netlink: 68 bytes leftover after parsing attributes in process `syz.3.36665'.
[ 1427.843834][T13590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1427.882996][   T46] bridge_slave_1: left allmulticast mode
[ 1427.893571][   T46] bridge_slave_1: left promiscuous mode
[ 1427.904756][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1427.920981][   T46] bridge_slave_0: left allmulticast mode
[ 1427.938276][   T46] bridge_slave_0: left promiscuous mode
[ 1427.950026][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1428.143062][   T46] veth1_macvtap: left promiscuous mode
[ 1428.148742][   T46] veth0_vlan: left promiscuous mode
[ 1428.400724][T13608] netlink: 'syz.1.36679': attribute type 4 has an invalid length.
[ 1428.408677][T13608] netlink: 'syz.1.36679': attribute type 5 has an invalid length.
[ 1428.416940][T13608] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.36679'.
[ 1428.525713][   T36] audit: type=1400 audit(2000000914.780:454): avc:  denied  { create } for  pid=13619 comm="syz.1.36685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1428.561600][   T36] audit: type=1400 audit(2000000914.800:455): avc:  denied  { write } for  pid=13619 comm="syz.1.36685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1428.582319][   T36] audit: type=1400 audit(2000000914.800:456): avc:  denied  { nlmsg_write } for  pid=13619 comm="syz.1.36685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1428.603856][   T36] audit: type=1400 audit(2000000914.800:457): avc:  denied  { read } for  pid=13619 comm="syz.1.36685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1428.901041][T13642] netlink: 64 bytes leftover after parsing attributes in process `syz.5.36695'.
[ 1429.217504][T13650] netlink: 68 bytes leftover after parsing attributes in process `syz.3.36698'.
[ 1429.838797][T13713] netlink: 68 bytes leftover after parsing attributes in process `syz.8.36729'.
[ 1430.448852][T13740] netlink: 68 bytes leftover after parsing attributes in process `syz.8.36741'.
[ 1430.700711][T13758] netlink: 68 bytes leftover after parsing attributes in process `syz.8.36750'.
[ 1430.778973][T13764] netlink: 'syz.8.36754': attribute type 4 has an invalid length.
[ 1430.794831][T13764] netlink: 'syz.8.36754': attribute type 5 has an invalid length.
[ 1430.804936][T13764] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.36754'.
[ 1430.945005][T13776] netlink: 68 bytes leftover after parsing attributes in process `syz.8.36760'.
[ 1431.088786][T13797] netlink: 'syz.3.36770': attribute type 4 has an invalid length.
[ 1431.096898][T13797] netlink: 'syz.3.36770': attribute type 5 has an invalid length.
[ 1431.105330][T13797] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.36770'.
[ 1431.382118][T13811] netlink: 68 bytes leftover after parsing attributes in process `syz.3.36777'.
[ 1432.080391][T13851] netlink: 188 bytes leftover after parsing attributes in process `syz.8.36796'.
[ 1432.497685][T13865] fuseblk: Bad value for 'fd'
[ 1433.686341][T13910] netlink: 68 bytes leftover after parsing attributes in process `syz.5.36818'.
[ 1434.507963][T13928] netlink: 68 bytes leftover after parsing attributes in process `syz.1.36833'.
[ 1434.612020][T13938] netlink: 188 bytes leftover after parsing attributes in process `syz.1.36838'.
[ 1434.768544][T13956] netlink: 188 bytes leftover after parsing attributes in process `syz.1.36848'.
[ 1436.412914][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.36869'.
[ 1436.747963][T14024] netlink: 188 bytes leftover after parsing attributes in process `syz.1.36880'.
[ 1437.757107][T14062] netlink: 188 bytes leftover after parsing attributes in process `syz.8.36898'.
[ 1437.909012][T14088] netlink: 'syz.3.36909': attribute type 4 has an invalid length.
[ 1437.916933][T14088] netlink: 'syz.3.36909': attribute type 5 has an invalid length.
[ 1437.925038][T14088] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.36909'.
[ 1438.062186][T14116] netlink: 'syz.3.36922': attribute type 4 has an invalid length.
[ 1438.070348][T14116] netlink: 'syz.3.36922': attribute type 5 has an invalid length.
[ 1438.078290][T14116] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.36922'.
[ 1438.181902][   T36] audit: type=1400 audit(2000000924.440:458): avc:  denied  { map } for  pid=14140 comm="syz.8.36934" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=579427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1438.218600][   T36] audit: type=1400 audit(2000000924.440:459): avc:  denied  { read write } for  pid=14140 comm="syz.8.36934" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=579427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1438.493430][T14213] netlink: 188 bytes leftover after parsing attributes in process `syz.8.36970'.
[ 1438.776363][T14274] netlink: 68 bytes leftover after parsing attributes in process `syz.3.36999'.
[ 1438.904860][T14299] netlink: 'syz.1.37013': attribute type 4 has an invalid length.
[ 1438.915449][T14299] netlink: 'syz.1.37013': attribute type 5 has an invalid length.
[ 1438.939093][   T36] audit: type=1400 audit(2000000925.190:460): avc:  denied  { read } for  pid=14304 comm="syz.5.37015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1439.499126][T14324] netlink: 'syz.3.37024': attribute type 4 has an invalid length.
[ 1439.507214][T14324] netlink: 'syz.3.37024': attribute type 5 has an invalid length.
[ 1439.515441][T14324] __nla_validate_parse: 1 callbacks suppressed
[ 1439.515459][T14324] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.37024'.
[ 1440.850300][ T5781] usb 9-1: new high-speed USB device number 86 using dummy_hcd
[ 1441.010787][ T5781] usb 9-1: Using ep0 maxpacket: 16
[ 1441.022665][ T5781] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1441.037300][ T5781] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1441.063650][ T5781] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1441.082519][ T5781] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1441.101171][ T5781] usb 9-1: config 0 descriptor??
[ 1441.109427][ T5781] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1441.312579][ T5781] usb 9-1: USB disconnect, device number 86
[ 1441.981853][T14471] incfs: Can't find or create .index dir in ./cgroup
[ 1441.998828][T14471] incfs: mount failed -22
[ 1442.718182][T14523] netlink: 'syz.5.37122': attribute type 4 has an invalid length.
[ 1442.726230][T14523] netlink: 'syz.5.37122': attribute type 5 has an invalid length.
[ 1442.734407][T14523] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.37122'.
[ 1442.930611][T14539] No source specified
[ 1442.965625][T14541] netlink: 'syz.5.37131': attribute type 4 has an invalid length.
[ 1442.986357][T14541] netlink: 'syz.5.37131': attribute type 5 has an invalid length.
[ 1443.010312][T14541] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.37131'.
[ 1443.200475][T14553] netlink: 188 bytes leftover after parsing attributes in process `syz.3.37137'.
[ 1443.301408][T14565] netlink: 'syz.1.37143': attribute type 4 has an invalid length.
[ 1443.309362][T14565] netlink: 'syz.1.37143': attribute type 5 has an invalid length.
[ 1443.317476][T14565] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.37143'.
[ 1443.388180][T14573] netlink: 188 bytes leftover after parsing attributes in process `syz.3.37147'.
[ 1443.494690][T14583] netlink: 'syz.3.37152': attribute type 4 has an invalid length.
[ 1443.502671][T14583] netlink: 'syz.3.37152': attribute type 5 has an invalid length.
[ 1443.510841][T14583] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.37152'.
[ 1443.578714][T14591] netlink: 188 bytes leftover after parsing attributes in process `syz.3.37156'.
[ 1444.233464][T14621] netlink: 'syz.1.37171': attribute type 4 has an invalid length.
[ 1444.241448][T14621] netlink: 'syz.1.37171': attribute type 5 has an invalid length.
[ 1444.249336][T14621] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.37171'.
[ 1445.934753][T14658] netlink: 'syz.1.37187': attribute type 4 has an invalid length.
[ 1445.942943][T14658] netlink: 'syz.1.37187': attribute type 5 has an invalid length.
[ 1445.950943][T14658] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.37187'.
[ 1445.960384][T14660] netlink: 188 bytes leftover after parsing attributes in process `syz.8.37188'.
[ 1445.989721][T14664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:259
[ 1446.443450][T14680] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.37198'.
[ 1446.770801][T14711] 9pnet_fd: Insufficient options for proto=fd
[ 1447.787985][T14772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:277
[ 1448.112358][T14800] 9pnet_fd: Insufficient options for proto=fd
[ 1448.211878][T14811] No source specified
[ 1448.243352][T14819] validate_nla: 2 callbacks suppressed
[ 1448.243374][T14819] netlink: 'syz.1.37264': attribute type 4 has an invalid length.
[ 1448.257339][T14819] netlink: 'syz.1.37264': attribute type 5 has an invalid length.
[ 1448.265540][T14819] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.37264'.
[ 1448.514706][T14841] netlink: 'syz.5.37275': attribute type 4 has an invalid length.
[ 1448.522628][T14841] netlink: 'syz.5.37275': attribute type 5 has an invalid length.
[ 1448.532529][T14841] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.37275'.
[ 1448.893226][T14853] 9pnet_fd: Insufficient options for proto=fd
[ 1448.929409][T14859] netlink: 'syz.1.37284': attribute type 4 has an invalid length.
[ 1448.938373][T14859] netlink: 'syz.1.37284': attribute type 5 has an invalid length.
[ 1448.946411][T14859] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.37284'.
[ 1449.510151][T14881] netlink: 'syz.1.37295': attribute type 4 has an invalid length.
[ 1449.518498][T14881] netlink: 'syz.1.37295': attribute type 5 has an invalid length.
[ 1449.526583][T14881] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.37295'.
[ 1450.374023][   T36] audit: type=1400 audit(2000000936.630:461): avc:  denied  { add_name } for  pid=14902 comm="syz.8.37301" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1450.396409][T13489] ------------[ cut here ]------------
[ 1450.401939][T13489] WARNING: CPU: 1 PID: 13489 at fs/inode.c:340 drop_nlink+0xce/0x110
[ 1450.410069][T13489] Modules linked in:
[ 1450.414038][T13489] CPU: 1 UID: 0 PID: 13489 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 1450.425929][T13489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1450.435861][   T36] audit: type=1400 audit(2000000936.630:462): avc:  denied  { associate } for  pid=14902 comm="syz.8.37301" name="cpuacct.usage_percpu" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1450.436144][T13489] RIP: 0010:drop_nlink+0xce/0x110
[ 1450.464106][T13489] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[ 1450.483869][T13489] RSP: 0018:ffffc90002ed7c60 EFLAGS: 00010293
[ 1450.484053][   T36] audit: type=1400 audit(2000000936.630:463): avc:  denied  { read append } for  pid=14902 comm="syz.8.37301" name="cpuacct.usage_percpu" dev="incremental-fs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1450.490685][T13489] RAX: ffffffff81ee1a7e RBX: ffff88811ab84070 RCX: ffff88811d58a600
[ 1450.515005][   T36] audit: type=1400 audit(2000000936.630:464): avc:  denied  { open } for  pid=14902 comm="syz.8.37301" path="/153/bus/cpuacct.usage_percpu" dev="incremental-fs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1450.523365][T13489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1450.556995][T13489] RBP: ffffc90002ed7c88 R08: 0000000000000003 R09: 0000000000000004
[ 1450.565093][T13489] R10: dffffc0000000000 R11: fffff520005daf7c R12: dffffc0000000000
[ 1450.573117][T13489] R13: 1ffff11023570817 R14: ffff88811ab840b8 R15: 0000000000000000
[ 1450.581139][T13489] FS:  000055558182e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1450.590124][T13489] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1450.596749][T13489] CR2: 00005555818514e8 CR3: 000000013170c000 CR4: 00000000003526b0
[ 1450.604815][T13489] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081
[ 1450.612832][T13489] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1450.620864][T13489] Call Trace:
[ 1450.624157][T13489]  <TASK>
[ 1450.627119][T13489]  shmem_rmdir+0x5f/0x90
[ 1450.631485][T13489]  vfs_rmdir+0x3dd/0x560
[ 1450.635760][T13489]  incfs_kill_sb+0x109/0x230
[ 1450.640433][T13489]  deactivate_locked_super+0xd5/0x2a0
[ 1450.645840][T13489]  deactivate_super+0xb8/0xe0
[ 1450.650590][T13489]  cleanup_mnt+0x3f1/0x480
[ 1450.655034][T13489]  __cleanup_mnt+0x1d/0x40
[ 1450.659481][T13489]  task_work_run+0x1e0/0x250
[ 1450.664150][T13489]  ? __cfi_task_work_run+0x10/0x10
[ 1450.669293][T13489]  ? __x64_sys_umount+0x126/0x170
[ 1450.674415][T13489]  ? __cfi___x64_sys_umount+0x10/0x10
[ 1450.679821][T13489]  ? __kasan_check_read+0x15/0x20
[ 1450.684932][T13489]  resume_user_mode_work+0x36/0x50
[ 1450.690078][T13489]  syscall_exit_to_user_mode+0x64/0xb0
[ 1450.695594][T13489]  do_syscall_64+0x64/0xf0
[ 1450.700041][T13489]  ? clear_bhb_loop+0x50/0xa0
[ 1450.704783][T13489]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 1450.710730][T13489] RIP: 0033:0x7ff62ed909f7
[ 1450.715188][T13489] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1450.734965][T13489] RSP: 002b:00007fff8df5df28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1450.743444][T13489] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff62ed909f7
[ 1450.751482][T13489] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8df5dfe0
[ 1450.759487][T13489] RBP: 00007fff8df5dfe0 R08: 0000000000000000 R09: 0000000000000000
[ 1450.767529][T13489] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8df5f070
[ 1450.775626][T13489] R13: 00007ff62ee11d7d R14: 0000000000162178 R15: 00007fff8df5f0b0
[ 1450.783666][T13489]  </TASK>
[ 1450.786710][T13489] ---[ end trace 0000000000000000 ]---
[ 1450.884816][T13489] ==================================================================
[ 1450.892943][T13489] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[ 1450.899212][T13489] Write of size 4 at addr 0000000000000168 by task syz-executor/13489
[ 1450.907379][T13489] 
[ 1450.909720][T13489] CPU: 1 UID: 0 PID: 13489 Comm: syz-executor Tainted: G        W          syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 1450.909757][T13489] Tainted: [W]=WARN
[ 1450.909766][T13489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1450.909781][T13489] Call Trace:
[ 1450.909789][T13489]  <TASK>
[ 1450.909798][T13489]  __dump_stack+0x21/0x30
[ 1450.909834][T13489]  dump_stack_lvl+0x10c/0x190
[ 1450.909863][T13489]  ? __cfi_dump_stack_lvl+0x10/0x10
[ 1450.909896][T13489]  print_report+0x3d/0x70
[ 1450.909921][T13489]  kasan_report+0x163/0x1a0
[ 1450.909947][T13489]  ? ihold+0x24/0x70
[ 1450.909972][T13489]  ? _raw_spin_unlock+0x45/0x60
[ 1450.910001][T13489]  ? ihold+0x24/0x70
[ 1450.910024][T13489]  kasan_check_range+0x299/0x2a0
[ 1450.910052][T13489]  __kasan_check_write+0x18/0x20
[ 1450.910105][T13489]  ihold+0x24/0x70
[ 1450.910128][T13489]  vfs_rmdir+0x26a/0x560
[ 1450.910173][T13489]  incfs_kill_sb+0x109/0x230
[ 1450.910206][T13489]  deactivate_locked_super+0xd5/0x2a0
[ 1450.910237][T13489]  deactivate_super+0xb8/0xe0
[ 1450.910265][T13489]  cleanup_mnt+0x3f1/0x480
[ 1450.910290][T13489]  __cleanup_mnt+0x1d/0x40
[ 1450.910321][T13489]  task_work_run+0x1e0/0x250
[ 1450.910349][T13489]  ? __cfi_task_work_run+0x10/0x10
[ 1450.910376][T13489]  ? __x64_sys_umount+0x126/0x170
[ 1450.910407][T13489]  ? __cfi___x64_sys_umount+0x10/0x10
[ 1450.910456][T13489]  ? __kasan_check_read+0x15/0x20
[ 1450.910491][T13489]  resume_user_mode_work+0x36/0x50
[ 1450.910520][T13489]  syscall_exit_to_user_mode+0x64/0xb0
[ 1450.910546][T13489]  do_syscall_64+0x64/0xf0
[ 1450.910588][T13489]  ? clear_bhb_loop+0x50/0xa0
[ 1450.910613][T13489]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 1450.910656][T13489] RIP: 0033:0x7ff62ed909f7
[ 1450.910677][T13489] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1450.910697][T13489] RSP: 002b:00007fff8df5df28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1450.910722][T13489] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff62ed909f7
[ 1450.910738][T13489] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8df5dfe0
[ 1450.910755][T13489] RBP: 00007fff8df5dfe0 R08: 0000000000000000 R09: 0000000000000000
[ 1450.910770][T13489] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8df5f070
[ 1450.910787][T13489] R13: 00007ff62ee11d7d R14: 0000000000162178 R15: 00007fff8df5f0b0
[ 1450.910807][T13489]  </TASK>
[ 1450.910817][T13489] ==================================================================
[ 1451.156617][T13489] Disabling lock debugging due to kernel taint
[ 1451.163982][T13489] BUG: kernel NULL pointer dereference, address: 0000000000000168
[ 1451.171825][T13489] #PF: supervisor write access in kernel mode
[ 1451.177909][T13489] #PF: error_code(0x0002) - not-present page
[ 1451.184073][T13489] PGD 800000010fb82067 P4D 800000010fb82067 PUD 0 
[ 1451.190630][T13489] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[ 1451.196726][T13489] CPU: 1 UID: 0 PID: 13489 Comm: syz-executor Tainted: G    B   W          syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 1451.210030][T13489] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1451.215067][T13489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1451.225143][T13489] RIP: 0010:ihold+0x2a/0x70
[ 1451.229681][T13489] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d
[ 1451.249312][T13489] RSP: 0018:ffffc90002ed7ca0 EFLAGS: 00010246
[ 1451.255429][T13489] RAX: ffff88811d58a600 RBX: 0000000000000000 RCX: ffff88811d58a600
[ 1451.263435][T13489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1451.271436][T13489] RBP: ffffc90002ed7cb0 R08: ffffffff88972947 R09: 1ffffffff112e528
[ 1451.279525][T13489] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88811ab8407c
[ 1451.287548][T13489] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 1451.295547][T13489] FS:  000055558182e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1451.304597][T13489] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1451.311198][T13489] CR2: 0000000000000168 CR3: 000000013170c000 CR4: 00000000003526b0
[ 1451.319202][T13489] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081
[ 1451.327194][T13489] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1451.335185][T13489] Call Trace:
[ 1451.338480][T13489]  <TASK>
[ 1451.341434][T13489]  vfs_rmdir+0x26a/0x560
[ 1451.345712][T13489]  incfs_kill_sb+0x109/0x230
[ 1451.350331][T13489]  deactivate_locked_super+0xd5/0x2a0
[ 1451.355729][T13489]  deactivate_super+0xb8/0xe0
[ 1451.360439][T13489]  cleanup_mnt+0x3f1/0x480
[ 1451.364890][T13489]  __cleanup_mnt+0x1d/0x40
[ 1451.369331][T13489]  task_work_run+0x1e0/0x250
[ 1451.373962][T13489]  ? __cfi_task_work_run+0x10/0x10
[ 1451.379100][T13489]  ? __x64_sys_umount+0x126/0x170
[ 1451.384159][T13489]  ? __cfi___x64_sys_umount+0x10/0x10
[ 1451.389569][T13489]  ? __kasan_check_read+0x15/0x20
[ 1451.394628][T13489]  resume_user_mode_work+0x36/0x50
[ 1451.399763][T13489]  syscall_exit_to_user_mode+0x64/0xb0
[ 1451.405242][T13489]  do_syscall_64+0x64/0xf0
[ 1451.409692][T13489]  ? clear_bhb_loop+0x50/0xa0
[ 1451.414393][T13489]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 1451.420313][T13489] RIP: 0033:0x7ff62ed909f7
[ 1451.424748][T13489] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1451.444399][T13489] RSP: 002b:00007fff8df5df28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1451.452930][T13489] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff62ed909f7
[ 1451.460921][T13489] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8df5dfe0
[ 1451.468914][T13489] RBP: 00007fff8df5dfe0 R08: 0000000000000000 R09: 0000000000000000
[ 1451.476913][T13489] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8df5f070
[ 1451.484909][T13489] R13: 00007ff62ee11d7d R14: 0000000000162178 R15: 00007fff8df5f0b0
[ 1451.492899][T13489]  </TASK>
[ 1451.495914][T13489] Modules linked in:
[ 1451.499801][T13489] CR2: 0000000000000168
[ 1451.503955][T13489] ---[ end trace 0000000000000000 ]---
[ 1451.509445][T13489] RIP: 0010:ihold+0x2a/0x70
[ 1451.513979][T13489] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d
[ 1451.533596][T13489] RSP: 0018:ffffc90002ed7ca0 EFLAGS: 00010246
[ 1451.539670][T13489] RAX: ffff88811d58a600 RBX: 0000000000000000 RCX: ffff88811d58a600
[ 1451.547646][T13489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1451.555616][T13489] RBP: ffffc90002ed7cb0 R08: ffffffff88972947 R09: 1ffffffff112e528
[ 1451.563623][T13489] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88811ab8407c
[ 1451.571594][T13489] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 1451.579583][T13489] FS:  000055558182e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1451.588511][T13489] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1451.595101][T13489] CR2: 0000000000000168 CR3: 000000013170c000 CR4: 00000000003526b0
[ 1451.603099][T13489] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081
[ 1451.611064][T13489] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1451.619035][T13489] Kernel panic - not syncing: Fatal exception
[ 1451.625339][T13489] Kernel Offset: disabled
[ 1451.629662][T13489] Rebooting in 86400 seconds..