last executing test programs:

6.621608614s ago: executing program 0 (id=18):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[@cpuid={0x64, 0x18, {0xd0000000, 0xa}}], 0x18})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffc})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000040)="0fc71ca10f78fe65640f01cbb9d00a00000f320f08640f01c5440f20c0350b000000440f22c00fc79d2f000000650f01d1b90c020000b880c20000ba000000000f30", 0x42}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mlockall(0x1)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0xffffffff, 0x6}, 0x8)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10)
close(r7)
eventfd2(0x6, 0x0)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000001880)={0x80801000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

5.65410624s ago: executing program 0 (id=19):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001880), 0x109041, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x2, 0x8, 0x4, 0x10002, 0x2, '\x00', 0x3, 0x7fff8000})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfc)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x4002c982)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x369a02, 0x109)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r2)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000180)={0x10002, 0x0, &(0x7f000063f000/0x3000)=nil})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x18, 0x2, 0x9, 0x7, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x3c, 0x80, 0x0, @in6={0xa, 0x4e24, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}}]}, 0x38}}, 0x24000040)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c})
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000001a00)={{&(0x7f0000978000/0x3000)=nil, 0x3000}, 0x1})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, r4, 0x2000)
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000040)=0x401)
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0xff, 0xfd, 0x1, 0x80}}]}}]}}, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000200)='\x00', 0x0, r7)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)=0x4)
ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000000)=0xffff0001)
ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000140)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x100000000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x0, 0x14000}]})

3.317900077s ago: executing program 1 (id=34):
r0 = socket(0x26, 0x6, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@mcast2, @mcast2, @local, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r2})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580017, r2})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, <r5=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@delpolicy={0x1d0, 0x14, 0x421, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in6=@private0, 0x4e22, 0x0, 0x4e20, 0x8, 0xa, 0xa0, 0xa0, 0x6, r2, r5}, 0x6e6bbb, 0x1}, [@migrate={0x180, 0x11, [{@in6=@mcast1, @in6=@rand_addr=' \x01\x00', @in=@multicast2, @in=@multicast2, 0x2b, 0x1, 0x0, 0x3500, 0x2, 0xa}, {@in6=@mcast1, @in=@multicast1, @in6=@mcast2, @in6=@loopback, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in=@rand_addr=0x64010102, @in=@broadcast, 0x6c, 0x0, 0x0, 0x3500, 0xa, 0xa}, {@in6=@remote, @in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x2b, 0x3, 0x0, 0x3504, 0x2, 0x2}, {@in6=@private2, @in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010102, 0xff, 0x4, 0x0, 0x3507, 0xa, 0x2}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xc004}, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)

3.277575389s ago: executing program 1 (id=35):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000019800)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(0x3)
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_debug_messages', 0x3a1081, 0x18)
write$khugepaged_scan(r1, &(0x7f0000000000), 0x8)

3.24901601s ago: executing program 1 (id=36):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000440)="66b9800000c00f326635004000000f3066b9800000c00f326635000100000f30660f380933660f674407bad00466b81000010066efdbd6baf80c66b8362f6c8066efbafc0cb82c0fef66b9ee0200000f320f20e06635000020000f22e066b8010000000f01c1", 0x66}], 0x1, 0x48, 0x0, 0x0)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYRES16], 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0xfffffffffffffd7a, 0x0, &(0x7f0000000180)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x2)
readv(r5, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/134, 0x87}], 0x1000000000000050)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x804)
setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000003c0)={{0xa, 0x4e21, 0x3, @local, 0x7ffffffe}, {0xa, 0x4e22, 0x1f5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xffffffff}, 0xffffffffffffffff, {[0x10001, 0x3, 0x6, 0xf, 0x1, 0x9, 0x9, 0x8]}}, 0x5c)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x0, 0x9a)

2.630416026s ago: executing program 0 (id=37):
r0 = socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2)
fcntl$setlease(r1, 0x400, 0x0)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r2, 0x400, 0x2)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x100, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="0a649329b2a3", 0x6}], 0x1}}], 0x2, 0x8008800)
faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x25)
sendto$inet6(r3, &(0x7f00000001c0)="57e2164c54b29e849503e31c460b92ff0822614e80d40dea5950b5bf37f5f26a81bf8d6b2d96c1848106acbbc2eef57bef47222fd897104e98f92278141c58a83746df95ab914e31d0a23e9402d474", 0x4f, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'veth0_vlan\x00', {0xffe}, 0x8})

2.629848036s ago: executing program 0 (id=38):
syz_usb_connect(0x5, 0x2f, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1201500205bfef20d219267eb3960102030109021d00010106800709040f0801e001030d"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$cdc_ncm(0x4, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0xc0, 0xb0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "eefa422e58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1e6, 0xffc0, 0x8, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0x12}, [@country_functional={0xe, 0x24, 0x7, 0x2, 0x3, [0x3ff, 0x5, 0xe, 0x8]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x8, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xd6, 0xa2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb, 0x3, 0xce}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xd2, 0x88, 0x2, 0x40, 0xe1}, 0xe6, &(0x7f0000000100)={0x5, 0xf, 0xe6, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xb6, "585cf0dadc1838a2651b4add3c3c53b3"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x6, 0x6, 0x5d00, 0xf8}, @generic={0xbf, 0x10, 0x0, "9c46657de37bb9a1160956d1b7764cf1e0e278054332c878ccd7779ab2e36880ed73c6206a880d7b4d60b8dd7080416fd955028e189c49ca104b73207b7b86adb79a518bded85b720aa1558926001074e423006c28f4df09ebf9863ab7a81b81fcabb2af6a16d7b4503259177ed3733bac5e5ed12c23e67924280115883a835ae0d677c36c8c0db0ecd929c806194079c067d3c74401a54d1a772eed5d2436516a05f44c63ad6f6c4d0213aa0641a4c625e516387310c8658eaa8f46"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1001}}]})

1.971109874s ago: executing program 1 (id=40):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05150000000000000109022400010000c00509040000810300000009210000280122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
setrlimit(0xc, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x40, 0xd, 0x7, {0x7, 0xb, "9b51bcc9a5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.509910752s ago: executing program 2 (id=41):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', &(0x7f0000000340)='^@-!#:,(&\x00', 0xa, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
readv(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3}) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x88, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@obj_type={'obj_type', 0x3d, 'trusted.]\xc1ove\x03\x00\x00\x00\xf7impur'}}]}) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64)
fchdir(r2) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 64)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)

1.459718214s ago: executing program 2 (id=42):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00')
read$eventfd(r0, &(0x7f0000000080), 0x8)
sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f2, 0x200, 0x70bd26, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040811}, 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1f7)
write$binfmt_elf64(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3, 0xfffbffec, 0x4000336, 0x40, 0xf5, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0xfffa}, [{0x3, 0xf97, 0x3, 0xd, 0x282, 0xe2, 0xfe10, 0x3}]}, 0x78)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r2, 0x4, 0x0, 0x4, 0x3, 0x6c, @mcast1, @private1, 0x40, 0x10, 0xa, 0x4}})

1.35867425s ago: executing program 0 (id=45):
mkdir(&(0x7f0000000200)='./file0\x00', 0x50)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_readahead}, {@posixacl}, {@cache_readahead}], [{@fsname={'fsname', 0x3d, '9p\x00'}}, {@smackfsroot}, {@subj_type}]}})

1.35788171s ago: executing program 2 (id=46):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x2000800)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0x4, 0x9, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0xb0}]}, 0x20}}, 0x84)
fcntl$setsig(r0, 0xa, 0x2)
r1 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0)

1.35454317s ago: executing program 2 (id=48):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f0000000100)={0x11e8, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x40000}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9650000}]}, @TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x484f099, @local, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @local, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x3f9ab755}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf7c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x1010, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_NET={0x4}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x14001}, 0x4080)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x4})

1.339559051s ago: executing program 0 (id=49):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x11, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
syz_usb_connect$cdc_ecm(0x2, 0x55, &(0x7f0000000600)=ANY=[@ANYBLOB="12011003020000202505a1a44000010203010902430001010970090904000d0302060001052406000005240008000d240f0109000000010006000708241c060085000209058202ff0111030909050302000404f705f7bb8500fd8f8d"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x1f048e83907ec8f}, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090501"], 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x80)
ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f0000000040)=""/228)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x14, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xa}, @flat=@handle={0x73682a85, 0x4}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001900)={0x18, r9, 0x2d1904d3112073a9, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000004}, 0x8040)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r7, &(0x7f0000000180)={@val={0x70}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4f, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, {0x0, 0x6558, 0x3b, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86, "e0ae15e937ae8d290732808ef5fa4e98e6182cfa8deb0eafc8feee63845edac6fd5acb"}}}}}}}, 0x61)
syz_usb_connect$cdc_ecm(0x6, 0x168, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x1, 0x1, 0x2, 0x90, 0xbd, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "458a669b"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x10, 0x5, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x7, 0xd2}, @mbim={0xc, 0x24, 0x1b, 0x83, 0x6, 0x4, 0x3c, 0x8, 0xb1}, @obex={0x5, 0x24, 0x15, 0xfffb}, @mbim_extended={0x8, 0x24, 0x1c, 0x40, 0x8, 0x9}, @mdlm_detail={0xe8, 0x24, 0x13, 0x81, "17b738cd2cf70bcbe2daef229c6cc1c831833c53d33111a68681102a79afb0800ffb345e3bdbce74d186ce4216e509abae899d07004044b78e14e556ee3e93d0e16126ef34f2a8caf389b6973de626ed7a18a56a8cab36837efaaa3df295783e453bd1589195bd582680b056e598ae80311074454d8f1bb98cea802980506ad205e05ed2f9cc3774231462a97c26e56d87861c2fd4ebd6b969562eb9410cd16a314377b4f3659b59a313bff40a5b24ecc1a58e2e3ecd861ab0ded32d82fd827f0e9029a3d230131f7387b521a5ba267bf1afe8db0a14340fe0c976d7c71e8210af4a60cf"}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xe, 0x2b}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x4, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xf5, 0x56}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x50, 0x45, 0xf, 0x0, 0x20, 0x6}, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0x9, 0x5}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc09}}]})
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9)

1.296926494s ago: executing program 2 (id=51):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x424040, 0xc0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x4, 0x7, 0x2, 0x4}]})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x3000000, @bearer=@l2={'ib', 0x3a, 'rose0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x880)
ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/34)
sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x34, 0x20, 0x70bd25, 0x25dfdbfe, {0x20}, [@typed={0xc, 0x87, 0x0, 0x0, @u64=0x5}, @typed={0x4, 0x9}, @nested={0xc, 0x28, 0x0, 0x1, [@nested={0x4, 0x7a}, @nested={0x4, 0x83}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24024040)
r2 = accept4$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x800)
quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, 0xee00, &(0x7f00000003c0)='./file0\x00')
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x20001, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4000040)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000600)={0x8000000000000000, 0x5, 0x2, 0x7f, 0x1, [0x1ef91fc5, 0x2, 0x8, 0x6]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000640)={<r6=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f00000006c0)=r6)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ppoll(&(0x7f0000000700)=[{r7, 0x110}, {r2, 0x300}, {0xffffffffffffffff, 0x8000}], 0x3, &(0x7f0000000740)={0x77359400}, &(0x7f0000000780)={[0x400]}, 0x8)
r8 = openat$incfs(r0, &(0x7f00000007c0)='.pending_reads\x00', 0x130841, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000800)={'vcan0\x00', <r9=>0x0})
clock_gettime(0x0, &(0x7f0000000880)={<r10=>0x0, <r11=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x1d, r9}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x1, 0xc0, 0x0, {}, {r10, r11/1000+10000}, {0x2, 0x0, 0x1, 0x1}, 0x1, @can={{0x3}, 0x8, 0x2, 0x0, 0x0, "e44ab460d56bfcc2"}}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x40010)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f00000009c0)={0x0, @adiantum, 0x0, @desc4})
r12 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000a00), &(0x7f0000000a40)=0x4)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000a80)="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")
r13 = fsmount(0xffffffffffffffff, 0x0, 0x4)
fstat(r12, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
r15 = pidfd_getfd(r8, r12, 0x0)
sendmsg$nl_generic(r8, &(0x7f00000022c0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002280)={&(0x7f0000000c40)={0x1614, 0x1b, 0x800, 0x70bd2a, 0x25dfdbfb, {0x14}, [@typed={0x8, 0x9, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x248, 0x5, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @fd=r13}, @generic="46b7923fefc24356fb50bea130e589e96dcb499c3723db9e72489ae2a40f0dc424fbb9e17ca3920cc62de3512f64461c64ed04bce16576bbb4fef4460591201517d556b90adf0e7058479ad9323ab0439db63b5780017ca53b97cebc44f20923429efff026296d850f4c0f8d764356f8c43117a9a863baf7d37e11ce138cacef1d699667dd5973ff8a50d97f007a06fe67e560a9e1", @generic="1890353f19d36612dd8af4fdb293b4198d83f869e9e838156deefe49f890743e0c0dd7", @nested={0x4, 0x139}, @nested={0x4, 0xd9}, @generic="1307ad2d5488e796fc70e62999d5cb8e6bd3cce794c7aabf8d8629e94122f8e3fd6d89003f8cfa17af6ed5aab0fd0d50517565d04285d1186eaa881e554c220b2a87d10019895f91b14e9469001eb3c26d39e62ee7cab1977b7db229754ca7a668a53a9437fc02873bda789c74613e14aa63f5c49c12e8d7919a619e53936e34260982fdaf1413cd495473f648f532d3e099b7e966c5424740734e33c266dd", @nested={0x4, 0x11a}, @generic="2c81012ad523486d1b632aa0d1cccf269187aed5482805801e09c0c37b45dd67badd5585f3c0e665708a53d00e4ad3e133f861d8fe9c8e4a64b174ba5869a0aa8ddb28745f12c621d766d83928a1a9a94aae1bb84a010e88fdbca7e9f462eec361b4e9c56cefdc17db2b2b47e01de64402794b1bb7b5abdede227891c9b042d207297c53695032cf6338ece624fe5d37ab98a39e3f7c897205058f44015c8b6a9b82672d9231548f30407e1da29bfdeee25f4bb43d46e641c50b19582ddfe184b011af2bd12fbe93e52fe5a3877a50fe0698605e46", @nested={0x4, 0x135}]}, @generic="2259409edff99db6b720bc9280190e7153e252cb0ad44f0b646e08153f096fbc348fe286dfd939806cc9ff910ee778e689213db420f54ab5e9a225e09b67bd46a16fa0595143710618fb18be3adfd12b2f57b422b47d5df351e8d3d15922ce5e0de89dd8dbf4cbb21d9bb854353fe26b3291d7efeaf28429460b3f1027078eb7d552e707fd37ade85b484f", @typed={0x96, 0x71, 0x0, 0x0, @binary="5abea8da41b40cff354538a347c70ab0a6379f411bffb9f192755e09f4b683bf2c58824133dadc8b208db34998e2362054043e9b0522217b34405ea81718d67b8d88c497c4aeedb687092e7a0870cba7df57c822a7a8f5ac985b2ffe20df4794125c2500fb13e9b2d3acbd3190b9ca4302f5f5a640004e80395d2272cafd71abeb4a2121db464286475881c91c7da150cdbd"}, @nested={0x11c0, 0x3, 0x0, 0x1, [@nested={0x4, 0x14c}, @typed={0x8, 0x60, 0x0, 0x0, @u32=0x1}, @generic="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", @generic="085a624f1b42b46e56108ff470227c8b74b7b71733f20b3c304a9c7d926bbac0df7e13e4ee6713c2daa3e8fcccb654c3bee909c5931081156fd349c2fa824b1b3326f52760cc13ee93ad386c37845d5796f1707b038003deedcd8f68bd76fc0cd3422a4fbd62aac74bd1e29821e5aff29e2a78d16462cf6b08a0906053112dd8ecf994ce6b21aa3217c46658255a9f9b9f97e7414d8d59c52c0fe6fd50195d3d6ee740ee63fa5f55bad961c4e3776cee77343d2449bd6fcfaa159b2d17b5f6b8f2eaa73b94d39b4be7c5c85dbb1e391c86030e", @nested={0x4, 0x98}, @nested={0x4, 0x17}, @generic="019cbd043be9ba", @generic="59d4bbd32fe8a0f9f4bc473b59e347f8c65aaf891978a74ceff2e7d2d5f8d6773797ecd765c377dfdf82904e8c4b4ab1c5e1190f07b4ca5a4d161dca27f6e4182a3c7fac14ac635850089885d13636a26c889db1f897c385bcaa80e9e7750becc095fb6b2ac64d272194334a0afaa39899a2eeea7bcbc87312a0a61259eb56621b3edebbdb3fcf1243d93263385e714e3fb9c0809c527d3db61fc308c1dbe4640d71c0f16cb31ce98d7d09c79601ca59693d87e6ecb786bf78c86f7cdd356f1d0888a189bf3b", @typed={0x8, 0x4, 0x0, 0x0, @uid=r14}]}, @typed={0x8, 0xbc, 0x0, 0x0, @fd=r15}, @generic="0ff5a0437ab02b4ccbe4e264134443086e3834b1297a163f7db3460f7ea65d11e7ce41934d59272891847b2fdd43d9c8c08dcbc300bdd3bfa9def3fdd89eb7ee6480561d43a46af4b27d88434ac4", @generic="04517cb9bbbd499e1fa702c212d68ba5de1e3418485adfcc6186906ccf45c92f00b85ec43b9cc9989cf04d4224055ec1cf3054e51478bf023af72fb70345312060539ea420536debd5a0b9077cceda6c1b74b37b20443574d543be07842d80b24fed5ba2d3514bb0f59989f65744506611f50b27"]}, 0x1614}, 0x1, 0x0, 0x0, 0x20000880}, 0x880)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000002300)=0x2)

1.285498275s ago: executing program 2 (id=52):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0, 0xfec00000})
r2 = socket(0x11, 0x2, 0x0)
setsockopt(r2, 0x107, 0x16, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=""/4092, 0x41000})
syz_usb_control_io(r0, 0x0, 0x0)

1.132058763s ago: executing program 3 (id=53):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4)
r1 = socket$unix(0x1, 0x5, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[{0xd8, 0x114, 0x7, "60177be4a5ab0a347e206cd28a8bb14d0afbf14b39671ca9ad1f6447bf83efc62f9c02b58f17b834173d68f476008b61ed9919797f365afd9a044161cbf7af50fb5d977da862c9d4a7d5b3ad1fa5c2471f9ac06a813e7e1d96f1e96b44bebc4d067ae891fa863eed1b162c211f843e8550e0e201ceed63b890c5c01193b8d270d08c85ae347f548eacaf87493fdb725f41470a765b98eaaa24853f52f8194d13b190f83647e2057e53301d8cfb2e13fd4502a6859ac1a9d56ce6fd4b9a9136782e14200c"}], 0xd8}, 0x4000000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="05a8f300", @ANYRES16=r2, @ANYBLOB="9b0f2bbd7000ffdbdf25012000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0xb8a0, 0x0, 0x1000085, 0xffffffff})
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x80800)
ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, 0x0)
mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000006)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100)

1.070091037s ago: executing program 3 (id=54):
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) (async)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0) (async)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000280)={&(0x7f0000000600)=""/148, 0x94}) (async)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0xfffffffd, 0x4) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
ioctl$TIOCSIG(r3, 0x40045436, 0x9) (async)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x2}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async)
bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x1}}, 0x10) (async)
bind$tipc(r4, 0x0, 0x0) (async)
wait4(r1, 0x0, 0x0, &(0x7f0000000080)) (async)
creat(&(0x7f0000000300)='./file0\x00', 0x28)
pipe2$9p(&(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x800) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async)
bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004500), 0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="7472617e733d66802c7266646e6f3d009547d2cd2006ade1f5d578abd1ad52ef71cbe4d2ab8c188c50c0a23658d17186a70925a6972390da955606aba097d1e19e3dfae3d42eeb9f921e7f43680651579e2d24e8ceabf2766b996f84840919565c69c3dd92641782c665ee9cb155adf0b42f60e5d5cc67a435dce9a903bd6698f7d9983a896a2a2e2bcc0de3f825ca9cb241abf152c00c18d127b40cbf746cd88e563ed8e9774dc718eb1c4f5b9e66e58752f6793b714e49284bb410ef5be6e2dd35e90c3e03b3ab87c553979b44c21cbb5e76cbdcf3f85a47cc24847fcb660f0a2e8f9b0179eb436a5b5333e7123c674ee25b291d34c3bd7fe4fd65fe59bf1bc80ebccf2c893faadb8ea4658bdd590ba8899cd84736dd9a63963150760c68af355fa33b9c8ee9a1f9ff3c327a71f075542e6a427ec21b399bf20e70b62054eb082c40240bcc522b909387b624da5c519b129c60f635825ea5051de242b78d7fea4547f97f764a9132d62692bc0381d7ae4a363e095c108a3b24e8d3b4abc222a4d7448958b2f84e20b5c298000355081b2a47d79eb75235727fc05acaaa448e1abb25f24843f4039b31506070b461fe6944e0", @ANYRESHEX=r6, @ANYRES8=r1, @ANYRES32, @ANYBLOB="2c756e616d653d7472616e8c00dee23a4a5df8c272a289a2ad256dea6dc16c962c00"]) (async)
wait4(r1, 0x0, 0x4000000a, 0x0) (async)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
read$FUSE(r8, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
ioprio_get$pid(0x2, r9)
r10 = syz_pidfd_open(r1, 0x0)
ppoll(&(0x7f00000002c0)=[{r10, 0x4080}, {r10, 0x4080}], 0x2, 0x0, 0x0, 0x0)

1.069607447s ago: executing program 3 (id=55):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000027c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async, rerun: 64)
open_tree(0xffffffffffffff9c, 0x0, 0x89901) (async, rerun: 64)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) (async)
syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0)

1.069386187s ago: executing program 3 (id=56):
unshare(0x2000400)
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r2=>0x0)
r3 = eventfd2(0x6, 0x800)
io_getevents(r2, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0)
io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0)
r4 = eventfd(0x7)
io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0x40, 0x0, 0x3, r3}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3b7c, r1, 0x0, 0x0, 0x8, 0x0, 0x3, r4}])
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x0, 0x0)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setreuid(r6, r6)
syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)

301.603262ms ago: executing program 1 (id=57):
mount$binderfs(0x0, &(0x7f0000000180)='./binderfs2\x00', &(0x7f0000000140), 0x20000, &(0x7f0000000180)=ANY=[])
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x8000, 0x1}, 0x18, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
r1 = gettid()
r2 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x4)
fchdir(r3)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x1000021, 0x4, @tid=r1}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
open(&(0x7f0000000600)='.\x00', 0x10080, 0x10)
getdents(0xffffffffffffffff, &(0x7f0000000400)=""/179, 0xb3)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x103000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x20)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
fgetxattr(r6, &(0x7f0000000100)=@random={'user.', '[@\\&[*-,\'/${\x00'}, &(0x7f00000004c0)=""/212, 0xd4)
r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000380)="3e0fae89f4c9660f38802f66b9800000c00f3266350100000066b81f0000000f23c00f21f8663503000c4f42004200f8badbc7a0a037a9000fc76afdee0f20e06635000002000f22e0670f009afbd9f501c4e3f1ce25064f5b323235008000000f30ed", 0xffffffffffffffc8}], 0x1, 0x39, 0x0, 0x0)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r9], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x44080}, 0x200000c4)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

256.872804ms ago: executing program 1 (id=58):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000290000000400000011000000fcffffff1300000000000000290000000b"], 0x30}}], 0x1, 0x40000)
getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000040))
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67e4162e43ac610200000000002000000001000000000000000000000d00", [0x2, 0x7]}})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00')
read$FUSE(r5, &(0x7f0000000c40)={0x2020}, 0x2020)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0})
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r7 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000080))
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
ppoll(&(0x7f00000001c0)=[{r7, 0x20}], 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0xc, 0x1d, "534a85015f0f2b080000000000000053fbc127b115288b93ac3782f15e7fe002c05a09fb03ce28eefc8e3633ac36a000", "4eb50fabe4d9a620f7327081d26a2b29a89ff4cc0ac64d17db43e8218a4ef90d506b122906a0a2c501ecab0549c519248f00004000e900", "e892038420710000009c8400", [0x8]})
fcntl$getownex(r3, 0x10, &(0x7f00000001c0)={0x0, <r9=>0x0})
ptrace$PTRACE_SETSIGMASK(0x420b, r9, 0x8, &(0x7f0000000200)={[0xc]})

6.413379ms ago: executing program 3 (id=59):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1000001)
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xf, 0x3, 0x4, 0x3, 0x2, <r1=>0xffffffffffffffff})
fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, r1})

0s ago: executing program 3 (id=60):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fgetxattr(r0, &(0x7f0000003100)=@known='trusted.overlay.origin\x00', 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20042, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000300)=@x86={0x1, 0x8, 0x1, 0x0, 0x3, 0x7, 0x6, 0x1a, 0x7f, 0xa7, 0x2, 0xb, 0x0, 0x800, 0x6, 0x3, 0x10, 0x8, 0x9, '\x00', 0x1, 0xd})
ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000000)={0x80003, 0x0, {[0x5, 0x6, 0x9, 0xe02c, 0x8, 0x78b, 0x7fffffffffffffff, 0x4d7b]}})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x400})
keyctl$set_reqkey_keyring(0xe, 0x1) (async)
request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x3}, &(0x7f0000000300)='\\\x00', 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c5}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000100)="430f01d1b913000000b8ea72f7d5ba000000000f30420f096436f30f0926420f30f2f3410f1c95ca1083f02e642ed8da66460f3882bd00000000460f01d10f2067", 0x41}], 0x1, 0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000001c0)={0x8000000000000001, 0x0, 0x4, 0x0, 0x0, [{{r2}, 0x2}, {{r6}, 0xd}, {{r6}, 0x3}, {{r7}, 0x89ae}]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts.
[   24.848996][   T36] audit: type=1400 audit(1769956931.430:64): avc:  denied  { mounton } for  pid=284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   24.852823][  T284] cgroup: Unknown subsys name 'net'
[   24.871699][   T36] audit: type=1400 audit(1769956931.430:65): avc:  denied  { mount } for  pid=284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.899301][   T36] audit: type=1400 audit(1769956931.460:66): avc:  denied  { unmount } for  pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.899865][  T284] cgroup: Unknown subsys name 'devices'
[   25.084903][  T284] cgroup: Unknown subsys name 'hugetlb'
[   25.090715][  T284] cgroup: Unknown subsys name 'rlimit'
[   25.207992][   T36] audit: type=1400 audit(1769956931.790:67): avc:  denied  { setattr } for  pid=284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.231672][   T36] audit: type=1400 audit(1769956931.790:68): avc:  denied  { mounton } for  pid=284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   25.256848][   T36] audit: type=1400 audit(1769956931.790:69): avc:  denied  { mount } for  pid=284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   25.288056][  T286] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   25.297424][   T36] audit: type=1400 audit(1769956931.880:70): avc:  denied  { relabelto } for  pid=286 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.323340][   T36] audit: type=1400 audit(1769956931.880:71): avc:  denied  { write } for  pid=286 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.340574][  T284] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   25.350366][   T36] audit: type=1400 audit(1769956931.920:72): avc:  denied  { read } for  pid=284 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.384136][   T36] audit: type=1400 audit(1769956931.920:73): avc:  denied  { open } for  pid=284 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.656837][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.664501][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.671856][  T291] bridge_slave_0: entered allmulticast mode
[   26.692167][  T291] bridge_slave_0: entered promiscuous mode
[   26.699770][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.707166][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.714441][  T291] bridge_slave_1: entered allmulticast mode
[   26.720969][  T291] bridge_slave_1: entered promiscuous mode
[   26.862216][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.869486][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.876794][  T295] bridge_slave_0: entered allmulticast mode
[   26.883161][  T295] bridge_slave_0: entered promiscuous mode
[   26.889520][  T297] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.896704][  T297] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.904282][  T297] bridge_slave_0: entered allmulticast mode
[   26.910730][  T297] bridge_slave_0: entered promiscuous mode
[   26.918898][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.926117][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.933421][  T295] bridge_slave_1: entered allmulticast mode
[   26.939937][  T295] bridge_slave_1: entered promiscuous mode
[   26.947000][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.954139][  T297] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.961328][  T297] bridge_slave_1: entered allmulticast mode
[   26.967684][  T297] bridge_slave_1: entered promiscuous mode
[   27.072132][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.079254][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.086599][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.093665][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.102645][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.109732][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.116944][  T296] bridge_slave_0: entered allmulticast mode
[   27.124060][  T296] bridge_slave_0: entered promiscuous mode
[   27.130921][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.138317][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.145510][  T296] bridge_slave_1: entered allmulticast mode
[   27.151923][  T296] bridge_slave_1: entered promiscuous mode
[   27.231241][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.238392][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.245774][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.253080][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.279579][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.286701][  T297] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.294057][  T297] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.301128][  T297] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.329343][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.336475][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.343897][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.350945][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.367296][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.374737][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.382935][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.390426][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.398016][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.405393][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.413812][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.421287][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.436504][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.444671][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.485176][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.492276][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.500422][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.507615][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.516451][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.523548][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.531447][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.539591][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.549332][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.557395][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.566750][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.575072][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.594872][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.602116][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.646637][  T291] veth0_vlan: entered promiscuous mode
[   27.669281][  T297] veth0_vlan: entered promiscuous mode
[   27.677949][  T296] veth0_vlan: entered promiscuous mode
[   27.685900][  T291] veth1_macvtap: entered promiscuous mode
[   27.705373][  T295] veth0_vlan: entered promiscuous mode
[   27.715822][  T297] veth1_macvtap: entered promiscuous mode
[   27.726844][  T296] veth1_macvtap: entered promiscuous mode
[   27.761097][  T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   27.779480][  T295] veth1_macvtap: entered promiscuous mode
[   27.836420][  T340] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   27.900496][  T347] netlink: 'syz.0.1': attribute type 13 has an invalid length.
[   28.044296][  T371] netlink: 'syz.3.12': attribute type 4 has an invalid length.
[   28.054959][  T371] netlink: 'syz.3.12': attribute type 4 has an invalid length.
[   28.065159][  T371] netlink: 'syz.3.12': attribute type 4 has an invalid length.
[   28.074678][  T371] netlink: 'syz.3.12': attribute type 4 has an invalid length.
[   28.093297][   T67] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   28.126830][  T375] sit0: entered promiscuous mode
[   28.133825][  T375] netlink: 'syz.3.13': attribute type 1 has an invalid length.
[   28.134177][  T376] Zero length message leads to an empty skb
[   28.141800][  T375] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13'.
[   28.212421][   T46] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   28.262566][   T67] usb 3-1: Using ep0 maxpacket: 8
[   28.268690][   T67] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 198, changing to 11
[   28.280287][   T67] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[   28.290922][   T67] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   28.305472][   T67] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   28.315265][   T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   28.323889][   T67] usb 3-1: SerialNumber: syz
[   28.335588][  T336] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   28.375201][   T46] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[   28.386096][   T46] usb 2-1: config 0 has no interface number 0
[   28.393742][   T46] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   28.412166][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.420780][   T46] usb 2-1: Product: syz
[   28.425079][   T46] usb 2-1: Manufacturer: syz
[   28.429795][   T46] usb 2-1: SerialNumber: syz
[   28.435687][   T46] usb 2-1: config 0 descriptor??
[   28.547425][  T336] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   28.752512][   T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   28.902461][   T31] usb 4-1: Using ep0 maxpacket: 32
[   28.909092][   T31] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[   28.917848][   T31] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   28.927467][   T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[   28.948055][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024
[   28.959164][   T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[   28.971530][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   28.994205][  T389] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.014645][   T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   29.025228][  T389] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   29.052474][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   29.052506][  T352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.053197][  T352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.082170][   T31] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[   29.112483][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.125943][   T31] usb 4-1: config 0 descriptor??
[   29.131389][  T386] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   29.195748][  T336] hid-generic 0000:0000:0000.0001: pid 336 passed too short report
[   29.212906][   T46] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[   29.224229][   T31] usblp0: Disabling reads from problematic bidirectional printer
[   29.240829][   T46] asix 2-1:0.251: probe with driver asix failed with error -524
[   29.255184][   T67] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[   29.408272][   T46] usb 2-1: USB disconnect, device number 2
[   29.420261][   T31] usblp 4-1:0.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004
[   29.467313][   T31] usb 4-1: USB disconnect, device number 2
[   29.483478][   T31] usblp0: removed
[   29.758443][  T336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.768909][  T336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.777668][  T336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.786406][  T336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.913786][   T67] usb 3-1: USB disconnect, device number 2
[   29.923909][   T67] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[   29.958995][   T36] kauditd_printk_skb: 78 callbacks suppressed
[   29.959013][   T36] audit: type=1400 audit(1769956936.540:152): avc:  denied  { write } for  pid=420 comm="syz.3.20" name="sockstat" dev="proc" ino=4026532601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   29.989270][  T422] netlink: 'syz.3.20': attribute type 4 has an invalid length.
[   30.024937][   T36] audit: type=1400 audit(1769956936.580:153): avc:  denied  { append } for  pid=419 comm="syz.1.21" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   30.184333][   T36] audit: type=1400 audit(1769956936.760:154): avc:  denied  { read write } for  pid=445 comm="syz.1.24" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   30.275268][   T36] audit: type=1400 audit(1769956936.760:155): avc:  denied  { open } for  pid=445 comm="syz.1.24" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   30.323429][   T36] audit: type=1400 audit(1769956936.760:156): avc:  denied  { ioctl } for  pid=445 comm="syz.1.24" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   30.353521][   T36] audit: type=1400 audit(1769956936.800:157): avc:  denied  { block_suspend } for  pid=450 comm="syz.1.25" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   30.376701][   T36] audit: type=1400 audit(1769956936.840:158): avc:  denied  { append } for  pid=454 comm="syz.1.26" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   30.400197][   T36] audit: type=1400 audit(1769956936.860:159): avc:  denied  { ioctl } for  pid=456 comm="syz.1.27" path="socket:[3939]" dev="sockfs" ino=3939 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   30.466822][   T36] audit: type=1400 audit(1769956937.050:160): avc:  denied  { create } for  pid=456 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   30.511800][   T36] audit: type=1400 audit(1769956937.050:161): avc:  denied  { write } for  pid=456 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   30.592528][   T67] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   30.743806][   T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   30.755049][   T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.764982][   T67] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   30.774314][   T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.783365][   T67] usb 4-1: config 0 descriptor??
[   30.791108][   T67] hub 4-1:0.0: USB hub found
[   30.822548][  T342] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   30.892454][   T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   30.982476][  T342] usb 3-1: Using ep0 maxpacket: 8
[   30.989777][  T342] usb 3-1: config index 0 descriptor too short (expected 30482, got 18)
[   30.999002][   T67] hub 4-1:0.0: 1 port detected
[   31.003897][  T342] usb 3-1: config 0 has too many interfaces: 101, using maximum allowed: 32
[   31.013244][  T342] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 101
[   31.024040][  T342] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[   31.033257][  T342] usb 3-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0
[   31.041933][  T342] usb 3-1: Product: syz
[   31.046304][  T342] usb 3-1: Manufacturer: syz
[   31.052496][  T342] usb 3-1: config 0 descriptor??
[   31.058660][  T342] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   31.062511][   T31] usb 2-1: Using ep0 maxpacket: 8
[   31.068242][  T342] usb 3-1: Detected FT2232C/D
[   31.075114][   T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   31.086719][   T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   31.100892][   T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   31.110212][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   31.118409][   T31] usb 2-1: SerialNumber: syz
[   31.125211][   T31] cdc_acm 2-1:1.0: skipping garbage
[   31.130524][   T31] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[   31.138679][   T31] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[   31.145484][   T31] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22
[   31.258834][  T342] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   31.266186][  T342] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   31.274038][  T342] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   31.283977][  T342] usb 3-1: USB disconnect, device number 3
[   31.290931][  T342] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   31.301374][  T342] ftdi_sio 3-1:0.0: device disconnected
[   31.338719][  T485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   31.347772][  T485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   31.356076][  T488] usb 2-1: USB disconnect, device number 3
[   32.022403][   T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   32.184073][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[   32.192302][   T31] usb 3-1: not running at top speed; connect to a high speed hub
[   32.200960][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   32.211301][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   32.223002][   T31] usb 3-1: string descriptor 0 read error: -22
[   32.229570][   T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   32.239665][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.253687][   T31] usb 3-1: 0:2 : does not exist
[   32.302505][  T389] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[   32.333226][   T67] hub 4-1:0.0: hub_hub_status failed (err = -32)
[   32.339854][   T67] hub 4-1:0.0: config failed, can't get hub status (err -32)
[   32.349313][   T67] usbhid 4-1:0.0: can't add hid device: -32
[   32.355566][   T67] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[   32.453518][  T389] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   32.465904][  T389] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   32.477055][  T389] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   32.487467][  T389] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[   32.496617][  T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.630576][  T502] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.711755][  T499] serio: Serial port ttyS3
[   32.767987][  T389] usb 2-1: string descriptor 0 read error: -71
[   32.778328][  T389] hub 2-1:32.0: USB hub found
[   32.783873][  T389] hub 2-1:32.0: config failed, can't read hub descriptor (err -22)
[   32.820109][   T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   32.835864][   T31] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[   32.847134][   T31] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[   32.865319][   T31] usb 3-1: USB disconnect, device number 4
[   32.892844][  T389] usb 2-1: USB disconnect, device number 4
[   32.912432][   T67] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   33.062530][   T67] usb 1-1: Using ep0 maxpacket: 32
[   33.069874][   T67] usb 1-1: unable to get BOS descriptor or descriptor too short
[   33.078643][   T67] usb 1-1: config 1 has an invalid interface number: 15 but max is 0
[   33.087254][   T67] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.097550][   T67] usb 1-1: config 1 has no interface number 0
[   33.103854][   T67] usb 1-1: config 1 interface 15 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   33.116899][   T67] usb 1-1: config 1 interface 15 has no altsetting 0
[   33.126997][   T67] usb 1-1: New USB device found, idVendor=19d2, idProduct=7e26, bcdDevice=96.b3
[   33.136512][   T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.145039][   T67] usb 1-1: Product: syz
[   33.149311][   T67] usb 1-1: Manufacturer: syz
[   33.154003][   T67] usb 1-1: SerialNumber: syz
[   33.363515][   T67] usb 1-1: bad CDC descriptors
[   33.370152][   T67] usb 1-1: USB disconnect, device number 2
[   33.392551][  T488] usb 4-1: USB disconnect, device number 3
[   33.562493][  T389] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   33.714060][  T389] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[   33.725573][  T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   33.736608][  T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   33.751994][  T518] overlay: Unknown parameter 'obj_type'
[   33.752861][  T389] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[   33.764425][   T67] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   33.779102][  T389] usb 2-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00
[   33.791672][  T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.803829][   T67] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   33.814111][  T389] usb 2-1: config 0 descriptor??
[   33.843488][  T524] process 'syz.2.42' launched './file1' with NULL argv: empty string added
[   33.855311][  T522] fido_id[522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   33.925458][  T532] 9pnet_fd: Insufficient options for proto=fd
[   33.984013][  T544] input input4: cannot allocate more than FF_MAX_EFFECTS effects
[   34.229038][  T516] capability: warning: `syz.1.40' uses deprecated v2 capabilities in a way that may be insecure
[   34.239739][   T31] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   34.249633][  T389] wacom 0003:056A:0015.0003: Unknown device_type for 'HID 056a:0015'. Assuming pen.
[   34.252606][   T67] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   34.261687][  T389] wacom 0003:056A:0015.0003: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.1-1/input0
[   34.279456][  T389] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0015.0003/input/input5
[   34.394079][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[   34.402286][   T31] usb 1-1: not running at top speed; connect to a high speed hub
[   34.410987][   T31] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x82 has invalid maxpacket 511, setting to 64
[   34.421956][   T31] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[   34.432945][   T31] usb 1-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   34.445132][   T67] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   34.446039][   T31] usb 1-1: config 1 interface 0 has no altsetting 0
[   34.465072][  T488] usb 2-1: USB disconnect, device number 5
[   34.465430][   T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   34.475432][   T67] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.485220][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.496008][   T67] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   34.500008][   T31] usb 1-1: Product: syz
[   34.511644][   T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.514366][   T31] usb 1-1: Manufacturer: syz
[   34.525336][   T67] usb 3-1: config 0 descriptor??
[   34.532240][   T67] hub 3-1:0.0: USB hub found
[   34.537670][   T31] usb 1-1: SerialNumber: syz
[   34.545722][  T541] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   34.553015][  T541] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   34.733345][   T67] hub 3-1:0.0: 1 port detected
[   34.763766][  T541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.772722][  T541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.782643][  T541] rust_binder: Error while translating object.
[   34.782732][  T541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   34.789093][  T541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36
[   34.849490][   T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[   34.869026][   T31] usb 1-1: USB disconnect, device number 3
[   35.004884][   T36] kauditd_printk_skb: 25 callbacks suppressed
[   35.004903][   T36] audit: type=1400 audit(1769956941.590:187): avc:  denied  { create } for  pid=573 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   35.044734][   T36] audit: type=1400 audit(1769956941.630:188): avc:  denied  { setopt } for  pid=575 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   35.065408][  T576] loop7: detected capacity change from 0 to 7
[   35.072923][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   35.082141][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   35.090322][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   35.099687][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   35.107869][  T576]  loop7: unable to read partition table
[   35.114017][  T576] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   35.122935][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   35.136861][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   35.144348][   T36] audit: type=1400 audit(1769956941.730:189): avc:  denied  { map } for  pid=575 comm="syz.1.58" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   35.162565][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   35.177979][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   35.180106][   T36] audit: type=1400 audit(1769956941.730:190): avc:  denied  { read write } for  pid=575 comm="syz.1.58" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   35.192050][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   35.212014][   T36] audit: type=1400 audit(1769956941.760:191): avc:  denied  { write } for  pid=575 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   35.220292][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   35.232458][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   35.256606][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   35.265045][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   35.274307][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   35.291035][   T36] audit: type=1400 audit(1769956941.850:192): avc:  denied  { map } for  pid=578 comm="syz.3.59" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   35.315068][  T576] ------------[ cut here ]------------
[   35.320661][  T576] WARNING: CPU: 0 PID: 576 at mm/page_alloc.c:5234 __alloc_pages_noprof+0x109/0x7e0
[   35.330267][  T576] Modules linked in:
[   35.334398][  T576] CPU: 0 UID: 0 PID: 576 Comm: syz.1.58 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e
[   35.345881][  T576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   35.354715][   T36] audit: type=1400 audit(1769956941.900:193): avc:  denied  { load_policy } for  pid=575 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   35.356319][  T576] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0
[   35.381942][  T576] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 9a b7 0b 06 00 0f 85 c2 00 00 00 c6 05 8d b7 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24
[   35.401808][  T576] RSP: 0018:ffffc9000d787520 EFLAGS: 00010246
[   35.407998][  T576] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000
[   35.416142][  T576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d7875d8
[   35.424260][  T576] RBP: ffffc9000d787660 R08: ffffc9000d7875d7 R09: 0000000000000000
[   35.432311][  T576] R10: ffffc9000d7875c0 R11: fffff52001af0ebb R12: ffffc9000d787560
[   35.440452][  T576] R13: dffffc0000000000 R14: 1ffff92001af0ea8 R15: 0000000000000000
[   35.448586][  T576] FS:  00007f9b723766c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   35.458429][  T576] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   35.465134][  T576] CR2: 00007f84f6c3fff8 CR3: 0000000117496000 CR4: 00000000003526b0
[   35.473296][  T576] Call Trace:
[   35.476624][  T576]  <TASK>
[   35.479600][  T576]  ? vfs_write+0x3c8/0xf90
[   35.484178][  T576]  ? ksys_write+0x145/0x260
[   35.488764][  T576]  ? x64_sys_call+0x271c/0x2ee0
[   35.493733][  T576]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   35.499514][  T576]  ? hashtab_init+0xdb/0x1f0
[   35.504363][  T576]  ___kmalloc_large_node+0x81/0x210
[   35.509637][  T576]  ? hashtab_init+0xdb/0x1f0
[   35.514342][  T576]  __kmalloc_large_node_noprof+0x1e/0xd0
[   35.520159][  T576]  ? hashtab_init+0xdb/0x1f0
[   35.524852][  T576]  __kmalloc_noprof+0x326/0x500
[   35.529778][  T576]  ? kasan_save_alloc_info+0x40/0x50
[   35.535153][  T576]  hashtab_init+0xdb/0x1f0
[   35.539634][  T576]  ? class_read+0x17f/0x8c0
[   35.544234][  T576]  symtab_init+0x44/0x70
[   35.548518][  T576]  class_read+0x20e/0x8c0
[   35.553182][  T576]  ? __kasan_kmalloc+0x96/0xb0
[   35.558033][  T576]  ? hashtab_init+0xdb/0x1f0
[   35.562711][  T576]  ? __cfi_class_read+0x10/0x10
[   35.567637][  T576]  ? hashtab_init+0x105/0x1f0
[   35.572516][  T576]  policydb_read+0xab8/0x28b0
[   35.577701][  T576]  ? __kasan_kmalloc+0x96/0xb0
[   35.582571][  T576]  ? __cfi_policydb_read+0x10/0x10
[   35.587741][  T576]  ? security_load_policy+0x130/0x12d0
[   35.593289][  T576]  security_load_policy+0x16a/0x12d0
[   35.599198][  T576]  ? _raw_spin_unlock+0x45/0x60
[   35.604222][  T576]  ? __check_object_size+0x527/0x830
[   35.609597][  T576]  ? __cfi_security_load_policy+0x10/0x10
[   35.615424][  T576]  ? __kasan_check_write+0x18/0x20
[   35.620603][  T576]  sel_write_load+0x2a7/0x5f0
[   35.625381][  T576]  ? __cfi_sel_write_load+0x10/0x10
[   35.630742][  T576]  ? bpf_lsm_file_permission+0xd/0x20
[   35.636269][  T576]  ? __cfi_sel_write_load+0x10/0x10
[   35.641597][  T576]  vfs_write+0x3c8/0xf90
[   35.645931][  T576]  ? __cfi_vfs_write+0x10/0x10
[   35.650961][  T576]  ? __kasan_check_write+0x18/0x20
[   35.656213][  T576]  ? mutex_lock+0x97/0x1d0
[   35.660715][  T576]  ? __cfi_mutex_lock+0x10/0x10
[   35.665698][  T576]  ? __fget_files+0x2c5/0x340
[   35.670450][  T576]  ksys_write+0x145/0x260
[   35.674880][  T576]  ? xfd_validate_state+0x68/0x140
[   35.680147][  T576]  ? __cfi_ksys_write+0x10/0x10
[   35.685190][  T576]  ? __kasan_check_write+0x18/0x20
[   35.690433][  T576]  ? fpregs_restore_userregs+0x11c/0x260
[   35.696302][  T576]  __x64_sys_write+0x7f/0x90
[   35.700973][  T576]  x64_sys_call+0x271c/0x2ee0
[   35.706029][  T576]  do_syscall_64+0x57/0xf0
[   35.710566][  T576]  ? clear_bhb_loop+0x50/0xa0
[   35.715355][  T576]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   35.721446][  T576] RIP: 0033:0x7f9b7159aeb9
[   35.725974][  T576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.745700][  T576] RSP: 002b:00007f9b72376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   35.754352][  T576] RAX: ffffffffffffffda RBX: 00007f9b71815fa0 RCX: 00007f9b7159aeb9
[   35.762429][  T576] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000009
[   35.770473][  T576] RBP: 00007f9b71608c1f R08: 0000000000000000 R09: 0000000000000000
[   35.778524][  T576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   35.786695][  T576] R13: 00007f9b71816038 R14: 00007f9b71815fa0 R15: 00007ffc28c46b48
[   35.794751][  T576]  </TASK>
[   35.797828][  T576] ---[ end trace 0000000000000000 ]---
[   35.803814][  T576] SELinux: failed to load policy
[   35.825572][  T583] loop7: detected capacity change from 7 to 0
[   36.002930][   T67] hub 3-1:0.0: hub_hub_status failed (err = -32)
[   36.009385][   T67] hub 3-1:0.0: config failed, can't get hub status (err -32)
[   36.018408][   T67] usbhid 3-1:0.0: can't add hid device: -32
[   36.024566][   T67] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[   37.072614][   T67] usb 3-1: USB disconnect, device number 5