last executing test programs: 7.758698653s ago: executing program 1 (id=24): memfd_create(&(0x7f0000000000)='/dev/kvm\x00', 0x9) lsm_set_self_attr(0x69, &(0x7f0000000040)={0x6d, 0x5, 0x20}, 0x20, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) 6.491073512s ago: executing program 1 (id=32): r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x6, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xbc}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02fa0000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x0) write(r0, &(0x7f0000000040)="240000001e005f1814bffffffffffff807000000b800000000000000060005000d4530e96917", 0x26) 6.400599191s ago: executing program 1 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) landlock_create_ruleset(&(0x7f00000000c0)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x14a40, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000100)={0xd, 0xcd2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000140)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.237793807s ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) (async, rerun: 32) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r2, r1, 0x0, 0x7ffff000) fremovexattr(r0, &(0x7f0000000300)=@known='system.posix_acl_default\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async, rerun: 64) r3 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/features/transaction_report\x00', 0x0, 0x0) (rerun: 64) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x200, 0x89, 0x2}, 0x18) renameat2(r3, &(0x7f0000000480)='./file1/file2\x00', r4, &(0x7f0000000140)='./file2\x00', 0x2) (async) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x0, 0x1000, 0x12, &(0x7f0000000180)="3753501580370bf63d3a8a45463d8c2c9f2b", 0x70, 0x0, &(0x7f00000001c0)="b90183cb1569f5940dde7d2d46ff983cfd553446682e318e259dbf3f5e237e213beb65789c8ad47468c67edc15de4b364a7328c70a2ee05a86d3dd0164e232c63b4535da2f6d1651cfb40c8258f85de4121af888bd45ca1208bd24357cb49a3417b91cb6e3f442ea783d63539f854f33"}) 6.236558998s ago: executing program 1 (id=35): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000580)="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", 0x559, r1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f00000000c0)=0x9, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x1ffffffffffffffd, 0x5, 0x6], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000004c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e) getsockopt(r4, 0x111, 0x1, 0x0, &(0x7f00000003c0)) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.181232963s ago: executing program 1 (id=37): clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x5, 0x1, 0x80, 0xfb, 0x5, 0x1, 0x80000000, 0xc}, &(0x7f0000000040)={0x0, 0x7, 0x100000000, 0xc, 0x72, 0x1ff, 0x4, 0x1}, &(0x7f0000000080)={0x0, 0x7, 0x800, 0x87, 0x7, 0x10001, 0x5, 0x800}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) pselect6(0x40, &(0x7f00000001c0)={0x4e2, 0x0, 0x3, 0x5, 0x1, 0x200, 0x100000001, 0xfffffffffffffffc}, &(0x7f0000000200)={0x1, 0x8, 0xe, 0x1, 0x1, 0xe, 0x0, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x6, 0x4, 0xab, 0xb5fd, 0x7a}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0xe0d2]}, 0x8}) rt_sigsuspend(&(0x7f0000000340)={[0x6]}, 0x8) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000003c0)={r2, r3+10000000}) r4 = syz_open_dev$evdev(&(0x7f0000000400), 0x8, 0x88000) write$evdev(r4, &(0x7f0000000440)=[{{0x77359400}, 0x0, 0x4e9, 0x7}, {{0x0, 0xea60}, 0x14, 0x9517, 0x7fff}, {{0x77359400}, 0x3, 0x4, 0xffffffff}], 0x48) r5 = syz_create_resource$futex(&(0x7f00000004c0)=0x1) futex$unlock_wake_list64(r5, 0x201, 0x9, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)=0x2, 0x7fffffff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/netfilter\x00') mkdirat(r6, &(0x7f00000005c0)='./file0\x00', 0x1a0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000000640)={0xd5, 0x0, 0x6f3921b621e41e2}) recvmmsg(r6, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/74, 0x4a}], 0x1}, 0xf}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/144, 0x90}, {&(0x7f00000008c0)=""/23, 0x17}, {&(0x7f0000000900)=""/41, 0x29}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)=""/24, 0x18}, {&(0x7f0000000a40)=""/223, 0xdf}, {&(0x7f0000000b40)=""/115, 0x73}, {&(0x7f0000000bc0)=""/93, 0x5d}, {&(0x7f0000000c40)=""/173, 0xad}, {&(0x7f0000000d00)=""/222, 0xde}], 0xa, &(0x7f0000000ec0)=""/158, 0x9e}, 0x10}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000f80)=""/4096, 0x1000}], 0x1}, 0xfffe0000}, {{&(0x7f0000001fc0)=@phonet, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/219, 0xdb}, {&(0x7f0000003140)=""/108, 0x6c}], 0x3, &(0x7f0000003200)=""/31, 0x1f}, 0x4a}], 0x4, 0x100, &(0x7f0000003340)) rt_sigpending(&(0x7f0000003380), 0x8) epoll_pwait2(r8, &(0x7f00000033c0)=[{}, {}], 0x2, &(0x7f0000003400), &(0x7f0000003440)={[0x84]}, 0x8) munmap(&(0x7f0000ff3000/0xd000)=nil, 0xd000) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000003540)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x10, 0x3f8, 0x4, 0x70bd28, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000003580)={0x6, 0x10000}) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000035c0), 0x20000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000003600)={{{@in6=@private1, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000003700)=0xe8) bind$inet6(r9, &(0x7f0000003740)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x8}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000037c0), r7) sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000003ac0)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x819}, 0xc, &(0x7f0000003a80)={&(0x7f0000003800)={0x254, r11, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x240, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf6, 0x3, "ed3b163c70610428d02cc17f8d105da86399d571ae6d17b5cd16161bf9ba3d5f55caf5de2a20366fc204a10e9fee3704c78b604738f2f710bbe324d7ba28049c86c4f7879dd14048c9e2c256da3fe46aafb3c26c4b359e72ae30d297b38191f156a264374acbda5b8c71e4de746732684f15d752e336e18c7a87ecb63ffff79a55ae407b7240fb74f32621a46c99469d11a1672f21a994698e670dbf63f16f302357a8c758459151025773ad5eff387f4bb43740af27910d3d99490fa0374580504fc458cf88913b687dd5fa36aee6f6dbd0664ca9d65f98df4df05af80b44c2305a3eeef0c2d49527afa11ef9a2a8267c1e"}, @TIPC_NLA_NODE_ID={0xe2, 0x3, "b306d7b44b298e9eec100897eec322d06936aaa3ede81833a015890e683f7ec88cbc07c651f9d56acd834055b8806ebaf28bd173d0c9f0ca106d7d5cf79043d818b300f5f7db9270f40bcaa063543606b1d9ec040f882a14258e55cd703f5d157145a0ac8b423ac3e738ece771c9680144ef19973b6c375d5a5903e54461b61911b37776607bb4a1cc300fb17be51bcd7bdb9979b4f56af8a3bb2a0d3dcdafcff359227ba323104e7ff0b9dfbbbef003df18b8ef8f5278a67cb455dfcd0bf38cf6583a38659fbd8bac881c36e95676a63fbf4e735454dc22549c2ddfc732"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe99}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "7292c51a7d9cfb1e3accd6ed2f9e7db93d4ec5e0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffb}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x801}, 0x8000) read(r10, &(0x7f0000003b00)=""/122, 0x7a) recvmmsg$unix(r9, &(0x7f0000007040)=[{{&(0x7f0000003b80), 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003c00)=""/202, 0xca}, {&(0x7f0000003d00)=""/116, 0x74}, {&(0x7f0000003d80)=""/65, 0x41}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x4}}, {{&(0x7f0000004e40)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000004ec0)=""/84, 0x54}, {&(0x7f0000004f40)=""/54, 0x36}, {&(0x7f0000004f80)=""/11, 0xb}, {&(0x7f0000004fc0)=""/121, 0x79}], 0x4, &(0x7f0000005080)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000005100), 0x6e, &(0x7f0000006300)=[{&(0x7f0000005180)=""/100, 0x64}, {&(0x7f0000005200)=""/124, 0x7c}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/115, 0x73}], 0x4, &(0x7f0000006340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000006380)=@abs, 0x6e, &(0x7f00000066c0)=[{&(0x7f0000006400)=""/199, 0xc7}, {&(0x7f0000006500)=""/21, 0x15}, {&(0x7f0000006540)=""/181, 0xb5}, {&(0x7f0000006600)=""/186, 0xba}], 0x4}}, {{0x0, 0x0, &(0x7f00000069c0)=[{&(0x7f0000006700)=""/5, 0x5}, {&(0x7f0000006740)=""/49, 0x31}, {&(0x7f0000006780)=""/177, 0xb1}, {&(0x7f0000006840)=""/112, 0x70}, {&(0x7f00000068c0)=""/207, 0xcf}, {0xffffffffffffffff}], 0x6, &(0x7f0000006a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000006b40)=@abs, 0x6e, &(0x7f0000006f40)=[{&(0x7f0000006bc0)=""/108, 0x6c}, {&(0x7f0000006c40)=""/241, 0xf1}, {&(0x7f0000006d40)=""/117, 0x75}, {&(0x7f0000006dc0)=""/76, 0x4c}, {&(0x7f0000006e40)=""/209, 0xd1}], 0x5, &(0x7f0000006fc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}], 0x6, 0x101, &(0x7f00000071c0)) ioctl$FS_IOC_GETFLAGS(r12, 0x80086601, &(0x7f0000007200)) 6.081691183s ago: executing program 32 (id=37): clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x5, 0x1, 0x80, 0xfb, 0x5, 0x1, 0x80000000, 0xc}, &(0x7f0000000040)={0x0, 0x7, 0x100000000, 0xc, 0x72, 0x1ff, 0x4, 0x1}, &(0x7f0000000080)={0x0, 0x7, 0x800, 0x87, 0x7, 0x10001, 0x5, 0x800}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) pselect6(0x40, &(0x7f00000001c0)={0x4e2, 0x0, 0x3, 0x5, 0x1, 0x200, 0x100000001, 0xfffffffffffffffc}, &(0x7f0000000200)={0x1, 0x8, 0xe, 0x1, 0x1, 0xe, 0x0, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x6, 0x4, 0xab, 0xb5fd, 0x7a}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0xe0d2]}, 0x8}) rt_sigsuspend(&(0x7f0000000340)={[0x6]}, 0x8) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000003c0)={r2, r3+10000000}) r4 = syz_open_dev$evdev(&(0x7f0000000400), 0x8, 0x88000) write$evdev(r4, &(0x7f0000000440)=[{{0x77359400}, 0x0, 0x4e9, 0x7}, {{0x0, 0xea60}, 0x14, 0x9517, 0x7fff}, {{0x77359400}, 0x3, 0x4, 0xffffffff}], 0x48) r5 = syz_create_resource$futex(&(0x7f00000004c0)=0x1) futex$unlock_wake_list64(r5, 0x201, 0x9, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)=0x2, 0x7fffffff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/netfilter\x00') mkdirat(r6, &(0x7f00000005c0)='./file0\x00', 0x1a0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000000640)={0xd5, 0x0, 0x6f3921b621e41e2}) recvmmsg(r6, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/74, 0x4a}], 0x1}, 0xf}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/144, 0x90}, {&(0x7f00000008c0)=""/23, 0x17}, {&(0x7f0000000900)=""/41, 0x29}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)=""/24, 0x18}, {&(0x7f0000000a40)=""/223, 0xdf}, {&(0x7f0000000b40)=""/115, 0x73}, {&(0x7f0000000bc0)=""/93, 0x5d}, {&(0x7f0000000c40)=""/173, 0xad}, {&(0x7f0000000d00)=""/222, 0xde}], 0xa, &(0x7f0000000ec0)=""/158, 0x9e}, 0x10}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000f80)=""/4096, 0x1000}], 0x1}, 0xfffe0000}, {{&(0x7f0000001fc0)=@phonet, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/219, 0xdb}, {&(0x7f0000003140)=""/108, 0x6c}], 0x3, &(0x7f0000003200)=""/31, 0x1f}, 0x4a}], 0x4, 0x100, &(0x7f0000003340)) rt_sigpending(&(0x7f0000003380), 0x8) epoll_pwait2(r8, &(0x7f00000033c0)=[{}, {}], 0x2, &(0x7f0000003400), &(0x7f0000003440)={[0x84]}, 0x8) munmap(&(0x7f0000ff3000/0xd000)=nil, 0xd000) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000003540)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x10, 0x3f8, 0x4, 0x70bd28, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000003580)={0x6, 0x10000}) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000035c0), 0x20000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000003600)={{{@in6=@private1, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000003700)=0xe8) bind$inet6(r9, &(0x7f0000003740)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x8}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000037c0), r7) sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000003ac0)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x819}, 0xc, &(0x7f0000003a80)={&(0x7f0000003800)={0x254, r11, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x240, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf6, 0x3, "ed3b163c70610428d02cc17f8d105da86399d571ae6d17b5cd16161bf9ba3d5f55caf5de2a20366fc204a10e9fee3704c78b604738f2f710bbe324d7ba28049c86c4f7879dd14048c9e2c256da3fe46aafb3c26c4b359e72ae30d297b38191f156a264374acbda5b8c71e4de746732684f15d752e336e18c7a87ecb63ffff79a55ae407b7240fb74f32621a46c99469d11a1672f21a994698e670dbf63f16f302357a8c758459151025773ad5eff387f4bb43740af27910d3d99490fa0374580504fc458cf88913b687dd5fa36aee6f6dbd0664ca9d65f98df4df05af80b44c2305a3eeef0c2d49527afa11ef9a2a8267c1e"}, @TIPC_NLA_NODE_ID={0xe2, 0x3, "b306d7b44b298e9eec100897eec322d06936aaa3ede81833a015890e683f7ec88cbc07c651f9d56acd834055b8806ebaf28bd173d0c9f0ca106d7d5cf79043d818b300f5f7db9270f40bcaa063543606b1d9ec040f882a14258e55cd703f5d157145a0ac8b423ac3e738ece771c9680144ef19973b6c375d5a5903e54461b61911b37776607bb4a1cc300fb17be51bcd7bdb9979b4f56af8a3bb2a0d3dcdafcff359227ba323104e7ff0b9dfbbbef003df18b8ef8f5278a67cb455dfcd0bf38cf6583a38659fbd8bac881c36e95676a63fbf4e735454dc22549c2ddfc732"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe99}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "7292c51a7d9cfb1e3accd6ed2f9e7db93d4ec5e0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffb}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x801}, 0x8000) read(r10, &(0x7f0000003b00)=""/122, 0x7a) recvmmsg$unix(r9, &(0x7f0000007040)=[{{&(0x7f0000003b80), 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003c00)=""/202, 0xca}, {&(0x7f0000003d00)=""/116, 0x74}, {&(0x7f0000003d80)=""/65, 0x41}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x4}}, {{&(0x7f0000004e40)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000004ec0)=""/84, 0x54}, {&(0x7f0000004f40)=""/54, 0x36}, {&(0x7f0000004f80)=""/11, 0xb}, {&(0x7f0000004fc0)=""/121, 0x79}], 0x4, &(0x7f0000005080)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000005100), 0x6e, &(0x7f0000006300)=[{&(0x7f0000005180)=""/100, 0x64}, {&(0x7f0000005200)=""/124, 0x7c}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/115, 0x73}], 0x4, &(0x7f0000006340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000006380)=@abs, 0x6e, &(0x7f00000066c0)=[{&(0x7f0000006400)=""/199, 0xc7}, {&(0x7f0000006500)=""/21, 0x15}, {&(0x7f0000006540)=""/181, 0xb5}, {&(0x7f0000006600)=""/186, 0xba}], 0x4}}, {{0x0, 0x0, &(0x7f00000069c0)=[{&(0x7f0000006700)=""/5, 0x5}, {&(0x7f0000006740)=""/49, 0x31}, {&(0x7f0000006780)=""/177, 0xb1}, {&(0x7f0000006840)=""/112, 0x70}, {&(0x7f00000068c0)=""/207, 0xcf}, {0xffffffffffffffff}], 0x6, &(0x7f0000006a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000006b40)=@abs, 0x6e, &(0x7f0000006f40)=[{&(0x7f0000006bc0)=""/108, 0x6c}, {&(0x7f0000006c40)=""/241, 0xf1}, {&(0x7f0000006d40)=""/117, 0x75}, {&(0x7f0000006dc0)=""/76, 0x4c}, {&(0x7f0000006e40)=""/209, 0xd1}], 0x5, &(0x7f0000006fc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}], 0x6, 0x101, &(0x7f00000071c0)) ioctl$FS_IOC_GETFLAGS(r12, 0x80086601, &(0x7f0000007200)) 5.835729108s ago: executing program 0 (id=40): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100107010340b804000000000000000109021b000101fbb00c0904"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) modify_ldt$write(0x1, &(0x7f00000002c0)={0x404, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000540)={0x14, &(0x7f0000000380)={0x40, 0x4, 0xb2, {0xb2, 0x5, "58dcde7629ee8078e6338045f1525f523a164d9ae3a105ce8fc64525c76caf64f0094e00710506df83f17b43c96bc31bd0b72d3933f3786943db5a5a06d81020b29898ab727f6c07d525c6730d69d52ccf38aa25e50705b1c52115516473196f66e968794bc49180eb8c69e3f13e62bdf2d6252712a10dec100471baaab0ada02357fc43ac953ea15270467a8f618a4f4369ad9b84b17cdac51ddacd862f98d763a89da72aee09549ef1ffbcbdbbd505"}}, &(0x7f0000000440)={0x0, 0x3, 0xd5, @string={0xd5, 0x3, "bfdbc77709816975a78c4b092aaa0c3c84b8f6a7b15cd7331b182e266a8c01e7447abdb040e0cd1c088aeae72ab4f2b4bb076083b056c991f80975ac496192caca13aec23bcb8fb73d17d4b3992b20862c5bebd8d5d821c1949c92ee872d46364cec04af980c890d59c37ca0ca655e250a73fb96e90f2c377bd3f6a85a5ea601a8f0b89769e10ef4c2a3a7c42f3ad1536fc386a8853c901ae94ab165eb574e415b7126c01240dfa471e9b6873281ad30654373aa9e78b0b8371489d63f92f4019e4827b8bca393abe01b13b1783fba4959c0c9"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000580)={0x0, 0x15, 0xa5, "118908f9d50ba6f81722ed5c7d67735b5bfcedfe7b64dce84508a9574de1563e65268f929c70bf6deea7005a291f7457d48b6590576ffdb6797df9feb3517e07560d541e91504a75ad98610d3e1d37bee0d0a559f6bdb12624f9ffc4dd5f3a751a55b1083a8ed31048ce8d78cb4c1a77600b189a7bd8a9aa6e0249d505d88f0f737a7849cf321939312e72f7dba3f7ba4f3e2fc248d747ce58bc8165e50ee95a68fffe0ae9"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x23}, &(0x7f00000006c0)={0x20, 0x0, 0x27, {0x25, "0fd2365453e6caa73c8f5fb810ed7a113ca28e4361803cc2d4585a4158313204c423cdd4cd"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x81}}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000180)={'erspan0\x00', r6, 0x700, 0x361, 0x2, 0xd8, {{0x2d, 0x4, 0x0, 0x20, 0xb4, 0x68, 0x0, 0x81, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x27}, {[@noop, @ssrr={0x89, 0x7, 0x88, [@empty]}, @rr={0x7, 0x7, 0xa2, [@multicast1]}, @timestamp={0x44, 0x8, 0x83, 0x0, 0x7, [0x400]}, @timestamp_prespec={0x44, 0x54, 0xdf, 0x3, 0x1, [{@local, 0x99}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}, {@empty, 0x2}, {@multicast2, 0x2}, {@local, 0x80000001}, {@private=0xa010101, 0x4}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x6, 0x0}, 0xded}, {@local, 0x40}]}, @rr={0x7, 0x1b, 0xdc, [@private=0xa010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @lsrr={0x83, 0x17, 0xe0, [@multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast]}]}}}}}) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000100, 0x0, 0x4}]}) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a124300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 4.53771391s ago: executing program 0 (id=44): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='\x00', 0x0, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xa, 0x4) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0xa}], 0x1, 0x10060, 0x0) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x200000, @mcast1}, 0x1c) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) listen(r2, 0x5) accept4(r2, 0x0, 0x0, 0x0) 4.329748921s ago: executing program 0 (id=47): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @mcast1, 0x73}, 0xfffffffffffffecb) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) pwrite64(r0, &(0x7f0000000000)="3829433934ea1c86214637fdb41016aa245400c18878714d42b8d97fa29e971b136fbde0ef7141fb4d11dbf7bf8afdd3363060b567e2fcbf7f6c723ed9997c16c602b4c1c6205aa9bf7de9b293881b61ff08fc2a0d8e497e", 0x58, 0x3) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x6068626e67c42cc0) 4.329336051s ago: executing program 0 (id=48): syz_usb_connect(0x3, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1100201628332080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593208001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e020000070581"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x8ab43, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x102, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYRES32=r1]) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000016c0)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) write(r5, &(0x7f0000000680)="686973743a6b6579733d635da709a8b7b562dc7f657374616d702e753bd2301ad6bb3ab30c05d9f58ad0c59701d592da90f73d240dac14923b8b", 0x3a) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x4058040, &(0x7f0000001700)={0x11, 0x1, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0xd4e, 0x1000008, 0xffffeffffffffffb, 0x1, 0x10000, 0x8, 0x4002004c1, 0xa, 0x200005, 0x0, 0x3, 0x0, 0x401, 0x4, 0x7, 0x10000008d], 0xddcd0000, 0x100001}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000380)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r7, 0x2, &(0x7f00000003c0)) ptrace$cont(0x20, r7, 0x80000001, 0x7) write$UHID_INPUT(r0, &(0x7f0000001740)={0x8, {"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", 0xffffffffffffff54}}, 0x1006) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$peek(0x2, r8, &(0x7f0000001640)) 3.558402129s ago: executing program 4 (id=54): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file1\x00', 0x103841, 0x186) lseek(r3, 0x0, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f00000000c0)=0x9, 0x4) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$lock(r4, 0x8, &(0x7f0000000180)={0x1, 0x1, 0x32, 0xffffffff80000001}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x1ffffffffffffffd, 0x5, 0x6], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000004c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000300)="01005e00001652540012345608004600002c000100000102830bc0a80101e000001694040000", 0x26, 0x0, &(0x7f0000000340)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.432773822s ago: executing program 4 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x180) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0xe) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3.375862017s ago: executing program 4 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x5792000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x8, 0x2, 0x9, 0x400000000, 0x4000000000000002, 0x6, 0x8000000000, 0x80000000000000, 0xe0, 0x0, 0x5, 0x80000000, 0x6, 0xfff, 0x1000000000018, 0x7], 0xeeef0000, 0x89340}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x5, 0x5000, 0x1000, &(0x7f0000001000/0x1000)=nil}) 3.233629372s ago: executing program 4 (id=60): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x40002, 0x0) clock_settime(0xfffffff0, &(0x7f0000000240)={0x0, 0x3938700}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000580)='cpuset.mem_hardwall\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) sendfile(r2, r2, 0x0, 0x9c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) ioctl$UBLK_U_CMD_GET_PARAMS(r0, 0x80207509, &(0x7f0000000640)={0x0, 0xffff, 0x70, &(0x7f00000005c0)={0x70}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x0, 0x1}}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x60000600) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x20, 0x38, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000340)="120000001200e7ef007b00000000000000", 0x11, 0x804, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001e00)=""/4130, 0x1022}, {&(0x7f0000001540)=""/204, 0xcc}, {&(0x7f0000001640)=""/282, 0x11a}, {&(0x7f0000001780)=""/161, 0xa1}, {&(0x7f0000001840)=""/202, 0xca}, {&(0x7f0000001940)=""/76, 0x4c}, {&(0x7f00000019c0)=""/228, 0xe4}, {&(0x7f0000001ac0)=""/133, 0x85}, {&(0x7f0000001d80)=""/73, 0x49}], 0x9}, 0x1207}], 0x3, 0x40012142, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000001c00)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) nanosleep(&(0x7f0000001d00)={0x77359400}, &(0x7f0000001d40)) r8 = socket$inet(0x2, 0x1, 0x80000000) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, &(0x7f0000001c40)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000b803"], &(0x7f0000001c80)=0x3e0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000001cc0)={0x11, 0xf5, 0x1, 0x1, 0x0, 0x0}, 0x14) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000080f300001c00100014000800480100930066000009219078ffffffffffffffff440ce2a1ac1e01010000000394040000860d653d53054b2f4b888eecc4442c6903ac1414aa00000009ffffffff000000010000000000000007ac1414aa0000ffff7f0000010000007000000000084e2004a19078342957ef099a0600000077c21a6c019b1109dfadaf5d47fc60f873d10e6d407f641db3df1e13313d7bf172"], 0xa1) prctl$PR_SET_IO_FLUSHER(0x39, 0x8000200000000) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a7", 0x1}], 0x1, 0x0, 0x0, 0x17) 3.125920963s ago: executing program 0 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="f3420f21e8c481895fddf30fe69600000000f3420f09660fdb9c51000000000f01c9f3ab0f01d1f3420fc774130f2e4a0fc79a00470000", 0x37}], 0x1, 0x61, &(0x7f0000000040)=[@cr4={0x1, 0x10bea}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.893787597s ago: executing program 0 (id=67): socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) r0 = socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000680)={0x10, 0x0, 0x25dfdbfb, 0x100000}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000700)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0x1, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x9a, 0x45, [0x3]}}) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x60000600) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x8880, 0x85) getdents(r3, &(0x7f0000000780)=""/201, 0xc9) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000480)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000500)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000540)={0x11, 0x0, r5}, 0x14) recvmmsg(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/93, 0x5d}], 0x1}}], 0x1, 0x10000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006812a1bd7773adcc456dec4309d72323cc45881c798c4b19a231ce2799b7c864cc0e6409ed439870bbe077c7441bb0e6478815f569ba9f65687bb92f3277269aaf89199c28fc", @ANYRESHEX=r6, @ANYBLOB="01002cbd7000ffdbdf251b0000000400228008009a0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.809599855s ago: executing program 33 (id=67): socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) r0 = socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000680)={0x10, 0x0, 0x25dfdbfb, 0x100000}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000700)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0x1, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x9a, 0x45, [0x3]}}) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x60000600) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x8880, 0x85) getdents(r3, &(0x7f0000000780)=""/201, 0xc9) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000480)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000500)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000540)={0x11, 0x0, r5}, 0x14) recvmmsg(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/93, 0x5d}], 0x1}}], 0x1, 0x10000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006812a1bd7773adcc456dec4309d72323cc45881c798c4b19a231ce2799b7c864cc0e6409ed439870bbe077c7441bb0e6478815f569ba9f65687bb92f3277269aaf89199c28fc", @ANYRESHEX=r6, @ANYBLOB="01002cbd7000ffdbdf251b0000000400228008009a0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.644522732s ago: executing program 3 (id=70): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr, 0x1000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000500)={0x0}) ptrace$getenv(0x4201, r2, 0xff, &(0x7f0000000540)) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x31, 0xe, 0x1, {0x5, @udp_ip4_spec={@loopback, @local, 0x4e23, 0x4e21, 0xff}, {0x0, @multicast, 0x4, 0x0, [0x1]}, @tcp_ip6_spec={@remote, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4e23, 0x4e22}, {0x0, @local, 0xa7f, 0x0, [0x1, 0x4]}, 0x9a, 0x4}}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200)={0x3, 0x3, 0x10001, 0x2, 0x1}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x18, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20020004}, 0x20000004) fcntl$setlease(r1, 0x400, 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "ab624f6011dc5562", "21004bb854986b0b74c0152fbf338bad", "270689dd", "2969c92218294513"}, 0x28) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r6, 0x0, 0x25, &(0x7f0000000280)={@multicast1, @local}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffffe}) close_range(r8, 0xffffffffffffffff, 0x0) 2.409259276s ago: executing program 2 (id=71): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x927) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x7}) r1 = dup3(r0, r0, 0x80000) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000040)={0x2, 0xffffffffffffffff, @status={[0x0, 0x213, 0xb06, 0x8000000000000001, 0x0, 0x4]}, [0x1, 0x3, 0x5e, 0x6, 0x2, 0x9, 0xb, 0x0, 0x101, 0x0, 0xd, 0x0, 0x73aa, 0x3, 0x3, 0xf, 0x5, 0xfffffffffffffff9, 0x9, 0x200, 0xfffffffffffffffc, 0x9, 0x6, 0x10, 0x2, 0x7, 0x0, 0xc1, 0x200, 0x6, 0x7, 0x8, 0x6, 0x4, 0x7fffffff, 0x9, 0xfffffffffffffff8, 0x885, 0x6, 0x8000000000000001, 0x5, 0x8, 0x8000000000000000, 0xe, 0xd3, 0x815c, 0x5, 0x0, 0x4, 0xfffffffffffffffc, 0x3, 0x7, 0x33ae, 0x9, 0xffffffffffffff20, 0x7, 0x8, 0x7, 0x3, 0xb1, 0x6, 0x7, 0x4, 0xfff]}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a80)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a80)=0x2) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000ac0)=0x9) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000ac0)=0x9) write$cgroup_int(r1, &(0x7f0000000b00)=0x80000001, 0x12) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000b40)={0x54, 0x7, 0x1, {0x1ff, 0x9}, {0x2d7b, 0x963}, @const={0x1, {0x8, 0x8, 0x6, 0x5}}}) (async) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000b40)={0x54, 0x7, 0x1, {0x1ff, 0x9}, {0x2d7b, 0x963}, @const={0x1, {0x8, 0x8, 0x6, 0x5}}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b80), 0x80000, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0xffffffffffff8c44) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000bc0)={0x73622a85, 0x100a, 0x0, 0x2}) syz_open_dev$evdev(&(0x7f0000000c00), 0x8000000000000001, 0x2) (async) r3 = syz_open_dev$evdev(&(0x7f0000000c00), 0x8000000000000001, 0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c40)={0x5, 0x5, 0x0, 0x0, 0xb, "34863b8e21a34b415efb3bc8793c3ec41cb3cc"}) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c40)={0x5, 0x5, 0x0, 0x0, 0xb, "34863b8e21a34b415efb3bc8793c3ec41cb3cc"}) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffff81}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xffffffffffffffff}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x11) (async) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffff81}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xffffffffffffffff}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x11) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000d80)='batadv_slave_1\x00', 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r4, &(0x7f0000000dc0)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc) ioctl$TCXONC(r2, 0x540a, 0x1) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000e00)=0xc, 0x4) read$FUSE(r1, &(0x7f0000000e40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r1, &(0x7f0000002e80)={0x18, 0x0, r5, {0x6}}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000002ec0), &(0x7f0000002f00)=0x8) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000002f40)={0x2, 0x9}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002f80)={'wg0\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002fc0)={{{@in=@loopback, @in=@empty, 0x4e24, 0x3, 0x4e23, 0x3, 0x2, 0x80, 0x80, 0x62, r8, r6}, {0x3ff, 0x21c5, 0x7fffffff, 0x6, 0x3, 0x0, 0x7fffffffffffffff}, {0xa, 0x80000000, 0x9a, 0x40}, 0x9, 0x6e6bbb, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast1, 0x4d5, 0x6c}, 0xa, @in=@multicast1, 0x3502, 0x5, 0x0, 0x0, 0x800, 0x6, 0xd59}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002fc0)={{{@in=@loopback, @in=@empty, 0x4e24, 0x3, 0x4e23, 0x3, 0x2, 0x80, 0x80, 0x62, r8, r6}, {0x3ff, 0x21c5, 0x7fffffff, 0x6, 0x3, 0x0, 0x7fffffffffffffff}, {0xa, 0x80000000, 0x9a, 0x40}, 0x9, 0x6e6bbb, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast1, 0x4d5, 0x6c}, 0xa, @in=@multicast1, 0x3502, 0x5, 0x0, 0x0, 0x800, 0x6, 0xd59}}, 0xe8) openat$cgroup_ro(r1, &(0x7f00000030c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000003100)=0x80) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000003100)=0x80) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) 2.36292386s ago: executing program 2 (id=72): mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x8010, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=tcp,port=0xA0000000']) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x18, 0x26, 0x503, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x18}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="240000001e005f02941d00fffffffff802000000dd00000000000000080008000d000000", 0x24) 2.314401695s ago: executing program 2 (id=73): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000ac0)=""/4099, 0x1003}, {&(0x7f0000001b00)=""/105, 0x69}, {&(0x7f0000001b80)=""/51, 0x33}, {&(0x7f0000001bc0)=""/95, 0x5f}, {&(0x7f0000001c40)=""/71, 0x47}, {&(0x7f0000001cc0)=""/4078, 0xfee}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) r4 = inotify_init1(0x800) r5 = inotify_add_watch(r4, &(0x7f0000000700)='./cgroup\x00', 0xd0000405) inotify_rm_watch(r4, r5) read(r4, &(0x7f0000000740)=""/115, 0x29) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x10, 0x40, 0xffffffff, 0x1, {{0x40, 0x4, 0x2, 0x38, 0x100, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0x7, [{@loopback, 0x1ae0}, {@private=0xa010100, 0x2}, {@empty, 0x5}, {@multicast1, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x688a}]}, @cipso={0x86, 0x6a, 0x2, [{0x6, 0xd, "f8de7fde33a35c8f6a7bf2"}, {0x6, 0x12, "0a6225befaf45dca483c952807772656"}, {0x5, 0x12, "d449bed434eaaef931833ea0323a13d6"}, {0x1, 0xe, "8ae3f2ef1855c72fdca1ff8d"}, {0x5, 0x8, "8ac0b18aa0fb"}, {0x5, 0x2}, {0x5, 0x9, "d239295be9732b"}, {0x7, 0x12, "2c83645a8d8329bd450d3aac70b33441"}]}, @timestamp={0x44, 0x1c, 0x1e, 0x0, 0x3, [0x6, 0xdc, 0x3, 0x0, 0xfff, 0x1]}, @generic={0x83, 0xe, "f51c369f3fe390854a41ae3e"}, @cipso={0x86, 0x2c, 0x1, [{0x6, 0x4, "650f"}, {0x7, 0xf, "61e7de330afa972e3295b037e7"}, {0x6, 0x3, "d4"}, {0x6, 0xe, "bf4b11a679198b8c3c7b9d5c"}, {0x6, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000480)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x54, 0xfa, 0x3c4a, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x700, 0x8, 0x64, 0x12}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc4, r6, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x52}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) syz_clone3(&(0x7f0000000100)={0x301800000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r10 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r11, r10, 0x0, 0x3a) 2.27013078s ago: executing program 4 (id=74): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001400010000000000000000000218000004000000140004000000000600000000000000000000000115000280", @ANYBLOB="e0"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8810) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000f00000009003d140f2c369197100000000890a4"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000000c0)={0x2, 0xffffffff, 0x8, 0x4, 0x0, 0x3fe}) 2.26836665s ago: executing program 5 (id=68): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x7ff, 0x40000001, 0xffffff81}, 0x10) r1 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000280)={0x0, 0x7, 0x7b, {0x7b, 0x21, "284c4c0ae70941fd58f46277910b38c212c676cf835a72396ea9b18b491973d102f3ff1784f72ea1b68e4c001fb31659a4522cf272da91fd1d56abc4ae3491054d00a36b1c88281653a766953ac3c05fd6ca5e41daf2c171e7b95a33f08dc3d76c3ed4f8abb0df8c486d7e9fb104ddbd0c6ce930dbd99a3318"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c19}}}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x30, 0x83, "10b94edb0b3f6b45d7a5337ebdd956cfd05f38cefa720b1bcdef1160efaacb86eca57ff3058f1c6b6ee2b3fd65d469830e2a50ba265641a94bc6ce3dddfeb760544e1bea386a82f0042f3547afd864ca04077c314ade14b40f92d99fe08d43a4f11b0df95083686dec33e4edd0c3fb4847bc45773f9f02465df5e30668f12649870a50"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x92}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000200)={0xc0, 0x5, 0x4d, "2190a23694af"}, &(0x7f0000000540)={0x40, 0x5, 0x3, "3335f0"}}) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000100000000000000080008001e000000", 0x24) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) write(r2, &(0x7f0000000240)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 2.185466289s ago: executing program 2 (id=75): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x9}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0xfffe}, 0x20) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 2.006001236s ago: executing program 3 (id=76): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x27}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f00000000c0)=0x9, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x1ffffffffffffffd, 0x5, 0x6], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000004c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1da) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200}]}, 0x10) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40012102, 0x0) sendmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000380)=""/20, 0x14}], 0x1) read$FUSE(r3, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.941709083s ago: executing program 2 (id=77): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) sendmsg$inet(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x40000003, 0x60}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.781478319s ago: executing program 3 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="50000000300005040000000000000000000000003c00010038000100090001006761637400000000280002801800020000000000000000000000000000000000000000000c0003000100000000000020", 0x50}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd70000008df251400007c5e782818c78d8100020000000800010003000000080004000400000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40140) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x18, 0x40000000}, 0xc800) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="50000000300005040000000000000000000000003c00010038000100090001006761637400000000280002801800020000000000000000000000000000000000000000000c0003000100000000000020", 0x50}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd70000008df251400007c5e782818c78d8100020000000800010003000000080004000400000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40140) (async) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x18, 0x40000000}, 0xc800) (async) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) 1.330451745s ago: executing program 5 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xfc) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x139447, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) unshare(0x22020600) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000200)=0xffffffffffffffef) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r1], 0x104}, 0x1, 0x0, 0x0, 0x58000}, 0x20008081) syz_io_uring_setup(0x3bd4, &(0x7f0000000480)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x8000001d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x6, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x0, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0xfffffffb, 0x3c5d, 0x1, 0x0, 0x9, 0x10000, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffc0003, 0x5, 0x4, 0x8, 0x101, 0x90, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x2, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffe, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xff7f], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0x8003, 0x5, 0x200, 0x4, 0x3, 0x8, 0x8, 0x6cfc, 0x3, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x4, 0x1, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x8, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0xf0c1, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x800014c, 0x3, 0x6, 0x10006, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x100001, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x8a13, 0xffff, 0x8000007, 0x2bf, 0x3, 0x1ff, 0x7fffffff, 0x12]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000a40)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl(r0, 0xc0104d08, &(0x7f00000001c0)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x203f00, 0x0) 1.059767432s ago: executing program 2 (id=80): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000005400010000000000000080000700fd0020"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x5, 0xb3, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) fsetxattr(r0, &(0x7f0000000300)=@known='trusted.overlay.origin\x00', &(0x7f0000000200)='\x00', 0x1, 0x2) 929.407616ms ago: executing program 3 (id=81): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x40002, 0x0) clock_settime(0xfffffff0, &(0x7f0000000240)={0x0, 0x3938700}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000580)='cpuset.mem_hardwall\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) sendfile(r2, r2, 0x0, 0x9c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) ioctl$UBLK_U_CMD_GET_PARAMS(r0, 0x80207509, &(0x7f0000000640)={0x0, 0xffff, 0x70, &(0x7f00000005c0)={0x70}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x0, 0x1}}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x60000600) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x20, 0x38, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000340)="120000001200e7ef007b00000000000000", 0x11, 0x804, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001e00)=""/4130, 0x1022}, {&(0x7f0000001540)=""/204, 0xcc}, {&(0x7f0000001640)=""/282, 0x11a}, {&(0x7f0000001780)=""/161, 0xa1}, {&(0x7f0000001840)=""/202, 0xca}, {&(0x7f0000001940)=""/76, 0x4c}, {&(0x7f00000019c0)=""/228, 0xe4}, {&(0x7f0000001ac0)=""/133, 0x85}, {&(0x7f0000001d80)=""/73, 0x49}], 0x9}, 0x1207}], 0x3, 0x40012142, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000001c00)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) nanosleep(&(0x7f0000001d00)={0x77359400}, &(0x7f0000001d40)) r8 = socket$inet(0x2, 0x1, 0x80000000) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, &(0x7f0000001c40)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000b803"], &(0x7f0000001c80)=0x3e0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000001cc0)={0x11, 0xf5, 0x1, 0x1, 0x0, 0x0}, 0x14) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000080f300001c00100014000800480100930066000009219078ffffffffffffffff440ce2a1ac1e01010000000394040000860d653d53054b2f4b888eecc4442c6903ac1414aa00000009ffffffff000000010000000000000007ac1414aa0000ffff7f0000010000007000000000084e2004a19078342957ef099a0600000077c21a6c019b1109dfadaf5d47fc60f873d10e6d407f641db3df1e13313d7bf172"], 0xa1) prctl$PR_SET_IO_FLUSHER(0x39, 0x8000200000000) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a7", 0x1}], 0x1, 0x0, 0x0, 0x17) 519.706207ms ago: executing program 4 (id=82): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffc, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001200010325bd7000000000000000000000007ffd00"/56, @ANYRES32=0x0, @ANYBLOB="0000000080000000fffffff000000000080003001100001e"], 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x44010) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f00000001c0)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000200), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x0) 426.260207ms ago: executing program 5 (id=83): socket$packet(0x11, 0x3, 0x300) syz_open_dev$usbmon(&(0x7f00000002c0), 0x80000001, 0x82002) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x900, 0x0, 0x0, &(0x7f0000000300)={0x1f}, &(0x7f0000000340)={0x0, 0x3938700}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/../file0\x00', 0x34b502, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) 173.744882ms ago: executing program 5 (id=84): rename(&(0x7f0000000380)='./file0\x00', 0x0) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x0, 0x2, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newpolicy={0xc0, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x4e20, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000580)=r2) (async) close(0x3) (async) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x1234, 0x0, @loopback}, 0x1c) (async) setuid(0xee01) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0xa, 0x0, &(0x7f0000000340)) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f00000002c0)=0x4, 0x4) (async) syz_usb_connect$uac3(0x2, 0x99, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x9, 0x40, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x23, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x0, 0x4, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}, @cluster_info_segment={0x6, 0x20, 0x7, 0x89, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8a, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x2, 0x20, {0xa, 0x25, 0x25, 0x4, 0x12}}}}}}}}]}}, 0x0) 76.592122ms ago: executing program 3 (id=85): r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) sched_getscheduler(r0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 0s ago: executing program 3 (id=86): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x0, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}}}]}) read(r3, &(0x7f0000000280)=""/60, 0x3c) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000011c0)={0x802, 0x0, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000224a00010200000000000000000a000003"], 0x14}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0xc0a41, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000001180)=[{0x0}], 0x1}}], 0x1, 0x20, 0x0) sendmsg$nl_generic(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, 0x0, 0x24008000) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000001100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']) r10 = syz_socket_connect_nvme_tcp() tee(r10, r6, 0x7fffffffffffffff, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x8, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1b000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. [ 23.343031][ T36] audit: type=1400 audit(1793922346.110:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.366195][ T36] audit: type=1400 audit(1793922346.130:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.370094][ T286] cgroup: Unknown subsys name 'net' [ 23.394399][ T36] audit: type=1400 audit(1793922346.160:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.394751][ T286] cgroup: Unknown subsys name 'devices' [ 23.520832][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.526485][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.682110][ T36] audit: type=1400 audit(1793922346.450:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.705379][ T36] audit: type=1400 audit(1793922346.450:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.730216][ T36] audit: type=1400 audit(1793922346.450:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.761355][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.770217][ T36] audit: type=1400 audit(1793922346.540:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.795934][ T36] audit: type=1400 audit(1793922346.540:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.830182][ T36] audit: type=1400 audit(1793922346.600:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.855930][ T36] audit: type=1400 audit(1793922346.600:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.856712][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.785420][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.792612][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.799927][ T295] bridge_slave_0: entered allmulticast mode [ 24.806275][ T295] bridge_slave_0: entered promiscuous mode [ 24.814801][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.822071][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.829246][ T295] bridge_slave_1: entered allmulticast mode [ 24.835579][ T295] bridge_slave_1: entered promiscuous mode [ 24.865695][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.872803][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.879947][ T293] bridge_slave_0: entered allmulticast mode [ 24.886229][ T293] bridge_slave_0: entered promiscuous mode [ 24.895756][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.902862][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.910005][ T293] bridge_slave_1: entered allmulticast mode [ 24.916304][ T293] bridge_slave_1: entered promiscuous mode [ 24.943271][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.950383][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.957479][ T296] bridge_slave_0: entered allmulticast mode [ 24.963921][ T296] bridge_slave_0: entered promiscuous mode [ 24.970478][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.977632][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.984816][ T296] bridge_slave_1: entered allmulticast mode [ 24.991172][ T296] bridge_slave_1: entered promiscuous mode [ 25.032778][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.039902][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.046996][ T294] bridge_slave_0: entered allmulticast mode [ 25.053637][ T294] bridge_slave_0: entered promiscuous mode [ 25.063549][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.070749][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.077953][ T294] bridge_slave_1: entered allmulticast mode [ 25.084395][ T294] bridge_slave_1: entered promiscuous mode [ 25.211589][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.218713][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.226088][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.233169][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.263028][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.270174][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.277472][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.284848][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.309764][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.316861][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.324197][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.331266][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.339540][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.346615][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.353954][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.361017][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.401655][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.409466][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.416698][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.424803][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.432196][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.439775][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.447202][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.454662][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.473909][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.481015][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.488977][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.496042][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.504216][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.511327][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.520857][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.527935][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.547401][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.554523][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.562362][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.569440][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.603219][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.610333][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.621710][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.628821][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.657062][ T296] veth0_vlan: entered promiscuous mode [ 25.675821][ T294] veth0_vlan: entered promiscuous mode [ 25.694875][ T294] veth1_macvtap: entered promiscuous mode [ 25.703607][ T296] veth1_macvtap: entered promiscuous mode [ 25.720211][ T293] veth0_vlan: entered promiscuous mode [ 25.748410][ T293] veth1_macvtap: entered promiscuous mode [ 25.755411][ T295] veth0_vlan: entered promiscuous mode [ 25.788118][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.807024][ T295] veth1_macvtap: entered promiscuous mode [ 25.874976][ T313] FAULT_INJECTION: forcing a failure. [ 25.874976][ T313] name failslab, interval 1, probability 0, space 0, times 1 [ 25.881313][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.905408][ T313] CPU: 1 UID: 0 PID: 313 Comm: syz.1.2 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 25.905450][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.905474][ T313] Call Trace: [ 25.905482][ T313] [ 25.905491][ T313] __dump_stack+0x21/0x30 [ 25.905522][ T313] dump_stack_lvl+0x140/0x1c0 [ 25.905545][ T313] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.905569][ T313] dump_stack+0x19/0x20 [ 25.905590][ T313] should_fail_ex+0x3c2/0x510 [ 25.905612][ T313] should_failslab+0xac/0x100 [ 25.905637][ T313] kmem_cache_alloc_noprof+0x42/0x410 [ 25.905671][ T313] ? security_file_alloc+0x49/0x220 [ 25.905736][ T313] ? kasan_save_alloc_info+0x3a/0x50 [ 25.905768][ T313] security_file_alloc+0x49/0x220 [ 25.905800][ T313] init_file+0x9e/0x210 [ 25.905826][ T313] alloc_empty_file+0xd9/0x270 [ 25.905853][ T313] ? _raw_spin_unlock+0x45/0x60 [ 25.905879][ T313] alloc_file_pseudo+0x142/0x1f0 [ 25.905905][ T313] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 25.905930][ T313] ? bpf_lsm_socket_post_create+0xd/0x20 [ 25.905964][ T313] ? __kasan_check_write+0x18/0x20 [ 25.905996][ T313] sock_alloc_file+0xbe/0x2b0 [ 25.906020][ T313] __sys_socketpair+0x3b8/0x5c0 [ 25.906056][ T313] __x64_sys_socketpair+0x9f/0xc0 [ 25.906082][ T313] x64_sys_call+0x2081/0x2ee0 [ 25.906108][ T313] do_syscall_64+0x57/0xf0 [ 25.906130][ T313] ? clear_bhb_loop+0x50/0xa0 [ 25.906161][ T313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.906192][ T313] RIP: 0033:0x7f2490f9fb19 [ 25.906220][ T313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.906239][ T313] RSP: 002b:00007f2491f2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 25.906269][ T313] RAX: ffffffffffffffda RBX: 00007f2491225fa0 RCX: 00007f2490f9fb19 [ 25.906286][ T313] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 25.906300][ T313] RBP: 00007f2491037b70 R08: 0000000000000000 R09: 0000000000000000 [ 25.906315][ T313] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 25.906330][ T313] R13: 00007f2491226038 R14: 00007f2491225fa0 R15: 00007fffe90040d8 [ 25.906351][ T313] [ 25.937734][ T323] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 26.218909][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.283712][ T331] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 26.298523][ T64] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 26.380855][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.392924][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 26.409008][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 26.418802][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.427088][ T31] usb 3-1: Product: syz [ 26.431673][ T31] usb 3-1: Manufacturer: syz [ 26.436478][ T31] usb 3-1: SerialNumber: syz [ 26.449267][ T64] usb 1-1: not running at top speed; connect to a high speed hub [ 26.460582][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.474745][ T64] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 26.485766][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.506848][ T64] usb 1-1: Found UVC 1.00 device (046d:0825) [ 26.513982][ T64] usb 1-1: No streaming interface found for terminal 2. [ 26.646856][ T315] syz_tun: entered allmulticast mode [ 26.655003][ T315] syz_tun: left allmulticast mode [ 26.664936][ T31] usb 3-1: 1:1 : unsupported format bits 0x20000 [ 26.671743][ T31] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 26.679708][ T31] usb 3-1: 2:1 : unsupported format bits 0x20000 [ 26.689280][ T31] usb 3-1: USB disconnect, device number 2 [ 26.712249][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.722985][ T317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 26.743934][ T311] usb 1-1: USB disconnect, device number 2 [ 27.394154][ T371] capability: warning: `syz.0.16' uses 32-bit capabilities (legacy support in use) [ 27.508587][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.668692][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 27.676477][ T311] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 27.686524][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.694609][ T311] usb 2-1: Product: syz [ 27.699079][ T311] usb 2-1: Manufacturer: syz [ 27.703728][ T311] usb 2-1: SerialNumber: syz [ 27.788528][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 27.916534][ T311] usb 2-1: USB disconnect, device number 2 [ 27.939386][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 27.948264][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.961073][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 27.966792][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.970674][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.999440][ T10] usb 4-1: Found UVC 1.00 device (046d:0825) [ 28.008632][ T10] usb 4-1: No streaming interface found for terminal 2. [ 28.207217][ T383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 28.219936][ T311] usb 4-1: USB disconnect, device number 2 [ 28.730512][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 28.730531][ T36] audit: type=1400 audit(1793922351.500:154): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 28.766972][ T36] audit: type=1400 audit(1793922351.530:155): avc: denied { read } for pid=403 comm="syz.3.26" dev="nsfs" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.787876][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.795684][ T36] audit: type=1400 audit(1793922351.530:156): avc: denied { open } for pid=403 comm="syz.3.26" path="net:[4026532467]" dev="nsfs" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.819623][ T36] audit: type=1400 audit(1793922351.530:157): avc: denied { create } for pid=403 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 28.839842][ T36] audit: type=1400 audit(1793922351.530:158): avc: denied { bind } for pid=403 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 28.860347][ T36] audit: type=1400 audit(1793922351.530:159): avc: denied { connect } for pid=403 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 28.880819][ T36] audit: type=1400 audit(1793922351.530:160): avc: denied { write } for pid=403 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 28.901076][ T36] audit: type=1400 audit(1793922351.530:161): avc: denied { append } for pid=403 comm="syz.3.26" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.923998][ T36] audit: type=1400 audit(1793922351.590:162): avc: denied { write } for pid=403 comm="syz.3.26" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 28.948090][ T36] audit: type=1400 audit(1793922351.590:163): avc: denied { open } for pid=403 comm="syz.3.26" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 28.989903][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 28.998794][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.009629][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 29.018795][ T10] usb 2-1: config 1 has no interface number 0 [ 29.024991][ T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 29.036074][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 29.052562][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.061806][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.069909][ T10] usb 2-1: Product: syz [ 29.074254][ T10] usb 2-1: Manufacturer: syz [ 29.078961][ T10] usb 2-1: SerialNumber: syz [ 29.199392][ T420] netlink: 'syz.3.29': attribute type 4 has an invalid length. [ 29.210870][ T420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=420 comm=syz.3.29 [ 29.223956][ T420] netlink: 'syz.3.29': attribute type 4 has an invalid length. [ 29.286209][ T420] 9pnet: p9_errstr2errno: server reported unknown error [ 29.286638][ T10] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 29.305102][ T10] usb 2-1: USB disconnect, device number 3 [ 29.333184][ T426] netlink: 'syz.3.31': attribute type 22 has an invalid length. [ 29.648500][ T407] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.798530][ T407] usb 3-1: Using ep0 maxpacket: 32 [ 29.809549][ T407] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.826854][ T407] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 29.847611][ T433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.32'. [ 29.850494][ T407] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.883288][ T407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.898491][ T407] usb 3-1: Product: syz [ 29.902725][ T407] usb 3-1: Manufacturer: syz [ 29.907672][ T407] usb 3-1: SerialNumber: syz [ 30.120350][ T310] bridge_slave_1: left allmulticast mode [ 30.126058][ T310] bridge_slave_1: left promiscuous mode [ 30.132344][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.140771][ T310] bridge_slave_0: left allmulticast mode [ 30.146599][ T310] bridge_slave_0: left promiscuous mode [ 30.165234][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.282463][ T310] veth1_macvtap: left promiscuous mode [ 30.288155][ T310] veth0_vlan: left promiscuous mode [ 30.396736][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.403898][ T448] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.411304][ T448] bridge_slave_0: entered allmulticast mode [ 30.417753][ T448] bridge_slave_0: entered promiscuous mode [ 30.424782][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.431940][ T448] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.439280][ T448] bridge_slave_1: entered allmulticast mode [ 30.445789][ T448] bridge_slave_1: entered promiscuous mode [ 30.468534][ T337] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 30.519518][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.526630][ T448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.534030][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.541138][ T448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.571246][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.589460][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.611266][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.618506][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.630882][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.638004][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.645963][ T337] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.653126][ T337] usb 4-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 30.663088][ T337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.676332][ T337] usb 4-1: config 0 descriptor?? [ 30.728573][ T311] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 30.733235][ T448] veth0_vlan: entered promiscuous mode [ 30.764087][ T448] veth1_macvtap: entered promiscuous mode [ 30.879606][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.897006][ T311] usb 1-1: New USB device found, idVendor=04b8, idProduct=0000, bcdDevice= 0.00 [ 30.907104][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.097947][ T337] hid (null): unknown global tag 0xd [ 31.103694][ T337] hid (null): unknown global tag 0xc [ 31.111331][ T337] wacom 0003:056A:00B1.0001: unknown main item tag 0x2 [ 31.118338][ T337] wacom 0003:056A:00B1.0001: unknown global tag 0xd [ 31.125840][ T337] wacom 0003:056A:00B1.0001: item 0 0 1 13 parsing failed [ 31.133351][ T337] wacom 0003:056A:00B1.0001: parse failed [ 31.139231][ T337] wacom 0003:056A:00B1.0001: probe with driver wacom failed with error -22 [ 31.164878][ T311] usb 1-1: string descriptor 0 read error: -71 [ 31.174281][ T311] usb 1-1: USB disconnect, device number 3 [ 31.299851][ T337] usb 4-1: USB disconnect, device number 3 [ 31.688576][ T311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.841849][ T311] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 31.851066][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.859194][ T311] usb 5-1: Product: syz [ 31.863548][ T311] usb 5-1: Manufacturer: syz [ 31.868193][ T311] usb 5-1: SerialNumber: syz [ 31.878711][ T311] usb 5-1: UAS is ignored for this device, using usb-storage instead [ 31.894773][ T311] usb 5-1: UAS is ignored for this device, using usb-storage instead [ 31.902986][ T311] usb-storage 5-1:1.0: USB Mass Storage device detected [ 31.913788][ T311] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 31.922267][ T311] scsi host1: usb-storage 5-1:1.0 [ 32.048710][ T487] process 'syz.3.46' launched './file0' with NULL argv: empty string added [ 32.081596][ T10] usb 5-1: USB disconnect, device number 2 [ 32.198543][ T64] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.253138][ T407] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 32.262896][ T407] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 32.274550][ T407] usb 3-1: USB disconnect, device number 3 [ 32.295568][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.349699][ T64] usb 1-1: config index 0 descriptor too short (expected 4257, got 161) [ 32.358171][ T64] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.373952][ T64] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 32.385083][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.446341][ T496] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.455436][ T496] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.464566][ T496] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.602422][ T485] syzkaller0: entered promiscuous mode [ 32.608155][ T485] syzkaller0: entered allmulticast mode [ 32.718537][ T407] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 32.824136][ T519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=519 comm=syz.3.55 [ 32.849854][ T521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 32.865384][ T525] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 32.874060][ T407] usb 3-1: not running at top speed; connect to a high speed hub [ 32.885980][ T525] overlayfs: overlapping lowerdir path [ 32.890954][ T407] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.904024][ T407] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 32.916129][ T407] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 32.925766][ T407] usb 3-1: New USB device strings: Mfr=245, Product=194, SerialNumber=0 [ 32.934235][ T407] usb 3-1: Product: syz [ 32.938927][ T407] usb 3-1: Manufacturer: syz [ 32.950976][ T407] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 32.958912][ T407] usb 3-1: Failed to create links for entity 1 [ 32.965214][ T407] usb 3-1: Failed to register entities (-22). [ 33.097200][ T535] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.129798][ T311] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.147978][ T311] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.180441][ T311] usb 3-1: USB disconnect, device number 4 [ 33.341551][ T546] netlink: 'syz.3.66': attribute type 4 has an invalid length. [ 33.360927][ T64] usb 1-1: string descriptor 0 read error: -71 [ 33.369318][ T46] bridge_slave_1: left allmulticast mode [ 33.375011][ T46] bridge_slave_1: left promiscuous mode [ 33.380853][ T64] uvcvideo 1-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 33.388962][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.397605][ T46] bridge_slave_0: left allmulticast mode [ 33.398923][ T64] usb 1-1: Found UVC 1.00 device (046d:0825) [ 33.404245][ T46] bridge_slave_0: left promiscuous mode [ 33.410985][ T64] uvcvideo 1-1:1.1: No supported video formats found. [ 33.424014][ T64] uvcvideo 1-1:1.1: Failed to initialize the device (-22). [ 33.428920][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.435800][ T64] usb 1-1: USB disconnect, device number 4 [ 33.553510][ T46] veth1_macvtap: left promiscuous mode [ 33.566053][ T46] veth0_vlan: left promiscuous mode [ 33.671121][ T554] random: crng reseeded on system resumption [ 33.679533][ T551] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.686645][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.694297][ T551] bridge_slave_0: entered allmulticast mode [ 33.701310][ T551] bridge_slave_0: entered promiscuous mode [ 33.708156][ T551] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.715827][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.723140][ T551] bridge_slave_1: entered allmulticast mode [ 33.731266][ T551] bridge_slave_1: entered promiscuous mode [ 33.787107][ T551] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.794231][ T551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.801609][ T551] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.808706][ T551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.857686][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 33.857705][ T36] audit: type=1400 audit(1793922356.620:224): avc: denied { connect } for pid=560 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.885915][ T551] veth0_vlan: entered promiscuous mode [ 33.899054][ T36] audit: type=1400 audit(1793922356.650:225): avc: denied { ioctl } for pid=560 comm="syz.2.71" path="socket:[5862]" dev="sockfs" ino=5862 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.922464][ T551] veth1_macvtap: entered promiscuous mode [ 33.937757][ T36] audit: type=1400 audit(1793922356.660:226): avc: denied { create } for pid=560 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 33.946134][ T565] 9pnet_fd: p9_fd_create_tcp (565): problem connecting socket to 127.0.0.1 [ 33.990731][ T36] audit: type=1400 audit(1793922356.760:227): avc: denied { mounton } for pid=551 comm="syz-executor" path="/root/syzkaller.oS4r5c/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.030850][ T36] audit: type=1400 audit(1793922356.800:228): avc: denied { watch watch_reads } for pid=566 comm="syz.2.73" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 34.278522][ T64] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 34.308586][ T407] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 34.429969][ T569] netlink: 'syz.5.68': attribute type 4 has an invalid length. [ 34.437712][ T569] netlink: 17 bytes leftover after parsing attributes in process `syz.5.68'. [ 34.451891][ T64] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 34.459675][ T64] usb 6-1: can't read configurations, error -71 [ 34.473493][ T407] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 34.481954][ T407] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 34.493848][ T407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 34.501445][ T586] netlink: 32 bytes leftover after parsing attributes in process `syz.3.78'. [ 34.505287][ T407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 34.524995][ T407] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.538730][ T407] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.547821][ T407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.556915][ T407] usb 5-1: config 0 descriptor?? [ 34.562216][ T572] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 34.570736][ T588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.78'. [ 34.971717][ T572] netlink: 'syz.4.74': attribute type 4 has an invalid length. [ 34.979816][ T572] netlink: 'syz.4.74': attribute type 2 has an invalid length. [ 34.991715][ T407] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x1 [ 35.001607][ T407] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 35.009608][ T407] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 35.017035][ T407] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 35.026325][ T407] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 35.033495][ T36] audit: type=1400 audit(1793922357.800:229): avc: denied { getopt } for pid=591 comm="syz.5.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.047989][ T407] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 35.120156][ T36] audit: type=1400 audit(1793922357.890:230): avc: denied { mounton } for pid=591 comm="syz.5.79" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 35.243641][ T36] audit: type=1400 audit(1793922358.010:231): avc: denied { create } for pid=595 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 35.260468][ T337] usb 5-1: USB disconnect, device number 3 [ 35.268539][ T36] audit: type=1400 audit(1793922358.030:232): avc: denied { write } for pid=595 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 35.291145][ T36] audit: type=1400 audit(1793922358.060:233): avc: denied { ioctl } for pid=595 comm="syz.2.80" path="socket:[6055]" dev="sockfs" ino=6055 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.548627][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.699805][ T311] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 35.708704][ T311] usb 3-1: config 0 has an invalid descriptor of length 85, skipping remainder of the config [ 35.719175][ T311] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 35.729281][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 35.738351][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.747197][ T311] usb 3-1: config 0 descriptor?? [ 35.753706][ T311] usb 3-1: Found UVC 9.00 device (046d:0825) [ 35.760843][ T311] usb 3-1: No streaming interface found for terminal 2. [ 35.963871][ T407] usb 3-1: USB disconnect, device number 5 [ 35.997412][ T603] mmap: syz.5.83 (603) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.009814][ T603] netlink: 'syz.5.83': attribute type 63 has an invalid length. [ 36.017493][ T603] netlink: 5 bytes leftover after parsing attributes in process `syz.5.83'. [ 36.026384][ T64] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 36.028705][ T603] gretap0: entered allmulticast mode [ 36.039511][ T603] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 36.158527][ T64] usb 5-1: device descriptor read/64, error -71 [ 36.366331][ T614] ------------[ cut here ]------------ [ 36.371900][ T614] WARNING: CPU: 0 PID: 614 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0 [ 36.381397][ T614] Modules linked in: [ 36.385357][ T614] CPU: 0 UID: 0 PID: 614 Comm: syz.3.86 Not tainted syzkaller #0 719241e1970c5e75a27bae3225f7444f8b3609e5 [ 36.396933][ T614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.407100][ T614] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 36.413204][ T614] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d eb ef 89 06 00 0f 85 c2 00 00 00 c6 05 de ef 89 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 36.432892][ T614] RSP: 0018:ffffc9000da67560 EFLAGS: 00010246 [ 36.439071][ T614] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 36.447085][ T614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000da67618 [ 36.455119][ T614] RBP: ffffc9000da676a0 R08: ffffc9000da67617 R09: 0000000000000000 [ 36.463168][ T614] R10: ffffc9000da67600 R11: fffff52001b4cec3 R12: ffffc9000da675a0 [ 36.471242][ T614] R13: dffffc0000000000 R14: 1ffff92001b4ceb0 R15: 0000000000000000 [ 36.479285][ T614] FS: 00007f66e19f46c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 36.488264][ T614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.495047][ T614] CR2: 000020000001a000 CR3: 0000000136026000 CR4: 00000000003526b0 [ 36.503101][ T614] Call Trace: [ 36.506481][ T614] [ 36.509485][ T614] ? vfs_write+0x3c1/0xfd0 [ 36.513948][ T614] ? ksys_write+0x145/0x260 [ 36.518516][ T614] ? x64_sys_call+0x271c/0x2ee0 [ 36.523407][ T614] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 36.529225][ T614] ? hashtab_init+0xd6/0x1f0 [ 36.533884][ T614] ___kmalloc_large_node+0x81/0x220 [ 36.539159][ T614] ? hashtab_init+0xd6/0x1f0 [ 36.543802][ T614] __kmalloc_large_node_noprof+0x1e/0xd0 [ 36.549639][ T614] ? hashtab_init+0xd6/0x1f0 [ 36.554306][ T614] __kmalloc_noprof+0x326/0x510 [ 36.559253][ T614] ? kasan_save_alloc_info+0x3a/0x50 [ 36.564600][ T614] hashtab_init+0xd6/0x1f0 [ 36.569119][ T614] ? common_read+0x175/0x490 [ 36.573821][ T614] symtab_init+0x44/0x70 [ 36.578085][ T614] common_read+0x1e7/0x490 [ 36.582608][ T614] ? hashtab_init+0xd6/0x1f0 [ 36.587271][ T614] ? __cfi_common_read+0x10/0x10 [ 36.592368][ T614] ? hashtab_init+0x100/0x1f0 [ 36.597192][ T614] policydb_read+0xa83/0x2860 [ 36.601959][ T614] ? __kasan_kmalloc+0x96/0xb0 [ 36.606774][ T614] ? __cfi_policydb_read+0x10/0x10 [ 36.612067][ T614] ? security_load_policy+0x130/0x12d0 [ 36.617620][ T614] security_load_policy+0x16a/0x12d0 [ 36.623011][ T614] ? irqentry_exit+0x4a/0x60 [ 36.627664][ T614] ? __kasan_check_write+0x18/0x20 [ 36.632991][ T614] ? mutex_lock+0x97/0x1d0 [ 36.637448][ T614] ? __cfi_security_load_policy+0x10/0x10 [ 36.643251][ T614] ? rep_movs_alternative+0x4a/0xa0 [ 36.648526][ T614] sel_write_load+0x258/0x600 [ 36.653230][ T614] ? __cfi_sel_write_load+0x10/0x10 [ 36.658497][ T614] ? bpf_lsm_file_permission+0xd/0x20 [ 36.663912][ T614] ? __cfi_sel_write_load+0x10/0x10 [ 36.669193][ T614] vfs_write+0x3c1/0xfd0 [ 36.673498][ T614] ? tun_set_iff+0x264/0xec0 [ 36.678112][ T614] ? __cfi_vfs_write+0x10/0x10 [ 36.682950][ T614] ? __kasan_check_write+0x18/0x20 [ 36.688113][ T614] ? mutex_lock+0x97/0x1d0 [ 36.692880][ T614] ? __cfi_mutex_lock+0x10/0x10 [ 36.697796][ T614] ksys_write+0x145/0x260 [ 36.702205][ T614] ? __cfi_ksys_write+0x10/0x10 [ 36.707114][ T614] ? __kasan_check_write+0x18/0x20 [ 36.712449][ T614] ? __kasan_check_write+0x18/0x20 [ 36.717785][ T614] ? fpregs_restore_userregs+0x11c/0x260 [ 36.723489][ T614] __x64_sys_write+0x7f/0x90 [ 36.728115][ T614] x64_sys_call+0x271c/0x2ee0 [ 36.732881][ T614] do_syscall_64+0x57/0xf0 [ 36.737337][ T614] ? clear_bhb_loop+0x50/0xa0 [ 36.742098][ T614] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.748040][ T614] RIP: 0033:0x7f66e0b9fb19 [ 36.752529][ T614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.772203][ T614] RSP: 002b:00007f66e19f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 36.780689][ T614] RAX: ffffffffffffffda RBX: 00007f66e0e26090 RCX: 00007f66e0b9fb19 [ 36.788903][ T614] RDX: 000000000001b000 RSI: 0000200000000000 RDI: 0000000000000003 [ 36.796935][ T614] RBP: 00007f66e0c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 36.804973][ T614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.813122][ T614] R13: 00007f66e0e26128 R14: 00007f66e0e26090 R15: 00007ffc6e34f428 [ 36.821183][ T614] [ 36.824244][ T614] ---[ end trace 0000000000000000 ]--- [ 36.829952][ T64] usb 5-1: device descriptor read/64, error -71 [ 36.831091][ T614] SELinux: failed to load policy [ 37.068580][ T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 37.136796][ T455] rust_binder: 612: undelivered TRANSACTION_COMPLETE [ 37.147507][ T407] rust_binder: 612: undelivered transaction 2, process died [ 37.198544][ T64] usb 5-1: device descriptor read/64, error -71 [ 37.438559][ T64] usb 5-1: device descriptor read/64, error -71 [ 37.548702][ T64] usb usb5-port1: attempt power cycle [ 37.888550][ T64] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 37.909585][ T64] usb 5-1: device descriptor read/8, error -71 [ 38.039762][ T64] usb 5-1: device descriptor read/8, error -71 [ 38.278566][ T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 38.299685][ T64] usb 5-1: device descriptor read/8, error -71 [ 38.429692][ T64] usb 5-1: device descriptor read/8, error -71 [ 38.538700][ T64] usb usb5-port1: unable to enumerate USB device