last executing test programs:

32.290836356s ago: executing program 2 (id=3):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = landlock_create_ruleset(&(0x7f0000000080)={0x4000}, 0x30, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000000840)={{0x1, 0x6, 0x7f, 0x8, 0x284}, [{0x9, 0x3, 0x1}, {0x43b6, 0x29b0, 0xff, 0x75}, {0x946, 0xffff, 0x8, 0x7}, {0x1, 0x9, 0xf2, 0x49}, {0x5, 0x80008001, 0x9, 0xb}, {0xa, 0x24d, 0x45, 0x9}, {0xffffffffffff5652, 0x2, 0x5, 0x1}, {0x2000000000003, 0x10001, 0x8, 0x3}, {0x0, 0x7, 0x0, 0xeb}]})
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) (async)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r2, &(0x7f00000000c0)='.\x02\x00', 0x5) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r2, &(0x7f00000000c0)='.\x02\x00', 0x5)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r3 = userfaultfd(0x801)
socket(0x8000000010, 0x2, 0x0) (async)
r4 = socket(0x8000000010, 0x2, 0x0)
write(r4, &(0x7f0000001b00)="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", 0xfc)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) (async)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x40000359, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000700)={{0x80a0000, 0xdddd1000, 0xf, 0xf, 0x5, 0x4, 0x42, 0x7, 0x0, 0x34, 0x19}, {0x1000, 0x54000, 0xc, 0x2, 0x1, 0x43, 0x7f, 0x6, 0x5, 0x6, 0x7f}, {0xdddd0000, 0x80a0000, 0xb, 0x6, 0x80, 0x7, 0x0, 0x9, 0xff, 0xb, 0x6, 0x85}, {0x200000, 0x26000, 0x8, 0x6, 0x9, 0xff, 0xfd, 0x0, 0xa, 0x9e, 0x9, 0xf1}, {0xa000, 0x25000, 0xb, 0x3, 0x5, 0x2, 0xab, 0x7f, 0xf, 0x2, 0xf7, 0xc4}, {0x2000, 0x6000, 0xe, 0x5, 0xf7, 0x6, 0x1, 0x81, 0x80, 0xd6, 0x1}, {0xd000, 0xd000, 0xb, 0x5, 0x0, 0x0, 0x44, 0x3, 0x3, 0x7d, 0xbb, 0x70}, {0x8000000, 0xb000, 0xf, 0x2, 0xf, 0x7, 0x6a, 0xe2, 0xff, 0x8, 0xee, 0x9}, {0xeeee0000, 0x4}, {0x2000, 0x2}, 0x80000031, 0x0, 0x200000, 0x42064, 0x400000006, 0x9000, 0xf000, [0x3, 0x800ffa, 0x400000000063, 0x7]}) (async)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000700)={{0x80a0000, 0xdddd1000, 0xf, 0xf, 0x5, 0x4, 0x42, 0x7, 0x0, 0x34, 0x19}, {0x1000, 0x54000, 0xc, 0x2, 0x1, 0x43, 0x7f, 0x6, 0x5, 0x6, 0x7f}, {0xdddd0000, 0x80a0000, 0xb, 0x6, 0x80, 0x7, 0x0, 0x9, 0xff, 0xb, 0x6, 0x85}, {0x200000, 0x26000, 0x8, 0x6, 0x9, 0xff, 0xfd, 0x0, 0xa, 0x9e, 0x9, 0xf1}, {0xa000, 0x25000, 0xb, 0x3, 0x5, 0x2, 0xab, 0x7f, 0xf, 0x2, 0xf7, 0xc4}, {0x2000, 0x6000, 0xe, 0x5, 0xf7, 0x6, 0x1, 0x81, 0x80, 0xd6, 0x1}, {0xd000, 0xd000, 0xb, 0x5, 0x0, 0x0, 0x44, 0x3, 0x3, 0x7d, 0xbb, 0x70}, {0x8000000, 0xb000, 0xf, 0x2, 0xf, 0x7, 0x6a, 0xe2, 0xff, 0x8, 0xee, 0x9}, {0xeeee0000, 0x4}, {0x2000, 0x2}, 0x80000031, 0x0, 0x200000, 0x42064, 0x400000006, 0x9000, 0xf000, [0x3, 0x800ffa, 0x400000000063, 0x7]})
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
dup(0xffffffffffffffff) (async)
r8 = dup(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/74, 0x4a}], 0x2, 0x2, 0xde0b)
ioctl$KVM_GET_XSAVE2(r8, 0x9000aecf, &(0x7f000042d000/0x1000)=nil)

32.260868907s ago: executing program 1 (id=2):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x24a, 0xfff, 0x4)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x80503d0a, 0x0)

32.223492648s ago: executing program 0 (id=1):
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) (async)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000140)={0x7, 0xfff7, 0x8, 0x3, 0x17, "a9b39ba517c50901"}) (async)
write(r2, &(0x7f0000000180)="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", 0x301) (async)
listen(r0, 0x0) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b2, 0x0, 0x35}]})
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0xfffffffffffffd23) (async)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [{0x48a, 0x0, 0x4}, {0x818, 0x0, 0x3}]}) (async)
close(r3) (async)
socket$nl_route(0x10, 0x3, 0x0)
accept4(r0, &(0x7f00000000c0)=@xdp, &(0x7f00000001c0)=0x80, 0x80800)

32.222585218s ago: executing program 1 (id=5):
r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8a<Z\x02\xfc\xb6E\x8c&\f\xb4)l\x93\xb8\xb1\xcfK\x0e\xben \xc3\xc5xH\xa5\t\xcc\"\xcd\xe2\xbb>S\x1bZ\xa1\xba\xb4E\xbc', r0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (rerun: 64)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', <r2=>0x0})
setresuid(0x0, 0xee00, 0x0) (async, rerun: 32)
sendto$packet(r1, 0x0, 0x0, 0x80c0, &(0x7f0000000240)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0) (async, rerun: 32)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_io_uring(0x6d19, &(0x7f0000000340)={0x0, 0xfe0b, 0x4000, 0x0, 0xb3, 0x0, r7}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000480)=<r8=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r8, 0x0, &(0x7f00000007c0)) (async)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

32.210767478s ago: executing program 3 (id=4):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f00000001c0))

32.159199559s ago: executing program 3 (id=6):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xa101, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xa101, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x140000000)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x32874000)
ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000002480)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd3\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd')
ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00')
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)=0x9)
ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000240)=0x4) (async)
ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000240)=0x4)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000206a05f6004000010203788f2bd70e293265693a622b107c0109022d0001eaff0f0209040005010301030409210104800122c30509058103ff030802022905020383c013f8083cd2d0d7c621"], &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x6, 0x4, 0x40, 0xf5}, 0x99, &(0x7f00000000c0)={0x5, 0xf, 0x99, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0xed, 0x3, 0x101, 0xf000, 0x800, [0xff0000, 0x3f30, 0xffff]}, @ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0x7fffffd, 0xf00, 0xe5f8, [0x7bec48607f0f3b44, 0xff00c0, 0xc00f, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5, 0x0, 0x4, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xc, 0x5, 0x3}, @generic={0x4e, 0x10, 0x4, "50ea5691aef6ed88738e810c03179f3050e484764a9d5cf5c81a7a19425717a56405fcf01840200cad15ed3692c372d087cba49b64a7b7a222b1112e9fb153a3cbfa608a942c590e190810"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x437}}]})
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x50, 0x6, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x7f, {0x9, 0x21, 0x151, 0x3a, 0x1, {0x22, 0x6fd}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x4, 0x2, 0x81, 0x8, 0xfb}, 0xfa, &(0x7f00000002c0)={0x5, 0xf, 0xfa, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "dc60bcb3812c3ae0085eb4de90fd7a31"}, @generic={0xda, 0x10, 0xb, "f4ae49c9c7cfa2f327b2b0debcd6b5765b6a8a02b5bd6fce5cfe50ecead3bca2e5b76193464554869c33e5d58435e54b0cb84d172fec0c2e9ca0e13b39f0447534cf41e5904f236aef6aa944154495d8cc3caf9bc7407047954d945394ffdc71f026ae84368dd774d768bfa319813f8463969bb3bc2342b2b41c5cf8d0ec26d1574709ea1dd72ec80adb1fc4cd3df209fef7f0bc9f14d845d1574961070dc0c398b58dabe1d912ed9553c21ed881071f57f62cca0378b76b927f7fa123c23a0de962592d8a139540ddae9fbd8cf5b3105be128cb36b76a"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0xf, 0x5}]}, 0x1, [{0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="1ba2a172816af5fc9037ca73e5fb2ea0392c64e2a9d33049ea34a23b0c0000"]}]})
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000940)=ANY=[@ANYBLOB="200b00010000c89c"], 0x0, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x8}, 0x0})

32.158753429s ago: executing program 1 (id=7):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00')
r1 = socket(0x10, 0x3, 0x0)
unshare(0x60000600)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @broadcast}}}})
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x800007}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001180)=""/4056, 0xfd8}, {&(0x7f0000000780)=""/216, 0xd8}, {&(0x7f0000000980)=""/265, 0x109}, {&(0x7f0000000d40)=""/165, 0xa5}, {&(0x7f0000000880)=""/224, 0xe0}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000003c0)=""/66, 0x42}], 0x9}, 0x120b}], 0x3, 0x0, 0x0)
fcntl$lock(r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffff8, 0x4})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x6, 0x12)

31.991883403s ago: executing program 1 (id=8):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

31.991574943s ago: executing program 2 (id=9):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001b640)={0x30, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0xd601, 0x9}, [@nested={0x10, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@empty}]}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xce, 0x0, 0x1, [@nested={0x4, 0x13e}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xff, 0x20, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x42, 0xd4, 0x58, {0xa, 0x25, 0x25, 0x6, 0x1, 0x44}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x5d0, 0x4, 0x9}}}}}}}}]}}, 0x0)

31.988182493s ago: executing program 0 (id=10):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), 0x4)
mount$overlay(0x0, 0x0, 0x0, 0x28008a0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="240000002d0001000000000000000000080000", @ANYRES32, @ANYRES32=0xee00], 0x24}], 0x1}, 0x8010)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f00000002c0)={0xe, 0x1})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xfffffff9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x14de}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xff}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0xa3d, 0x4}})

31.963723004s ago: executing program 0 (id=11):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000280)=@generic, &(0x7f0000000340)=0x80, 0x800)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup3(r4, r3, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000180))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
fsopen(&(0x7f0000000300)='debugfs\x00', 0x0)
syz_clone3(&(0x7f0000000600)={0x45080100, &(0x7f0000000040)=<r7=>0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), {0x1a}, &(0x7f00000003c0)=""/184, 0xb8, &(0x7f0000000480)=""/128, &(0x7f0000000500)=[0x0], 0x1, {r5}}, 0x58)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000740)={0x0, <r8=>0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000001740)={{r8, 0x1, 0x2, 0x9, 0x6, 0x5, 0x9, 0x3, 0x5, 0xd7, 0x6, 0x1, 0xc, 0x0, 0x81}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = dup(r11)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r10, &(0x7f0000002740)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@mpls_mc={0x8848, {[{0x6e, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x100}, {0x7, 0x0, 0x1}, {0x101, 0x0, 0x1}], @ipv6=@tipc_packet={0xe, 0x6, "027743", 0x114e, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x2, 0x8, '\x00', [@generic={0x6, 0x44, "49abfc79a23011ab9c06269bf4906f9dd08d115ef7b855bf66f99f60afafbdf61a818e40b42085d812cf7f12d72ed1c0fd61a5c09b7a7dc5ae4a627b0618cad65b2f72b6"}]}, @dstopts={0x3b, 0x3, '\x00', [@ra={0x5, 0x2, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @pad1, @ra, @pad1, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xc}]}, @hopopts={0x5c, 0x205, '\x00', [@jumbo={0xc2, 0x4, 0x3ff}, @jumbo={0xc2, 0x4, 0x1}, @generic={0x0, 0x1000, "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"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @empty}]}, @srh={0x33, 0x4, 0x4, 0x2, 0x8, 0x8, 0x10, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}]}, @dstopts={0x3b, 0x9, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x80, 0x80, [0x7, 0x83, 0x8000000000000000, 0x7, 0x5df]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}], @payload_direct={{{{0x26, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x2, 0x8, 0x0, 0x2, 0xa, 0x4, 0x3, 0xb7d, 0x0, 0x2, 0x4e23, 0x4e22}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}}, 0x119c)
syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000000c0)="410f01c8c744240046c606afc7442402db636b7b650f01c40f011c24b9b90900000f320f01c5b965080000b8b724000064460f95e10f3047f48fe8288eb41d0100000099460f01c347a6f3420fc7750b", 0x50}], 0x1, 0x67, &(0x7f0000000180), 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

30.767182752s ago: executing program 2 (id=12):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_4={0x3, 0x0, 0x8, "de134934"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000800)={0x0, 0xa, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/171, 0xab)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000340)={0x0, 0xffff, 0x0, 0x0, <r2=>0xffffffffffffffff})
socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = syz_open_procfs(r2, &(0x7f0000000400)='net/rfcomm\x00')
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x20)
setsockopt$inet6_mreq(r4, 0x29, 0x15, 0x0, 0x0)
close_range(r1, r4, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x48ddb894f4187083}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x50}, 0x1, 0x0, 0x0, 0x8804}, 0x4000)
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r7, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x8000})
readv(r1, &(0x7f0000000480), 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)

30.627833936s ago: executing program 1 (id=13):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0007000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="495300000000000000006700000010001d800c00008005000c001400000834"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r4, &(0x7f00000000c0)='devices\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000140)='mem\n', 0x4)
clock_gettime(0x0, &(0x7f00000002c0)={<r6=>0x0, <r7=>0x0})
pselect6(0x40, &(0x7f00000001c0)={0x6, 0xc, 0xc, 0x0, 0xfffffffffffffff6, 0x8, 0x7cf0, 0x1}, &(0x7f0000000200)={0xfff, 0x8, 0x4, 0x2, 0x7ff, 0x7, 0x4, 0x8}, &(0x7f0000000240)={0x2, 0x2, 0x9, 0x920, 0x4, 0xa1b, 0x7, 0xa7b0}, &(0x7f0000000300)={r6, r7+60000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x7]}, 0x8})
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x100, 0x3)

30.387776141s ago: executing program 0 (id=14):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}) (async)
syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) (async)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=<r7=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
socket$packet(0x11, 0x3, 0x300)
socket$tipc(0x1e, 0x2, 0x0) (async)
syz_ublk_setup_queues(r2, r7, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r6, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r9, 0xae9a) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x55, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r11)

30.378035911s ago: executing program 0 (id=15):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="baa100ec66b9800000c00f326635000100000f30baa10066ed0fc79b1000b814000f00d865660f38823b0f01c3b807000f00d00f01c90f22c1", 0x39}], 0x1, 0x14, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="baa100ec66b9800000c00f326635000100000f30baa10066ed0fc79b1000b814000f00d865660f38823b0f01c3b807000f00d00f01c90f22c1", 0x39}], 0x1, 0x14, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc2)
ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000100)={0x0, 0x0, 0x9, 0xa, 0x2}) (async)
ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000100)={0x0, 0x0, 0x9, 0xa, 0x2})
syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000001c0)=ANY=[], &(0x7f0000000900)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0xc, 0xe5, 0x67, 0x8, 0x5}, 0x12a, &(0x7f0000000940)={0x5, 0xf, 0x12a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xff, 0x2, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x4, 0x6, 0x2, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8, 0x2, 0x8}, @generic={0x103, 0x10, 0x6b34a72d0efbca7d, "228028e9f6862c6cd35f29c7acde3c423913810dba70f2cce61f1cb1f96b1294a8dfe42291734e7b814e365b857420f6f0bcd335d6201962a2102884197b87d7f05bff9aafe99c81de2e9a555aa4f133e92271d5806f825b5da0a0ba5b5b9ace8858182cba47291fada619d2c87d295e8994e4e3fe12ce8cadf99a889d754a3721cf82940ca0fb9e38307befd7941601863761a558c8130fdeed11ab8bf6f1421f60b0030afb297d01e0c12b40dde73658a3d2fd136def0b91075763d33d7f48dae28f2cff5ad6d9b43e8202ff9dda9eee5dcba948116fca4d1c6f7790de88d4b4a98d812634d1c31ea5d133f621cfb068af672130ee497eea20c0d13b63bfe1"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x480a}}]})
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\xa0\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\x02\xb3\x1d\xfai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D')
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) (async)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_ep_write(r4, 0x81, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r4)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)={0x2, 'bond_slave_0\x00', {0x1}, 0x60aa})
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0}, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b9, 0x42, 0x2002, 0x158}, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r5)
sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) (async)
sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x10)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x87e5)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4)
getsockopt$inet6_tcp_int(r9, 0x6, 0x2, 0x0, &(0x7f0000000100))
r10 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r10, 0xc018480d, 0x0) (async)
ioctl$HIDIOCGUCODE(r10, 0xc018480d, 0x0)

10.423904903s ago: executing program 32 (id=15):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="baa100ec66b9800000c00f326635000100000f30baa10066ed0fc79b1000b814000f00d865660f38823b0f01c3b807000f00d00f01c90f22c1", 0x39}], 0x1, 0x14, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="baa100ec66b9800000c00f326635000100000f30baa10066ed0fc79b1000b814000f00d865660f38823b0f01c3b807000f00d00f01c90f22c1", 0x39}], 0x1, 0x14, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc2)
ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000100)={0x0, 0x0, 0x9, 0xa, 0x2}) (async)
ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000100)={0x0, 0x0, 0x9, 0xa, 0x2})
syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000001c0)=ANY=[], &(0x7f0000000900)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0xc, 0xe5, 0x67, 0x8, 0x5}, 0x12a, &(0x7f0000000940)={0x5, 0xf, 0x12a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xff, 0x2, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x4, 0x6, 0x2, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8, 0x2, 0x8}, @generic={0x103, 0x10, 0x6b34a72d0efbca7d, "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"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x480a}}]})
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\xa0\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\x02\xb3\x1d\xfai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D')
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) (async)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_ep_write(r4, 0x81, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r4)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)={0x2, 'bond_slave_0\x00', {0x1}, 0x60aa})
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0}, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b9, 0x42, 0x2002, 0x158}, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r5)
sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) (async)
sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x10)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x87e5)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4)
getsockopt$inet6_tcp_int(r9, 0x6, 0x2, 0x0, &(0x7f0000000100))
r10 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r10, 0xc018480d, 0x0) (async)
ioctl$HIDIOCGUCODE(r10, 0xc018480d, 0x0)

10.379759055s ago: executing program 33 (id=13):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0007000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="495300000000000000006700000010001d800c00008005000c001400000834"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r4, &(0x7f00000000c0)='devices\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000140)='mem\n', 0x4)
clock_gettime(0x0, &(0x7f00000002c0)={<r6=>0x0, <r7=>0x0})
pselect6(0x40, &(0x7f00000001c0)={0x6, 0xc, 0xc, 0x0, 0xfffffffffffffff6, 0x8, 0x7cf0, 0x1}, &(0x7f0000000200)={0xfff, 0x8, 0x4, 0x2, 0x7ff, 0x7, 0x4, 0x8}, &(0x7f0000000240)={0x2, 0x2, 0x9, 0x920, 0x4, 0xa1b, 0x7, 0xa7b0}, &(0x7f0000000300)={r6, r7+60000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x7]}, 0x8})
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x100, 0x3)

10.379549475s ago: executing program 34 (id=12):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_4={0x3, 0x0, 0x8, "de134934"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000800)={0x0, 0xa, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/171, 0xab)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000340)={0x0, 0xffff, 0x0, 0x0, <r2=>0xffffffffffffffff})
socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = syz_open_procfs(r2, &(0x7f0000000400)='net/rfcomm\x00')
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x20)
setsockopt$inet6_mreq(r4, 0x29, 0x15, 0x0, 0x0)
close_range(r1, r4, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x48ddb894f4187083}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x50}, 0x1, 0x0, 0x0, 0x8804}, 0x4000)
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r7, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x8000})
readv(r1, &(0x7f0000000480), 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)

10.364977605s ago: executing program 35 (id=6):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xa101, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xa101, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x140000000)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x32874000)
ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000002480)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd3\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd')
ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00')
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)=0x9)
ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000240)=0x4) (async)
ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000240)=0x4)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000206a05f6004000010203788f2bd70e293265693a622b107c0109022d0001eaff0f0209040005010301030409210104800122c30509058103ff030802022905020383c013f8083cd2d0d7c621"], &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x6, 0x4, 0x40, 0xf5}, 0x99, &(0x7f00000000c0)={0x5, 0xf, 0x99, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0xed, 0x3, 0x101, 0xf000, 0x800, [0xff0000, 0x3f30, 0xffff]}, @ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0x7fffffd, 0xf00, 0xe5f8, [0x7bec48607f0f3b44, 0xff00c0, 0xc00f, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5, 0x0, 0x4, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xc, 0x5, 0x3}, @generic={0x4e, 0x10, 0x4, "50ea5691aef6ed88738e810c03179f3050e484764a9d5cf5c81a7a19425717a56405fcf01840200cad15ed3692c372d087cba49b64a7b7a222b1112e9fb153a3cbfa608a942c590e190810"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x437}}]})
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x50, 0x6, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x7f, {0x9, 0x21, 0x151, 0x3a, 0x1, {0x22, 0x6fd}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x4, 0x2, 0x81, 0x8, 0xfb}, 0xfa, &(0x7f00000002c0)={0x5, 0xf, 0xfa, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "dc60bcb3812c3ae0085eb4de90fd7a31"}, @generic={0xda, 0x10, 0xb, "f4ae49c9c7cfa2f327b2b0debcd6b5765b6a8a02b5bd6fce5cfe50ecead3bca2e5b76193464554869c33e5d58435e54b0cb84d172fec0c2e9ca0e13b39f0447534cf41e5904f236aef6aa944154495d8cc3caf9bc7407047954d945394ffdc71f026ae84368dd774d768bfa319813f8463969bb3bc2342b2b41c5cf8d0ec26d1574709ea1dd72ec80adb1fc4cd3df209fef7f0bc9f14d845d1574961070dc0c398b58dabe1d912ed9553c21ed881071f57f62cca0378b76b927f7fa123c23a0de962592d8a139540ddae9fbd8cf5b3105be128cb36b76a"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0xf, 0x5}]}, 0x1, [{0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="1ba2a172816af5fc9037ca73e5fb2ea0392c64e2a9d33049ea34a23b0c0000"]}]})
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000940)=ANY=[@ANYBLOB="200b00010000c89c"], 0x0, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x8}, 0x0})

3.307410182s ago: executing program 7 (id=55):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x3, 0x1, 0xdd, 0x38, 0x199, 0x8, 0x5, 0x20, 0x2, 0x5, 0x9, 0x6}, [{0x4, 0x9, 0xe7b2, 0x8, 0x3, 0x999c, 0x10, 0x969e}, {0x3, 0x7fffffff, 0x1, 0x8, 0xfaa9, 0x73b, 0x7, 0x32e}]}, 0x78)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000280))
close(r0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)

2.442897523s ago: executing program 5 (id=59):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
r2 = accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000340)=0x6e)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x26, 0x0, 0x0, &(0x7f0000000380)=[@cred, @cred, @cred]}, 0x100a1) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x0, 0x0, 0x0) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4) (async)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) (async)
sendto$inet(r6, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4ea2, @multicast1}, 0x10)
setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f00000001c0)=0x40008, 0x4)
recvmmsg(r6, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff46}, 0x4}], 0x1, 0x10020, 0x0) (async)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0xfffffff5, 0x3d4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2.441932863s ago: executing program 5 (id=60):
sendto(0xffffffffffffffff, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003d40)=""/4064, 0xfe0}, {&(0x7f00000008c0)=""/212, 0xd4}, {&(0x7f0000000280)=""/96, 0x60}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/242, 0xf2}, {&(0x7f0000000140)=""/286, 0x11e}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f00000000c0)=""/113, 0x71}], 0xa}, 0x71}, {{0x0, 0x0, 0x0}, 0xd183}, {{0x0, 0x0, 0x0}, 0x1f77}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe52}, {{0x0, 0x0, 0x0}, 0x7a}], 0x8, 0x0, 0x0)

2.432824553s ago: executing program 5 (id=61):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x800, 0xfffffffc})
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000380)='proc\x00', 0x800000, 0x0)
r1 = syz_clone(0x670a4600, 0x0, 0x2d, 0x0, 0x0, 0x0)
syz_open_procfs(r1, &(0x7f00000002c0)='fdinfo/3\x00')
mkdir(&(0x7f0000000540)='proc/file0\x00', 0x1ff)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f00000001c0))

2.422943543s ago: executing program 5 (id=62):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
fsmount(0xffffffffffffffff, 0x1, 0xf6)
mount$cgroup(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x208800b, 0x0)

2.371880014s ago: executing program 5 (id=63):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xca, 0x3a, '/dev/uinput\x00', 0x3a, '/dev/uinput\x00', 0x3a, './file0', 0x3a, [0x43]}, 0x40)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lseek(r2, 0x2000, 0x0)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000180)="409e0f9664ee1da8c38e53e2544af7913054af6de6753da8bc032fe0cfd0b4281ba1d5de6fcb73cb62584d484804bb575e25a286be9e92e72f4f6c9b4615b94308c75202b792910e8c258b11d7fcf9a9a775144e4d3876c09adc6e09426f4c2e6ce2869885f96e6c1e67d8deaef3c0a5af0ea5d198a61d4a53d4ff213799adbdfd23079acc71cfc12754fe638cfd1162a489051b59007ce764ba14b29db773b98b6d24d869a0475f8416e56717fdb8526d59f060ce1bfe1cc66538ad28ab7a96bba07ce1bb72af864aa84a600a99a168417b2d2de3af2ccdb326dd6c842f91663a26c5ba00889d40c8c069108c105e6d8fe66d11645de0eefcbffce65483bb69")
openat$cgroup_ro(r1, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0)

2.353135595s ago: executing program 5 (id=64):
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)=ANY=[@ANYBLOB='dirsyn\b,\x00'])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
lseek(r1, 0x0, 0x1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]})
getpriority(0x1, 0xffffffffffffffff)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0x2, 0x2, 0x4, 0x41, 0x1, 0xf0}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000002f80)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9ff, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f"], 0x0)
r7 = eventfd2(0xeffffffd, 0x801)
mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ntfs\x00', 0x20000, 0x0)
r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x50, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xe099}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x8c1)
futex(0x0, 0xb, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x2)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)=0x20)
fallocate(r10, 0x20, 0x1, 0x4)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x5, 0xa000, 0x8, r7, 0x1})

2.12986846s ago: executing program 4 (id=68):
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.log\x00', 0x400400, 0x12) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd7000fedbdf255d0000000c00990001000000690000000800a500010000000800a500010000001000a6800a000600ffffffffffff00000800a50000000000276bd03657c9b1129bd6bb98205c3a04b4e0c7205547ec3e65a5e2671725de64cc4ca1e983994f05"], 0x48}, 0x1, 0x0, 0x0, 0x24004000}, 0x40) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={<r2=>0xffffffffffffffff, &(0x7f0000000000)='./binderfs/binder0\x00', 0x201, &(0x7f0000000040)={@align, {0x6, 0xd, 0x7ff, 0x7}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x100})
write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d6d656d6f7279202b637075736574202b706572265f6576656e74202d9a257420"], 0x21) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
preadv(r5, &(0x7f0000002300)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x109, 0x7)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0xa, &(0x7f0000000000/0x4000)=nil) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
unshare(0x64000600) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32)
r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x48c, 0x0, 0x10001}]}) (async, rerun: 64)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r10, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x401, @mcast2, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe880000000000000000000000000001", @ANYRES32=0x0, @ANYRESOCT=r8], 0x28}}], 0x1, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}) (rerun: 32)
sendmsg$unix(r12, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r12]}}], 0x18, 0x4000801}, 0xd0) (async)
recvmsg$unix(r11, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
r13 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/zoneinfo\x00', 0x0, 0x0)
ioctl$KVM_GET_IRQCHIP(r13, 0xc208ae62, &(0x7f0000000480)={0x2, 0x0, @ioapic={0xeeee8000, 0x8, 0x1, 0x3, 0x0, [{0x0, 0x2, 0xc5}, {0xc4, 0x4, 0x9}, {0x3, 0xa, 0x6, '\x00', 0x1}, {0x2, 0xb, 0xf9, '\x00', 0x3a}, {0xe, 0xd, 0xe, '\x00', 0x40}, {0x80, 0x7, 0x2, '\x00', 0xff}, {0x7, 0x8, 0xee, '\x00', 0x2}, {0xd, 0xfa, 0x6, '\x00', 0x8}, {0x2, 0x8, 0x64, '\x00', 0x8}, {0x32, 0x2, 0x3, '\x00', 0xb5}, {0xc, 0x2, 0x5, '\x00', 0x8}, {0x5, 0x4, 0xb, '\x00', 0x9}, {0x8, 0x2, 0x0, '\x00', 0x9}, {0x5, 0xf, 0x3, '\x00', 0x10}, {0x2, 0x5, 0xd6, '\x00', 0x1}, {0x7f, 0x0, 0xd}, {0x7, 0x6d, 0x91, '\x00', 0x2}, {0x5, 0x4, 0x3, '\x00', 0x60}, {0x8, 0x5, 0x0, '\x00', 0x2}, {0x9, 0x0, 0x6, '\x00', 0xb}, {0x0, 0x4, 0x0, '\x00', 0xf7}, {0x3, 0x1e, 0x98, '\x00', 0x7}, {0x9, 0x9, 0xf, '\x00', 0x17}, {0x12, 0x1c, 0x5, '\x00', 0x30}]}})
r14 = openat(0xffffffffffffff9c, &(0x7f0000002140)='./file1\x00', 0x42, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r14) (async)
dup3(r4, r3, 0x0)

2.092935191s ago: executing program 4 (id=69):
sendto(0xffffffffffffffff, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003d40)=""/4064, 0xfe0}, {&(0x7f00000008c0)=""/212, 0xd4}, {&(0x7f0000000280)=""/96, 0x60}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/242, 0xf2}, {&(0x7f0000000140)=""/286, 0x11e}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f00000000c0)=""/113, 0x71}], 0xa}, 0x71}, {{0x0, 0x0, 0x0}, 0xd183}, {{0x0, 0x0, 0x0}, 0x1f77}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe52}, {{0x0, 0x0, 0x0}, 0x7a}], 0x8, 0x0, 0x0)

2.085987681s ago: executing program 4 (id=70):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x800, 0xfffffffc})
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000380)='proc\x00', 0x800000, 0x0)
r1 = syz_clone(0x670a4600, 0x0, 0x2d, 0x0, 0x0, 0x0)
syz_open_procfs(r1, &(0x7f00000002c0)='fdinfo/3\x00')
mkdir(&(0x7f0000000540)='proc/file0\x00', 0x1ff)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f00000001c0))

2.031908602s ago: executing program 4 (id=71):
fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setreuid(r0, r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', 0x0})

2.031704053s ago: executing program 4 (id=72):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @local, 0xfffffffc}, 0x1b, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x800)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000005c0)=0x9)

2.030733493s ago: executing program 4 (id=73):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="201002"], 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="00029f0000009f2256628336e477a0dd3c06c87ff9bbff7f7bf832efd60f9ede6af51eb6647436efe782b1b8669cbce795317a04ac7f304e94e51b2e9014d873ac46e4197b7f533e5e5f83fc273de688d8f4b6e2c91dcf0a4b11a3607511b057598b41056c2504798704011015540ab72a0ad63e7b6ba29f274eb8638b71fb90f9f1af07590c6f3267b37238a70d631673a0738ad2131fd500"/165], &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000340)={0x0, 0x15, 0x40, "9aa4e9f1eceb3f092f226e2071719bcce8a44ec2c61d546b3c77d87ca2fc0f2d78d972bd65291cc0f0220dacf25874cd4d58fe6cda14f893ccdf59ca2edcbf60"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x1, 0xffff, 0x7, 0xae, 0x6, 0x4, 0x7, 0x2b86, 0x1, 0x100, 0x1, 0xccc5}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0xd0a5}, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000640)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$uac3(r1, &(0x7f0000000440)={0x14, &(0x7f0000000100)={0x40, 0x39, 0xc9, {0xc9, 0x11, "d7ef3a6fa9ec68840a72355ce6e0b20b26f1d53b3eca504e9a0d18fd887546504a48d1eb1c78c29a0a499cdb07fc4ec76203b66018057005f8ba5f6b1333cc7023b1c636791fd8904b29c87e81ccd29c46e0a7d5f985d0e0b5d4dceda13ea7c2a3e25347680b8c155e1ad9172e1f297e0f92c1ee982edb3223b8bb26e4d5c52e8a78dd150eef029c1e13cc71b08fd1129c8b0cefefefead4cee26df3c4b48b2f3c4f194f606cbb809c25dde2b3ad0dc0b48aaccfba1e636af50a28c0dfc701b497e875a0cf7cdc"}}, &(0x7f0000000300)={0x0, 0x3, 0xde, @string={0xde, 0x3, "a2a98be9eae09719e384a60af3f9169d07bc6bc1e7a245ba3b03eb0c55b39ed48e7da6de1b72bf0cb4aa7588688f6ab1f573344d0e48116bb7e48af1138e17369a313f88b6b8057ae1586d1c1c5bb03cb63898ad144020700bffc35637356c887cd76c55fabd40065ed68c00e191c064d99c50bd0ca2b81cd449a8e2a3c343ab0302f967cc47079a92e3903554da03245531de39c4ee4fab0e0cf9f295fd3d0e6d91f289e0387b439a221dbdcc87352039bb1ea0919342a24322a1ba47f98230308416c5d49e8ab3e2178f8b7d7d61310bdf8bf581dff939c3919e1e"}}}, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x40, 0x11, 0x6, "195692bdbb7c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xc0}, &(0x7f0000000540)={0x20, 0x81, 0x1, "03"}, &(0x7f0000000700)=ANY=[@ANYBLOB="10001000000000019a49e13144735b4b61486797b3df4afca44cf7aee160bea820eb60834ce5bd0ef844bfd820b9ff826e057061031641fa08f653a0e311f5e38d153ef01d1a2d9e80e3090c0fe9a2cb251bcf282702b050ebb5cd6656d15606b6b087fa679ba78936e905083d052a99298e755f5a93ffaefac584b4e23cd2b12397bc5cbc270768623c0000000000000000"], &(0x7f00000005c0)={0x20, 0x83, 0x1, "ac"}, &(0x7f0000000600)={0x20, 0x84, 0x3, '<KT'}, &(0x7f0000000640)={0x20, 0x85, 0x3, "b0e39b"}})
symlink(0x0, &(0x7f0000000000)='./file0\x00')
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
io_setup(0x2007, &(0x7f0000000980))
r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x2a020400)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r3, 0xff, 0x1, 0x0, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r5, &(0x7f00000004c0), 0x48, 0x820b, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x4004000, 0x0, 0x0)
ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1})
ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0)

1.461942646s ago: executing program 6 (id=75):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000000)=ANY=[], 0x119)
mount$bpf(0x0, 0x0, 0x0, 0x9d8028, &(0x7f0000000040)=ANY=[@ANYRESOCT])
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.403855487s ago: executing program 6 (id=76):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x4, 0x53}}}, 0x6)
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r2, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x8}})

1.402939897s ago: executing program 6 (id=77):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', r1, 0x80, 0x700, 0x8, 0x100, {{0xe, 0x4, 0x1, 0x9, 0x38, 0x64, 0x0, 0x9, 0x29, 0x0, @local, @loopback, {[@rr={0x7, 0x23, 0xdb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @remote, @broadcast, @empty, @private=0xa010101, @loopback]}, @noop]}}}}})
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00')
mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='read_timeout_ms=040000000006'])
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async)
fcntl$setlease(r0, 0x400, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', r1, 0x80, 0x700, 0x8, 0x100, {{0xe, 0x4, 0x1, 0x9, 0x38, 0x64, 0x0, 0x9, 0x29, 0x0, @local, @loopback, {[@rr={0x7, 0x23, 0xdb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @remote, @broadcast, @empty, @private=0xa010101, @loopback]}, @noop]}}}}}) (async)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') (async)
mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='read_timeout_ms=040000000006']) (async)

1.402481947s ago: executing program 6 (id=78):
sendto(0xffffffffffffffff, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003d40)=""/4064, 0xfe0}, {&(0x7f00000008c0)=""/212, 0xd4}, {&(0x7f0000000280)=""/96, 0x60}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/242, 0xf2}, {&(0x7f0000000140)=""/286, 0x11e}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f00000000c0)=""/113, 0x71}], 0xa}, 0x71}, {{0x0, 0x0, 0x0}, 0xd183}, {{0x0, 0x0, 0x0}, 0x1f77}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe52}, {{0x0, 0x0, 0x0}, 0x7a}], 0x8, 0x0, 0x0)

1.395342437s ago: executing program 6 (id=79):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x800, 0xfffffffc})
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000380)='proc\x00', 0x800000, 0x0)
r1 = syz_clone(0x670a4600, 0x0, 0x2d, 0x0, 0x0, 0x0)
syz_open_procfs(r1, &(0x7f00000002c0)='fdinfo/3\x00')
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f00000001c0))

1.384256778s ago: executing program 6 (id=80):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text16={0x10, &(0x7f0000000040)="f30fc730f20f01f00fbf7697660f38060d6766c74424000a0000806766c7442402006000006766c744240600000000670f0114240f01c33ef2a6d1a5030066b9800000c00f326635000800000f30652667660f32", 0x54}], 0x1, 0x1b, 0x0, 0x0)
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f0000000200)="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", 0x10d)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd287100000000000001090224000100000000090401000103000000092102000001220500090581"], 0x0)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x4001, 0x10}, 0x18)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x1, 0x5, 0x6, 0x8000}, {0x6, 0x3, 0x3, 0xfc}]})
close_range(r2, r3, 0x2)
syz_usb_control_io(r1, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002340)={0x14, r5, 0x30d, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x100)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000059c0)=@newsa={0x1b4, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0xfffd, 0xfbfe, 0x1}, {@in6=@empty, 0x0, 0x32}, @in=@loopback, {0xfffffffffffffffe, 0x1, 0x0, 0x400000000000, 0x9, 0x0, 0x1000080000}, {0x0, 0x2000000000000000, 0x0, 0x100000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf26}}, @algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x60, "8aaf5d7ead2e8adfed4dbcb6772b49d7c3"}}]}, 0x1b4}}, 0x20004000)
syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x1, 0x5, {0x5, 0x22, "64cd8a"}}, 0x0, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x4}})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000003c0)={0x7, 0x162a, 0x9, 0x3637}, 0x10)
setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0xfffffffc, 0x4)
recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0xa, 0xd, {0xd, 0x23, "9012b4bd8cea161cd03b9f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

283.821904ms ago: executing program 7 (id=81):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000}], 0x0, 0x0, 0x0})
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x2000})
readv(r1, &(0x7f0000002380)=[{&(0x7f00000000c0)=""/244, 0xf4}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/181, 0xb5}, {&(0x7f0000002340)=""/51, 0x33}], 0x6)
close(r1)
bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)

197.306405ms ago: executing program 7 (id=82):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
connect$bt_sco(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001400)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/70, 0x0, 0x9000})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x3000, 0x1000, &(0x7f0000000400)=""/4096}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f0000000180)={0x2, 0x2, 0x20})
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x4000000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x4008af04, &(0x7f0000000040))
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0)

185.624976ms ago: executing program 7 (id=83):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) (async)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) (async)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

95.776288ms ago: executing program 7 (id=84):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0) (async)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r4, &(0x7f00000004c0), 0x48, 0x820b, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x40, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x40, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) (async)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'pimreg1\x00'}) (async)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'pimreg1\x00'})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'vcan0\x00', 0x600})
listen(r2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x4, 0x0, &(0x7f0000000240))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x2) (async)
listen(r7, 0x2)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0) (async)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0) (async)
listen(r9, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

0s ago: executing program 7 (id=85):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
rt_sigtimedwait(&(0x7f0000000000)={[0x5b0]}, &(0x7f0000000040), &(0x7f00000000c0)={0x77359400}, 0x8)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="9070cb64b2762d93007307e0ec3f35659ffaeab71c692afc2a8ad029fcb67b21ef9714bdbc08e14610109b86602c6a68c885dfc6f417a6bc4305359c664fa51acbd61a67c8c00d43266650ec9d44d59bd0b28ed3067ef1e756837412c1e766cd0077a666b2f536e9e3d1d7cccadeb2586f484a5431eb05174e79d33a5b7e61b2853fe9067f69849aba4edcc26ba2a29ea88089943cfb95424c762385207bfc22ecbf5250319de00358ec76790d5b63cc6fb8725da90771cabd32967efccbe2d597c4b5768ccd950d", 0xc8}, {&(0x7f0000000100)="516c2501594ef57644217a2921237d6b3ee4e15ba84cb28bb5e2ecb78e3120b5a89aa76e8276ef314471cc7a4e346731ee17cc0f61d265d4f82d501f597c9d30d8627a42f669d3118647988ce15b8413a4a29d2f8f703c6ad48f51db1ebdb670e083cdd529f7c38af188cd1f412ba937b7a920da3272f624f4d358649056cea526b6b263ccc4cdfd9452cf2c21ac463a717db0124a91077fd9a17b3f9c694c1925935856d59c76465d8d025cf3b7af16708840da26c47ac3a450e6b446183f3f829249e21ec30cb42e5157dedfff4816fba9350a3c2d816a331b163af8d20fd361730272397be0f708f02696882c", 0xee}], 0x2)
io_setup(0x7, &(0x7f0000000340)=<r1=>0x0)
io_pgetevents(r1, 0xdb, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], &(0x7f0000000440), &(0x7f00000004c0)={&(0x7f0000000480)={[0x1]}, 0x8})
sync()
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
rmdir(0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, 0x0, 0x4000000)
rmdir(0x0)
rmdir(0x0)
rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000500)={'bridge_slave_0\x00', {0x2, 0x4e23, @local}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.169' (ED25519) to the list of known hosts.
[   21.631857][   T36] audit: type=1400 audit(1785005479.049:64): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.632982][  T286] cgroup: Unknown subsys name 'net'
[   21.654490][   T36] audit: type=1400 audit(1785005479.059:65): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.681782][   T36] audit: type=1400 audit(1785005479.089:66): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.681918][  T286] cgroup: Unknown subsys name 'devices'
[   21.803610][  T286] cgroup: Unknown subsys name 'hugetlb'
[   21.809217][  T286] cgroup: Unknown subsys name 'rlimit'
[   21.901159][   T36] audit: type=1400 audit(1785005479.319:67): avc:  denied  { setattr } for  pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.924321][   T36] audit: type=1400 audit(1785005479.319:68): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.927638][  T288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.949184][   T36] audit: type=1400 audit(1785005479.319:69): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   21.980714][   T36] audit: type=1400 audit(1785005479.389:70): avc:  denied  { relabelto } for  pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.006092][   T36] audit: type=1400 audit(1785005479.389:71): avc:  denied  { write } for  pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.016120][  T286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.031764][   T36] audit: type=1400 audit(1785005479.439:72): avc:  denied  { read } for  pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.065815][   T36] audit: type=1400 audit(1785005479.439:73): avc:  denied  { open } for  pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.243924][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.250977][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.258320][  T293] bridge_slave_0: entered allmulticast mode
[   23.264872][  T293] bridge_slave_0: entered promiscuous mode
[   23.274914][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.282010][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.289076][  T293] bridge_slave_1: entered allmulticast mode
[   23.295332][  T293] bridge_slave_1: entered promiscuous mode
[   23.336270][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.343417][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.350465][  T294] bridge_slave_0: entered allmulticast mode
[   23.356722][  T294] bridge_slave_0: entered promiscuous mode
[   23.364297][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.371330][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.378436][  T294] bridge_slave_1: entered allmulticast mode
[   23.384673][  T294] bridge_slave_1: entered promiscuous mode
[   23.444347][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.451395][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.458525][  T296] bridge_slave_0: entered allmulticast mode
[   23.465127][  T296] bridge_slave_0: entered promiscuous mode
[   23.471445][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.478531][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.485726][  T296] bridge_slave_1: entered allmulticast mode
[   23.492001][  T296] bridge_slave_1: entered promiscuous mode
[   23.498010][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.505100][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.512208][  T295] bridge_slave_0: entered allmulticast mode
[   23.518324][  T295] bridge_slave_0: entered promiscuous mode
[   23.527163][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.534262][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.541302][  T295] bridge_slave_1: entered allmulticast mode
[   23.547569][  T295] bridge_slave_1: entered promiscuous mode
[   23.658360][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.665437][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.672742][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.679756][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.694269][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.701310][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.708601][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.715628][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.728290][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.735341][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.742611][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.749622][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.758552][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.765597][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.772871][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.779883][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.814432][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.821703][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.829655][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.837466][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.845014][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.852379][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.859530][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.866696][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.891718][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.898789][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.906569][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.913633][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.921373][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.928427][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.946767][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.953844][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.962530][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.969569][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.982934][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.989963][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.007182][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.014246][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.022055][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.029087][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.046213][  T294] veth0_vlan: entered promiscuous mode
[   24.073993][  T294] veth1_macvtap: entered promiscuous mode
[   24.086173][  T296] veth0_vlan: entered promiscuous mode
[   24.105861][  T295] veth0_vlan: entered promiscuous mode
[   24.119353][  T293] veth0_vlan: entered promiscuous mode
[   24.125295][  T296] veth1_macvtap: entered promiscuous mode
[   24.140024][  T295] veth1_macvtap: entered promiscuous mode
[   24.156056][  T293] veth1_macvtap: entered promiscuous mode
[   24.166063][  T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   24.201860][  T312] netlink: 'syz.2.3': attribute type 12 has an invalid length.
[   24.280380][  T324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   24.411669][  T336] mmap: syz.1.7 (336) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   24.499820][  T347] 9pnet_fd: Insufficient options for proto=fd
[   24.582181][   T45] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   24.681829][   T64] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   24.732838][   T45] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[   24.740944][   T45] usb 4-1: config 0 has no interface number 0
[   24.741824][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   24.747998][   T45] usb 4-1: config 0 interface 41 has no altsetting 0
[   24.761813][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   24.762682][   T45] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   24.778391][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   24.786413][   T45] usb 4-1: Product: syz
[   24.790565][   T45] usb 4-1: Manufacturer: syz
[   24.795290][   T45] usb 4-1: SerialNumber: syz
[   24.800759][   T45] usb 4-1: config 0 descriptor??
[   24.852747][   T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   24.863691][   T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   24.873481][   T64] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[   24.882902][   T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.891498][   T64] usb 2-1: config 0 descriptor??
[   24.901814][   T10] usb 3-1: Using ep0 maxpacket: 32
[   24.908098][   T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 7
[   24.919028][   T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[   24.930122][    T9] usb 1-1: Using ep0 maxpacket: 16
[   24.936839][   T10] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[   24.945951][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   24.954053][   T10] usb 3-1: Product: syz
[   24.958297][   T10] usb 3-1: Manufacturer: syz
[   24.963727][   T10] usb 3-1: SerialNumber: syz
[   24.968560][    T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   24.977920][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   24.986319][    T9] usb 1-1: Product: syz
[   24.990523][    T9] usb 1-1: Manufacturer: syz
[   24.995428][    T9] usb 1-1: SerialNumber: syz
[   25.002634][    T9] r8152-cfgselector 1-1: Unknown version 0x0000
[   25.008895][    T9] r8152-cfgselector 1-1: config 0 descriptor??
[   25.100454][   T64] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   25.110570][   T64] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   25.117890][   T64] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   25.125072][   T64] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   25.132196][   T64] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   25.139159][   T64] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   25.146163][   T64] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   25.153995][   T64] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[   25.200312][   T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   25.207973][   T45] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32
[   25.209009][   T10] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[   25.232289][   T64] cp2112 0003:10C4:EA90.0001: error requesting version
[   25.241340][   T10] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[   25.250110][   T64] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32
[   25.257377][   T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   25.274792][   T10] usb 3-1: USB disconnect, device number 2
[   25.287644][  T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   25.306187][   T45] usb 2-1: USB disconnect, device number 2
[   25.407822][  T337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   25.416373][  T337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   25.548992][   T10] r8152-cfgselector 1-1: USB disconnect, device number 2
[   25.815515][  T361] netlink: 'syz.1.13': attribute type 29 has an invalid length.
[   25.824152][  T361] PM: suspend entry (deep)
[   25.961864][   T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   26.112954][   T45] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   26.124720][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   26.135679][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   26.135782][  T318] Filesystems sync: 0.307 seconds
[   26.145442][   T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   26.145490][   T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   26.145510][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.158165][   T45] usb 3-1: config 0 descriptor??
[   26.202865][  T361] Freezing user space processes
[   26.209270][  T361] Freezing user space processes completed (elapsed 0.001 seconds)
[   26.217127][  T361] OOM killer disabled.
[   26.221206][  T361] Freezing remaining freezable tasks
[   26.351878][   T64] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   31.202879][   T45] usbhid 3-1:0.0: can't add hid device: -32
[   31.208827][   T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[   31.491888][   T64] usb 1-1: device descriptor read/64, error -110
[   31.731843][   T64] usb 1-1: device descriptor read/64, error -32
[   31.971860][   T64] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   32.101829][   T64] usb 1-1: device descriptor read/64, error -32
[   32.341856][   T64] usb 1-1: device descriptor read/64, error -32
[   32.451893][   T64] usb usb1-port1: attempt power cycle
[   32.457400][   T64] raw-gadget.3 gadget.0: failed to queue reset event
[   32.531845][   T64] raw-gadget.3 gadget.0: failed to queue resume event
[   32.538760][   T64] raw-gadget.3 gadget.0: failed to queue reset event
[   32.751872][   T64] raw-gadget.3 gadget.0: failed to queue resume event
[   32.811858][   T64] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   32.831984][    C1] raw-gadget.3 gadget.0: ignoring, device is not running
[   32.839218][    C1] raw-gadget.3 gadget.0: ignoring, device is not running
[   32.846471][    C1] raw-gadget.3 gadget.0: ignoring, device is not running
[   32.853553][   T64] usb 1-1: device descriptor read/8, error -32
[   32.981976][    C1] raw-gadget.3 gadget.0: ignoring, device is not running
[   32.989190][    C1] raw-gadget.3 gadget.0: ignoring, device is not running
[   32.996404][    C1] raw-gadget.3 gadget.0: ignoring, device is not running
[   33.003459][   T64] usb 1-1: device descriptor read/8, error -32
[   33.111849][   T64] raw-gadget.3 gadget.0: failed to queue suspend event
[   33.118802][   T64] raw-gadget.3 gadget.0: failed to queue reset event
[   33.191870][   T64] raw-gadget.3 gadget.0: failed to queue resume event
[   33.251858][   T64] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   33.271972][    C1] raw-gadget.3 gadget.0: ignoring, device is not running
[   33.279218][    C1] raw-gadget.3 gadget.0: ignoring, device is not running
[   33.286493][    C1] raw-gadget.3 gadget.0: ignoring, device is not running
[   33.293589][   T64] usb 1-1: device descriptor read/8, error -32
[   33.422011][    C1] raw-gadget.3 gadget.0: ignoring, device is not running
[   33.429244][    C1] raw-gadget.3 gadget.0: ignoring, device is not running
[   33.436462][    C1] raw-gadget.3 gadget.0: ignoring, device is not running
[   33.443521][   T64] usb 1-1: device descriptor read/8, error -32
[   33.551869][   T64] raw-gadget.3 gadget.0: failed to queue suspend event
[   33.558790][   T64] usb usb1-port1: unable to enumerate USB device
[   33.566136][  T361] Freezing remaining freezable tasks completed (elapsed 7.339 seconds)
[   33.574477][  T361] printk: Suspending console(s) (use no_console_suspend to debug)
[   33.602003][   T60] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   33.730640][  T361] PM: suspend debug: Waiting for 5 second(s).
[   38.739670][  T371] virtio_scsi virtio0: 1/0/0 default/read/poll queues
[   39.071882][  T383] usb 3-1: reset high-speed USB device number 3 using dummy_hcd
[   39.071882][   T60] usb 4-1: reset full-speed USB device number 2 using dummy_hcd
[   39.202432][  T383] usb 3-1: device descriptor read/64, error -32
[   39.441809][  T383] usb 3-1: device descriptor read/64, error -32
[   39.681830][  T383] usb 3-1: reset high-speed USB device number 3 using dummy_hcd
[   39.811798][  T383] usb 3-1: device descriptor read/64, error -32
[   40.051826][  T383] usb 3-1: device descriptor read/64, error -32
[   40.161888][  T383] raw-gadget.2 gadget.2: failed to queue reset event
[   40.231846][  T383] raw-gadget.2 gadget.2: failed to queue resume event
[   40.291853][  T383] usb 3-1: reset high-speed USB device number 3 using dummy_hcd
[   40.311924][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[   40.312114][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[   40.312278][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[   40.312303][  T383] usb 3-1: device descriptor read/8, error -32
[   40.441931][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[   40.442122][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[   40.442288][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[   40.442313][  T383] usb 3-1: device descriptor read/8, error -32
[   40.551850][  T383] raw-gadget.2 gadget.2: failed to queue suspend event
[   40.551915][  T383] raw-gadget.2 gadget.2: failed to queue reset event
[   40.621835][  T383] raw-gadget.2 gadget.2: failed to queue resume event
[   40.681802][  T383] usb 3-1: reset high-speed USB device number 3 using dummy_hcd
[   40.701908][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[   40.702086][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[   40.702250][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[   40.702275][  T383] usb 3-1: device descriptor read/8, error -32
[   40.831917][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[   40.832110][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[   40.832273][    C0] raw-gadget.2 gadget.2: ignoring, device is not running
[   40.832298][  T383] usb 3-1: device descriptor read/8, error -32
[   40.941799][  T383] raw-gadget.2 gadget.2: failed to queue suspend event
[   44.211866][   T60] usb 4-1: device descriptor read/64, error -32
[   44.451873][   T60] usb 4-1: device descriptor read/64, error -32
[   44.691913][   T60] usb 4-1: reset full-speed USB device number 2 using dummy_hcd
[   44.821877][   T60] usb 4-1: device descriptor read/64, error -32
[   45.061842][   T60] usb 4-1: device descriptor read/64, error -32
[   45.171931][   T60] raw-gadget.0 gadget.3: failed to queue reset event
[   45.242257][   T60] raw-gadget.0 gadget.3: failed to queue resume event
[   45.301906][   T60] usb 4-1: reset full-speed USB device number 2 using dummy_hcd
[   45.321993][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[   45.322179][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[   45.322354][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[   45.322379][   T60] usb 4-1: device descriptor read/8, error -32
[   45.452062][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[   45.452260][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[   45.452432][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[   45.452456][   T60] usb 4-1: device descriptor read/8, error -32
[   45.561875][   T60] raw-gadget.0 gadget.3: failed to queue suspend event
[   45.561956][   T60] raw-gadget.0 gadget.3: failed to queue reset event
[   45.631880][   T60] raw-gadget.0 gadget.3: failed to queue resume event
[   45.691909][   T60] usb 4-1: reset full-speed USB device number 2 using dummy_hcd
[   45.712058][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[   45.712254][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[   45.712427][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[   45.712452][   T60] usb 4-1: device descriptor read/8, error -32
[   45.842038][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[   45.842226][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[   45.842433][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[   45.842487][   T60] usb 4-1: device descriptor read/8, error -32
[   45.951945][   T60] raw-gadget.0 gadget.3: failed to queue suspend event
[   46.011385][  T361] OOM killer enabled.
[   46.011998][  T361] Restarting tasks ... 
[   46.012719][  T335] raw-gadget.0 gadget.3: failed to queue disconnect event
[   46.015742][   T10] usb 4-1: USB disconnect, device number 2
[   46.017423][  T361] done.
[   46.017892][  T361] random: crng reseeded on system resumption
[   46.018724][  T361] Resume cause unknown
[   46.019315][  T361] PM: suspend exit
[   46.028723][    T9] usb 3-1: USB disconnect, device number 3
[   46.034184][    T9] raw-gadget.2 gadget.2: failed to queue reset event
[   46.038369][  T359] raw-gadget.2 gadget.2: failed to queue disconnect event
[   46.051504][  T368] raw-gadget.3 gadget.0: failed to queue disconnect event
[   46.056273][   T36] kauditd_printk_skb: 61 callbacks suppressed
[   46.056287][   T36] audit: type=1400 audit(1785005503.489:135): avc:  denied  { unmount } for  pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   46.293373][   T60] bridge_slave_1: left allmulticast mode
[   46.294212][   T60] bridge_slave_1: left promiscuous mode
[   46.295040][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.296564][   T60] bridge_slave_0: left allmulticast mode
[   46.297451][   T60] bridge_slave_0: left promiscuous mode
[   46.298304][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.483702][   T60] veth1_macvtap: left promiscuous mode
[   46.484555][   T60] veth0_vlan: left promiscuous mode
[   46.544511][  T397] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.545596][  T397] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.546559][  T397] bridge_slave_0: entered allmulticast mode
[   46.547577][  T397] bridge_slave_0: entered promiscuous mode
[   46.553413][  T397] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.554426][  T397] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.555422][  T397] bridge_slave_1: entered allmulticast mode
[   46.556618][  T397] bridge_slave_1: entered promiscuous mode
[   46.570181][  T398] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.571206][  T398] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.572285][  T398] bridge_slave_0: entered allmulticast mode
[   46.573791][  T398] bridge_slave_0: entered promiscuous mode
[   46.575349][  T398] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.576339][  T398] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.577382][  T398] bridge_slave_1: entered allmulticast mode
[   46.578531][  T398] bridge_slave_1: entered promiscuous mode
[   46.617155][  T399] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.618224][  T399] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.619248][  T399] bridge_slave_0: entered allmulticast mode
[   46.620392][  T399] bridge_slave_0: entered promiscuous mode
[   46.621914][  T399] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.622908][  T399] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.623882][  T399] bridge_slave_1: entered allmulticast mode
[   46.625029][  T399] bridge_slave_1: entered promiscuous mode
[   46.634192][  T400] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.635192][  T400] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.636160][  T400] bridge_slave_0: entered allmulticast mode
[   46.637309][  T400] bridge_slave_0: entered promiscuous mode
[   46.652500][  T400] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.653475][  T400] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.654437][  T400] bridge_slave_1: entered allmulticast mode
[   46.655459][  T400] bridge_slave_1: entered promiscuous mode
[   46.758997][  T397] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.760008][  T397] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.761048][  T397] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.762028][  T397] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.766281][  T399] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.767277][  T399] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.768325][  T399] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.769286][  T399] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.773991][  T400] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.774993][  T400] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.776027][  T400] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.776995][  T400] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.780038][  T398] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.781004][  T398] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.782078][  T398] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.783040][  T398] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.802077][   T60] bridge_slave_1: left allmulticast mode
[   46.802914][   T60] bridge_slave_1: left promiscuous mode
[   46.803730][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.805447][   T60] bridge_slave_0: left allmulticast mode
[   46.806283][   T60] bridge_slave_0: left promiscuous mode
[   46.807108][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.808561][   T60] bridge_slave_1: left allmulticast mode
[   46.809414][   T60] bridge_slave_1: left promiscuous mode
[   46.810238][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.811503][   T60] bridge_slave_0: left allmulticast mode
[   46.812675][   T60] bridge_slave_0: left promiscuous mode
[   46.813530][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.815004][   T60] bridge_slave_1: left allmulticast mode
[   46.815809][   T60] bridge_slave_1: left promiscuous mode
[   46.816697][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.817972][   T60] bridge_slave_0: left allmulticast mode
[   46.818752][   T60] bridge_slave_0: left promiscuous mode
[   46.819525][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.983578][  T383] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.984721][  T383] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.985841][  T383] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.986939][  T383] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.988058][  T383] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.989113][  T383] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.990159][  T383] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.991227][  T383] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.002908][  T383] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.003933][  T383] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.009907][  T383] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.010894][  T383] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.016302][  T383] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.017317][  T383] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.026189][  T383] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.027178][  T383] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.032971][   T60] veth1_macvtap: left promiscuous mode
[   47.033808][   T60] veth0_vlan: left promiscuous mode
[   47.034687][   T60] veth1_macvtap: left promiscuous mode
[   47.035445][   T60] veth0_vlan: left promiscuous mode
[   47.036294][   T60] veth1_macvtap: left promiscuous mode
[   47.037064][   T60] veth0_vlan: left promiscuous mode
[   47.141966][  T383] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.142990][  T383] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.144249][  T383] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.145229][  T383] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.147320][  T383] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.148352][  T383] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.158121][  T383] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.159131][  T383] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.166245][  T399] veth0_vlan: entered promiscuous mode
[   47.177974][  T399] veth1_macvtap: entered promiscuous mode
[   47.189522][  T400] veth0_vlan: entered promiscuous mode
[   47.201533][  T397] veth0_vlan: entered promiscuous mode
[   47.218306][  T397] veth1_macvtap: entered promiscuous mode
[   47.230411][  T398] veth0_vlan: entered promiscuous mode
[   47.233626][  T400] veth1_macvtap: entered promiscuous mode
[   47.252959][  T398] veth1_macvtap: entered promiscuous mode
[   47.325442][   T36] audit: type=1400 audit(1785005504.739:136): avc:  denied  { mounton } for  pid=423 comm="syz.6.21" path="/proc/6/task" dev="proc" ino=5368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   47.375024][  T418] netlink: 'syz.7.19': attribute type 4 has an invalid length.
[   47.432303][   T36] audit: type=1400 audit(1785005504.859:137): avc:  denied  { read write } for  pid=428 comm="syz.7.23" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   47.435718][   T36] audit: type=1400 audit(1785005504.859:138): avc:  denied  { open } for  pid=428 comm="syz.7.23" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   47.439314][   T36] audit: type=1400 audit(1785005504.859:139): avc:  denied  { ioctl } for  pid=428 comm="syz.7.23" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   47.443925][   T36] audit: type=1400 audit(1785005504.859:140): avc:  denied  { map } for  pid=428 comm="syz.7.23" path="socket:[4957]" dev="sockfs" ino=4957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   47.462180][  T390] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   47.494252][  T429] input: syz1 as /devices/virtual/input/input5
[   47.512260][   T36] audit: type=1400 audit(1785005504.939:141): avc:  denied  { read write } for  pid=438 comm="syz.7.24" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   47.515556][   T36] audit: type=1400 audit(1785005504.939:142): avc:  denied  { open } for  pid=438 comm="syz.7.24" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   47.518858][   T36] audit: type=1400 audit(1785005504.939:143): avc:  denied  { setopt } for  pid=438 comm="syz.7.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   47.521586][   T36] audit: type=1400 audit(1785005504.939:144): avc:  denied  { write } for  pid=438 comm="syz.7.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   47.541931][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   47.571812][  T350] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   47.612108][  T390] usb 6-1: Using ep0 maxpacket: 32
[   47.614054][  T390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.615569][  T390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.616912][  T390] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   47.618206][  T390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.619814][  T390] usb 6-1: config 0 descriptor??
[   47.621584][  T390] hub 6-1:0.0: USB hub found
[   47.692788][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.694419][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.695863][   T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[   47.697073][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.698702][   T10] usb 5-1: config 0 descriptor??
[   47.721796][  T350] usb 7-1: Using ep0 maxpacket: 8
[   47.726664][  T426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.727950][  T426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.733520][  T350] usb 7-1: unable to get BOS descriptor or descriptor too short
[   47.736029][  T350] usb 7-1: unable to read config index 0 descriptor/start: -71
[   47.737239][  T350] usb 7-1: can't read configurations, error -71
[   47.822484][  T414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.823828][  T414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.827636][  T414] netlink: 104 bytes leftover after parsing attributes in process `syz.5.17'.
[   47.829230][  T390] hub 6-1:0.0: 1 port detected
[   47.901221][  T420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.902820][  T420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.105753][   T10] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   48.106821][   T10] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   48.107832][   T10] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   48.108807][   T10] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   48.109766][   T10] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   48.110723][   T10] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   48.111665][   T10] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   48.113360][   T10] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[   48.411843][   T10] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00
[   48.437437][    T9] hub 6-1:0.0: activate --> -90
[   48.640124][  T414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.641551][  T414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.810401][   T10] cp2112 0003:10C4:EA90.0002: error setting SMBus config
[   48.818070][   T10] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71
[   48.821803][   T64] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   48.828391][   T10] usb 5-1: USB disconnect, device number 2
[   48.852144][  T390] usb 6-1: USB disconnect, device number 2
[   48.922023][  T350] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   48.983410][   T64] usb 8-1: unable to get BOS descriptor or descriptor too short
[   48.991831][   T64] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   49.002428][   T64] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[   49.012785][   T64] usb 8-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[   49.022145][   T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.030145][   T64] usb 8-1: Product: syz
[   49.034327][   T64] usb 8-1: Manufacturer: syz
[   49.038911][   T64] usb 8-1: SerialNumber: syz
[   49.048407][   T64] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2
[   49.051797][  T350] usb 7-1: device descriptor read/64, error -71
[   49.063651][    T9] usb 6-1-port1: config error
[   49.090625][  T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   49.301814][  T350] usb 7-1: device descriptor read/64, error -71
[   49.338902][   T64] usb 8-1: USB disconnect, device number 2
[   49.541850][  T350] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   49.612001][  T343] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   49.671835][  T350] usb 7-1: device descriptor read/64, error -71
[   49.751798][  T343] usb 6-1: device descriptor read/64, error -71
[   49.911938][  T350] usb 7-1: device descriptor read/64, error -71
[   49.923622][  T494] tmpfs: Bad value for 'nr_inodes'
[   49.991810][  T343] usb 6-1: device descriptor read/64, error -71
[   50.021922][  T350] usb usb7-port1: attempt power cycle
[   50.231821][  T343] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   50.361830][  T350] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   50.371997][  T343] usb 6-1: device descriptor read/64, error -71
[   50.392776][  T350] usb 7-1: device descriptor read/8, error -71
[   50.501823][   T64] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   50.532851][  T350] usb 7-1: device descriptor read/8, error -71
[   50.611812][  T343] usb 6-1: device descriptor read/64, error -71
[   50.653073][   T64] usb 5-1: unable to get BOS descriptor or descriptor too short
[   50.661364][   T64] usb 5-1: config 1 has an invalid interface number: 5 but max is 2
[   50.669455][   T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   50.679566][   T64] usb 5-1: config 1 has no interface number 2
[   50.685676][   T64] usb 5-1: config 1 interface 5 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[   50.698548][   T64] usb 5-1: config 1 interface 5 has no altsetting 0
[   50.706541][   T64] usb 5-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[   50.715592][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.724000][  T343] usb usb6-port1: attempt power cycle
[   50.729407][   T64] usb 5-1: Product: syz
[   50.733630][   T64] usb 5-1: Manufacturer: syz
[   50.738218][   T64] usb 5-1: SerialNumber: syz
[   50.771809][  T350] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   50.792792][  T350] usb 7-1: device descriptor read/8, error -71
[   50.922804][  T350] usb 7-1: device descriptor read/8, error -71
[   50.946745][   T64] usb 5-1: unit 2 not found!
[   50.951966][   T64] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[   50.967234][   T64] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[   50.976442][   T64] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[   50.987110][   T64] usb 5-1: USB disconnect, device number 3
[   50.995795][  T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   51.042441][  T350] usb usb7-port1: unable to enumerate USB device
[   51.081876][  T343] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   51.102819][  T343] usb 6-1: device descriptor read/8, error -71
[   51.232819][  T343] usb 6-1: device descriptor read/8, error -71
[   51.471807][  T343] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   51.493045][  T343] usb 6-1: device descriptor read/8, error -71
[   51.622808][  T343] usb 6-1: device descriptor read/8, error -71
[   51.681411][   T36] kauditd_printk_skb: 14 callbacks suppressed
[   51.681436][   T36] audit: type=1400 audit(1785005509.099:159): avc:  denied  { create } for  pid=507 comm="syz.6.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   51.697864][  T350] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   51.706765][   T36] audit: type=1400 audit(1785005509.109:160): avc:  denied  { mmap_zero } for  pid=507 comm="syz.6.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   51.733553][  T343] usb usb6-port1: unable to enumerate USB device
[   51.861812][  T350] usb 5-1: Using ep0 maxpacket: 32
[   51.868004][  T350] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[   51.879011][  T350] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.890075][  T350] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.899999][  T350] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[   51.913124][  T350] usb 5-1: config 0 interface 0 has no altsetting 0
[   51.919715][  T350] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[   51.928991][  T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.937522][  T350] usb 5-1: config 0 descriptor??
[   52.557727][  T350] usbhid 5-1:0.0: can't add hid device: -71
[   52.564037][  T350] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   52.573285][  T350] usb 5-1: USB disconnect, device number 4
[   52.761825][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   52.921815][    T9] usb 7-1: Using ep0 maxpacket: 8
[   52.933909][    T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[   52.943584][   T36] audit: type=1400 audit(1785005510.359:161): avc:  denied  { read write } for  pid=523 comm="syz.5.51" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   52.966684][    T9] usb 7-1: config 179 has no interface number 0
[   52.967597][   T36] audit: type=1400 audit(1785005510.359:162): avc:  denied  { open } for  pid=523 comm="syz.5.51" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   52.973547][    T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   53.006954][    T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   53.018495][    T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   53.028613][   T36] audit: type=1400 audit(1785005510.359:163): avc:  denied  { ioctl } for  pid=523 comm="syz.5.51" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   53.030077][    T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   53.066313][    T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   53.075369][   T36] audit: type=1400 audit(1785005510.369:164): avc:  denied  { mounton } for  pid=523 comm="syz.5.51" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   53.075825][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.115322][  T515] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[   53.134303][   T36] audit: type=1400 audit(1785005510.559:165): avc:  denied  { ioctl } for  pid=534 comm="syz.7.54" path="socket:[5728]" dev="sockfs" ino=5728 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   53.331207][  T350] usb 7-1: USB disconnect, device number 8
[   53.351864][  T343] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   53.371867][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   53.501839][    T9] usb 8-1: device descriptor read/64, error -71
[   53.503264][  T343] usb 5-1: unable to get BOS descriptor or descriptor too short
[   53.516492][  T343] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32
[   53.526612][  T343] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   53.540980][  T343] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   53.550081][  T343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.558101][  T343] usb 5-1: Product: syz
[   53.562331][  T343] usb 5-1: Manufacturer: syz
[   53.566930][  T343] usb 5-1: SerialNumber: syz
[   53.572514][  T533] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   53.741808][    T9] usb 8-1: device descriptor read/64, error -71
[   53.782982][  T343] usb 5-1: MIDIStreaming interface descriptor not found
[   53.792589][  T343] usb 5-1: USB disconnect, device number 5
[   53.803521][  T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   53.849507][  T542] capability: warning: `syz.6.56' uses 32-bit capabilities (legacy support in use)
[   53.952076][   T36] audit: type=1400 audit(1785005511.379:166): avc:  denied  { ioctl } for  pid=543 comm="syz.5.57" path="socket:[6401]" dev="sockfs" ino=6401 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   53.977388][   T36] audit: type=1400 audit(1785005511.379:167): avc:  denied  { getopt } for  pid=543 comm="syz.5.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   53.996618][    T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   54.013470][   T36] audit: type=1400 audit(1785005511.439:168): avc:  denied  { accept } for  pid=547 comm="syz.5.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   54.091838][   T64] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   54.128457][  T561] =======================================================
[   54.128457][  T561] WARNING: The mand mount option has been deprecated and
[   54.128457][  T561]          and is ignored by this kernel. Remove the mand
[   54.128457][  T561]          option from the mount to silence this warning.
[   54.128457][  T561] =======================================================
[   54.163431][  T561] binder: Unknown parameter 'dirsyn'
[   54.171930][    T9] usb 8-1: device descriptor read/64, error -71
[   54.242922][   T64] usb 7-1: config 0 has no interfaces?
[   54.248429][   T64] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   54.257631][   T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.266487][   T64] usb 7-1: config 0 descriptor??
[   54.278344][  T562] rust_binder: Failed to allocate buffer. len:64000, is_oneway:false
[   54.278394][  T562] rust_binder: Failure in copy_transaction_data: ENOSPC
[   54.286713][  T562] rust_binder: 560:562 transaction to 560 failed: ENOSPC
[   54.303873][  T570] netlink: 165 bytes leftover after parsing attributes in process `syz.4.66'.
[   54.421856][    T9] usb 8-1: device descriptor read/64, error -71
[   54.474279][  T542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.482786][  T542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.491140][  T343] usb 7-1: USB disconnect, device number 9
[   54.531814][  T350] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   54.539413][    T9] usb usb8-port1: attempt power cycle
[   54.651889][   T64] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   54.701811][  T350] usb 6-1: Using ep0 maxpacket: 8
[   54.707874][  T350] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[   54.716350][  T350] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[   54.726729][  T350] usb 6-1: config 179 has no interface number 0
[   54.733026][  T350] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   54.742941][  T350] usb 6-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[   54.756091][  T350] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   54.765146][  T350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.812824][   T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.823842][   T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.833594][   T64] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   54.846492][   T64] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   54.855554][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.864063][   T64] usb 5-1: config 0 descriptor??
[   54.891807][    T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   54.912816][    T9] usb 8-1: device descriptor read/8, error -71
[   55.040678][  T597] incfs: Options parsing error. -22
[   55.046142][  T597] incfs: mount failed -22
[   55.051339][    T9] usb 8-1: device descriptor read/8, error -71
[   55.051469][  T598] incfs: Options parsing error. -22
[   55.062786][  T598] incfs: mount failed -22
[   55.099025][  T605] netlink: 188 bytes leftover after parsing attributes in process `syz.6.80'.
[   55.272166][   T64] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   55.281109][   T64] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   55.301906][    T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   55.322824][    T9] usb 8-1: device descriptor read/8, error -71
[   55.361801][  T350] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   55.452800][    T9] usb 8-1: device descriptor read/8, error -71
[   55.472903][  T589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.481456][  T589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.511798][  T350] usb 7-1: Using ep0 maxpacket: 16
[   55.518004][  T350] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[   55.526308][  T350] usb 7-1: config 0 has no interface number 0
[   55.532553][  T350] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9
[   55.543516][  T350] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024
[   55.554573][  T350] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   55.563742][  T350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.571819][    T9] usb usb8-port1: unable to enumerate USB device
[   55.579003][  T350] usb 7-1: config 0 descriptor??
[   55.584275][  T605] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[   56.203693][  T615] rust_binder: Error in use_page_slow: ESRCH
[   56.203714][  T615] rust_binder: use_range failure ESRCH
[   56.209792][  T615] rust_binder: Failed to allocate buffer. len:8192, is_oneway:false
[   56.215310][  T615] rust_binder: Failure in copy_transaction_data: ESRCH
[   56.223330][  T615] rust_binder: 614:615 transaction to 614 failed: ESRCH
[   56.374494][  T350] input: HID 28bd:0071 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0071.0004/input/input7
[   56.398146][  T350] input: HID 28bd:0071 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0071.0004/input/input8
[   56.420295][  T350] uclogic 0003:28BD:0071.0004: input,hidraw1: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.6-1/input1
[   56.589580][  T631] BUG: scheduling while atomic: syz.7.85/631/0x00000002
[   56.596629][  T631] Modules linked in:
[   56.600545][  T631] CPU: 1 UID: 0 PID: 631 Comm: syz.7.85 Not tainted syzkaller #0 a4a563d0c71b2f3eba821a1af94cbf4bdc8174ca
[   56.600576][  T631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   56.600599][  T631] Call Trace:
[   56.600606][  T631]  <TASK>
[   56.600615][  T631]  __dump_stack+0x21/0x30
[   56.600642][  T631]  dump_stack_lvl+0x140/0x1c0
[   56.600656][  T631]  ? __cfi_dump_stack_lvl+0x10/0x10
[   56.600672][  T631]  dump_stack+0x19/0x20
[   56.600684][  T631]  __schedule_bug+0x12b/0x200
[   56.600700][  T631]  ? find_proxy_task+0x2460/0x2460
[   56.600721][  T631]  ? __kasan_check_read+0x15/0x20
[   56.600742][  T631]  ? psi_group_change+0xab6/0x10a0
[   56.600768][  T631]  __schedule+0xb85/0x20b0
[   56.600784][  T631]  ? update_curr+0xf1/0x9c0
[   56.600794][  T631]  ? __sched_text_start+0x10/0x10
[   56.600805][  T631]  ? __kasan_check_read+0x15/0x20
[   56.600815][  T631]  ? rwsem_spin_on_owner+0xa4/0x3b0
[   56.600829][  T631]  ? __kasan_check_write+0x18/0x20
[   56.600841][  T631]  ? _raw_spin_lock_irq+0x93/0x120
[   56.600861][  T631]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   56.600882][  T631]  schedule+0xc5/0x240
[   56.600903][  T631]  schedule_preempt_disabled+0x14/0x30
[   56.600926][  T631]  rwsem_down_write_slowpath+0x5c9/0x1b60
[   56.600953][  T631]  ? activate_task+0x43b/0x480
[   56.600965][  T631]  ? rwsem_down_read_slowpath+0x14c0/0x14c0
[   56.600979][  T631]  ? try_to_wake_up+0x111a/0x1fd0
[   56.600993][  T631]  ? __kasan_check_write+0x18/0x20
[   56.601012][  T631]  ? wake_q_add_safe+0x29/0x100
[   56.601039][  T631]  ? cpus_share_resources+0xa0/0x130
[   56.601060][  T631]  ? rwsem_mark_wake+0x507/0x770
[   56.601078][  T631]  ? rwsem_read_trylock+0x275/0x5a0
[   56.601092][  T631]  ? wake_up_q+0x10a/0x1c0
[   56.601103][  T631]  ? downgrade_write+0x470/0x470
[   56.601117][  T631]  down_write+0x163/0x2b0
[   56.601129][  T631]  ? __cfi_down_write+0x10/0x10
[   56.601154][  T631]  ? down_read+0x7f/0xe0
[   56.601179][  T631]  ? __cfi_down_read+0x10/0x10
[   56.601205][  T631]  kernfs_remove_by_name_ns+0x8c/0x180
[   56.601222][  T631]  sysfs_unmerge_group+0xd7/0x130
[   56.601233][  T631]  dpm_sysfs_remove+0x7b/0xd0
[   56.601246][  T631]  device_del+0x241/0xcf0
[   56.601259][  T631]  ? __cfi_class_find_device+0x10/0x10
[   56.601269][  T631]  ? __cfi_device_del+0x10/0x10
[   56.601290][  T631]  ? __kasan_check_write+0x18/0x20
[   56.601309][  T631]  ? kobject_put+0x1cc/0x2a0
[   56.601330][  T631]  device_destroy+0xb0/0x100
[   56.601355][  T631]  ? __cfi_device_destroy+0x10/0x10
[   56.601368][  T631]  ? __kasan_check_write+0x18/0x20
[   56.601378][  T631]  android_device_destroy+0x118/0x180
[   56.601392][  T631]  gadgets_drop+0x1d/0x30
[   56.601400][  T631]  ? __cfi_gadgets_drop+0x10/0x10
[   56.601409][  T631]  configfs_rmdir+0x8ba/0x9b0
[   56.601429][  T631]  vfs_rmdir+0x3db/0x560
[   56.601455][  T631]  do_rmdir+0x29a/0x590
[   56.601479][  T631]  ? __cfi_do_rmdir+0x10/0x10
[   56.601500][  T631]  ? __kasan_check_write+0x18/0x20
[   56.601510][  T631]  __x64_sys_rmdir+0x4b/0x60
[   56.601522][  T631]  x64_sys_call+0xaf7/0x2ee0
[   56.601532][  T631]  do_syscall_64+0x57/0xf0
[   56.601543][  T631]  ? clear_bhb_loop+0x50/0xa0
[   56.601556][  T631]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   56.601577][  T631] RIP: 0033:0x7fd0dc59de99
[   56.601592][  T631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.601616][  T631] RSP: 002b:00007fd0dd44d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[   56.601637][  T631] RAX: ffffffffffffffda RBX: 00007fd0dc826180 RCX: 00007fd0dc59de99
[   56.601652][  T631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0
[   56.601665][  T631] RBP: 00007fd0dc633eaf R08: 0000000000000000 R09: 0000000000000000
[   56.601673][  T631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   56.601680][  T631] R13: 00007fd0dc826218 R14: 00007fd0dc826180 R15: 00007fff358e3228
[   56.601689][  T631]  </TASK>
[   56.603017][  T631] ------------[ cut here ]------------
[   56.626407][  T607] usb 5-1: string descriptor 0 read error: -71
[   56.626510][  T631] WARNING: CPU: 0 PID: 631 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800
[   57.003617][  T631] Modules linked in:
[   57.007512][  T631] CPU: 0 UID: 0 PID: 631 Comm: syz.7.85 Tainted: G        W          syzkaller #0 a4a563d0c71b2f3eba821a1af94cbf4bdc8174ca
[   57.020336][  T631] Tainted: [W]=WARN
[   57.024150][  T631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   57.034255][  T631] RIP: 0010:stack_depot_save_flags+0x266/0x800
[   57.040420][  T631] Code: 48 83 3d f4 f5 db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 0c a7 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7
[   57.060114][  T631] RSP: 0018:ffffc9000392f980 EFLAGS: 00010206
[   57.066213][  T631] RAX: 000000007fffffff RBX: ffff8881f5d84fb0 RCX: 0000000000b84fb0
[   57.074237][  T631] RDX: ffff8881f5d84fb0 RSI: 0000000000000001 RDI: 0000000011a69b31
[   57.082247][  T631] RBP: ffffc9000392f9e0 R08: 0000000022555c51 R09: 000000002aa5aba9
[   57.090218][  T631] R10: 000000000000000d R11: ffffffff81759ed0 R12: 00000000812b84fb
[   57.098206][  T631] R13: 0000000000000000 R14: ffffc9000392f9f0 R15: 000000000000000d
[   57.106196][  T631] FS:  00007fd0dd44d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   57.115142][  T631] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   57.121722][  T631] CR2: 000000110c353cf8 CR3: 0000000121e1a000 CR4: 00000000003526b0
[   57.129746][  T631] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000
[   57.137742][  T631] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   57.145734][  T631] Call Trace:
[   57.149018][  T631]  <TASK>
[   57.151983][  T631]  ? do_syscall_64+0x57/0xf0
[   57.156622][  T631]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   57.162708][  T631]  kasan_save_track+0x4f/0x80
[   57.167391][  T631]  ? kasan_save_track+0x3e/0x80
[   57.172275][  T631]  ? kasan_save_free_info+0x44/0x50
[   57.177480][  T631]  ? __kasan_slab_free+0x5f/0x80
[   57.182445][  T631]  ? kfree+0x158/0x440
[   57.186530][  T631]  ? gadget_info_attr_release+0xcb/0x130
[   57.192191][  T631]  ? config_item_put+0x175/0x240
[   57.197181][  T631]  ? configfs_rmdir+0x8e8/0x9b0
[   57.202239][  T631]  ? vfs_rmdir+0x3db/0x560
[   57.206679][  T631]  ? do_rmdir+0x29a/0x590
[   57.211001][  T631]  ? __x64_sys_rmdir+0x4b/0x60
[   57.215776][  T631]  ? x64_sys_call+0xaf7/0x2ee0
[   57.220542][  T631]  ? do_syscall_64+0x57/0xf0
[   57.225159][  T631]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   57.231231][  T631]  kasan_save_free_info+0x44/0x50
[   57.236274][  T631]  __kasan_slab_free+0x5f/0x80
[   57.241058][  T631]  kfree+0x158/0x440
[   57.244999][  T631]  ? gadget_info_attr_release+0xcb/0x130
[   57.250634][  T631]  ? __cfi_gadget_info_attr_release+0x10/0x10
[   57.256738][  T631]  gadget_info_attr_release+0xcb/0x130
[   57.262212][  T631]  config_item_put+0x175/0x240
[   57.266965][  T631]  ? __cfi_gadgets_drop+0x10/0x10
[   57.272004][  T631]  configfs_rmdir+0x8e8/0x9b0
[   57.276693][  T631]  vfs_rmdir+0x3db/0x560
[   57.280937][  T631]  do_rmdir+0x29a/0x590
[   57.285125][  T631]  ? __cfi_do_rmdir+0x10/0x10
[   57.289806][  T631]  ? __kasan_check_write+0x18/0x20
[   57.294927][  T631]  __x64_sys_rmdir+0x4b/0x60
[   57.299523][  T631]  x64_sys_call+0xaf7/0x2ee0
[   57.304121][  T631]  do_syscall_64+0x57/0xf0
[   57.308537][  T631]  ? clear_bhb_loop+0x50/0xa0
[   57.313234][  T631]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   57.319131][  T631] RIP: 0033:0x7fd0dc59de99
[   57.323591][  T631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.343350][  T631] RSP: 002b:00007fd0dd44d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[   57.351796][  T631] RAX: ffffffffffffffda RBX: 00007fd0dc826180 RCX: 00007fd0dc59de99
[   57.359792][  T631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0
[   57.367780][  T631] RBP: 00007fd0dc633eaf R08: 0000000000000000 R09: 0000000000000000
[   57.375784][  T631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.383799][  T631] R13: 00007fd0dc826218 R14: 00007fd0dc826180 R15: 00007fff358e3228
[   57.391809][  T631]  </TASK>
[   57.394827][  T631] ---[ end trace 0000000000000000 ]---
[   57.401024][  T631] BUG: scheduling while atomic: syz.7.85/631/0x00000000
[   57.407568][    T9] usb 6-1: USB disconnect, device number 7
[   57.411043][  T387] usb 5-1: USB disconnect, device number 6
[   57.421995][  T631] Modules linked in:
[   57.425986][  T631] CPU: 1 UID: 0 PID: 631 Comm: syz.7.85 Tainted: G        W          syzkaller #0 a4a563d0c71b2f3eba821a1af94cbf4bdc8174ca
[   57.426019][  T631] Tainted: [W]=WARN
[   57.426025][  T631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   57.426036][  T631] Call Trace:
[   57.426043][  T631]  <TASK>
[   57.426050][  T631]  __dump_stack+0x21/0x30
[   57.426070][  T631]  dump_stack_lvl+0x140/0x1c0
[   57.426086][  T631]  ? __cfi_dump_stack_lvl+0x10/0x10
[   57.426101][  T631]  dump_stack+0x19/0x20
[   57.426114][  T631]  __schedule_bug+0x12b/0x200
[   57.426125][  T631]  ? find_proxy_task+0x2460/0x2460
[   57.426136][  T631]  ? rcutree_migrate_callbacks+0xd10/0xd10
[   57.426149][  T631]  __schedule+0xb85/0x20b0
[   57.426162][  T631]  ? swake_up_one_online_ipi+0x30/0x30
[   57.426176][  T631]  ? __sched_text_start+0x10/0x10
[   57.426189][  T631]  ? __call_rcu_common+0x53c/0x710
[   57.426200][  T631]  schedule+0xc5/0x240
[   57.426211][  T631]  schedule_timeout+0xc7/0x3b0
[   57.426221][  T631]  ? __cfi_schedule_timeout+0x10/0x10
[   57.426231][  T631]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   57.426242][  T631]  ? __percpu_ref_switch_mode+0x358/0x5e0
[   57.426254][  T631]  wait_for_common+0x368/0x650
[   57.426266][  T631]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   57.426278][  T631]  ? wait_for_completion+0x40/0x40
[   57.426290][  T631]  ? percpu_ref_kill_and_confirm+0xf4/0x220
[   57.426302][  T631]  ? kill_ioctx+0x2af/0x3d0
[   57.426314][  T631]  wait_for_completion+0x1c/0x40
[   57.426325][  T631]  exit_aio+0x28d/0x360
[   57.426336][  T631]  ? __cfi_exit_aio+0x10/0x10
[   57.426348][  T631]  __mmput+0x2f/0x330
[   57.426359][  T631]  mmput+0x55/0x170
[   57.426369][  T631]  do_exit+0x9a5/0x2850
[   57.426382][  T631]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   57.426396][  T631]  ? __cfi_do_exit+0x10/0x10
[   57.426408][  T631]  ? __kasan_check_write+0x18/0x20
[   57.426419][  T631]  ? _raw_spin_lock_irq+0x93/0x120
[   57.426429][  T631]  do_group_exit+0x21f/0x2f0
[   57.426442][  T631]  ? __kasan_check_write+0x18/0x20
[   57.426451][  T631]  ? recalc_sigpending+0x16c/0x1d0
[   57.426462][  T631]  get_signal+0x134c/0x1490
[   57.426476][  T631]  arch_do_signal_or_restart+0xbc/0x700
[   57.426486][  T631]  ? putname+0x113/0x150
[   57.426497][  T631]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[   57.426506][  T631]  ? do_rmdir+0x528/0x590
[   57.426520][  T631]  ? __kasan_check_write+0x18/0x20
[   57.426530][  T631]  syscall_exit_to_user_mode+0x57/0xb0
[   57.426544][  T631]  do_syscall_64+0x63/0xf0
[   57.426555][  T631]  ? clear_bhb_loop+0x50/0xa0
[   57.426567][  T631]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   57.426579][  T631] RIP: 0033:0x7fd0dc59de99
[   57.426601][  T631] Code: Unable to access opcode bytes at 0x7fd0dc59de6f.
[   57.426606][  T631] RSP: 002b:00007fd0dd44d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[   57.426618][  T631] RAX: 0000000000000000 RBX: 00007fd0dc826180 RCX: 00007fd0dc59de99
[   57.426625][  T631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0
[   57.426631][  T631] RBP: 00007fd0dc633eaf R08: 0000000000000000 R09: 0000000000000000
[   57.426637][  T631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.426644][  T631] R13: 00007fd0dc826218 R14: 00007fd0dc826180 R15: 00007fff358e3228
[   57.426652][  T631]  </TASK>
[   57.807943][   T64] usb 7-1: reset high-speed USB device number 10 using dummy_hcd
[   57.810002][   T36] kauditd_printk_skb: 30 callbacks suppressed
[   57.810016][   T36] audit: type=1400 audit(1785005515.229:199): avc:  denied  { unmount } for  pid=400 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   58.872079][   T45] usb 7-1: USB disconnect, device number 10