last executing test programs: 3.491958991s ago: executing program 1 (id=2): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d0000090401010202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x51, {0x51, 0x6, "95a6ba6676bdd2089d4cb20ab1720a422094fa8aef067076fc3431243cd6ef9006127cc2dd138812c6a32b81afa430249f7b1f7ba4c82cda4c2c16c5de88eed46d63c729ad6dee142268984720e70f"}}, &(0x7f0000000140)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "abef1998910d1159f42181766801e3ec4e9c0c2316e6c1b2f612859b050f4b1bd4d3507cf7c89a522a1b32682465759e93e9c7b33e3ca841db167bbe12bc875ca71a5dc7bf9b4fa37a319d65420c1138c0f56bf0e77f175f35caf305730b7c564003f32141fa9926ce2a9585013dbfde5ecef79bb297299775e984193cb95e14827d81a24407f6adfc8d8673f3a92a73cacd8f83ed644884ad266e71dd241c15619f27fd3bdd501db4517ada58ddef9fcfcc5a6e4ec8f81ddd33cd883830fa2aa6df047409e9e211fe389c53ab9a30dab304f3dc5a57c05dde99f6da1b"}}, &(0x7f0000000240)={0x0, 0xf, 0x11a, {0x5, 0xf, 0x11a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x7, 0x9, 0x5}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a695de0f1d359ea56c679be4070560bc"}, @generic={0xf4, 0x10, 0x4, "ff33a978f16db8f8e4326e5a507ece179cca4e37f825c2bbf2233653bc72e2710d7ea702dd6162ffec4f84b1afb5f8c32a24c12d2e9afc6af5b0567be1317517aee234bf28464ccdd7915f68fb07000acfa60368be0e14ad86a0149896483381dd522282a32019507f731035f6b5910be54f53b9da9290a25dc74a704ad88d8d9547a17abb68b2464e20ead842483e101464bed5a0eb9748418887c242088585e86e6854e21738d2a3a97b1f45dc4e8a83254030b0c0802e74355abf96db1f9e35702affd3e68a2f1a8a0e1098bfe4cc5caaea90cccc8542d794a9ea4b5fada0c275b73baa6b9e8c2916fb606c750d6eec"}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0x6, 0x0, "ddf4f1c3", "09f31ed0"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0x70, 0x9, 0xd2, 0x2, 0x6}}}, &(0x7f0000000900)={0x84, &(0x7f00000004c0)={0x0, 0x5, 0x67, "361a224f1c72d2f79343c97e3d982e95a3e6b63acbe8d3e6dd7a3dce577d0298415593da417cd2eb15b32b7f0fe7bf19fb635eb99cd8633bfa6ddc111258cb819ef7330b2ff5e569d883303f437d75145f01b0855bb8b9599d4119463c5f520ffee5a3ca801c4a"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x100, 0x20, [0xff0]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xf8}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "6ed4"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xe}, &(0x7f0000000740)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "52d3"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xc}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x10}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x4, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0x2, 0x800, 0x1009, 0x3fbe, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.387851474s ago: executing program 2 (id=3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044800}, 0x20000080) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x64}, 0x1, 0x0, 0x0, 0x4009850}, 0x0) 3.377630444s ago: executing program 3 (id=4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdc00}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0xfbb4}) syz_pidfd_open(0x0, 0x0) (async) syz_pidfd_open(0x0, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)) (async) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000100)) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$UFFDIO_POISON(r7, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) (async) ioctl$UFFDIO_POISON(r7, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES32=r6], 0x0) (async) syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES32=r6], 0x0) 3.288556707s ago: executing program 2 (id=5): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x8100}], 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x2, 0x0, 0x6}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x1) ptrace$pokeuser(0x6, r1, 0x358, 0x1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) 3.287127738s ago: executing program 2 (id=6): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x48000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000fc0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000001000)=0x1) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000240)={0x34, r5, 0x301, 0x0, 0x0, {0x17}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r6, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x14084) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x42, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r9 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r9, r14, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31b, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x10, 0x1, 0x902c4, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r9}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r13, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) 1.811299273s ago: executing program 2 (id=8): r0 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file1', [{}]}, 0xc) close(r1) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r2, &(0x7f0000002640)='limits\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1.696628297s ago: executing program 2 (id=9): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xbd, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0xc1, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x20, 0x6, 0x28, {0xfcd6, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000180)=0xc) close_range(r2, r3, 0x2) syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6}}}}}]}}, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, &(0x7f00000005c0)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x1}}, {@aname={'aname', 0x3d, '\x90'}}, {@ignoreqv}, {@cache_none}, {@mmap}, {}, {@aname={'aname', 0x3d, '/!{)[+^)'}}, {@fscache}, {@nodevmap}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '\x00\x00\x00KZb\xaa\x8eN^\x0eP\xffqB\x9e\xe8\'L$\xfb\xf8\x88_z\x81\x15^1\xc8r\xeaI\x899\xc9o\xdb\x1b\xe8mh\xdf[c\xa2\xe7\x96\xc83\x19 5cF\x133x\x17;|\x83U\xdd\xfc\ai\xab\xa1\xd7\x02\x00!eS\xbaj\x04u\xe4\xa0w\x97h\xb5\x15\xea|\xab\x12\x80\xd3\\\x9c\a\xf3)\xa3%g\x15\xe64\xa6\x12W\xec\x03Ig\x84[\x99\xac\xb7\xbclo\xf7S\xafu\x84u\xef\x05\xd5\xc5\xe7\x1f\x1a\xb4X\x9f\x97c\xc0E\xdc\xf9a\x94$\xa6c\x02\xed\xd6,\v:\xecP\x06\xa4.K\x8bk\xe8\xee\xe8@\x96Qh\xde\xa5\xc8\xad\x81}+U8\xfe\xc5\xb9\xf8\x8b\xd4=\x17\'\xa2z'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}}) futex(&(0x7f000000cffc)=0x40000000, 0x800000000006, 0x2, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) 1.242614381s ago: executing program 0 (id=10): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@broadcast, @in=@multicast1, 0x4e20, 0xfd95, 0x4e26, 0x394, 0x2, 0xa0, 0xa0, 0x1, 0x0, 0xee00}, {0x1, 0x53, 0xffff, 0x8000000000000000, 0x6, 0xffffffffffffff00, 0x8, 0x20000000000003}, {0x100000000003, 0x5, 0xc, 0x9}, 0x3, 0x6e6bb1, 0x2, 0x1, 0x3, 0x3}, {{@in=@loopback, 0x4d2, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x3503, 0x1, 0xf8a3eceea9e5829a, 0x2, 0x392daa26, 0xfffffffe, 0x200}}, 0xe8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060"], 0xfdef) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) (async) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000001540)={{r0}, 0x0, 0x1e, @unused=[0x4, 0x7ff, 0x80000001, 0xa507], @name="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"}) (async) recvmmsg(r3, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/244, 0xf4}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x3}, 0x8}, {{0x0, 0x0, 0x0}, 0x7ffff6e7}, {{0x0, 0x0, 0x0}, 0x83}], 0x8, 0x40000020, 0x0) syz_usb_connect$uac3(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000201e04df30400001020301090292000301fa8001080b0002010130400904000000010130000a2401062e00080000001324030304040301080104000008000010050011240a010200000000000000000100000009040100000101", @ANYBLOB="abfa7f29cc7f99796a45671bad191adef8a977fe3d5a0265c0d131bfabafdc4c7a10fa9605dde498440b56958eaac3459a614fc91e6849e6e1367fc7f58d2cbf892ee55e35f8976a80d9a802f8ac8d8b96100db0f7f9194e85fd47a443d2dc00adcb74e9e9b687556dd7510bb569fecfec9bb9792a5b7316540a3c7b8e64e8640a3bb3788ee71af666276d7b445d04ef"], 0x0) 1.178924743s ago: executing program 0 (id=11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(r0, 0x3) syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000d40)={0x3, 0x0, [{0x0, 0xfffffffffffffdda, &(0x7f0000000dc0)=""/109}, {0x1000, 0xe7, &(0x7f0000000c00)=""/231}, {0x4, 0x1c, &(0x7f0000000d00)=""/28}]}) bind$802154_dgram(r1, &(0x7f0000000100)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000340)=0x1) syz_ublk_setup_queues(r2, r7, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x10, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r6, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) 924.726271ms ago: executing program 0 (id=12): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='trylock i'], 0xc) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) r1 = socket$nl_audit(0x10, 0x3, 0x9) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r5, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x20000800) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/243, 0xfffffed7}], 0x1}, 0x0) 454.902286ms ago: executing program 1 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x6003) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000940)=""/114, 0x72}], 0x1) (async, rerun: 64) brk(0x8000000000000008) (async, rerun: 64) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x6, 0x9, 0xe42}}, 0x30) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0xd}, 0x6000000, 0xa0, &(0x7f00000000c0)="29cc6039ec204600545ccdb4b277ca875e841460bc3f346c15b583468cc69f1f37bf98904c02e92d51c78850775e14d3c2770ccd4f27572266334004c5918a0e0cc1762bd1b9ba6c152802f2aaf951b31ae04f2a6a11ac31a6f3feeda61f25bbe43c7e16daea980d8be18a899820f6f5f4af10ec9d64", 0x76, 0x7f, 0x32b8cfa0, 0x0, 0xffffffff, 0x5, &(0x7f0000000180)="5876effb763413c5b6de71b274f5f5f317a4018d4a"}) getsockopt$inet6_tcp_int(r6, 0x6, 0x8, 0x0, &(0x7f0000000080)) (async) r7 = fsopen(&(0x7f0000000000)='vfat\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) close_range(r5, 0xffffffffffffffff, 0x0) (rerun: 32) syz_usb_connect$uac2(0x4, 0x82, &(0x7f0000001a80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x47f, 0xc010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x7, 0x0, 0xe, {0x8, 0xb, 0x1, 0x2, 0x1, 0xf, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x1, 0x10}, [@feature_unit={0x7, 0x24, 0x6, 0x4, 0x4, [0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3b7, 0x8, 0x3, 0x0, {0x8, 0x25, 0x1, 0x1, 0x28, 0x4, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x3, 0x8, {0x8, 0x25, 0x1, 0x3, 0xc, 0x2, 0x1}}}}}}}}]}}, &(0x7f0000001c40)={0x0, 0x0, 0xfe47, 0x0}) 344.183779ms ago: executing program 3 (id=14): sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='+', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd7000fbdbdf250100"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setresuid(0x0, 0xee00, 0x0) setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mlockall(0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 232.318813ms ago: executing program 1 (id=15): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r2, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0cacd9095f"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40a78b4668f4b29d}, 0x40000c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000001, 0x1, 0x0, 0x4, 0x1000, 0x3ff, 0x8, 0x8, 0x7fff], 0x54000, 0x100204}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xd5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x7800, 0x10, 0xa53e, 0x7, {{0x33, 0x4, 0x3, 0x0, 0xcc, 0x66, 0x0, 0x1, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}, {[@ssrr={0x89, 0xf, 0x4d, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @empty]}, @rr={0x7, 0x7, 0xd2, [@dev={0xac, 0x14, 0x14, 0x3f}]}, @cipso={0x86, 0x3c, 0x2, [{0x5, 0xe, "387bb88a11c59ac58701aebc"}, {0x2, 0xe, "9727f41eac6884e27f2767c5"}, {0x0, 0xc, "6c17008c3cbba5393d79"}, {0x0, 0xe, "2d3e30500cd3294254c3184f"}]}, @cipso={0x86, 0x1b, 0x2, [{0x2, 0x7, "6a604b67cb"}, {0x0, 0xe, "08e7db699dca2cc2516332f6"}]}, @generic={0x41, 0x12, "b03310ea7c16ecac817abb113e9bcf66"}, @noop, @generic={0x86, 0xb, "69faf707bc7040c9be"}, @end, @lsrr={0x83, 0x3, 0x6c}, @rr={0x7, 0x5f, 0x7a, [@multicast1, @rand_addr=0x64010100, @rand_addr=0x64010101, @local, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast1, @local]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6_vti0\x00', r9, 0x29, 0x33, 0x0, 0x3ff, 0x1, @empty, @remote, 0x1, 0x7, 0x8, 0x9}}) pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000000bc0)={0x1, [{0x1, 0x0, 0x805, 0x0}, {0x2, 0x0, 0x800, 0x0}, {0x3, 0x0, 0x80, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x7ff, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x200, 0x0}, {0x0, 0x0, 0xb, 0x0}, {0x2, 0x0, 0xf, 0x0}, {0x3, 0x0, 0x8000000, 0x0}, {0x1, 0x0, 0x8000, 0x0}, {0x2, 0x0, 0x70a, 0x0}, {0x3, 0x0, 0x1cf9571d, 0x0}, {0x2, 0x0, 0xe16, 0x0}, {0x4, 0x0, 0x9, 0x0}]}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022ebd700000002157778ffd96bd86abfb", @ANYRES32=0x0, @ANYBLOB="0c00990000000000250000001e000e002a01077e1512060b080211000000ff7f0000fffbffff40c033620000"], 0x48}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) 231.965322ms ago: executing program 3 (id=16): syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002c3d79a08fb092660dc287e2ffaae0102030109021200010304b0010904030400"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000200000000020000000900020073797a3100000000080004"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x414}, 0x1, 0x0, 0x0, 0x890}, 0x40081) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg0\x00'}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x1011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000340)="09000000e700140000007e7bfbf788a83baa9900d6f18f2d39000000000000a8", 0x20, 0x24040011, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)={@private, @empty}, &(0x7f0000000180)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xb000, 0x9, 0x2, 0x7, 0x4, 0x2, 0x3, 0x10, 0x7, 0x7, 0xb}, {0xffffffff, 0x25000, 0x10, 0xa7, 0x8, 0x7, 0x5, 0x8, 0x4, 0x3, 0x6, 0x2}, {0x1, 0xc000, 0x3, 0x8, 0x7, 0xe, 0x7, 0xa, 0xbb, 0x5, 0x1, 0x1}, {0x7000, 0x2, 0x8, 0x0, 0x34, 0x7, 0x7e, 0x8, 0x1, 0x31, 0x5, 0x6}, {0x7000, 0x54000, 0xe, 0xb, 0x9, 0x7, 0x9, 0x3, 0x0, 0x80, 0x0, 0xdb}, {0xd000, 0x30000, 0xf, 0x81, 0x63, 0x2, 0x3, 0x5, 0x40, 0x90, 0x8, 0xfe}, {0xb000, 0x2, 0x0, 0x15, 0x5d, 0xeb, 0x5, 0x0, 0x6, 0x80, 0xff, 0x8}, {0xeeee0000, 0x100000, 0xf, 0xde, 0x5, 0x0, 0x0, 0x5, 0x83, 0xf2, 0x7, 0x1}, {0x40000, 0x8}, {0x41000, 0xffff}, 0x40000, 0x0, 0x58000, 0x122482, 0xb, 0x100, 0x0, [0xfffffffffffffffd, 0x40, 0x3, 0x6]}) 122.156906ms ago: executing program 0 (id=17): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) chdir(&(0x7f0000000540)='./cgroup\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x98) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000e69000/0x4000)=nil) ioctl$USBDEVFS_BULK(r1, 0xc0185502, 0x0) write(r0, &(0x7f0000000180)="b4", 0x1) recvmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000009c0)}}], 0x1, 0x121, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 60.559778ms ago: executing program 2 (id=18): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109"], 0x0) userfaultfd(0x80001) userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c46"], 0x378) close(r7) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 745.22µs ago: executing program 0 (id=19): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x9, 0xffffffff, 0xfffffffa, 0x6, 0x2, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x25, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r3}, 0xc) 446.46µs ago: executing program 1 (id=20): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x925, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x5, 0x28, {0x28, 0x23, "f70fa39f030000000000000000cb4fdca0560f920d54f365c5b105000000bf6fc9520808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x321080) 0s ago: executing program 0 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect(0x2, 0x5e, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101401, 0x0) write(r3, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x40000, 0x8000000, {}, 0x1, 0x1}}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66660f38810b0fa9f30f5a75000f01f0f0f6504a660f72d5fa2e670fc77a15653e660f3806bf02000f79080f0ffc9a"}], 0xaaaabc1, 0x48, 0x0, 0xfd6a) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) syz_usb_connect$midi(0x0, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xfc, 0x40, 0x6, "", {{{0x9, 0x4, 0x1, 0x0, 0x2, 0x1, 0x3, 0x30, 0x8e, [], [{{0x9, 0x5, 0xd, 0x2, 0x40, 0x6, 0x6, 0x6, {0x4}}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x0, 0x2, 0x2, {0x4}}}]}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. [ 29.871395][ T36] audit: type=1400 audit(1781793146.950:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.874836][ T286] cgroup: Unknown subsys name 'net' [ 29.894103][ T36] audit: type=1400 audit(1781793146.950:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.921492][ T36] audit: type=1400 audit(1781793146.980:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.922049][ T286] cgroup: Unknown subsys name 'devices' [ 30.040896][ T286] cgroup: Unknown subsys name 'hugetlb' [ 30.046537][ T286] cgroup: Unknown subsys name 'rlimit' [ 30.143219][ T36] audit: type=1400 audit(1781793147.220:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.166460][ T36] audit: type=1400 audit(1781793147.220:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.191328][ T36] audit: type=1400 audit(1781793147.220:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.221910][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.230825][ T36] audit: type=1400 audit(1781793147.310:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.256268][ T36] audit: type=1400 audit(1781793147.310:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.276437][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.282803][ T36] audit: type=1400 audit(1781793147.340:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.316245][ T36] audit: type=1400 audit(1781793147.340:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.088917][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.096133][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.118551][ T293] bridge_slave_0: entered allmulticast mode [ 31.125068][ T293] bridge_slave_0: entered promiscuous mode [ 31.150831][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.157911][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.165040][ T293] bridge_slave_1: entered allmulticast mode [ 31.171364][ T293] bridge_slave_1: entered promiscuous mode [ 31.261139][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.268351][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.275449][ T297] bridge_slave_0: entered allmulticast mode [ 31.281952][ T297] bridge_slave_0: entered promiscuous mode [ 31.299141][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.306226][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.313413][ T297] bridge_slave_1: entered allmulticast mode [ 31.319747][ T297] bridge_slave_1: entered promiscuous mode [ 31.394471][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.401583][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.408902][ T298] bridge_slave_0: entered allmulticast mode [ 31.415178][ T298] bridge_slave_0: entered promiscuous mode [ 31.421937][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.429039][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.436131][ T298] bridge_slave_1: entered allmulticast mode [ 31.442488][ T298] bridge_slave_1: entered promiscuous mode [ 31.461164][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.468252][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.475623][ T299] bridge_slave_0: entered allmulticast mode [ 31.482113][ T299] bridge_slave_0: entered promiscuous mode [ 31.491591][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.498691][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.505790][ T299] bridge_slave_1: entered allmulticast mode [ 31.512165][ T299] bridge_slave_1: entered promiscuous mode [ 31.574949][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.582058][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.589409][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.596457][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.623401][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.630496][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.637806][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.644913][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.704697][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.711818][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.719144][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.726225][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.743147][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.750265][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.757588][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.764691][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.784919][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.792837][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.800331][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.807548][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.815383][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.822792][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.830594][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.837778][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.851575][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.858660][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.880050][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.887128][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.895022][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.902116][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.909755][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.916822][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.945257][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.952366][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.981818][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.988909][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.004547][ T297] veth0_vlan: entered promiscuous mode [ 32.019522][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.026596][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.035460][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.042574][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.060996][ T297] veth1_macvtap: entered promiscuous mode [ 32.077532][ T293] veth0_vlan: entered promiscuous mode [ 32.111767][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.113129][ T293] veth1_macvtap: entered promiscuous mode [ 32.135920][ T299] veth0_vlan: entered promiscuous mode [ 32.153490][ T298] veth0_vlan: entered promiscuous mode [ 32.183984][ T298] veth1_macvtap: entered promiscuous mode [ 32.192442][ T299] veth1_macvtap: entered promiscuous mode [ 32.252561][ T317] netlink: 'syz.0.1': attribute type 27 has an invalid length. [ 32.289484][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.296746][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.380375][ T327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.389148][ T327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.422738][ T332] netlink: 'syz.0.7': attribute type 29 has an invalid length. [ 32.430449][ T332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 32.439358][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.599994][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.610577][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.621625][ T31] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 32.634598][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.644032][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.648565][ T64] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.653607][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.668820][ T31] usb 2-1: Product: syz [ 32.673017][ T31] usb 2-1: Manufacturer: syz [ 32.677640][ T31] usb 2-1: SerialNumber: syz [ 32.684954][ T31] cdc_mbim 2-1:1.0: skipping garbage [ 32.718405][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.789742][ T310] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 32.798821][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.809437][ T310] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 32.819216][ T310] usb 3-1: config 1 has no interface number 1 [ 32.821338][ T64] usb 4-1: Using ep0 maxpacket: 8 [ 32.825386][ T310] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 32.834085][ T64] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 32.843404][ T310] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.852743][ T64] usb 4-1: config 0 has no interface number 0 [ 32.867762][ T310] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.873352][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.880426][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.894773][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 32.908160][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.910605][ T310] usb 3-1: Product: syz [ 32.916617][ T64] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 32.920835][ T310] usb 3-1: Manufacturer: syz [ 32.930821][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.934232][ T310] usb 3-1: SerialNumber: syz [ 32.945189][ T9] usb 1-1: config 0 descriptor?? [ 32.952581][ T64] usb 4-1: Product: syz [ 32.956927][ T64] usb 4-1: Manufacturer: syz [ 32.964826][ T64] usb 4-1: SerialNumber: syz [ 32.973795][ T64] usb 4-1: config 0 descriptor?? [ 33.286986][ T310] usb 3-1: MIDIStreaming interface descriptor not found [ 33.302329][ T310] usb 3-1: USB disconnect, device number 2 [ 33.321282][ T31] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 33.327810][ T31] cdc_mbim 2-1:1.0: bind() failure [ 33.334425][ T31] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 33.341873][ T31] cdc_ncm 2-1:1.1: bind() failure [ 33.344532][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.365345][ T9] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 33.376676][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 33.467162][ T9] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 33.845810][ T383] process 'syz.2.8' launched './file0' with NULL argv: empty string added [ 33.879342][ T9] usb 1-1: USB disconnect, device number 2 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network[ 34.148400][ T338] usb 3-1: new high-speed USB device number 3 using dummy_hcd : OK Stopping iptables: [ 34.308358][ T338] usb 3-1: Using ep0 maxpacket: 8 OK [ 34.317341][ T338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 34.324350][ T338] usb 3-1: New USB device found, idVendor=056a, idProduct=009a, bcdDevice= 0.00 [ 34.333712][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Stopping system message bus: [ 34.346925][ T338] usb 3-1: config 0 descriptor?? [ 34.415567][ T428] syzkaller1: entered promiscuous mode [ 34.421634][ T428] syzkaller1: entered allmulticast mode done Stopping klogd: OK Stopping acpid: [ 34.759455][ T338] hid (null): unknown global tag 0xd [ 34.767532][ T338] wacom 0003:056A:009A.0002: unknown global tag 0xd [ 34.774232][ T338] wacom 0003:056A:009A.0002: item 0 2 1 13 parsing failed [ 34.781574][ T338] wacom 0003:056A:009A.0002: parse failed [ 34.787379][ T338] wacom 0003:056A:009A.0002: probe with driver wacom failed with error -22 [ 34.962973][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 34.962992][ T36] audit: type=1400 audit(1781793152.040:152): avc: denied { create } for pid=396 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.967086][ T397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.969405][ T36] audit: type=1400 audit(1781793152.040:153): avc: denied { setopt } for pid=396 comm="syz.2.9" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.989230][ T397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.996940][ T36] audit: type=1400 audit(1781793152.040:154): avc: denied { getopt } for pid=396 comm="syz.2.9" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.021990][ T397] 9pnet_fd: p9_fd_create_unix (397): problem connecting socket: ./file0: -111 [ 35.054788][ T397] overlayfs: conflicting options: userxattr,metacopy=on [ 35.062569][ T31] usb 3-1: USB disconnect, device number 3 [ 35.176944][ T338] usb 2-1: USB disconnect, device number 2 [ 35.277696][ T64] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 35.288802][ T64] usb 4-1: No valid video chain found. [ 35.297793][ T64] usb 4-1: USB disconnect, device number 2 [ 35.308098][ T36] audit: type=1400 audit(1781793152.380:155): avc: denied { read write } for pid=465 comm="syz.3.14" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.338883][ T36] audit: type=1400 audit(1781793152.380:156): avc: denied { open } for pid=465 comm="syz.3.14" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.374154][ T36] audit: type=1400 audit(1781793152.450:157): avc: denied { read } for pid=468 comm="syz.1.15" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.375430][ T470] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 35.415617][ T36] audit: type=1400 audit(1781793152.450:158): avc: denied { open } for pid=468 comm="syz.1.15" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.438486][ T36] audit: type=1400 audit(1781793152.450:159): avc: denied { ioctl } for pid=468 comm="syz.1.15" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.522123][ T36] audit: type=1400 audit(1781793152.600:160): avc: denied { create } for pid=473 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.541787][ T36] audit: type=1400 audit(1781793152.620:161): avc: denied { connect } for pid=473 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.547098][ T474] overlayfs: failed to resolve './file0': -2 [ 35.688537][ T64] usb 4-1: new low-speed USB device number 3 using dummy_hcd OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 35.828410][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 35.848552][ T338] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.856652][ T64] usb 4-1: too many configurations: 174, using maximum allowed: 8 [ 35.864892][ T333] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.873786][ T64] usb 4-1: config index 0 descriptor too short (expected 259, got 18) [ 35.885635][ T64] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 35.894412][ T64] usb 4-1: can't read configurations, error -22 umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 36.008516][ T333] usb 1-1: device descriptor read/64, error -71 [ 36.018358][ T338] usb 2-1: Using ep0 maxpacket: 8 Connection to 10.128.0.117 closed by remote host. [ 36.028383][ T64] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 36.039048][ T338] usb 2-1: device descriptor read/all, error -71 [ 36.052505][ T31] usb 3-1: device descriptor read/all, error -71 [ 36.191272][ T378] bridge_slave_1: left allmulticast mode [ 36.196996][ T378] bridge_slave_1: left promiscuous mode [ 36.202720][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.210689][ T378] bridge_slave_0: left allmulticast mode [ 36.216357][ T378] bridge_slave_0: left promiscuous mode [ 36.222092][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.380979][ T378] veth1_macvtap: left promiscuous mode [ 36.386532][ T378] veth0_vlan: left promiscuous mode [ 36.630843][ T378] bridge_slave_1: left allmulticast mode [ 36.636510][ T378] bridge_slave_1: left promiscuous mode [ 36.642166][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.649706][ T378] bridge_slave_0: left allmulticast mode [ 36.655354][ T378] bridge_slave_0: left promiscuous mode [ 36.661160][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.668971][ T378] bridge_slave_1: left allmulticast mode [ 36.674620][ T378] bridge_slave_1: left promiscuous mode [ 36.680343][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.687869][ T378] bridge_slave_0: left allmulticast mode [ 36.693616][ T378] bridge_slave_0: left promiscuous mode [ 36.699339][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.707016][ T378] bridge_slave_1: left allmulticast mode [ 36.712743][ T378] bridge_slave_1: left promiscuous mode [ 36.718373][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.725724][ T378] bridge_slave_0: left allmulticast mode [ 36.731586][ T378] bridge_slave_0: left promiscuous mode [ 36.737205][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.953757][ T378] veth1_macvtap: left promiscuous mode [ 36.959308][ T378] veth0_vlan: left promiscuous mode [ 36.964854][ T378] veth1_macvtap: left promiscuous mode [ 36.970477][ T378] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 38.106908][ T491] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 38.113761][ T491] ACPI: PM: Preparing to enter system sleep state S5 [ 38.120719][ T491] kvm: exiting hardware virtualization [ 38.126234][ T491] reboot: Power down serialport: VM disconnected.