last executing test programs: 9.017051091s ago: executing program 3 (id=36): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003a1000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) (async) mkdir(&(0x7f0000001700)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80), 0x80, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002f00)}) r1 = openat(0xffffffffffffff9c, &(0x7f0000002f40)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f0000002f80)='.pending_reads\x00', 0x22000, 0x1b4) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f0000002fc0)) (async) clock_adjtime(0x1, &(0x7f0000000340)={0x10800, 0xffff, 0x4, 0x100000001, 0x9, 0xfffffffffffffffd, 0x13, 0xffffffffffffffff, 0x7, 0x1, 0x2, 0x5, 0x40001000, 0x8000, 0x4, 0x9, 0x5, 0x437e28ed, 0xffffffffffff8001, 0x9, 0x3, 0x6, 0x7, 0x2, 0x10000, 0x4}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200) pread64(r5, 0x0, 0x0, 0x4) (async) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000180)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000700)=""/4048, 0xfd0}, {&(0x7f0000001780)=""/223, 0xdf}, {&(0x7f0000001880)=""/122, 0x7a}, {&(0x7f0000001900)=""/4099, 0x1003}, {&(0x7f0000002940)=""/267, 0x10b}, {&(0x7f0000002a80)=""/310, 0x136}, {&(0x7f0000002bc0)=""/73, 0x49}, {&(0x7f0000002c40)=""/231, 0xe7}, {&(0x7f0000002d40)=""/145, 0x91}], 0x9}, 0x7e4}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) (async, rerun: 32) r8 = dup3(r0, r3, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000001740)=[@acquire_done={0x40106309, 0x0, 0x1000000}], 0x0, 0x0, 0x0}) 9.014672171s ago: executing program 3 (id=38): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYRESDEC], 0x30}, 0x1, 0x0, 0x0, 0x260080d4}, 0xd0) r1 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/205, 0xcd}], 0x1}, 0xffffffff}], 0x1, 0x2041, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x24004000) 9.012145692s ago: executing program 3 (id=39): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x62, 0x3, 0x3, 0x8}) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffff"], 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) close(0x3) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r4, 0x309, 0x0, 0x0, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x0, 0x10, 0x7, 0x8, {{0x1e, 0x4, 0x1, 0x4, 0x78, 0x67, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback, {[@end, @generic={0x44, 0x3, "1a"}, @noop, @cipso={0x86, 0x5d, 0x1, [{0x6, 0x2}, {0x5, 0x7, "70f19617ac"}, {0x0, 0xa, "b359ae440fc3ccd7"}, {0x7, 0xd, "fdd206abb7cf201e385136"}, {0x2, 0xb, "a70e19b02e99ff1933"}, {0x2, 0xa, "162dc6a64abc2fc0"}, {0x2, 0x9, "314a9ce1ab9c26"}, {0x1, 0xf, "a0b53beba4a9a1b317bf4200c8"}, {0x2, 0xa, "20110e093fa6d29d"}]}]}}}}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000940)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000980)={'xfrm0\x00', 0x0}) sendto$packet(r6, &(0x7f00000009c0)="0b031200e2ffd3fd020047b188cb1a005abd0b215b001fc9cc1bd2ef", 0xfdef, 0x44040001, &(0x7f0000000a40)={0x11, 0x0, r7, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000a80)={0x0, @local, @loopback}, &(0x7f0000000ac0)=0xc) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000b00)={'ip6_vti0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000b40)='`', 0x3b2, 0x0, &(0x7f0000000b80)={0x2f, 0x0, r10, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000f00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f00000002c0)={0x2dc, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x390063049ac0791f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000900000000240009801c00000008"], 0x40}], 0x1}, 0x0) 5.948836379s ago: executing program 3 (id=54): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x22000, 0x1b4) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000002c0)) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000000040)=""/122, 0x7a}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x8c) (async) openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x22000, 0x1b4) (async) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000002c0)) (async) gettid() (async) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000180)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) (async) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) (async) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000000040)=""/122, 0x7a}], 0x1, 0x0) (async) 5.93455706s ago: executing program 3 (id=55): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x40000000) faccessat2(r1, &(0x7f0000000400)='./dev/sda\x00', 0x21, 0x300) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000000c0)='/sbin/dhclient\x00', 0xf) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_connect(0x2, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d240100013400000000000501122402010102000000000000000003c9bbbf4224030201010003"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 5.768673424s ago: executing program 3 (id=58): mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c) setxattr(&(0x7f0000000b00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)='upperdir', 0x8, 0x2) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x800, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/trace_marker\x00', 0x1, 0x1a) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000900)=@filename='./dev/sda1\x00', &(0x7f0000000940)='./mnt\x00', &(0x7f0000000980)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000a40)='./mnt\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x80042, 0x4d) fallocate(r3, 0x100000000000020, 0x2000, 0x2f93) sendmmsg$unix(r2, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c8d1}}, {{&(0x7f00000004c0)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc0c0}}], 0x2, 0x40000004) r4 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000740)='asymmetric\x00', &(0x7f00000009c0)=@keyring={'key_or_keyring:', 0x0, 0x2}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x103) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0x8080000, 0x8, 0x65, 0xfb, 0x8, 0x3e, 0x13, 0x0, 0xc8, 0x19}, {0xb000, 0x50000, 0x9, 0x0, 0x22, 0x5e, 0x79, 0x6, 0x5, 0xb4, 0x3}, {0x0, 0xa000, 0x0, 0x5, 0x3, 0x3, 0x0, 0x19, 0x1, 0x5, 0x5, 0x81}, {0xeeee0000, 0x1, 0x44e41e77284b2875, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x2, 0xb, 0x3, 0x15, 0x19, 0xab, 0x8, 0x7, 0x83, 0x8, 0x83}, {0x8000000, 0x0, 0xc, 0x4, 0xad, 0x9, 0x1, 0xf7, 0x8, 0x5, 0xff}, {0x3000, 0x2000, 0xc, 0x7, 0x8, 0x5, 0x9, 0x94, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x7, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x2d}, {0x100000, 0x7}, 0x80000031, 0x0, 0x41000, 0x1200d, 0x3, 0x8000, 0x54000, [0x6800000000000000, 0x4, 0x61, 0xffffffff]}) 5.718218895s ago: executing program 32 (id=58): mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c) setxattr(&(0x7f0000000b00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)='upperdir', 0x8, 0x2) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x800, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/trace_marker\x00', 0x1, 0x1a) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000900)=@filename='./dev/sda1\x00', &(0x7f0000000940)='./mnt\x00', &(0x7f0000000980)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000a40)='./mnt\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x80042, 0x4d) fallocate(r3, 0x100000000000020, 0x2000, 0x2f93) sendmmsg$unix(r2, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c8d1}}, {{&(0x7f00000004c0)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc0c0}}], 0x2, 0x40000004) r4 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000740)='asymmetric\x00', &(0x7f00000009c0)=@keyring={'key_or_keyring:', 0x0, 0x2}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x103) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0x8080000, 0x8, 0x65, 0xfb, 0x8, 0x3e, 0x13, 0x0, 0xc8, 0x19}, {0xb000, 0x50000, 0x9, 0x0, 0x22, 0x5e, 0x79, 0x6, 0x5, 0xb4, 0x3}, {0x0, 0xa000, 0x0, 0x5, 0x3, 0x3, 0x0, 0x19, 0x1, 0x5, 0x5, 0x81}, {0xeeee0000, 0x1, 0x44e41e77284b2875, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x2, 0xb, 0x3, 0x15, 0x19, 0xab, 0x8, 0x7, 0x83, 0x8, 0x83}, {0x8000000, 0x0, 0xc, 0x4, 0xad, 0x9, 0x1, 0xf7, 0x8, 0x5, 0xff}, {0x3000, 0x2000, 0xc, 0x7, 0x8, 0x5, 0x9, 0x94, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x7, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x2d}, {0x100000, 0x7}, 0x80000031, 0x0, 0x41000, 0x1200d, 0x3, 0x8000, 0x54000, [0x6800000000000000, 0x4, 0x61, 0xffffffff]}) 5.176905829s ago: executing program 4 (id=62): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1022802, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x8000, 0x2, 0xfff, 0x100000001, 0x40000000000007, 0x8, 0x2}, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501b3237f6f012709058c0200066df780"], &(0x7f0000000640)={0x0, 0x0, 0x3d, 0x0}) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@broadcast, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x88, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x3c}, @in6=@private0, {0x0, 0x0, 0x6, 0x3, 0x8}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x70bd2b, 0x0, 0x2, 0x0, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f00000003c0)={{&(0x7f00007c0000/0x1000)=nil, 0x1000}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0000000443d0c4150624a5b960815c040000000c0001800800010028080000000ceee85f08eaa7f24b3e2b0958b9fbc9ebda2d9f00c7fbea30856bf3787f96fa3aaf815d194ad20144a4"], 0x34}, 0x1, 0x0, 0x0, 0x40c0810}, 0x40000) 3.592364459s ago: executing program 4 (id=76): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xca341, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x71) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r2, 0xc0184d08, &(0x7f0000000500)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000002800)="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", 0x2000, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)={0x130, 0x0, 0x4, {0x2, 0x0, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, r4, 0x2000, '\x00', 0xd, 0x1ca, 0xb4ed, 0x8, {0x88009, 0xfffffff9}, {0x8c7, 0x7f4a}, {0x4, 0x9}, {0x8, 0x9}, 0x7fff, 0x4, 0x0, 0x9}}}}) mount$fuse(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540), 0x289480, &(0x7f0000004a00)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x2e00}}, {@default_permissions}], [{@smackfsfloor={'smackfsfloor', 0x3d, '}]}\x14\xf0^}.\\'}}, {@subj_type={'subj_type', 0x3d, '/dev/kvm\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00') write$cgroup_int(r5, &(0x7f00000003c0)=0xfffffffffffffff7, 0x12) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x104}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000002c0)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.54459727s ago: executing program 4 (id=77): syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5000080b0102012130010904000000010130000a24010f3b00080000000d240706050a00000007000000132403020504020604810000007f008000ff0711240805050300000000000000000000000904010000010230000904010101010230000905010920000308d80a2525020000000001023000090402010101023000090582094000a010080a2525ff07000009720bc096e6d21bf0"], 0x0) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d"], 0xd0060) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000005380)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @mcast1, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=[@dstopts={{0x18, 0x29, 0x37, {0x6c}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts={{0x18, 0x29, 0x37, {0x87}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x60}}, {{&(0x7f0000001600)={0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c, 0x0, 0x0, &(0x7f00000054c0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x2, 0xee}}}], 0x18}}], 0x2, 0x24000800) 3.429490903s ago: executing program 1 (id=78): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_adj\x00') write$tcp_mem(r0, &(0x7f0000000540)={0xffffffffffffffff, 0x20, 0x0, 0x20, 0x2}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000022c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000002300)='./mysys\x00', &(0x7f0000002340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002380)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0x2020) clock_gettime(0x1, &(0x7f0000000740)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x7}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffffc}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xd}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x45}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x54}}, 0xc0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x388, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PROBE_RESP={0x369, 0x91, "e21eac788c4105aeead2fd26ce740417c088cdb6c6baa8d0d402e593eb2d97e9ab9c42a05f497ac34647980aac3124185003329d6ce62f5008003326792dc92f92fe99ab350034e792678bbc1adb3a03a4b9dc7a72797d1a2750c0947ee670cb39c981e10712b6609c4412d42db1d1c351fdc9bffae266e9557a24507f6207a02a6ddaeba21b28c6dc3cdc416dfa6e9f984759eeccc1fd8ab8ccc69b9b2ae12d3a5ac2beff256c0b16148777dd5b8ab589e2600e2eb41711b9937c36bc88a97d6dc6387709ffa97a837943614cae8024d4539a147592690c1e9a74638f4782e3e15007db829031b3620b93d23162274e972f874369f790ab49e5de2229a9d85f3f355499bce4ad83224e9c023ee08950cc3f8ca26b1069934700134cf14ed87227af65f9357afdbebf0d89dc46004fc7ce2d7468865813992c2ecf03ec8e9d290b72ee32f65cd02348ef45102a815ebe196420c0f2cced1bab9268191e38c4805fcf0e1f8f207eb4edd0565a88ef7e452d50b15164a4594f7c04ff29c134ec919c3b9a2aa0088a7a3393c1b117187833f957188b96c845fe8cc1d81a194e8e9f082c05fc96e18bae54e18d16007b997560525787d1d5fa18b4b4c6e339fbd7f70c4364d4d72fe831a815f85bede5e8e2f7deacf7b76a8ff5495cacd6a4662df87a9793af20561d072982798db3306ec3f56011736f6521252c116d307e2c7f9db6e0dbce47e3f67ebdf87afd6786b13db3a39b1b4aa47cbc9a647960fc8c9ddd561f98efa15c4fc7632726980f0b4999469873622c89254d9a46d2daacc9d4ef0896003ee90129666823ced0d3a7c8283ed5e6b0048d332d2df0a506b3b39341ddc6dcad01f77ad8eea8b9378d235084082d85d4da38f052b7d264418720d829e26ff0109bdf689f97150fac5be54d3d94ced80610d059927b67ba3bdee1480a3293024e8ccbafd766187ef3f553513259e5a6787613fcb3ff14760bfc7146d33fe1335e998736965dc689f3940bbf28f5d5035fb73d193dabcd6678bef586134fd1c94e12df306c31269e19d01305c53fd4855f711de0d6d4f01e15b7945ea81eb81e1098dc71373ab4884b8c08e2097f16ef09835ef4af12392e378511041e04eb1ba51af31e0036dec6c60f7cb07230f1330d810b686e62d78bb6df92ef2aea4d74f5f35e3c88582e19033cd3186b1f8fd9693679ad734b4645f779ab06075d936ea295"}]}, 0x388}, 0x1, 0x0, 0x0, 0x4000}, 0x14) 3.257075028s ago: executing program 2 (id=80): clock_gettime(0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8948, &(0x7f00000000c0)={'vcan0\x00', 0x4e171e32}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x5, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r3 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\aD\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) write(r2, &(0x7f0000000080)='4', 0x1) 3.249746118s ago: executing program 1 (id=81): ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000180)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000001c0)=0x2100e6d4, 0x4) write(0xffffffffffffffff, &(0x7f0000000380)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x8800) (async) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x80) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x140}}}, &(0x7f0000000700)) syz_ublk_setup_io_uring(0x4350, &(0x7f0000000540)={0x0, 0xd060, 0x4, 0x2, 0x8118}, &(0x7f0000000280), &(0x7f0000000800), &(0x7f0000000840)) 2.7754289s ago: executing program 2 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="12cf81c7123a7900a77a20593a3ce2faf49c2b649a3bcc9b611ec79dd3", 0x1d, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="d274bb722f", 0x5, 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000280)="23112906aa758216a8e536f9a6d47d85162a447d37731c6f1e52ff0b34d4c8ca4aa1733afd6a6fc5111fbc", 0x2b, 0xfffffffffffffffc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000400)={'veth0_to_bond\x00', 0x400}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) write(r5, &(0x7f0000000680)="2f0ae0e4670b70b81279344241dd11", 0xf) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r2, r3, r4}, &(0x7f0000000300)=""/2, 0x2, &(0x7f0000000580)={&(0x7f0000000340)={'digest_null\x00'}, &(0x7f0000000480)="d6f920a9e8376192257c1fff97b35355dcec4ee3dda38123e734fa7a0cdbabb411bd01595d042e49fc7b6e370ff1bbfc473c98831ad814f9587b5fafd89d033e855eaec7a5fdc6510119fbb83671d3f2db1b255252761d011f150d3bcc3b01692079a708840c140df1c0ef3f75872f28e5514ebc6cb316b49e8405291fa1fd97075d114cf06b38ffcad8ab39ab52b7c371d9b5edd7a804f19f2f80b3223ac9a78e84a324d03cf20a8e79cd545d51583dd7072adedf6ddfa7733893293cf493384e9317f61e07f5b2853c6ef9fe21956bbeaaf47586", 0xd5}) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)={0x14, r1, 0x601, 0x2}, 0x14}}, 0x2004c000) 2.601989355s ago: executing program 2 (id=87): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x100, 0x6, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) timerfd_create(0x8, 0x80800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='0', 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872ff2"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r8}, 0x14) sendto$inet6(r0, &(0x7f0000000200)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000380)={0xa, 0xfffd, 0x100c7, @local}, 0x1c) 2.265338723s ago: executing program 4 (id=88): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f00000002c0)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$loop(&(0x7f0000000300), 0x8000000000000001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) flock(r0, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) flock(r1, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) chroot(&(0x7f00000002c0)='./file0\x00') (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$loop(&(0x7f0000000300), 0x8000000000000001, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) (async) flock(r2, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) (async) 1.796962235s ago: executing program 1 (id=89): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) r2 = getpgrp(r1) tkill(r2, 0x2f) waitid(0x1, r1, 0x0, 0x8, &(0x7f0000000340)) 1.422685265s ago: executing program 4 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, "a158cf2ecb"}, &(0x7f0000000040)=0x29) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r3}, 0xc) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x28200, 0xa) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes256, 0x4, '\x00', @d}) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x21, &(0x7f0000000340)={0x2d, 0x6, 0xffff}) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000140)={0x5, 0xf}, 0x2) write(r1, &(0x7f0000000280)='p:s/ ./file0:0', 0xe) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000002c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, "a158cf2ecb"}, &(0x7f0000000040)=0x29) (async) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) socket(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r3}, 0xc) (async) open$dir(&(0x7f0000000180)='./file0\x00', 0x28200, 0xa) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes256, 0x4, '\x00', @d}) (async) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)) (async) getpid() (async) rt_tgsigqueueinfo(r5, r5, 0x21, &(0x7f0000000340)={0x2d, 0x6, 0xffff}) (async) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000140)={0x5, 0xf}, 0x2) (async) write(r1, &(0x7f0000000280)='p:s/ ./file0:0', 0xe) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000002c0), 0x0) (async) 1.402720275s ago: executing program 4 (id=91): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80000000) (async) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) r1 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f0000000000)=0xfffffffffffffd96) (async, rerun: 32) write$selinux_load(0xffffffffffffffff, 0x0, 0x190ec) (async, rerun: 32) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000140)=ANY=[]) 1.261001768s ago: executing program 2 (id=92): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x11) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002240)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x300d2140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000043c0)='./file0\x00', 0x40042, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004400)="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", 0x2000, &(0x7f0000006400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000064c0)={0x78, 0x0, 0x6, {0x20000000000000c, 0x20000000, 0x0, {0x4, 0x6, 0x0, 0xd, 0x2051, 0x7, 0x4, 0x20, 0xffffffc0, 0x2000, 0x2, r2, r3, 0x100003, 0x7ffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000006540)=[{&(0x7f0000006580)=""/4096, 0x1000}], 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x40) 973.887776ms ago: executing program 1 (id=93): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x848100) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe94a}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000091) (async) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004000) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x6, @local, 0x3}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000860}, 0x20040514) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8844}, 0x4000000) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000) (rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xdcf1fcbcc91b7421}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [{{0x254, 0x1, {{0x3, 0x8000}, 0x4, 0x6, 0x0, 0x5, 0x22, 'syz1\x00', "bed8238ade6f32fcea78af2f9220502812a0c4b58a21a73e69b4fc991d652270", "a0d4285a4ef5bbb779041582db050b2257958d2e00bd2e35f480aa90095260da", [{0xf8, 0x3, {0x0, 0x3}}, {0x9, 0x6, {0x3}}, {0x6, 0x5, {0x1, 0xe}}, {0x8, 0x3, {0x0, 0x8}}, {0xfff1, 0x7, {0x3, 0x717}}, {0x8, 0x9, {0x2, 0x9}}, {0x2, 0xff, {0x1, 0x9}}, {0x3, 0xb, {0x0, 0x6}}, {0x6b75, 0x1, {0x3, 0xfffffffc}}, {0x5, 0xc, {0x0, 0x7fff}}, {0x5, 0x7, {0x3, 0x83b}}, {0x6, 0x6, {0x1, 0xfffffff9}}, {0x1, 0x9, {0x0, 0x4f1}}, {0x101, 0x3, {0x1, 0x1000}}, {0x7, 0x0, {0x3}}, {0xc37, 0xb4, {0x1, 0x6}}, {0x9, 0x4, {0x3, 0x45d9}}, {0x7, 0x2, {0x2, 0x9}}, {0xb086, 0xe, {0x3, 0x8001}}, {0xa8, 0x5, {0x0, 0x1}}, {0x40, 0x5, {0x3, 0x2}}, {0x433, 0x8000, {0x2, 0x2}}, {0x8, 0x8, {0x2, 0x101}}, {0xfff, 0x2, {0x1, 0x1000}}, {0x11d1, 0xfff9, {0x1, 0xffffff23}}, {0x1, 0x7, {0x1, 0xbcb3}}, {0x9, 0x0, {0x3, 0xcd1}}, {0x7, 0x8000, {0x1, 0x9}}, {0xe, 0xd, {0x0, 0x4}}, {0x80, 0x2, {0x2, 0x6}}, {0x5558, 0x2, {0x1, 0xff}}, {0x9, 0xffff, {0x3, 0x401}}, {0xfff2, 0x8, {0x3, 0x40}}, {0x9, 0x2, {0x2, 0x1}}, {0xa, 0x65, {0x2, 0xe}}, {0xfffb, 0x80, {0x0, 0xfffffff7}}, {0xea, 0x8001, {0x3, 0x9}}, {0x0, 0x3, {0x2, 0x5}}, {0x4, 0x5, {0x0, 0x5}}, {0x6, 0xa9, {0x1, 0xaac}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r3) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'erspan0\x00', 0x0, 0x10, 0x700, 0x5, 0xe, {{0xf, 0x4, 0x2, 0x0, 0x3c, 0x64, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp={0x44, 0x18, 0x23, 0x0, 0x1, [0x4800000, 0x8, 0x6, 0xfffffffa, 0x9]}, @generic={0x191, 0x9, "893061a2dc91c1"}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b40)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004800}, 0x1) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, r8, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "5e3b63d0dd3db9cb6ab9f1a29f25db5b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40044) (async, rerun: 32) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) (rerun: 32) fsetxattr$security_capability(r9, &(0x7f0000000dc0), &(0x7f0000000e00)=@v2={0x2000000, [{0x8001, 0x7f}, {0x7}]}, 0x14, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000f00)={'gretap0\x00', &(0x7f0000000e80)={'gre0\x00', r10, 0x700, 0x8, 0x3, 0x2, {{0xa, 0x4, 0x1, 0x2, 0x28, 0x68, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast, {[@end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x55, [@broadcast]}, @timestamp={0x44, 0x8, 0xb6, 0x0, 0x4, [0x6]}]}}}}}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r11, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r12, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1080}, 0x20000000) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000010c0), r3) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0x100, r13, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffc00}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x84) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001280)='@.\\,\x00', 0x0, r0) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000007) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) 938.375847ms ago: executing program 1 (id=94): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x80, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000400)={0x43, 0x3, 0x3, 0x3}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000540)={0x43, 0x4, 0x0, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x4004) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) write$tun(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="000022f0aaaaaaaaaaaa0180c20000028100380086dd6100070000002c00ff0100000000000000000000000000000000018e8d1ed119549a08a6074ccd970ad7a50cc05e2293ccf5b5f5f280c0e041e9dbe6c5cdd90201272662a25b4d6b47ac5e70f9956a18993d3cd5964b58f5539e2399de728dbc307767f89b1cb401e7092fe4851b9d7dd2f5675fda09e435005efa9288d162124302bdd5f20306a9d7b840e1282f16ba990ec229da2cd81006ca8114404cbedfad919a9fe6c9753d41e8ccd927576ae1bdc85ce83db53f468614fa1d839086a26d0a84cd8cd1de85dfa5b921d3c2bf802da0c6e934053f"], 0x3e) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x15) ioctl$TUNGETVNETLE(r2, 0x40047440, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06ada001eca03ec", "de0000006deed7f21d74bc440900", "9884f958"}, 0x28) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 463.005569ms ago: executing program 0 (id=95): madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x65) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) 461.622859ms ago: executing program 2 (id=96): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff70) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000200)={0x0, 0x30b8, 0x0, 0x201, 0x158}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000380)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000440)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c00028005000100000000000800074000000004080003400065c53c"], 0x90}, 0x1, 0xbb1414ac}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0xa6) mount(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x0, 0xd5) setreuid(0x0, 0xee00) openat$cgroup_ro(r9, &(0x7f0000000c80)='cpu.stat\x00', 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r10, &(0x7f0000000ac0), 0x40000000000009f, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGIFHWADDR(r13, 0x8927, &(0x7f0000000a80)={'tunl0\x00'}) syz_ublk_setup_queues(r12, r6, &(0x7f0000000480)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000780)={0x2e, 0x54, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r14 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r14, 0x0, 0xa, &(0x7f0000000880)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000800)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000840)) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c6600001000010002000000fedbdf250c000000070000000000000044661180280012800c001e000100000000000000080000002d7bf200080002"], 0x666c}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) 384.829631ms ago: executing program 0 (id=97): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x2400c808) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)={0x4000, 0x48, 0xb}, 0x18) ioctl$XFS_IOC_FSGEOMETRY_V1(r2, 0x80705864, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x1, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, 0x0, {0xfffffffffffeffff}}, 0x18) io_setup(0x3ff, &(0x7f0000000140)=0x0) io_submit(r4, 0xf000, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)='m', 0xfffffdfc}]) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000900000000240009801c00000008"], 0x40}], 0x1}, 0x0) 239.660384ms ago: executing program 0 (id=98): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000340)="0f20e035000010000f22e0f30fa7e8f2646567f7a700a0b81c0000000f23d80f21f835400000500f23f8b9600500000f32b9610300000f32360f23fe66b8d5008ec866ba4300edea00280000a600", 0x4e}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 169.430696ms ago: executing program 0 (id=99): syz_open_dev$loop(&(0x7f0000000000), 0x10001, 0x4000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1], 0x128}, 0x8800) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000380)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x7c}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) 88.794508ms ago: executing program 2 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000001640)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000001680)='./my_debugfs\x00', &(0x7f00000016c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f00000005c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r3, 0x400452c8, &(0x7f0000001740)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000001780)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000017c0)='./dev\x00', &(0x7f0000001800)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./dev/rfcomm0\x00', 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000019c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000207cff0700007fffffff0100000006000000248c64eb607dc1f44951004857d763122d394fd349fded959cfd0f69eb84b48d07f5adcae6be1b0a19eb0b8f68160f817cf67add2107077a90174dccac585311cc0b6a52458e28a3f04c09d6bc64ef7021adde8b244272c624667fb59c065849c31ed393fa1b9ac848bc37d74f33873fd60fd18c1f3b36ba50e9599e7ffb2d530fb0e57b5efa9a0de82c02f21b0a81637ee0fce4900c026140d726a08ec5818abc7619d46b3491408ec34bfe8fff7786e04529c717e3543bb472243fa0cb27cfd67c5c704655"], 0x118) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000001600)={0x1f, 0x400}, 0xe) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mount$overlay(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x8, &(0x7f0000000080)={[{@redirect_dir_off}, {@userxattr}]}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000380)=ANY=[@ANYRES16=r6], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_clone3(&(0x7f0000000180)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x2}, 0x7a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)={0x0, 'gretap0\x00', {0x4004}, 0x4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r8, 0x941c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 87.640288ms ago: executing program 0 (id=101): writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80043f679a", 0x10}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0xb1, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xbffff038}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x9ffc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x18, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x1}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x2ad, 0x41, 0x4, 0x4, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x2, 0x100, 0x3, 0x2, 0x2], 0x10000, 0x151203}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x59}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$KVM_RUN(r4, 0xae80, 0x0) 49.37014ms ago: executing program 1 (id=102): creat(&(0x7f0000000000)='./file0\x00', 0x40) mkdir(&(0x7f00000001c0)='./bus\x00', 0x57) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x80108907, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0xce}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1c4) io_setup(0x7f, &(0x7f0000000180)=0x0) eventfd(0x8e) io_submit(r3, 0x2, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xc, 0x6, r2, 0x0, 0x0, 0x8}]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@acquire={0x16c, 0x17, 0x1, 0x70bd25, 0x0, {{@in6=@remote}, @in=@empty, {@in=@rand_addr=0x64010101, @in6=@mcast1, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x0, 0x0, 0x8}, 0x2, 0x0, 0x2, 0x1, 0x0, 0x2}, 0xfffffff9, 0xffffff65}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d3, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0xfc}, 0x3506, 0x4, 0x2, 0x6, 0x0, 0x1, 0x8}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c001500283a6b304c"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) 0s ago: executing program 0 (id=103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000200021002bbd7000000000000a060000000000000000000014000100"], 0x30}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000380)={r3}) sendto$inet6(r0, 0x0, 0x0, 0x8056, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/netfilter/nfnetlink_queue\x00', 0x40, 0x0) read(r4, 0x0, 0x0) clock_nanosleep(0xfffffff4, 0x225c17d03, &(0x7f0000000400)={0x77359400}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 27.635479][ T36] audit: type=1400 audit(1791900418.480:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.636696][ T286] cgroup: Unknown subsys name 'net' [ 27.658629][ T36] audit: type=1400 audit(1791900418.480:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.686973][ T36] audit: type=1400 audit(1791900418.510:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.687182][ T286] cgroup: Unknown subsys name 'devices' [ 27.805998][ T286] cgroup: Unknown subsys name 'hugetlb' [ 27.811875][ T286] cgroup: Unknown subsys name 'rlimit' [ 27.915355][ T36] audit: type=1400 audit(1791900418.760:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.941158][ T36] audit: type=1400 audit(1791900418.760:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.968580][ T36] audit: type=1400 audit(1791900418.760:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.971897][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.003696][ T36] audit: type=1400 audit(1791900418.840:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.029550][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.031386][ T36] audit: type=1400 audit(1791900418.850:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.069966][ T36] audit: type=1400 audit(1791900418.870:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.097374][ T36] audit: type=1400 audit(1791900418.870:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.452353][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.459656][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.468029][ T294] bridge_slave_0: entered allmulticast mode [ 29.474537][ T294] bridge_slave_0: entered promiscuous mode [ 29.481266][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.489015][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.496627][ T294] bridge_slave_1: entered allmulticast mode [ 29.503218][ T294] bridge_slave_1: entered promiscuous mode [ 29.536851][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.544142][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.551250][ T295] bridge_slave_0: entered allmulticast mode [ 29.557710][ T295] bridge_slave_0: entered promiscuous mode [ 29.565942][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.573036][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.580411][ T295] bridge_slave_1: entered allmulticast mode [ 29.587161][ T295] bridge_slave_1: entered promiscuous mode [ 29.631126][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.638783][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.646854][ T296] bridge_slave_0: entered allmulticast mode [ 29.653425][ T296] bridge_slave_0: entered promiscuous mode [ 29.668953][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.676973][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.684461][ T296] bridge_slave_1: entered allmulticast mode [ 29.691556][ T296] bridge_slave_1: entered promiscuous mode [ 29.761676][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.769638][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.777028][ T293] bridge_slave_0: entered allmulticast mode [ 29.783362][ T293] bridge_slave_0: entered promiscuous mode [ 29.793327][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.801223][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.808362][ T293] bridge_slave_1: entered allmulticast mode [ 29.814770][ T293] bridge_slave_1: entered promiscuous mode [ 29.891993][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.899560][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.906938][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.914278][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.954298][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.961467][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.968992][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.976112][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.997989][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.005179][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.012574][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.019867][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.048301][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.055867][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.063253][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.070583][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.100436][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.109498][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.118076][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.126129][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.133503][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.141381][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.149396][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.156974][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.167981][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.175766][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.194473][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.201834][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.216477][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.224030][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.239554][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.246687][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.254912][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.262149][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.272632][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.279820][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.318353][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.325529][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.346699][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.354334][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.366465][ T295] veth0_vlan: entered promiscuous mode [ 30.398402][ T296] veth0_vlan: entered promiscuous mode [ 30.413545][ T295] veth1_macvtap: entered promiscuous mode [ 30.423467][ T294] veth0_vlan: entered promiscuous mode [ 30.434291][ T296] veth1_macvtap: entered promiscuous mode [ 30.456599][ T293] veth0_vlan: entered promiscuous mode [ 30.489726][ T293] veth1_macvtap: entered promiscuous mode [ 30.505868][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.507942][ T294] veth1_macvtap: entered promiscuous mode [ 30.565421][ T315] FAULT_INJECTION: forcing a failure. [ 30.565421][ T315] name failslab, interval 1, probability 0, space 0, times 1 [ 30.578590][ T315] CPU: 0 UID: 0 PID: 315 Comm: syz.1.2 Not tainted syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 30.578621][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 30.578633][ T315] Call Trace: [ 30.578640][ T315] [ 30.578647][ T315] __dump_stack+0x21/0x30 [ 30.578683][ T315] dump_stack_lvl+0x140/0x1c0 [ 30.578713][ T315] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.578745][ T315] dump_stack+0x19/0x20 [ 30.578770][ T315] should_fail_ex+0x3c2/0x510 [ 30.578789][ T315] ? security_tun_dev_alloc_security+0x51/0x2b0 [ 30.578816][ T315] should_failslab+0xac/0x100 [ 30.578836][ T315] __kmalloc_noprof+0x69/0x510 [ 30.578864][ T315] ? security_tun_dev_alloc_security+0x51/0x2b0 [ 30.578886][ T315] ? kasan_save_alloc_info+0x3a/0x50 [ 30.578908][ T315] security_tun_dev_alloc_security+0x51/0x2b0 [ 30.578932][ T315] tun_net_init+0x7b/0x400 [ 30.578958][ T315] register_netdevice+0x3f6/0x1a80 [ 30.578987][ T315] ? __cfi_register_netdevice+0x10/0x10 [ 30.579015][ T315] tun_set_iff+0x828/0xec0 [ 30.579041][ T315] __tun_chr_ioctl+0x852/0x1fb0 [ 30.579069][ T315] ? tun_flow_create+0x400/0x400 [ 30.579097][ T315] ? __fget_files+0x2bc/0x330 [ 30.579117][ T315] tun_chr_ioctl+0x2e/0x40 [ 30.579141][ T315] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 30.579165][ T315] __se_sys_ioctl+0x126/0x1b0 [ 30.579184][ T315] __x64_sys_ioctl+0x7f/0xa0 [ 30.579203][ T315] x64_sys_call+0x1878/0x2ee0 [ 30.579222][ T315] do_syscall_64+0x57/0xf0 [ 30.579240][ T315] ? clear_bhb_loop+0x50/0xa0 [ 30.579263][ T315] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.579283][ T315] RIP: 0033:0x7fe36bd9e2d9 [ 30.579301][ T315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.579315][ T315] RSP: 002b:00007fe36a7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.579338][ T315] RAX: ffffffffffffffda RBX: 00007fe36c025fa0 RCX: 00007fe36bd9e2d9 [ 30.579353][ T315] RDX: 0000200000000a80 RSI: 00000000400454ca RDI: 0000000000000008 [ 30.579365][ T315] RBP: 00007fe36be35888 R08: 0000000000000000 R09: 0000000000000000 [ 30.579377][ T315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.579389][ T315] R13: 00007fe36c026038 R14: 00007fe36c025fa0 R15: 00007ffd4bda99f8 [ 30.579625][ T315] [ 30.768034][ T318] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.933135][ T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.956848][ T327] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7'. [ 31.116537][ T341] MTRR 1 not used [ 31.233713][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.363862][ T31] usb 2-1: device descriptor read/64, error -71 [ 31.371316][ T347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 31.477914][ T353] FAULT_INJECTION: forcing a failure. [ 31.477914][ T353] name failslab, interval 1, probability 0, space 0, times 0 [ 31.514447][ T353] CPU: 0 UID: 0 PID: 353 Comm: syz.3.12 Not tainted syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 31.514493][ T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 31.514509][ T353] Call Trace: [ 31.514517][ T353] [ 31.514526][ T353] __dump_stack+0x21/0x30 [ 31.514568][ T353] dump_stack_lvl+0x140/0x1c0 [ 31.514598][ T353] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.514628][ T353] dump_stack+0x19/0x20 [ 31.514651][ T353] should_fail_ex+0x3c2/0x510 [ 31.514670][ T353] should_failslab+0xac/0x100 [ 31.514687][ T353] __kmalloc_cache_noprof+0x41/0x470 [ 31.514712][ T353] ? register_netdevice+0x2c4/0x1a80 [ 31.514741][ T353] register_netdevice+0x2c4/0x1a80 [ 31.514769][ T353] ? tun_net_initialize+0x148/0x430 [ 31.514805][ T353] ? __cfi_register_netdevice+0x10/0x10 [ 31.514834][ T353] tun_set_iff+0x828/0xec0 [ 31.514853][ T353] __tun_chr_ioctl+0x852/0x1fb0 [ 31.514874][ T353] ? tun_flow_create+0x400/0x400 [ 31.514890][ T353] ? __fget_files+0x2bc/0x330 [ 31.514903][ T353] tun_chr_ioctl+0x2e/0x40 [ 31.514918][ T353] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 31.514933][ T353] __se_sys_ioctl+0x126/0x1b0 [ 31.514945][ T353] __x64_sys_ioctl+0x7f/0xa0 [ 31.514956][ T353] x64_sys_call+0x1878/0x2ee0 [ 31.514968][ T353] do_syscall_64+0x57/0xf0 [ 31.514979][ T353] ? clear_bhb_loop+0x50/0xa0 [ 31.514993][ T353] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.515007][ T353] RIP: 0033:0x7f8121b9e2d9 [ 31.515020][ T353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.515030][ T353] RSP: 002b:00007f8122a74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 31.515046][ T353] RAX: ffffffffffffffda RBX: 00007f8121e25fa0 RCX: 00007f8121b9e2d9 [ 31.515055][ T353] RDX: 0000200000000a80 RSI: 00000000400454ca RDI: 0000000000000008 [ 31.515063][ T353] RBP: 00007f8121c35888 R08: 0000000000000000 R09: 0000000000000000 [ 31.515070][ T353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.515078][ T353] R13: 00007f8121e26038 R14: 00007f8121e25fa0 R15: 00007ffd57f94df8 [ 31.515088][ T353] [ 31.745053][ T31] usb 2-1: device descriptor read/64, error -71 [ 31.969096][ T372] tipc: Started in network mode [ 31.974279][ T372] tipc: Node identity a2793fdcfbe6, cluster identity 4711 [ 31.984242][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.984304][ T372] tipc: Enabled bearer , priority 10 [ 32.002323][ T372] tipc: Enabling of bearer rejected, already enabled [ 32.016316][ T371] tipc: Disabling bearer [ 32.086923][ T378] overlayfs: disabling nfs_export due to verity=on [ 32.095461][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.123918][ T31] usb 2-1: device descriptor read/64, error -71 [ 32.138114][ T386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.149085][ T386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.255475][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.265964][ T310] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 32.283715][ T310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 32.292989][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.309937][ T310] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 32.363802][ T31] usb 2-1: device descriptor read/64, error -71 [ 32.383738][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.433829][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.474255][ T31] usb usb2-port1: attempt power cycle [ 32.511828][ T64] usb 3-1: USB disconnect, device number 2 [ 32.545731][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.555462][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.566004][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 32.577059][ T10] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.584970][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 32.592413][ T10] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 32.601943][ T46] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 32.610197][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 32.619990][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.627918][ T10] usb 4-1: Product: syz [ 32.637115][ T46] usb 1-1: Product: syz [ 32.640854][ T10] usb 4-1: Manufacturer: syz [ 32.645178][ T46] usb 1-1: Manufacturer: syz [ 32.650017][ T10] usb 4-1: SerialNumber: syz [ 32.654556][ T46] usb 1-1: SerialNumber: syz [ 32.667340][ T46] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 32.814062][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.834917][ T31] usb 2-1: device descriptor read/8, error -71 [ 32.863406][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 32.880046][ T64] usb 1-1: USB disconnect, device number 2 [ 32.890891][ T10] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 32.904913][ T10] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 32.916980][ T10] usb 4-1: USB disconnect, device number 2 [ 32.929940][ T394] udevd[394]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.965788][ T31] usb 2-1: device descriptor read/8, error -71 [ 33.038925][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 33.038948][ T36] audit: type=1400 audit(1791900423.880:158): avc: denied { setopt } for pid=395 comm="syz.2.25" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.117212][ T36] audit: type=1400 audit(1791900423.960:159): avc: denied { connect } for pid=395 comm="syz.2.25" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.144300][ T36] audit: type=1400 audit(1791900423.960:160): avc: denied { write } for pid=395 comm="syz.2.25" path="socket:[4256]" dev="sockfs" ino=4256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.233873][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.254845][ T31] usb 2-1: device descriptor read/8, error -71 [ 33.384872][ T31] usb 2-1: device descriptor read/8, error -71 [ 33.385346][ T36] audit: type=1400 audit(1791900424.230:161): avc: denied { read } for pid=399 comm="syz.3.26" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.426939][ T400] rust_binder: 399:400 error while translating object: ENOENT [ 33.435455][ T400] rust_binder: Failure in copy_transaction_data: ENOENT [ 33.435489][ T400] rust_binder: 399:400 transaction call to 399:0 failed ENOENT, code 0 size 72-24 line thread.rs:865 [ 33.456005][ T36] audit: type=1400 audit(1791900424.230:162): avc: denied { open } for pid=399 comm="syz.3.26" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.481204][ T36] audit: type=1400 audit(1791900424.230:163): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.502236][ T36] audit: type=1400 audit(1791900424.270:164): avc: denied { ioctl } for pid=399 comm="syz.3.26" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.503841][ T31] usb usb2-port1: unable to enumerate USB device [ 33.530481][ T36] audit: type=1400 audit(1791900424.270:165): avc: denied { set_context_mgr } for pid=399 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 33.554411][ T31] rust_binder: 399: undelivered TRANSACTION_ERROR: 29201 [ 33.559297][ T36] audit: type=1400 audit(1791900424.270:166): avc: denied { map } for pid=399 comm="syz.3.26" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.589397][ T36] audit: type=1400 audit(1791900424.270:167): avc: denied { call } for pid=399 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 33.650762][ T409] tipc: Started in network mode [ 33.655873][ T409] tipc: Node identity 0efed800c2d7, cluster identity 4711 [ 33.663846][ T409] tipc: Enabled bearer , priority 10 [ 33.672657][ T409] tipc: Enabling of bearer rejected, already enabled [ 33.689651][ T408] tipc: Disabling bearer [ 33.715565][ T416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 33.764379][ T424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 34.034074][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.053900][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.193810][ T64] usb 4-1: device descriptor read/64, error -71 [ 34.204251][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.214761][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.227588][ T10] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 34.243029][ T10] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 34.253703][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.262006][ T10] usb 3-1: Product: syz [ 34.266806][ T10] usb 3-1: Manufacturer: syz [ 34.271872][ T10] usb 3-1: SerialNumber: syz [ 34.433753][ T64] usb 4-1: device descriptor read/64, error -71 [ 34.487786][ T431] ./dev/sda1: Can't lookup blockdev [ 34.502013][ T431] mmap: syz.2.37 (431) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.598535][ T10] usb 3-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 34.608368][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.619367][ T10] usb 3-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 34.631356][ T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 34.645060][ T10] usb 3-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 34.660091][ T10] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 34.676613][ T10] usb 3-1: USB disconnect, device number 3 [ 34.679980][ T394] udevd[394]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.683710][ T64] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.773767][ T443] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.833807][ T64] usb 4-1: device descriptor read/64, error -71 [ 34.933787][ T443] usb 2-1: Using ep0 maxpacket: 32 [ 34.940580][ T443] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 34.953751][ T443] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 34.963066][ T443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.971142][ T443] usb 2-1: Product: syz [ 34.975339][ T443] usb 2-1: Manufacturer: syz [ 34.980104][ T443] usb 2-1: SerialNumber: syz [ 35.073782][ T64] usb 4-1: device descriptor read/64, error -71 [ 35.139405][ T457] tipc: Enabled bearer , priority 10 [ 35.147164][ T457] tipc: Enabling of bearer rejected, already enabled [ 35.156706][ T456] tipc: Disabling bearer [ 35.188023][ T443] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 35.197672][ T64] usb usb4-port1: attempt power cycle [ 35.204513][ T443] usb 2-1: USB disconnect, device number 6 [ 35.363757][ T46] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 35.523783][ T46] usb 3-1: Invalid ep0 maxpacket: 32 [ 35.563787][ T64] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.595453][ T64] usb 4-1: device descriptor read/8, error -71 [ 35.663731][ T46] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 35.725117][ T64] usb 4-1: device descriptor read/8, error -71 [ 35.813765][ T46] usb 3-1: Invalid ep0 maxpacket: 32 [ 35.820066][ T46] usb usb3-port1: attempt power cycle [ 35.973728][ T64] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.995468][ T64] usb 4-1: device descriptor read/8, error -71 [ 36.135330][ T64] usb 4-1: device descriptor read/8, error -71 [ 36.174916][ T46] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 36.194236][ T46] usb 3-1: Invalid ep0 maxpacket: 32 [ 36.243935][ T64] usb usb4-port1: unable to enumerate USB device [ 36.323745][ T46] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 36.333861][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.344092][ T46] usb 3-1: Invalid ep0 maxpacket: 32 [ 36.349851][ T46] usb usb3-port1: unable to enumerate USB device [ 36.495216][ T31] usb 1-1: config 7 has an invalid interface number: 177 but max is 1 [ 36.503685][ T31] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 36.513959][ T31] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 36.522981][ T31] usb 1-1: config 7 has no interface number 0 [ 36.529228][ T31] usb 1-1: config 7 interface 177 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 36.543140][ T31] usb 1-1: config 7 interface 177 has no altsetting 0 [ 36.552421][ T31] usb 1-1: New USB device found, idVendor=19d2, idProduct=0b70, bcdDevice=b8.3c [ 36.562107][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.570556][ T31] usb 1-1: Product: syz [ 36.574858][ T31] usb 1-1: Manufacturer: syz [ 36.579479][ T31] usb 1-1: SerialNumber: syz [ 36.743374][ T486] capability: warning: `syz.1.53' uses 32-bit capabilities (legacy support in use) [ 36.989919][ T13] bridge_slave_1: left allmulticast mode [ 36.996455][ T13] bridge_slave_1: left promiscuous mode [ 37.019605][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.044270][ T13] bridge_slave_0: left allmulticast mode [ 37.053987][ T13] bridge_slave_0: left promiscuous mode [ 37.054551][ T31] usb 1-1: bad CDC descriptors [ 37.059932][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.069903][ T31] usb 1-1: USB disconnect, device number 3 [ 37.204852][ T518] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.212247][ T518] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.220137][ T518] bridge_slave_0: entered allmulticast mode [ 37.226800][ T518] bridge_slave_0: entered promiscuous mode [ 37.233546][ T13] tipc: Left network mode [ 37.234032][ T518] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.245342][ T518] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.252677][ T518] bridge_slave_1: entered allmulticast mode [ 37.259379][ T518] bridge_slave_1: entered promiscuous mode [ 37.266236][ T13] veth1_macvtap: left promiscuous mode [ 37.272111][ T13] veth0_vlan: left promiscuous mode [ 37.303705][ T46] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 37.355952][ T518] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.363538][ T518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.371103][ T518] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.378297][ T518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.399510][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.407047][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.416798][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.424179][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.434245][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.441300][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.462576][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.468702][ T518] veth0_vlan: entered promiscuous mode [ 37.470855][ T46] usb 2-1: not running at top speed; connect to a high speed hub [ 37.484828][ T518] veth1_macvtap: entered promiscuous mode [ 37.485342][ T46] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 37.502430][ T46] usb 2-1: string descriptor 0 read error: -22 [ 37.510507][ T46] usb 2-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 37.519959][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.558726][ T523] can: request_module (can-proto-6) failed. [ 37.742120][ T443] usb 2-1: USB disconnect, device number 7 [ 37.854031][ T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.003739][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 38.010738][ T64] usb 5-1: unable to get BOS descriptor or descriptor too short [ 38.019843][ T64] usb 5-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 38.031716][ T64] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.053137][ T64] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 38.064073][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.072806][ T64] usb 5-1: Product: syz [ 38.077492][ T64] usb 5-1: Manufacturer: syz [ 38.082273][ T64] usb 5-1: SerialNumber: syz [ 38.206714][ T537] tun0: tun_chr_ioctl cmd 1074025675 [ 38.212216][ T537] tun0: persist enabled [ 38.268213][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 38.268232][ T36] audit: type=1400 audit(1791900429.110:210): avc: denied { mount } for pid=539 comm="syz.1.65" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 38.322811][ T36] audit: type=1400 audit(1791900429.110:211): avc: denied { append } for pid=539 comm="syz.1.65" name="uprobe_events" dev="tracefs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.373668][ T36] audit: type=1400 audit(1791900429.110:212): avc: denied { open } for pid=539 comm="syz.1.65" path="/12/tracing/uprobe_events" dev="tracefs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.400866][ T36] audit: type=1400 audit(1791900429.240:213): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 38.447840][ T543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'. ƶÿ[ 38.560004][ T36] audit: type=1400 audit(1791900429.400:214): avc: denied { mounton } for pid=552 comm="syz.1.69" path="/15/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 ƶÿ[ 38.633075][ T36] audit: type=1400 audit(1791900429.470:215): avc: denied { name_bind } for pid=559 comm="syz.0.70" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 38.633168][ T64] usb 5-1: MIDIStreaming interface descriptor not found [ 38.685479][ T64] usb 5-1: USB disconnect, device number 2 [ 38.706787][ T516] udevd[516]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.752529][ T36] audit: type=1400 audit(1791900429.590:216): avc: denied { connect } for pid=561 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.772908][ T13] tipc: Subscription rejected, illegal request [ 38.773378][ T36] audit: type=1400 audit(1791900429.610:217): avc: denied { write } for pid=561 comm="syz.1.71" path="socket:[4982]" dev="sockfs" ino=4982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.839659][ T565] tipc: Can't bind to reserved service type 0 [ 38.878229][ T64] smpboot: CPU 1 is now offline [ 38.904421][ T564] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 38.926471][ T564] flags: 0x4000000000000000(zone=1) [ 38.939897][ T564] page_type: f5(slab) [ 38.948719][ T564] raw: 4000000000000000 ffff888106e4a780 dead000000000122 0000000000000000 [ 38.961559][ T564] raw: 0000000000000000 00000000000c000c 00000001f5000000 0000000000000000 [ 38.971037][ T564] page dumped because: unmovable page [ 38.977465][ T564] page_owner tracks the page as allocated [ 38.985265][ T36] audit: type=1400 audit(1791900429.830:218): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.009147][ T564] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 543, tgid 542 (syz.1.66), ts 38484389091, free_ts 38310043614 [ 39.029264][ T564] post_alloc_hook+0x37d/0x3b0 [ 39.034276][ T564] prep_new_page+0x2d/0x180 [ 39.039048][ T564] get_page_from_freelist+0x4aea/0x4ba0 [ 39.045734][ T564] __alloc_pages_noprof+0x35a/0x7e0 [ 39.051169][ T564] alloc_slab_page+0x6b/0x1e0 [ 39.056201][ T564] allocate_slab+0x69/0x430 [ 39.060905][ T564] ___slab_alloc+0x591/0x8c0 [ 39.065731][ T564] kmem_cache_alloc_node_noprof+0x29b/0x420 [ 39.071809][ T564] __alloc_skb+0x10c/0x360 [ 39.076565][ T564] alloc_skb_with_frags+0xd0/0x8b0 [ 39.081868][ T564] sock_alloc_send_pskb+0x883/0x9a0 [ 39.087808][ T564] unix_dgram_sendmsg+0x63a/0x1a90 [ 39.093093][ T564] unix_seqpacket_sendmsg+0x11c/0x1e0 [ 39.099077][ T564] ____sys_sendmsg+0x99e/0xa00 [ 39.103890][ T564] ___sys_sendmsg+0x2a6/0x370 [ 39.108943][ T564] __sys_sendmmsg+0x292/0x490 [ 39.113839][ T564] page last free pid 527 tgid 526 stack trace: [ 39.120294][ T564] register_dummy_stack+0x99/0x110 [ 39.125611][ T564] init_page_owner+0x36/0x840 [ 39.130427][ T564] page_ext_init+0x3f8/0x44b [ 39.135140][ T564] mm_core_init+0x4b/0x7b [ 39.245340][ T36] audit: type=1400 audit(1791900429.830:219): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.414143][ T585] x86/PAT: syz.1.78:585 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 39.437706][ T587] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 39.460417][ T587] rust_binder: 586:587 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 128, size: 18446744073709551556) [ 39.490349][ T587] rust_binder: 586:587 error while translating object: EINVAL [ 39.506980][ T587] rust_binder: Failure in copy_transaction_data: EINVAL [ 39.507019][ T587] rust_binder: 586:587 transaction call to 586:0 failed EINVAL, code 0 size 88-24 line thread.rs:913 [ 39.533803][ T64] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.555345][ T10] rust_binder: 586: undelivered TRANSACTION_ERROR: 29201 [ 39.693661][ T64] usb 5-1: Using ep0 maxpacket: 8 [ 39.702278][ T64] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 39.725364][ T64] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.755784][ T64] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 39.772725][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.799478][ T64] usb 5-1: Product: syz [ 39.813529][ T64] usb 5-1: Manufacturer: syz [ 39.828482][ T64] usb 5-1: SerialNumber: syz [ 40.032178][ T599] netlink: 'syz.2.82': attribute type 27 has an invalid length. [ 40.069169][ T64] usb 5-1: USB disconnect, device number 3 [ 40.082878][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.504734][ T390] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.619630][ T617] ======================================================= [ 40.619630][ T617] WARNING: The mand mount option has been deprecated and [ 40.619630][ T617] and is ignored by this kernel. Remove the mand [ 40.619630][ T617] option from the mount to silence this warning. [ 40.619630][ T617] ======================================================= [ 40.660751][ T617] overlay: ./file0 is not a directory [ 40.674950][ T390] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 40.690931][ T390] usb 3-1: config 0 interface 0 has no altsetting 0 [ 40.706436][ T390] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 40.719504][ T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.723281][ T620] overlay: ./file0 is not a directory [ 40.739884][ T390] usb 3-1: Product: syz [ 40.745241][ T390] usb 3-1: Manufacturer: syz [ 40.750294][ T390] usb 3-1: SerialNumber: syz [ 40.755949][ T390] usb 3-1: config 0 descriptor?? [ 40.975285][ T390] usb 3-1: USB disconnect, device number 8 [ 41.410936][ T630] veth1_to_hsr: entered allmulticast mode [ 41.663718][ T64] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 41.813677][ T64] usb 5-1: Using ep0 maxpacket: 8 [ 41.820629][ T64] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 41.829231][ T64] usb 5-1: config 179 has no interface number 0 [ 41.835930][ T64] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 41.860924][ T64] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 41.874643][ T64] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 41.895437][ T64] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 41.907559][ T64] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 41.922420][ T64] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 41.932109][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.941548][ T640] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 42.313666][ T613] Bluetooth: hci0: command 0x1003 tx timeout [ 42.319839][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.367338][ T64] usb 5-1: USB disconnect, device number 4 [ 42.373360][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 42.373388][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 42.465618][ T666] netlink: 36 bytes leftover after parsing attributes in process `syz.2.96'. [ 42.477388][ T666] Zero length message leads to an empty skb [ 42.758128][ T680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.101'. [ 42.843057][ T296] ------------[ cut here ]------------ [ 42.849995][ T296] WARNING: CPU: 0 PID: 296 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 42.858440][ T296] Modules linked in: [ 42.863299][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 42.881128][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.894950][ T296] RIP: 0010:drop_nlink+0xce/0x110 [ 42.901293][ T296] Code: 04 00 00 be 08 00 00 00 e8 ff 0b ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 db b5 03 cc e8 62 93 94 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 42.924130][ T296] RSP: 0018:ffffc9000b6dfc88 EFLAGS: 00010293 [ 42.932470][ T296] RAX: ffffffff81f4b95e RBX: ffff8881151d1e30 RCX: ffff8881023dbb40 [ 42.945178][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.957686][ T296] RBP: ffffc9000b6dfcb0 R08: 0000000000000003 R09: 0000000000000004 [ 42.971103][ T296] R10: dffffc0000000000 R11: fffff520016dbf80 R12: dffffc0000000000 [ 42.982167][ T296] R13: 1ffff11022a3a3cf R14: ffff8881151d1e78 R15: 0000000000000000 [ 42.991628][ T296] FS: 0000555591c4a500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 43.002314][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.011092][ T296] CR2: 0000555591c6d958 CR3: 000000012181c000 CR4: 00000000003526b0 [ 43.023934][ T296] Call Trace: [ 43.028825][ T296] [ 43.032544][ T296] shmem_rmdir+0x5f/0x90 [ 43.038233][ T296] vfs_rmdir+0x3de/0x560 [ 43.044157][ T296] incfs_kill_sb+0x102/0x220 [ 43.050988][ T296] deactivate_locked_super+0xd5/0x270 [ 43.056809][ T296] deactivate_super+0xb8/0xe0 [ 43.062996][ T296] cleanup_mnt+0x438/0x4d0 [ 43.069157][ T296] __cleanup_mnt+0x1d/0x40 [ 43.074597][ T296] task_work_run+0x1e8/0x260 [ 43.080540][ T296] ? __cfi_task_work_run+0x10/0x10 [ 43.088798][ T296] ? __x64_sys_umount+0x12e/0x180 [ 43.094624][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 43.101947][ T296] ? __kasan_check_read+0x15/0x20 [ 43.108181][ T296] resume_user_mode_work+0x35/0x50 [ 43.115928][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 43.122455][ T296] do_syscall_64+0x63/0xf0 [ 43.129084][ T296] ? clear_bhb_loop+0x50/0xa0 [ 43.135246][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.145140][ T296] RIP: 0033:0x7fe36bd9f517 [ 43.152321][ T296] Code: a2 c7 05 dc 61 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 43.176137][ T296] RSP: 002b:00007ffd4bda8c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 43.186963][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe36bd9f517 [ 43.196681][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4bda8d20 [ 43.205508][ T296] RBP: 00007ffd4bda8d20 R08: 00007ffd4bda9d20 R09: 00000000ffffffff [ 43.215516][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4bda9db0 [ 43.225240][ T296] R13: 00007fe36be34ccb R14: 000000000000a71f R15: 00007ffd4bda9df0 [ 43.234043][ T296] [ 43.238154][ T296] ---[ end trace 0000000000000000 ]--- [ 43.261204][ T296] ================================================================== [ 43.270366][ T296] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 43.277287][ T296] Write of size 4 at addr 0000000000000168 by task syz-executor/296 [ 43.288105][ T296] [ 43.290738][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G W syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 43.290765][ T296] Tainted: [W]=WARN [ 43.290770][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 43.290778][ T296] Call Trace: [ 43.290786][ T296] [ 43.290793][ T296] __dump_stack+0x21/0x30 [ 43.290818][ T296] dump_stack_lvl+0x140/0x1c0 [ 43.290834][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.290852][ T296] print_report+0x3d/0x70 [ 43.290869][ T296] kasan_report+0x162/0x1a0 [ 43.290881][ T296] ? ihold+0x24/0x70 [ 43.290893][ T296] ? ihold+0x24/0x70 [ 43.290903][ T296] kasan_check_range+0x25a/0x2b0 [ 43.290915][ T296] __kasan_check_write+0x18/0x20 [ 43.290930][ T296] ihold+0x24/0x70 [ 43.290940][ T296] vfs_rmdir+0x25c/0x560 [ 43.290959][ T296] incfs_kill_sb+0x102/0x220 [ 43.290975][ T296] deactivate_locked_super+0xd5/0x270 [ 43.290989][ T296] deactivate_super+0xb8/0xe0 [ 43.291001][ T296] cleanup_mnt+0x438/0x4d0 [ 43.291013][ T296] __cleanup_mnt+0x1d/0x40 [ 43.291023][ T296] task_work_run+0x1e8/0x260 [ 43.291040][ T296] ? __cfi_task_work_run+0x10/0x10 [ 43.291055][ T296] ? __x64_sys_umount+0x12e/0x180 [ 43.291069][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 43.291084][ T296] ? __kasan_check_read+0x15/0x20 [ 43.291098][ T296] resume_user_mode_work+0x35/0x50 [ 43.291112][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 43.291129][ T296] do_syscall_64+0x63/0xf0 [ 43.291139][ T296] ? clear_bhb_loop+0x50/0xa0 [ 43.291154][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.291167][ T296] RIP: 0033:0x7fe36bd9f517 [ 43.291179][ T296] Code: a2 c7 05 dc 61 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 43.291189][ T296] RSP: 002b:00007ffd4bda8c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 43.291203][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe36bd9f517 [ 43.291211][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4bda8d20 [ 43.291219][ T296] RBP: 00007ffd4bda8d20 R08: 00007ffd4bda9d20 R09: 00000000ffffffff [ 43.291227][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4bda9db0 [ 43.291235][ T296] R13: 00007fe36be34ccb R14: 000000000000a71f R15: 00007ffd4bda9df0 [ 43.291244][ T296] [ 43.291248][ T296] ================================================================== [ 43.547966][ T64] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 43.559171][ T296] Disabling lock debugging due to kernel taint [ 43.568263][ T296] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 43.579582][ T296] #PF: supervisor write access in kernel mode [ 43.586361][ T296] #PF: error_code(0x0002) - not-present page [ 43.592871][ T296] PGD 800000010c361067 P4D 800000010c361067 PUD 0 [ 43.599658][ T296] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 43.605997][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G B W syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 43.619642][ T296] Tainted: [B]=BAD_PAGE, [W]=WARN [ 43.624936][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 43.635439][ T296] RIP: 0010:ihold+0x2a/0x70 [ 43.640141][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 4d 8a 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 02 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 5d [ 43.660649][ T296] RSP: 0018:ffffc9000b6dfcc8 EFLAGS: 00010246 [ 43.666823][ T296] RAX: ffff8881023dbb00 RBX: 0000000000000000 RCX: ffff8881023dbb40 [ 43.674910][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.683157][ T296] RBP: ffffc9000b6dfcd8 R08: ffffffff893c8947 R09: 1ffffffff1279128 [ 43.692341][ T296] R10: dffffc0000000000 R11: fffffbfff1279129 R12: 0000000000000000 [ 43.701127][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 43.709201][ T296] FS: 0000555591c4a500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 43.718754][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.725987][ T296] CR2: 0000000000000168 CR3: 000000012181c000 CR4: 00000000003526b0 [ 43.734993][ T296] Call Trace: [ 43.738552][ T296] [ 43.741554][ T296] vfs_rmdir+0x25c/0x560 [ 43.746015][ T296] incfs_kill_sb+0x102/0x220 [ 43.750899][ T296] deactivate_locked_super+0xd5/0x270 [ 43.756618][ T296] deactivate_super+0xb8/0xe0 [ 43.762005][ T296] cleanup_mnt+0x438/0x4d0 [ 43.767411][ T296] __cleanup_mnt+0x1d/0x40 [ 43.771949][ T296] task_work_run+0x1e8/0x260 [ 43.777192][ T296] ? __cfi_task_work_run+0x10/0x10 [ 43.782507][ T296] ? __x64_sys_umount+0x12e/0x180 [ 43.788123][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 43.793743][ T296] ? __kasan_check_read+0x15/0x20 [ 43.798961][ T296] resume_user_mode_work+0x35/0x50 [ 43.804395][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 43.810437][ T296] do_syscall_64+0x63/0xf0 [ 43.814883][ T296] ? clear_bhb_loop+0x50/0xa0 [ 43.819974][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.825903][ T296] RIP: 0033:0x7fe36bd9f517 [ 43.830417][ T296] Code: a2 c7 05 dc 61 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 43.850813][ T296] RSP: 002b:00007ffd4bda8c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 43.859508][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe36bd9f517 [ 43.867498][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4bda8d20 [ 43.875616][ T296] RBP: 00007ffd4bda8d20 R08: 00007ffd4bda9d20 R09: 00000000ffffffff [ 43.883718][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4bda9db0 [ 43.891878][ T296] R13: 00007fe36be34ccb R14: 000000000000a71f R15: 00007ffd4bda9df0 [ 43.900827][ T296] [ 43.904131][ T296] Modules linked in: [ 43.908038][ T296] CR2: 0000000000000168 [ 43.912487][ T296] ---[ end trace 0000000000000000 ]--- [ 43.918397][ T296] RIP: 0010:ihold+0x2a/0x70 [ 43.923208][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 4d 8a 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 02 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 5d [ 43.944688][ T296] RSP: 0018:ffffc9000b6dfcc8 EFLAGS: 00010246 [ 43.951049][ T296] RAX: ffff8881023dbb00 RBX: 0000000000000000 RCX: ffff8881023dbb40 [ 43.960730][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.969446][ T296] RBP: ffffc9000b6dfcd8 R08: ffffffff893c8947 R09: 1ffffffff1279128 [ 43.978875][ T296] R10: dffffc0000000000 R11: fffffbfff1279129 R12: 0000000000000000 [ 43.987388][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 43.996165][ T296] FS: 0000555591c4a500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 44.006250][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.013458][ T296] CR2: 0000000000000168 CR3: 000000012181c000 CR4: 00000000003526b0 [ 44.022340][ T296] Kernel panic - not syncing: Fatal exception [ 44.028553][ T296] Kernel Offset: disabled [ 44.032969][ T296] Rebooting in 86400 seconds..