last executing test programs: 8.766054692s ago: executing program 2 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000a00000800040001000000", 0x24) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, 0x0) 8.619924006s ago: executing program 2 (id=21): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) syz_open_dev$usbfs(0x0, 0x4, 0x648041) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\xb2\x1c\x9e\\\x00\xbf\xfa\r7\x00\x88\x16\xb9\x9f\x1d') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xb2\x1c\x9e\\\x00\xbf\xfa\r7\x00\x88\x16\xb9\x9f\x1d') 8.615622156s ago: executing program 2 (id=22): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) syz_usb_connect$uac3(0x5, 0xf7, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000ff0000001"], 0xffe) 8.08000042s ago: executing program 2 (id=24): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x88}, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes m'], 0xd) r2 = socket(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x4) close_range(r2, r0, 0x0) (async) close_range(r2, r0, 0x0) 7.971289233s ago: executing program 2 (id=25): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), 0x4) keyctl$join(0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) keyctl$clear(0x7, r2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}}, 0x0) 7.904790144s ago: executing program 2 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) socket(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$igmp(0x2, 0x3, 0x2) sendmmsg(r3, &(0x7f0000008200)=[{{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, 0x0}}, {{&(0x7f0000000c80)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000001200)=[{0x10, 0x118, 0x51}], 0x10}}], 0x2, 0x844) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d40), r9) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000020c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="c1672ddf251300000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x800) 7.843924406s ago: executing program 32 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) socket(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$igmp(0x2, 0x3, 0x2) sendmmsg(r3, &(0x7f0000008200)=[{{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, 0x0}}, {{&(0x7f0000000c80)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000001200)=[{0x10, 0x118, 0x51}], 0x10}}], 0x2, 0x844) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d40), r9) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000020c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="c1672ddf251300000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x800) 2.968369633s ago: executing program 4 (id=46): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x2, r2, 0x10}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000006c0)={0x27800000000, 0x0, 0x1, r2}) (async, rerun: 32) socket(0xa, 0x5, 0x8000005) (rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011101000000403512108240000102030109026e000301022006080b0002012230230904000000010130000a2401060a00090000000904010000010230000904010101010231000905010960002590638c0904020000010230000904"], 0x0) 2.875174616s ago: executing program 4 (id=47): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x60000, 0x45) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0x4018aee3, &(0x7f0000000100)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001b40)={{r1, &(0x7f00000000c0)='/dev/hidraw#\x00', 0x0, &(0x7f0000000100)={@_ha_fsid={[0x2, 0xb]}, {0xfffb, 0x830, 0x5, 0x80000000}}, 0xffffffff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x5c}, 0x9, &(0x7f0000001a00)=[{0x2, 0x9, &(0x7f00000001c0)='/dev/hidraw#\x00', &(0x7f0000000240)="bddfc86724b176dea3bc1a74dda7d33bab2a74b5ca55", 0x16, 0xa}, {0x2, 0x6, &(0x7f0000000280)='>{)^\xc6\x00', &(0x7f00000003c0)="2f49930985c12054d29161a3e8ffd8fa197c7f017a638abc91", 0x19, 0x20}, {0x3, 0x2, &(0x7f0000000400)='+\x00', &(0x7f0000000440)="43f925d0be41e696a61d128bda75d74bce7c4a8ba764cadd13215d0761ad792606a3ef5fbb6a7ed4f1b1ca60543347c50895fad3368d1ca020d2f28a26cf8aef488fe59673b5892ff8d6559adb5004bbe413b291e4e55b09362627abbd6a9f603654c340eef353d113248b85e63b419aaccb8cdb20628c5418f3fd17abe8aaaf96f659d8a4fc16a5d71d09eaaf4e33412ecb", 0x92, 0x28}, {0x4, 0x5, &(0x7f0000000500)='\xfe\x00', &(0x7f0000000540)="e17c350559a935942e41dbf57ce1718dcaebe21a84d11b0b4f904cd9c0c012a3236f10a966551a17e7cada56748cb93024bc2d99ba9da9fdc22e005ed64174d7539124c6ce2e7a18f80840d796751ab76cf86be7cd0031c9d78b9a93e52d0f2c210ebb8842", 0x65, 0x8}, {0x3, 0x8f3, &(0x7f00000005c0)='/dev/hidraw#\x00', &(0x7f0000000600)="9ae47efa2a104b47512bbb9ceeb0fe37774572ffbf92b548303160039ba678bc532cff7e8316a417f8a28772d3f060b798f1ccd11718286c38a66510f5c87f6a224e684d278271c01f5d9640e1d87e7189425d3819a1c94e664802da6ee98ab71c4b677026c3509e82495935ed6b28ca18b27d46b233d5d9fc1dea69abb537cc861d026120fb5979fee11787a091ce4e80e362452980cd56884ba9b4493e3648f9af", 0xa2, 0x20}, {0x2, 0x1, &(0x7f0000000700)='(!\x00', &(0x7f0000000740)="303e70446bc5595cb22496ebf340c088c01bf1c6bfadc0f1ba8c3ca091926cbf8a728effa98f2d9c724645d35b20c5de9ff8498d6d3df2a4f4b6131172cfae25793a60f1c0098ee18db93c9782bfac70586f015b19c39bb76301b98d1158d44cd4ac38b8bcec20911c6d1a7a6a6d1d8c54b2cbdcacacf275bdffef9081898a7bf2a0a10771fb1d3dd8c67ef7774078e8439e2c3d55d4d2ef7b263ce1b498b0ed1ba3b901ffa22a89f1cec2ba9ddba8d14eac685efd690f247a987abf40be15ca292e5de26cd055f58f65c25b0eea9007b1", 0xd1, 0x1a}, {0x2, 0x4, &(0x7f0000000840)='\x00', &(0x7f0000000880)="d98443085541f34f733d86dd7444c054ba5b9bf50e174e9bff29f2e0acb136d5abb40dbea445f59caa4d418e620bcecc8021829b7d3cfd63548998a20c3f5e57abe123b8994b33a0a2cdfe3e45d89b5feb43eb9f35138502be92fa1f3daf53bd0e35fdaf84507cd4c8139ab2a75be8b6b07bc7ed47efe41c1286bc079f3101ea56e9e46fe0bada48e5defadb1a5ff7eb9f8906e3bc451985fbfdc19cdb331638c20b048918511db17082ca9693d9a220915cbe721354ea738f81906fdd2c257459f90bb0adae58013231032e2497477e0ec9db265565507f569ff181f76af83157318ae7e14157c91a123566ea57e42c7d5c53de2f3420145de5db5914757fd73b7ef8c03b7a888c517080889d56ed2dc425ecb42f199291d1bc96bbcadf6c8b6d6cd9e1a741ed28981c145b8c61e8025cc9b66edea09e6f9b8c64c92ef3da1d4c6484c7c5fd0a53eb9f324dec4b75a6515bedce7a50b3c8eef11be203b893997017ab4f187cf659dfaa3ce43518e3a0d7cd062eedf494e79921704dd73e47dbf77003870938b5a3c9d3777693dbd1927dc2a86ee26fb983d7137a6c215f33520c6468a5dc05d387c3eda1b653ee44890871317ec47842debbff635850d07124e03ecc17e114af04372a38f37096b937cc2e46e05de56714ee52c2209c3e12b1ec2c562fd82041fd2c4914ae81e7fa7abbe2ad7d878349c8c537500e2c684f5c6df545977c5b7176e82fd5577f5157336fec6c1363f47c882f7bf971565f118b096df73a6097778ffbe0e11154449eac4983370310052359f9ed11a4c14ebdf6ededd1681e32dd27b4b3bf02ca94a616b7d4865d8604e831d199ce9fb062f34e2b946443106e9f270574ce8f27c40c4ef50c0cba676718f582d18ae8956bee8f55e58caa73e3913f34dbb0d259a50ac7fd790c81c4069b0a2c627684b5f1327c74a07b42ba15105c50d651bf45bdbe1e96f7049db861089219bd0ddf65a6ac53be0520b5ce404d0af256b10ab3388622a0a72c1306c630c28af332d72471811020b09d269a372e4cf3e82edc7f9329b13bf20f1275f2a63dfaede5f0e29720bd85bf6cc5cea535ba4b90cee3e8ce89e0b92c6758eb66cf00f7789eb283a4c5b02d7a9c19c2bbf6aeb933aa1d099ede1f54e5944ca0b017ce2eec61d97b4d76f6ded46a194568ce3e6c2e53fcfca67b3a5340cb009c3f463a0c900cd377496be295b094c1d80f9139a252216cf69e8fb8741848935ca2ff71e49c30986e934f79bbcfedb4fc5590b012972d174a7d6e4b580b546a4b12532ccb99a5dfc634c2562b8141d17fce5987a95faf62d02a9883d8626ff6936edefe4d6cb95577d9562f3542471d1aafbae73c56a142f849478421c5330ea96328e72c63a48948fa137e93a32f354cbc69fa96016ac5b3f604fed3c91f7f9554ba055f6d554f3bb2e63516a397eb184979692a9ca338df2721282fb63e303e1083f0b9aee81eb35af3691f8543496c9b6a062b306c0f493ddb92de735af9ff29d0e4017c53465c1b50ca4bab146d6ce2ae4317439be3c176c731d98b51f19c8e319376bc3d7f654b03e92f98d7485c0db62e6ae1e78c24ce7ddbce01c3f7b65497c1b59cc478cc072999266b52a92bd431fb51c6ad84dd0d4099fcf2d2feb920ae899e243bee6507745b392974729c283907df8a9b6f736c4b7a2ab1dec8d667002b2178ff60c4c379c3183ca580643296e3731bfbe01984274c3b42fcaf8433a43db9c73f37aee7d99c69ad70a6f23ba25dc2dc35fd2f52c211f89f25f33be8c6965d0c8620b7e573789e4f0bda95a5b10bdbb12c9b0dfad07c2d1a41504d21db9327387c09df8b7ae02e4f6c0c718b1b76476ab89c563a7c93114b994a0f9d5df4fa5d089180ca4efc437c99f5302d76c3cd2f58d3d985cc8bbc5abe8a5f131fa831fd337d7be1334cf045512096d2487c2444a0254eee2cbc1596f0c2ae2b0eaea709946b30e97faa566b1b85b3ad0351f45fbacd16aa267e7ebab7f35a42a360e7b39f29d254041e6e670b1767885e1bb8f1203795e142c79c042a10b1e2634697ec5d13b9df4ee02abf73b7d767a1a27e42e5f5fe547ceedb61d0022364a47a80a3b4697369fee21b29f7f90415e4b7d5e7de8ab41c3232a7bd18bbb945676df768bcfc32f1a9ee923971a5c1956f70f60d6e564a4f694bda0e459e4873a4fe779406a474632a06be75375bff080817eac97b7453260f9ca5615e166f9a7247d9ebf400966ab810374080e6067998f4f66422bb8785c821c562fb2f4aeb32d530237f9485bfbbe32f5446d7d3d87d4a45d53613a59c0a62032e768f301ac2012a0c62538041584b4259df5d5e193239de1418dda80c7b5e1eb0641aaf849204cd48a616e866747229922724d50886baa38396609f9985ddaabf58a8a6981cd4d8f570858298ca715f744c861e6711cd277f7882e236ba1de2eeb62a0b6e28563f42bbb1fc28eda2592e0bfbd6545ff5402d289276b302fbd5ed28b019b39e82db10d6439228786b5b1c30b4e4f24c47f793d72f687d6cd49f7102470dc2c190e9f56d331ac4138288808eaad1de56171a73751f289baf6649bb24bc8fa446c2df2900295b2cc278491508505111f735240fe82353597cb1af5d33bccecc10f5007d84daa1fafd6771d03d91d5fbf70e865dbe8c8f563ce8fd70a494f8ae6ca482c1de159e1f7c38b26f3be81b4c900a6ce3a8b98efdd46997dba3effabc0e2c96e7a598a8f708bfdab8a6954825476033261b7f9cb5f231cde81d8738f4b1b8b7d7011242d3e67623fcdfee7aee154019781bbe74af54df084f37fbb12d15b9d6bceaa96b61e11088fe746ad70ebf1db6f910d15b23a76c5c1121653e79b547a9e056fae67ad27062e0058f3878ce5673fc486b25d4f01570852ce1974738e43355a6910eb75d97931328d9afae653fd3ceea6c8897b3efe35882b10e7559d6bbcfdce888267ecb8f40b428d1735b1ba9bdb4b5468e5e6a3661d1c195b87fef9de00b1b15fc470eea2002f5513d3d06036fd4cf290a45d875b76e860479fa6fa38c0133f0b95dfa5d34cca49d00c6566efe35323cadbb229a1186ab828d936af560e43f24460d0ba918c2a96893b00490b9a32d1e7119cd22d6e7f0817bfb7883b3baa13f5898218513bff060b53ef68deeeaa6ae4c36e9a5998c10093df03f4c7bcb9c00ccfa9639e8ac9514e366f4cdef9a93b6e7bfffc1ec1924ee69128d655c0ff838d095d0fe8436f76ec53459ca4040f6946c587d30ba88ab28544da64ce482cb03ef464f89bd0c4b49a8156064acd788c8c9d43f854a3d3448d804a4828e80e79476390d1def5359066d6b9a04e362539c8b2253b9b8f0cedc70f5372c7f0146debefaba866616b6b4e2ff77827510749881d0e780ed680fb812ce26fb71a3ee943d8dcd5904613f655b9115e218ac2acea01fa6b682f15b48e3c3a5806e27915efe260538a261d7bd7ac2b879de843798a0f8bd68ddd490767889b081159344271cd88a9e5f67bceb788a82d5423f4af77b4196922aa8b79fcc5ac1b76c0389c52b85e959e081a75c9a475c22f5355a99d5369272dcd7a7512310fddc7388428bbea69ab76782614936ca46b381dbacae2a0162b81c0b6eeb1f7dec30cb5282ca7ae27b7a0fa9039a3d95661f67a3f67a57cf4e9ec0b8be785f62ec1c4f5643e9aad95c3dfab4154208f5bb9d9260db0a3ce2961e3f5492d3bcb4147a5bde49ce6ffc8433be472946abc7683374ea261bced36a40b348adfeecc733cc29061f2bf51864faa9c617be1d51a1f5e5dd2c86472c7126dbb66fb5be324ce5be0135514d6bafe66aabc2cfa4ff6c6334236e1fbd695d670964f78f3c69609884f99934e0afe3dd6bd325ceb37f8c2056e4bd4f6df44e410ce56b36e6e82d0fd775300354769fca5ece45b86623c8bfed9e3f37814e20fadf8b0334f0043cbd06345aa1a6e1e0aa3486403a0127a0b67fa0a6b3a48cc9709f5803dd44ae4dfa6e221b04474b8676770c6b242a150bda1b7101cf006487150620b3408a7de1e2ea03a3c375ee08364b55cda2df542fdbb7e30c2ba9a99b49561ea37f55955b17ad8b98aca00ce11b5536c25707157e54bb5272b526ed2c3fbc6a707e9352134db63fed15611d5d274cff9156134c2ce0a4b1cee800359eae38dd0ff0c3c1d33075cc72a2bf5449607934bddd2059363047129dc073a02568d7398732c4db2bec647b022c1977f0c37dbf18da8fb4ecd5a9f8911a05c72fd0467b8b379cda7afdc44479fadc3b4e53a34c4ac7c7fbca46bb0144d023fb2d21bbba17297b0ba336e77efd3e5d8786c25cb6487ef7a87d1b413ecdfa99634abd7fc4fcb9c4b2a9b64ac3c7c28c2f2a28d85c447c67c7849039b81a9745dddeb11f2fac387eeccc77dea4372d55e9bd6796ad7d4d88e79fd717459d78f90760e50ef3a7f0b2dc30a363f96ecbd2436102ccb868d9499c49dcf35a39c2ad03c5fd27c322e1d5f4454aa73d1cec97a2673ce8bf04ad13f9717bf0adb945e4b0bc1de00a77f1b800697c36e89b79c25d7399634e1f17e57e5f669051d7ae85567389b40c08799134d3920e91e00dbcf7d4e3b0007f32fa2d0fa0d78a96d00084b8a40b2bbd04a2c28115dbc824863369c2d8965e39a8893dcf5fdbf0cbc0274d612909120209f914e08947f052923cd3e298cc7e8abb28e86fd75a559ebaa8baee9027534685e757410114db73aea97c41b591a492b03851d3ff9a081334b7da71370e44932a6495d65c066abc6f0ee4a83d7f64e7125b46abba161edbb87b75e39df39ae26d51c5a5a60b71e64459d9b2956b4f2ea8185293af4309ad13579bb4015bcf95ac879796b7fe0e5e810e347a3d0a93e74cf7e0cf61bba80d1c501eb76d5c9b008f2af5dc5c7f93702f33ede70873aeac5745e8db205f421345235da7cab806ce74ac41950df129fd78bb6672c8c077630f8e10898ee4804607fae936914e207f13840d7ac5dfc49ff8ee5eac04a39d81d151cea325c7aab024bcd218fbb6a54efc6a5d6e452c4e938a1570aedb5ec7ef22623044289be5b1c632613bb9d154b14e9753d4d3525c82b832987e6c503f2ed639d42ceafaa6f67875d94c88301ddc2f8ab24f97441403ef70052e1483590b5b252fdb925d4a3adf6a3b0564f7968d621efe7d9338135d3940023840543c18da16cee0e7e5d96c7fa8a397315a6808f25bc209de720bcc3a4281c38c5d9f4cfc730c27d06f19a6a45eece5996cb6cb6638c458ad05f2d662060e864e1ad9e98876caccf3a11c0c6a3694d2f5fb1b9e5f33758b3f1ace0de5888460738220df1811f51d88672aecaa7b8164998ce2593904d45a31cc006ddea961251f5152cd920df6886a72990a84a8aa7c8c0f1b8f39d1bb4ad90d632372812f6c7b4ad5bd347acac3fe9604fd18e188fa63e76640815736c252b97cf26ebd0745ebba5087ab7ca6f4ab5de92d833cea3c8a970d44d099bae908b21e2d2ae238b2e3e769c5666d5a122a880fd42a3dd12f38278562046f06b82383b0dc77b24cd3d2e28151b54a8dd6d8e9d7cd05f42e925f939ac2003157d0f5c2588716fbea5929d6ed1841432ec2a3e686408315b3b9d2d0f0cab0914a682e3a2c88b488062964fd54c826ade47e6ecbe0ab52d7eaab7ae8fd473a4d1b71d76587606644e9293e4429c4b7b1c625ce49c8e165813c86bb4218cd67afa7ad1c97c6abfadff6bf6f2c742f5019d33516dad91dbefd60cf82bb52e1f887e95207fee3c83e728fb3", 0x1000, 0x2c}, {0x1, 0x6, &(0x7f0000001880)='/\x00', &(0x7f00000018c0)="39640cb9f66cd470fde11b", 0xb, 0x33}, {0x3, 0xffff, &(0x7f0000001900)='/dev/hidraw#\x00', &(0x7f0000001940)="8dff17a8c535b32e540834760fd8ee06a42794d0e8091f6028356b8fff9e729be29fc270fbd45e42ca9bb8d1fdf047728a46b31ca3f392c607b7e975b08843c73d2bdb4bf0df6ddcc678740bf2ef8e6a21fb8bb6e6252b78b781281aec54102affb601d75d092d0356b1d206080adc1b84a64d1c1f79baa498da150223e745c8e35b8e154074d7771d353d6b0ae7c48f2b25f7da671572803a08b03c23cc84afea5ba4da58c253ddf3240b4e", 0xac, 0x10}]}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000006c0)={0x2c, &(0x7f0000000200)={0x40, 0x31, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.415861164s ago: executing program 0 (id=56): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') lseek(r0, 0x1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = userfaultfd(0x801) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, 0x0, 0x44844) r4 = fsopen(&(0x7f0000000800)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x9) fchdir(r5) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r2, r2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40850}, 0x4) socket$netlink(0x10, 0x3, 0xc) getdents64(r0, &(0x7f0000000000)=""/121, 0x79) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001c40)) preadv2(r7, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000380)=""/81, 0x51}], 0x2, 0xfffffffb, 0x80, 0x16) 1.367321164s ago: executing program 0 (id=57): r0 = socket(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)=""/53, 0x35}], 0x1, 0x0, 0x0, 0x1f}, 0x8}], 0x1, 0x10122, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x725e65a6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x3, 0x0, 0x23, @local, @loopback, 0x10, 0x1, 0x4, 0x8}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x560}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mlock(&(0x7f00007ca000/0x3000)=nil, 0x3000) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000729000/0x3000)=nil, 0x3000}, 0x1}) shutdown(0xffffffffffffffff, 0x3) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f00407921fd2e908636ec825d93d6e44e1be83d2014b9e0071fea44149191072b3224e9075d10d152d203991da18dd235f73047f0cd89eebb3e5e560531e9ec3907a05a19e3b0f70f9e1d365f4530a6174725bc56c111343a2faffae38a405174f06b68c6dc45ca8fa035ee4065b82f44c8215c5a9e092f0fe4a2d1ed089f62d353b50a32accda6ce236f3e708278d3a7de5c89ee04ab9309eb7ff2502f45d4f24c447ac81cd658efb873d13a516fdebe4495e87512567af02aeb28f25bd1a27f831f554a3a0835a0df5a8dfd96df55b0222e5a99cc0f463e", @ANYRESHEX=r4, @ANYRES16=r3, @ANYBLOB="289b936bdcbd826c77abbe55808f4259713b6dd602234e1948e99f639b7ab760dd461dba7caea8fc6eb7900351ca2546375645a39da4866b65235e503e7d3b0a95a055b88ca763c1c27d8dab97585f10018209466ef7fc0a6d0074018f9d9852a3dc7acc68a3c8ac3fe2e4c387b56ff8c6ce5b5acc4adf277b869e5b3576", @ANYRES32=r4, @ANYRESOCT=0x0, @ANYRES32], 0xfffffd88) 1.135912301s ago: executing program 3 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000075c0)={@local, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x9, 0x400, 0x6, 0x20001}) r4 = dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000780)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) getxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.026264604s ago: executing program 3 (id=60): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @empty, 0x81}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r2 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000002140)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0xff, {0x8, 0x6, "6bb28a", 0x6, 0x33, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, [@fragment={0x11, 0x0, 0x2, 0x0, 0x0, 0x5, 0x66}, @fragment={0x88, 0x0, 0xcb, 0x1, 0x0, 0x1e, 0x65}]}}}}}}}}, 0x7a) 957.141496ms ago: executing program 4 (id=61): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 935.571186ms ago: executing program 3 (id=62): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x3}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0, 0x58000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x124, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x800c}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000421e8"], 0x48}}, 0x4008004) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 787.86052ms ago: executing program 3 (id=63): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) syz_usb_connect$uac3(0x5, 0xf7, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000084ff000001"], 0xffe) 517.500677ms ago: executing program 0 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000180)=0x9000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x41000, 0x1000, &(0x7f0000e03000/0x1000)=nil}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400"], 0x14}}, 0x810) syz_io_uring_setup(0x3594, &(0x7f0000000080)={0x0, 0xdca2, 0x2, 0xffffffff, 0x230}, 0x0, 0x0, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x23) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000040)={0x8000000, 0x18000, 0x1}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f00005f1000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x25, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x88) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r4) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="835dd868241f33a7040000", @ANYRES16=r10, @ANYBLOB="010025bd7000fcdbdf2507000000080001006e66630006000b001800000008000c000000000008000800ffffffff"], 0x34}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4000000) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000100)={{0x1, 0x3, 0x2036, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r11, 0x40505412, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) r13 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r13, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefb, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 396.41523ms ago: executing program 0 (id=65): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') lseek(r0, 0x1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = userfaultfd(0x801) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, 0x0, 0x44844) r4 = fsopen(&(0x7f0000000800)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x9) fchdir(r5) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r2, r2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40850}, 0x4) socket$netlink(0x10, 0x3, 0xc) getdents64(r0, &(0x7f0000000000)=""/121, 0x79) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001c40)) preadv2(r7, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000380)=""/81, 0x51}], 0x2, 0xfffffffb, 0x80, 0x16) 284.012113ms ago: executing program 0 (id=66): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0xffffffffffffff01, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd, @flat=@handle={0x73682a85, 0x10a, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000680)={0x48, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 283.779313ms ago: executing program 0 (id=67): madvise(&(0x7f00002a9000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team0\x00', &(0x7f0000000300)=@ethtool_eeprom={0x48, 0x5, 0x2, 0x3a, "ac0ac84cbd75d590956f6727253ec212a63b47f369796d978a4e45b063914adf8af308108d8cc612b256b508bb1b1ac3af3e121d438d68b78607"}}) signalfd(r0, &(0x7f0000000000)={[0x5]}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') fchdir(r1) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474203, 0x408}, 0x18) copy_file_range(r2, 0x0, r1, 0x0, 0x863, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="3703c70f70e244b7878fed5921e3d3686454b93e5842723703c5c67b0da4173b9e63544ee1f32fc67080b7f1610a31241a900518bef75ab52d7df9d0", 0x3c, 0x100000002) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0x68) syz_usb_control_io(r3, &(0x7f00000006c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="c93106000000022445f6195679f3ab"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x1894, 0x0, 0x1}, 0x4c, 0x3) landlock_restrict_self(r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r5, &(0x7f00000000c0)='.\x02\x00', 0x2) syz_usb_ep_write(r3, 0x81, 0x7e, &(0x7f0000000700)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc") syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) inotify_init1(0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r8, &(0x7f0000000640), 0x0, 0x0, 0x0) unshare(0x60000600) 251.956544ms ago: executing program 1 (id=69): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000180)={0xffffffffffffffff, 0x50, [0x8, 0x0, 0x3, 0xff], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 191.855046ms ago: executing program 3 (id=70): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @empty, 0x81}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000002140)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0xff, {0x8, 0x6, "6bb28a", 0x6, 0x33, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, [@fragment={0x11, 0x0, 0x2, 0x0, 0x0, 0x5, 0x66}, @fragment={0x88, 0x0, 0xcb, 0x1, 0x0, 0x1e, 0x65}]}}}}}}}}, 0x7a) 191.668926ms ago: executing program 3 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141b03) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="b9800000c00f3235000400000f30c4c23daea42700500000440f20c03506000000440f22c0b805000000b9006800000f01d966baf80cb8306eb288ef66bafc0cedb8010000000f01d9263b29c4c18dc6cd00b91c020000b8a9980000ba000000000f30c4c1e054cc", 0x68}], 0x1, 0x10, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) unshare(0x20000400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x56d92c8a, 0x0, 0xfffffffffffffffc, 0x10000, 0x10}, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x4008c40}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x803}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x8000, 0x3, 0x6]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7f}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1fb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48011) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r11, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x400000b0, 0x0, 0xf}, {0x400000b1, 0x0, 0x5}]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r8, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) 191.535266ms ago: executing program 1 (id=72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x1, 0x1, 0x4, 0x7fffffffffffffff}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x1b3c00}, 0x1c) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe41}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 191.393846ms ago: executing program 1 (id=73): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, "29acaea6eecd94ea", "1b90309c137a6d1148a0e12b8c92bb2c", "39165308", "b469f98bf5d2b6cc"}, 0x28) sendto$inet6(r2, 0x0, 0x0, 0x8080, 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x11, 0x0, 0x0}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x11, 0x0, 0x0}) 139.910447ms ago: executing program 1 (id=74): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') lseek(r0, 0x1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = userfaultfd(0x801) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, 0x0, 0x44844) r4 = fsopen(&(0x7f0000000800)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x9) fchdir(r5) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r2, r2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40850}, 0x4) socket$netlink(0x10, 0x3, 0xc) getdents64(r0, &(0x7f0000000000)=""/121, 0x79) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001c40)) preadv2(r7, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000380)=""/81, 0x51}], 0x2, 0xfffffffb, 0x80, 0x16) 113.995337ms ago: executing program 1 (id=75): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x37, 0x7ff, 0xf83, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x85, 0x6, @remote}, 0x14) 96.058138ms ago: executing program 1 (id=76): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, &(0x7f0000000280)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000040)=0x1ff, 0x4) 95.709368ms ago: executing program 4 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000075c0)={@local, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x9, 0x400, 0x6, 0x20001}) r4 = dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000780)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) getxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 53.300159ms ago: executing program 4 (id=78): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0xffffffffffffff07, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd, @flat=@handle={0x73682a85, 0x10a, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000680)={0x48, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=79): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x11, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x1b, 0xfe}}}}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001cafd04600000a60c6eec00be00442cfffe8000000000000000000000000000aaff0200000000000000000000f5ff0001", @ANYRES32=r1], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 29.165834][ T36] audit: type=1400 audit(1777714736.330:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.166860][ T286] cgroup: Unknown subsys name 'net' [ 29.188592][ T36] audit: type=1400 audit(1777714736.330:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.216124][ T36] audit: type=1400 audit(1777714736.360:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.216284][ T286] cgroup: Unknown subsys name 'devices' [ 29.323892][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.329997][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.462189][ T36] audit: type=1400 audit(1777714736.630:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.485851][ T36] audit: type=1400 audit(1777714736.630:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.510928][ T36] audit: type=1400 audit(1777714736.630:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.520812][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.542974][ T36] audit: type=1400 audit(1777714736.710:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.568629][ T36] audit: type=1400 audit(1777714736.710:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.605909][ T36] audit: type=1400 audit(1777714736.770:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.606469][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.631469][ T36] audit: type=1400 audit(1777714736.770:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.461082][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.468368][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.475558][ T296] bridge_slave_0: entered allmulticast mode [ 30.482222][ T296] bridge_slave_0: entered promiscuous mode [ 30.488893][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.496173][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.503390][ T296] bridge_slave_1: entered allmulticast mode [ 30.509569][ T296] bridge_slave_1: entered promiscuous mode [ 30.553969][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.561039][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.568177][ T295] bridge_slave_0: entered allmulticast mode [ 30.574593][ T295] bridge_slave_0: entered promiscuous mode [ 30.584074][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.591245][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.598373][ T295] bridge_slave_1: entered allmulticast mode [ 30.604813][ T295] bridge_slave_1: entered promiscuous mode [ 30.613659][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.620737][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.628036][ T294] bridge_slave_0: entered allmulticast mode [ 30.634352][ T294] bridge_slave_0: entered promiscuous mode [ 30.643817][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.650879][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.658012][ T294] bridge_slave_1: entered allmulticast mode [ 30.664305][ T294] bridge_slave_1: entered promiscuous mode [ 30.751974][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.759053][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.766246][ T293] bridge_slave_0: entered allmulticast mode [ 30.772535][ T293] bridge_slave_0: entered promiscuous mode [ 30.778939][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.786039][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.793353][ T293] bridge_slave_1: entered allmulticast mode [ 30.799772][ T293] bridge_slave_1: entered promiscuous mode [ 30.910122][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.917230][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.924662][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.931763][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.943092][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.950250][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.957649][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.964708][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.976620][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.983705][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.990992][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.998147][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.006928][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.014016][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.021373][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.028521][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.084846][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.092820][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.100671][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.108264][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.115920][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.123435][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.131338][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.147158][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.154344][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.162577][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.169630][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.178379][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.185670][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.215166][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.222349][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.230178][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.237525][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.261254][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.268602][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.276508][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.283748][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.298873][ T294] veth0_vlan: entered promiscuous mode [ 31.322920][ T294] veth1_macvtap: entered promiscuous mode [ 31.356638][ T295] veth0_vlan: entered promiscuous mode [ 31.367940][ T296] veth0_vlan: entered promiscuous mode [ 31.382556][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.403549][ T295] veth1_macvtap: entered promiscuous mode [ 31.414572][ T296] veth1_macvtap: entered promiscuous mode [ 31.421394][ T293] veth0_vlan: entered promiscuous mode [ 31.461651][ T293] veth1_macvtap: entered promiscuous mode [ 31.698515][ T329] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.911717][ T315] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.082743][ T315] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 32.093318][ T315] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.131696][ T315] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 32.140908][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.172961][ T315] usb 1-1: config 0 descriptor?? [ 32.192356][ T315] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 32.362615][ T313] loop3: detected capacity change from 0 to 7 [ 32.383190][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 32.384433][ T311] usb 1-1: USB disconnect, device number 2 [ 32.393008][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.407767][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 32.423934][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.433147][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 32.441992][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.451248][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 32.459367][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.468696][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 32.491739][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.500942][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 32.624790][ T338] process 'syz.1.10' launched './file0' with NULL argv: empty string added [ 32.644772][ T338] loop9: detected capacity change from 0 to 1 [ 32.921693][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.083194][ T311] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 33.094170][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 33.107388][ T311] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 33.116665][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.125567][ T311] usb 1-1: config 0 descriptor?? [ 33.131831][ T311] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 33.161767][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.267070][ T358] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15'. [ 33.291842][ T45] usb 2-1: device descriptor read/64, error -71 [ 33.531675][ T45] usb 2-1: device descriptor read/64, error -71 [ 33.771682][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.901687][ T45] usb 2-1: device descriptor read/64, error -71 [ 34.101704][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.141719][ T45] usb 2-1: device descriptor read/64, error -71 [ 34.261839][ T45] usb usb2-port1: attempt power cycle [ 34.267435][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 34.275173][ T65] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 34.291375][ T65] usb 4-1: config 179 has no interface number 0 [ 34.300603][ T65] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 34.311813][ T65] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 34.323168][ T65] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 34.335370][ T65] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 34.346940][ T65] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 34.360432][ T65] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 34.369569][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.379334][ T371] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 34.621684][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.642849][ T45] usb 2-1: device descriptor read/8, error -71 [ 34.647652][ T9] usb 1-1: USB disconnect, device number 3 [ 34.783011][ T45] usb 2-1: device descriptor read/8, error -71 [ 34.798266][ T372] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input4 [ 34.977812][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 34.977830][ T36] audit: type=1400 audit(1777714742.140:148): avc: denied { create } for pid=382 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 35.003720][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 35.013267][ T36] audit: type=1400 audit(1777714742.140:149): avc: denied { read write } for pid=382 comm="syz.2.24" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 35.014168][ T371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.039953][ T36] audit: type=1400 audit(1777714742.140:150): avc: denied { open } for pid=382 comm="syz.2.24" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 35.046516][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.071677][ T36] audit: type=1400 audit(1777714742.140:151): avc: denied { unmount } for pid=382 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.079220][ T371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.122812][ T45] usb 2-1: device descriptor read/8, error -71 [ 35.131756][ T9] usb 1-1: device descriptor read/64, error -71 [ 35.143528][ T13] bridge_slave_1: left allmulticast mode [ 35.149639][ T13] bridge_slave_1: left promiscuous mode [ 35.155607][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.164026][ T13] bridge_slave_0: left allmulticast mode [ 35.169755][ T13] bridge_slave_0: left promiscuous mode [ 35.175941][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.254187][ T45] usb 2-1: device descriptor read/8, error -71 [ 35.303347][ T13] veth1_macvtap: left promiscuous mode [ 35.308915][ T13] veth0_vlan: left promiscuous mode [ 35.361963][ T45] usb usb2-port1: unable to enumerate USB device [ 35.370663][ T36] audit: type=1400 audit(1777714742.530:152): avc: denied { accept } for pid=370 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.399542][ T45] usb 4-1: USB disconnect, device number 2 [ 35.399584][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 35.401595][ T9] usb 1-1: device descriptor read/64, error -71 [ 35.405648][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 35.436397][ T45] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 35.452950][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.460071][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.467881][ T386] bridge_slave_0: entered allmulticast mode [ 35.474357][ T386] bridge_slave_0: entered promiscuous mode [ 35.480968][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.488613][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.496396][ T386] bridge_slave_1: entered allmulticast mode [ 35.502741][ T386] bridge_slave_1: entered promiscuous mode [ 35.542456][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.549520][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.556820][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.563922][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.585326][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.592684][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.601384][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.608483][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.623374][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.630483][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.650508][ T386] veth0_vlan: entered promiscuous mode [ 35.661711][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 35.670598][ T386] veth1_macvtap: entered promiscuous mode [ 35.716266][ T36] audit: type=1400 audit(1777714742.880:153): avc: denied { connect } for pid=394 comm="syz.4.28" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.737108][ T36] audit: type=1400 audit(1777714742.880:154): avc: denied { setopt } for pid=394 comm="syz.4.28" laddr=::1 lport=255 faddr=::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.788562][ T36] audit: type=1400 audit(1777714742.950:155): avc: denied { read } for pid=394 comm="syz.4.28" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.811856][ T9] usb 1-1: device descriptor read/64, error -71 [ 35.818406][ T36] audit: type=1400 audit(1777714742.950:156): avc: denied { open } for pid=394 comm="syz.4.28" path="/dev/usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.895548][ T398] SELinux: failed to load policy [ 35.896030][ T36] audit: type=1400 audit(1777714743.060:157): avc: denied { load_policy } for pid=397 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 35.933297][ T404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.942290][ T404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.950867][ T404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=404 comm=syz.1.30 [ 36.041758][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 36.061775][ T9] usb 1-1: device descriptor read/64, error -71 [ 36.171788][ T9] usb usb1-port1: attempt power cycle [ 36.191674][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 36.198521][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 36.207648][ T45] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 36.215374][ T45] usb 5-1: can't read configurations, error -61 [ 36.241944][ T31] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 36.291693][ T315] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.351678][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 36.392799][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.405798][ T31] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 36.414973][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.423871][ T31] usb 4-1: config 0 descriptor?? [ 36.452215][ T315] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 36.468933][ T315] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 36.478496][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 36.486741][ T315] usb 2-1: Product: syz [ 36.491389][ T315] usb 2-1: Manufacturer: syz [ 36.496194][ T315] usb 2-1: SerialNumber: syz [ 36.501729][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 36.504620][ T315] usb 2-1: config 0 descriptor?? [ 36.508468][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 36.512316][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 36.521184][ T45] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 36.535350][ T45] usb 5-1: can't read configurations, error -61 [ 36.541910][ T45] usb usb5-port1: attempt power cycle [ 36.543001][ T9] usb 1-1: device descriptor read/8, error -71 [ 36.683909][ T9] usb 1-1: device descriptor read/8, error -71 [ 36.704445][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 36.710590][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 36.719826][ T31] usb 4-1: USB disconnect, device number 3 [ 36.732629][ T65] usb 2-1: USB disconnect, device number 6 [ 36.881769][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 36.902105][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 36.908951][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 36.918185][ T45] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 36.926293][ T45] usb 5-1: can't read configurations, error -61 [ 36.941767][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 36.972729][ T9] usb 1-1: device descriptor read/8, error -71 [ 37.061684][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 37.082702][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 37.089380][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 37.098496][ T45] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 37.102906][ T9] usb 1-1: device descriptor read/8, error -71 [ 37.106213][ T45] usb 5-1: can't read configurations, error -61 [ 37.118795][ T45] usb usb5-port1: unable to enumerate USB device [ 37.222503][ T9] usb usb1-port1: unable to enumerate USB device [ 37.482327][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.631893][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 37.639078][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 37.649147][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 37.661117][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.670255][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.678487][ T9] usb 2-1: Product: syz [ 37.682867][ T9] usb 2-1: Manufacturer: syz [ 37.687497][ T9] usb 2-1: SerialNumber: syz [ 37.898742][ T9] cdc_ncm 2-1:1.0: bind() failure [ 37.904690][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 37.911703][ T9] cdc_ncm 2-1:1.1: bind() failure [ 37.918831][ T9] usb 2-1: USB disconnect, device number 7 [ 37.936075][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.936253][ T427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.951286][ T427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.021719][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.171698][ T315] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 38.174533][ T45] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 38.188809][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.196829][ T45] usb 4-1: Product: syz [ 38.201052][ T45] usb 4-1: Manufacturer: syz [ 38.205812][ T45] usb 4-1: SerialNumber: syz [ 38.323212][ T315] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.331912][ T315] usb 1-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 38.343184][ T315] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 38.353331][ T315] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 38.363617][ T315] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 38.376904][ T315] usb 1-1: config 1 interface 0 has no altsetting 0 [ 38.385803][ T315] usb 1-1: string descriptor 0 read error: -22 [ 38.392391][ T315] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.401526][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.411121][ T428] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 38.423336][ T428] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 38.426897][ T45] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 38.434011][ T315] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 38.440361][ T419] xt_NFQUEUE: number of total queues is 0 [ 38.454790][ T45] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 38.477387][ T45] usb 4-1: USB disconnect, device number 4 [ 38.488667][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.651676][ T45] usb 1-1: USB disconnect, device number 8 [ 38.711722][ T315] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 38.871680][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 38.877955][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.888891][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.898660][ T315] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.911588][ T315] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 38.920972][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.929850][ T315] usb 2-1: config 0 descriptor?? [ 39.121679][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 39.272775][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.285798][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 39.294901][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.303725][ T9] usb 5-1: config 0 descriptor?? [ 39.396888][ T315] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input5 [ 39.411943][ T315] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 39.560651][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 39.566745][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 39.575802][ T9] usb 5-1: USB disconnect, device number 6 [ 39.607025][ T435] IPv6: NLM_F_CREATE should be specified when creating new route [ 39.961694][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.961708][ T430] Bluetooth: hci0: command 0x1003 tx timeout [ 40.421694][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 40.490030][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 40.490050][ T36] audit: type=1400 audit(1777714747.650:176): avc: denied { connect } for pid=459 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.517526][ T36] audit: type=1400 audit(1777714747.650:177): avc: denied { create } for pid=459 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.592768][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.603807][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 40.612885][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.630846][ T9] usb 5-1: config 0 descriptor?? [ 40.638082][ T466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.647429][ T466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.656685][ T36] audit: type=1400 audit(1777714747.820:178): avc: denied { create } for pid=464 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.677145][ T36] audit: type=1400 audit(1777714747.820:179): avc: denied { ioctl } for pid=464 comm="syz.0.51" path="socket:[5313]" dev="sockfs" ino=5313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.705548][ T36] audit: type=1400 audit(1777714747.820:180): avc: denied { write } for pid=464 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.725002][ T315] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.741963][ T36] audit: type=1400 audit(1777714747.820:181): avc: denied { write } for pid=464 comm="syz.0.51" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.765220][ T36] audit: type=1400 audit(1777714747.820:182): avc: denied { map } for pid=464 comm="syz.0.51" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.788281][ T36] audit: type=1400 audit(1777714747.820:183): avc: denied { execute } for pid=464 comm="syz.0.51" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.811515][ T36] audit: type=1400 audit(1777714747.900:184): avc: denied { write } for pid=469 comm="syz.0.52" path="socket:[4812]" dev="sockfs" ino=4812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.932679][ T315] usb 4-1: config 1 has an invalid interface number: 64 but max is 1 [ 40.940915][ T315] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.951522][ T315] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 40.960759][ T315] usb 4-1: config 1 has no interface number 0 [ 40.966976][ T315] usb 4-1: too many endpoints for config 1 interface 64 altsetting 150: 98, using maximum allowed: 30 [ 40.978246][ T315] usb 4-1: config 1 interface 64 altsetting 150 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 40.991834][ T315] usb 4-1: config 1 interface 64 has no altsetting 0 [ 40.999917][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.009548][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.017676][ T315] usb 4-1: Product: syz [ 41.021888][ T315] usb 4-1: Manufacturer: syz [ 41.026493][ T315] usb 4-1: SerialNumber: syz [ 41.039281][ T9] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 41.049068][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input6 [ 41.126381][ T9] keytouch 0003:0926:3333.0002: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 41.240559][ T315] usb 4-1: USB disconnect, device number 5 [ 41.364598][ T36] audit: type=1400 audit(1777714748.530:185): avc: denied { read } for pid=477 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 41.409791][ T479] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.561990][ T45] usb 2-1: USB disconnect, device number 8 [ 41.577188][ T406] usb 5-1: USB disconnect, device number 7 [ 41.711695][ T45] usb 2-1: new full-speed USB device number 9 using dummy_hcd Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 41.872300][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.901006][ T45] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 Stopping network: [ 41.934658][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.958853][ T45] usb 2-1: config 0 descriptor?? OK Stopping iptables: OK Stopping system message bus: done [ 42.265945][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 42.272148][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 42.282635][ T45] usb 2-1: USB disconnect, device number 9 Stopping klogd: OK Stopping acpid: [ 42.971711][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 43.132795][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 24, changing to 8 [ 43.147528][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1288, setting to 1024 [ 43.158852][ T45] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 43.168202][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.176717][ T45] usb 1-1: config 0 descriptor?? [ 43.182151][ T557] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.201742][ T315] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 43.251894][ T31] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 43.351670][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 43.358146][ T315] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 43.368920][ T315] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 43.378123][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.386186][ T315] usb 2-1: Product: syz [ 43.390529][ T315] usb 2-1: Manufacturer: syz [ 43.395174][ T315] usb 2-1: SerialNumber: syz [ 43.400471][ T315] usb 2-1: config 0 descriptor?? [ 43.406737][ T315] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 43.412844][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.414617][ T315] usb 2-1: Detected FT232R [ 43.427287][ T31] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 OK[ 43.440703][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.449983][ T31] usb 5-1: config 0 descriptor?? Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only [ 43.591753][ T45] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 43.602316][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input7 [ 43.616838][ T315] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 43.631887][ T315] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 43.651973][ T315] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 43.661424][ T315] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 43.675162][ T315] usb 2-1: USB disconnect, device number 10 [ 43.681504][ T45] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 43.682063][ T315] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only [ 43.734067][ T315] ftdi_sio 2-1:0.0: device disconnected [ 43.735090][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 43.745913][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.123 closed by remote host. [ 43.782253][ T31] usb 5-1: USB disconnect, device number 8 [ 43.802693][ T45] usb 1-1: USB disconnect, device number 9 [ 43.983523][ T13] bridge_slave_1: left allmulticast mode [ 43.989244][ T13] bridge_slave_1: left promiscuous mode [ 43.994992][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.002471][ T13] bridge_slave_0: left allmulticast mode [ 44.008109][ T13] bridge_slave_0: left promiscuous mode [ 44.014041][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.154033][ T13] veth1_macvtap: left promiscuous mode [ 44.159639][ T13] veth0_vlan: left promiscuous mode [ 44.464903][ T13] bridge_slave_1: left allmulticast mode [ 44.470755][ T13] bridge_slave_1: left promiscuous mode [ 44.476592][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.484113][ T13] bridge_slave_0: left allmulticast mode [ 44.490026][ T13] bridge_slave_0: left promiscuous mode [ 44.495748][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.503408][ T13] bridge_slave_1: left allmulticast mode [ 44.509130][ T13] bridge_slave_1: left promiscuous mode [ 44.515079][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.522968][ T13] bridge_slave_0: left allmulticast mode [ 44.528612][ T13] bridge_slave_0: left promiscuous mode [ 44.534257][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.542058][ T13] bridge_slave_1: left allmulticast mode [ 44.547711][ T13] bridge_slave_1: left promiscuous mode [ 44.553331][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.560694][ T13] bridge_slave_0: left allmulticast mode [ 44.566518][ T13] bridge_slave_0: left promiscuous mode [ 44.572140][ T13] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 44.865555][ T13] veth1_macvtap: left promiscuous mode [ 44.871173][ T13] veth0_vlan: left promiscuous mode [ 44.876842][ T13] veth1_macvtap: left promiscuous mode [ 44.882358][ T13] veth0_vlan: left promiscuous mode [ 44.887712][ T13] veth1_macvtap: left promiscuous mode [ 44.893234][ T13] veth0_vlan: left promiscuous mode [ 45.842667][ T595] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 45.849757][ T595] ACPI: PM: Preparing to enter system sleep state S5 [ 45.856859][ T595] kvm: exiting hardware virtualization [ 45.862426][ T595] reboot: Power down serialport: VM disconnected.