last executing test programs: 6.042386103s ago: executing program 3 (id=25): r0 = dup(0xffffffffffffffff) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x1, [{0x3, 0x1, 0x0, 0x0, @sint={0x7fff, 0x6d88}}]}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0xc5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x20800, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') creat(&(0x7f00000001c0)='./file1\x00', 0xb2) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000180)='./file0\x00', 0x1000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) unlink(&(0x7f00000004c0)='./file1\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(0x0, 0x82, 0x602) 5.940498067s ago: executing program 1 (id=27): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@random={'system.', ':\x00\xae\x0f>\xd6\xa8\\\x84\xf8fs'}) 5.919651308s ago: executing program 1 (id=28): syz_usb_connect(0x1, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="120150022dfe32db38fda9e13224b7d523520c7249b8c601020301090229000109009002090400100035f61f05052406000005240007000d240f01d47b102eae68034a459d559a387400b8543d43aaa40498761e3558ee5fe0e6fa836b62357c364e"], &(0x7f0000000780)={0x0, 0x0, 0xc, &(0x7f00000006c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x7, 0x4}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x20, 0x21, 0x9, 0x70bd25, 0x25dfd3ff, {0x4}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181403, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f00006ef000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r3) close(0x3) inotify_init() r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup(r4) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f00006dd000/0x400000)=nil) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x109202, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x800}) socket$inet6_icmp(0xa, 0x2, 0x3a) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r12, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x5b0}, 0x20008001) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="f5b994", @ANYRES32=r3, @ANYRES8=r2, @ANYBLOB="a3332d25ba7d42ce7db4f615acf0d58da44ac1bef05bfba5417d1dcf05aeca01236c0d93fb28a445854a99fc02735099c3e8d98967a9ec33188207a2f929302f9b226d81923146ac989bd95f4e79560c11d6abe351b8a72728c19e0b9b9b5c25a239096d2b33f01dece63cdbffe04e92e24114c706dff16b28156a915cdc669f0fc786546103a1db4d5983cd1bccf2290426ed3992b25d0ec9e65b9bc0ff413463a41589c347c9d0f0f7da10a8d5f93662e7d412bc7ba504ad93d009fcccb2f1f5a86cc49f524e393ea469d9a3be0d743b64212e66948963", @ANYRESHEX=r6, @ANYBLOB="e086f8bdb0a17d62109827e623e6650d69b509df2bb198c7e3156a00e24c7970e46c15437910cbaf280b82e9b7b1dd574e8d9132226a74fb367e669b91bdfe4e9997254b0f2c91836cfa63fcdecc1a21c426863d329e23c71be848c32cdc3b0752d2fbd69c0c0dfdbf2a63f1620b4304a57674b7b491f6205dbcd9d295e35b99dc850830af53604cfd1b663d23ac4ee480755f922fb2ae8e68f0513d38b026e2ce9128f9978fccd013668705930c9df69b2570e8c3971f2433f97d3b1d5c15ec6e54b39020fc9983e0f7b96ac85a62fa7c3a3f57c2019d63", @ANYRESDEC=r4, @ANYRES16=r12], 0x1a) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000200)={0x0, 0x0}) 3.946294846s ago: executing program 3 (id=37): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x120}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}, &(0x7f00000001c0)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "04f4d4991e1d8c1e9c90427c20c62bc3"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x1, 0xf000, 0x6, [0x18030, 0xc0]}]}}, 0x0, 0x0}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x20, 0xd, 0x6, "61a89377cb9f"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x29}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d38800000000d9e119e8021a6cf000", "7eb09414", "976f2a244e5025c9"}, 0x28) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000440)=@vmx={0x0, 0x0, 0x2cd, {0xb000, 0x10000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ac70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cd1c7aa95e1b115800", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efffffffffffffff00"}}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0xf7, 0x1, 0x3, 0x1, 0x1, 0xf, {0x9, 0x21, 0x2eb, 0x3, 0x1, {0x22, 0xb6d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xa1}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x22, 0x3, 0x8, 0x5}, 0x1f, &(0x7f0000000100)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x81, 0x94, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0xf7, 0x1, 0x9, 0xf, 0xa, [0xc00f]}]}, 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4001}}, {0x4a, &(0x7f0000000300)=@string={0x4a, 0x3, "f32b8a7b1958453d30c2d72cd0d9f17e280e5627704befaf92657989142394f95662ea59025ed8db691a4d2c9392c860704d12e56bf39c6e1508b31ef84a58e8dc12506789b0457b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x813}}, {0xfb, &(0x7f0000000580)=@string={0xfb, 0x3, "d4d7dd070989abfbc73c4062dd15481fa368acd3a9d03ffa559646bd92bb7c609326aefad85d42248123d64cdebb13e9e0858d0b636ef4ef238cc79a14841034c8ad9829d0842b6d6c65690bd7eef990a2eb9d0e76b223ce0bcbbc986fe669a3d63b0766a4d3e4be982456c7ba78559233dc8550d63efe239c1c55b5794dc64ad12adadd9ac00f1fba8584544990cee54602fe99e423181cd46b2faf462f84c5a1d7267da9f4fa3e9c467eab285baef33320c4ad5108cd6d8abb4a8d87d6faf54279daffa64991c8ef87fbd4ffcd360c951681b65cb63212d5b757c69a8b940231be17d28e0faa446f879d298e03ce62392e5a5e386ab20b53"}}, {0x13, &(0x7f0000000680)=@string={0x13, 0x3, "b5d4b92cad1c269ac9e73276bf8289a872"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x455}}, {0x7b, &(0x7f0000000800)=@string={0x7b, 0x3, "62f4b2ddcc8c69e2d334bbdd0c65d45d65ac2d9308d4ee8732b752386fb4eef345c61fcb5f66db36908e809e730b2960e49cd6884b013f3ef38c1f4d0511dacbfb59f195c3d84fc3ebd66521f45d8aecdf627816ff71e381edbd288ee8f683114239cb85203cea75407163cd0595c2ade11edcbf4b57d63af4"}}]}) 2.857061353s ago: executing program 1 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0xfffffffffffffffd}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000100)="d94468baf80c66b8c43dc08a66efbafc0cb80080ef36f3a9e3a166b91b0a000066b80000000066ba000000800f30b800008ed866b9800000c00f326635004000000f30660f38821cba200066ed640fc730f30fc7b63500", 0x57}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.786143735s ago: executing program 1 (id=47): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20240, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae03, 0xc9) (async) ioctl$KVM_CREATE_VM(r2, 0xae03, 0xc9) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000002f00)={0x14, 0x0, 0x601, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000002f00)={0x14, 0x0, 0x601, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7, 0x20, 0x200, 0x7, {{0x20, 0x4, 0x3, 0x7, 0x80, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0x2b, 0xe, [@broadcast, @broadcast, @private=0xa010100, @private=0xa010100, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @timestamp={0x44, 0x8, 0xb1, 0x0, 0x7, [0x3]}, @timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x0, [{@private=0xa010102, 0x6}, {@loopback, 0x7}, {@remote, 0x9}]}, @noop, @rr={0x7, 0xf, 0xc, [@empty, @empty, @private=0xa010100]}, @generic={0x86, 0xb, "f84da42521f4fd36d8"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7, 0x20, 0x200, 0x7, {{0x20, 0x4, 0x3, 0x7, 0x80, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0x2b, 0xe, [@broadcast, @broadcast, @private=0xa010100, @private=0xa010100, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @timestamp={0x44, 0x8, 0xb1, 0x0, 0x7, [0x3]}, @timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x0, [{@private=0xa010102, 0x6}, {@loopback, 0x7}, {@remote, 0x9}]}, @noop, @rr={0x7, 0xf, 0xc, [@empty, @empty, @private=0xa010100]}, @generic={0x86, 0xb, "f84da42521f4fd36d8"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x0, 0xfb, 0x3, 0x19, @remote, @rand_addr=' \x01\x00', 0x7800, 0x8, 0x0, 0x6}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0xb, 0xfffffff9, 0xa, @private1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x80, 0x80, 0x0, 0x4}}) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r9, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r9, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r10}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x40, 0x40, 0x4, 0x2, {{0x24, 0x4, 0x3, 0x3f, 0x90, 0x64, 0x0, 0x2, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x14, 0x0, [{0x6, 0xb, "ce35461ecb8a4c0d82"}, {0x2, 0x3, "9f"}]}, @generic={0x0, 0x4, '9I'}, @end, @timestamp_addr={0x44, 0x2c, 0x3c, 0x1, 0x2, [{@broadcast, 0xfffffff9}, {@empty, 0x40}, {@multicast1, 0x5}, {@private=0xa010100, 0x80000000}, {@private=0xa010102, 0x5}]}, @timestamp={0x44, 0x28, 0xa9, 0x0, 0x3, [0x4, 0x1, 0x1, 0x9, 0x9, 0x80000000, 0x1, 0x5, 0x2]}, @ssrr={0x89, 0xf, 0x97, [@empty, @dev={0xac, 0x14, 0x14, 0x28}, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'team_slave_1\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) (async) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f00000004c0)={r15, 0x3, 0x6}, 0x10) getpeername$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000bc0)={0x160, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4040840}, 0x80) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="a0000000210001000400000000000000ff020000000000000000000000000001ff02000000000000000000000000000100000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc0000000000000000000000000000017f585c01000000000000000000000000fc020000000000000000000000000001e00000010000000000000000000000003c0400000000000002000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000700), 0x4) 2.785135475s ago: executing program 1 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x3, 0x0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xe, 0xa, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x6, 0x7f, {0x8, 0x25, 0x1, 0x3, 0x33, 0x3, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd, 0x0, 0x8c, {0x8, 0x25, 0x1, 0x2, 0xf, 0x3, 0x3}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x8080000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x7, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x11, 0x81, 0x8f, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x40000, 0xeeef0000, 0x1b, 0x7, 0x1, 0x40, 0x4, 0x0, 0xfa, 0x29, 0x9, 0x9}, {0xeeee8000, 0x0, 0x1, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x80a0000, 0x10, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xe, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0x1, 0x6000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x5, 0x9, 0x96}, {0x3000, 0x405}, {0x80a0000, 0xff81}, 0xe0000031, 0x0, 0x6000, 0x60, 0x80000000005, 0xa800, 0x800f900, 0x1, [0x6, 0x400, 0x8000000000000003, 0x1]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x2, [0xa1b, 0x3]}}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100000841"], 0x0) 1.941021834s ago: executing program 3 (id=51): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @remote, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 1.940082614s ago: executing program 3 (id=52): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xffffffffffffff71}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x62, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfcd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000004c0)={0x8, 0x2, {0x8000000000000000, @struct={0x1, 0xe}, 0x0, 0xde12, 0x1, 0x25fbe028, 0x0, 0xe15, 0x40, @struct={0x1, 0x6}, 0x7, 0xff, [0x5, 0x9, 0x1ff, 0x8001, 0x1184, 0x7f]}, {0x1000, @usage=0x2, 0x0, 0x6, 0x4, 0x2, 0x6, 0x3cafcc42, 0x420, @struct={0xe00, 0x5}, 0x7fffffff, 0x80, [0x4, 0x8001, 0x7, 0x7, 0x5, 0x9]}, {0x9, @struct={0x7}, 0x0, 0xfffffffffffffff7, 0x0, 0x9, 0x0, 0x1, 0x28, @usage=0x6, 0x5, 0x7, [0x1, 0x7f, 0x400, 0x1, 0xdc, 0x1]}, {0x4, 0x3, 0x27}}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001c40)={0x1, 0xf0, @start={r4, 0x0, "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", "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"}, [0x40, 0x1, 0xa, 0x7, 0x36f8, 0x10001, 0xc4, 0x39, 0x200, 0x3, 0x21, 0x22a, 0xfffffffffffffff7, 0x6, 0x4, 0x10000, 0xd, 0x1, 0x2, 0x0, 0x4, 0x5, 0x7fff, 0x8, 0xb235, 0x6, 0x6, 0x7fff, 0x53, 0x7, 0x8, 0x1, 0x8001, 0x2, 0x706200, 0x1, 0x1, 0xf6e, 0x6, 0x7, 0x97, 0x1, 0x1, 0x7ff, 0x0, 0xb07, 0xff, 0x170, 0x9, 0x8, 0x0, 0x9, 0x56c, 0x7, 0x7ff, 0x4, 0xb46, 0xa, 0x3, 0x7f, 0x6, 0x8, 0x5, 0x7fffffff]}) r5 = socket$key(0xf, 0x3, 0x2) r6 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r7 = getpgrp(0xffffffffffffffff) setpgid(r6, r7) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020700df010000002cbd497040fcdb6ef8"], 0x10}, 0x1, 0x7}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000080)=@arm64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x10}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001b80)={0x84, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x19a) 1.484781969s ago: executing program 0 (id=55): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, 0x20, 0x1, 0x70bd25, 0x0, {0x2}, [@typed={0x8, 0x116, 0x0, 0x0, @pid}, @nested={0x18, 0x17, 0x0, 0x1, [@typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@empty}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x8031, r1, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, 0x0) 1.484466919s ago: executing program 1 (id=56): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0x17, 0x6, "98b5428ca72d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000540)={0x1c, &(0x7f00000003c0)={0x40, 0x0, 0x2, "a285"}, 0x0, 0x0}) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0xfffffffffffffcd7) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000840) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80902) sendfile(r0, r3, 0x0, 0x0) 1.442624221s ago: executing program 0 (id=57): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_eeprom={0xb, 0xffffffff, 0x4}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 1.375911383s ago: executing program 0 (id=58): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0xcb02, 0x40) write$cgroup_pressure(r1, &(0x7f0000000040)={'some', 0x20, 0x5e, 0x20, 0xe}, 0x2f) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000c80)="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", 0x149}, {&(0x7f0000000ec0)="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", 0x13a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8c0c3d1d67c8bb03bb8583a03c80782dc91b7645b65ba2116c9e64ddbb0545cdc56ee7374538a65fd04d97df001c29c9b087138af146ce11e88845bc9556ab54ea3af37d14905a6715cb3d95950e673158092189a4ff888056524a743276bdca4c98e171c7731c42fa63f4a589800a0bc1da8d669bab3f7e49551957c66ce65a558c84b2cf254904c359cdacd7", 0x8d}, {&(0x7f0000000b00)="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", 0x15b}, {&(0x7f0000000900)="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", 0x11e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="ebd3f898a9f35f9f0687d56ed757eabb1ec4ae6ca742bca169389dc37b2bc6ea3018aaf5dde0b57f2e7c698da0de72d64894959dc5372a0defdf9d10a5fca8e5ec1a4813cc45e7a4a69bba49d31c2c40babd27642c8e81130cc35ee25ea5109a5b52ea11a044e158ed8f1d423847a9a497e0", 0x72}, {&(0x7f00000004c0)="7db538fba9d9a69edc1c8cdb7f78bdaf5a5b51158241af9a003eaca18f44be8ea83257d89d62f68cefad6c78998e0e2588b39df32d114b68c3e9f82c7c4343cd86efebf269f9c14356b1afc657700f6342ecec6cf6c24d82f412dcaac5cb0034955cf6b9292e554af52158fd559ebda9f2ded42beaa68dd1345376214fc553a3cae6dd55cc3b437e588ba64d7bf9f209a949d31a226860c14ced149be2ce4eb88b40b47e6970871824f4e1a98e9764588f0b178117a6d4d4471adbd30ba3e5a40de0ef50b3", 0xc5}], 0x2}}], 0x4, 0xc044) 1.375624513s ago: executing program 0 (id=59): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x2f}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x17}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x9}}, &(0x7f0000000740)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r8, 0x207}, 0x14}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r8, 0x207}, 0x14}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100ff0001400000060ec970000f02b00fe8000000000000000000200000000aaff020000000000000000000000000001"], 0xffe) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r1, 0x0, 0x0) r10 = openat(r9, &(0x7f00000003c0)='./file0\x00', 0x42, 0x0) sendfile(r10, r10, 0x0, 0xe3aa6ea) (async) sendfile(r10, r10, 0x0, 0xe3aa6ea) 1.258118177s ago: executing program 3 (id=60): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @remote, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 1.257306327s ago: executing program 0 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000400000000000000000d001d000500070012000000050019"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a0000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c000d07001000000014"], 0xffe) 1.158120651s ago: executing program 0 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000740)=@vmx={0x11, 0x0, 0x2080, {0x3000, 0x6000, {0x3}, 0x0, 0xf}, {"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", "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"}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x23, 0x0, 0x101}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="66b9800000c00f326635001000000f300fc71db89e058ed0ba2100b84000eff30f5e54c7b834048ed864f20f1bb48300ba4000ed66b9800000c00f326635010000000f30ba4300ec", 0x48}], 0x1, 0x4, &(0x7f00000027c0)=[@dstype0={0x6, 0xc}], 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0x3, 0x6, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfa, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x47cb, 0x80000001]}}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x8, 0x4, 0x4004, 0x1000, 0x4000ee, 0x0, 0x7fffffffffffb, 0x5, 0x10000000000000, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x347255}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0x3c0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x20000000000080, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0xfffffffffffffffa, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x5, 0x2, 0x1fd, 0x8, 0x0, 0xf7, 0x5, 0x5, 0x2, 0x501, 0x40, 0x39, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x9, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0xfffffffffffffffd, 0x16c8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0xfffffffeffffffff, 0x94f, 0x9, 0x7fffffffffffffff, 0x6, 0xfffffffffffffffb, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x5, 0x7, 0x7, 0xae8d, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x3, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x7, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x2, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0x3, 0x80000000, 0x7ff, 0x20000000000002, 0x3, 0x3, 0xfffffffffffffff9, 0x9, 0xae, 0xa, 0x40000003, 0xd, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="579efe848fb24a42670a1150400001020301fffe00000101181004090400000201030066e1e2ab0b20000fd70205250101270905090200026df780052501013a6e289960f602a4df34372171698df2323282ecc7939db26826bfcdbcf2b2765ec7170f6df4faf9332353f4fe1f17b777840088835ff60def814c8225a0f0"], &(0x7f0000000000)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0x1, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f0800010310"]}) 1.119694862s ago: executing program 3 (id=63): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x20, 0x5, 0x29, {0x29, 0xc, "6169ea9641938c58a5238ad60375b149973e9840bbb7c69c1b54867b07c04a96588091576dcad6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC]) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x7, 0xa}, {0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x10}, {}, 0x0, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3504, 0x0, 0x0, 0x3, 0x9}}, 0xe8) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0xff00}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x80083, 0xffffffffefffff16, 0x3, 0x400000004, 0x1, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000140)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r6, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x26000000) socket$netlink(0x10, 0x3, 0xa) r7 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r7, 0x200004) sendfile(0xffffffffffffffff, r7, 0x0, 0x80001d00c0d1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00003b6000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="f20f5e272e2e65f2aa0f01bc0000baf80c66b8f398068766efbafc0cecb8fc000f00d8f30f701b048fc9e8016c7066b8f2ffffff0f23c00f21f8663502000f000f23f8aa16", 0x45}], 0x1, 0x0, &(0x7f0000000280)=[@cstype0={0x4, 0x8}], 0x1) 1.002336646s ago: executing program 2 (id=64): add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xe000000, &(0x7f0000000040)) (async) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2c00000000000000010000000100000025c36ca3276e27a35338b8a2", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}, 0x400c0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) 197.947554ms ago: executing program 2 (id=65): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x6, 0x7f, 0x2}, 0x19, [0x5, 0x3f5b, 0x9, 0x7, 0xe122, 0x8, 0x400, 0xfff, 0x7, 0x7, 0x8, 0x101, 0x7, 0x80000001, 0x1, 0xffffff7f, 0xd1, 0x7, 0xfffffeff, 0xc, 0x500, 0x3, 0x8, 0x2, 0x3, 0xfffffffa, 0xe32, 0x0, 0x1, 0xd1, 0x9, 0x0, 0xba, 0x9, 0x9, 0x4, 0x9, 0x9, 0x69d, 0xffffffff, 0x200, 0x10, 0x6d, 0x9, 0xff, 0x6, 0xb, 0xb, 0x0, 0x2, 0x74, 0x15, 0x7fff, 0x1ff, 0x4, 0x80000000, 0x9, 0x2, 0x2f46, 0xfffffffd, 0x4, 0x0, 0xfff, 0xff], [0x7, 0x62e, 0x9670, 0x200, 0x7f, 0x0, 0x10000, 0xbe2, 0x3, 0x9, 0xffffffc2, 0x2, 0x3ff, 0x7373, 0x1, 0x3, 0xffff54fb, 0x5, 0x3, 0x8, 0x1, 0x1, 0x400, 0x2, 0x2, 0xddc, 0xe36, 0xc, 0xed, 0x7, 0xffff, 0x7, 0x4, 0xffff, 0x2, 0xcf, 0x3, 0x0, 0x8, 0x0, 0x0, 0xffffff01, 0xbb33, 0x10000, 0x0, 0x2, 0x3, 0x5, 0x3, 0x0, 0x4, 0x1ff, 0xd, 0xbc93, 0xfffff286, 0x37, 0x8194, 0x7dc, 0x3, 0x80000001, 0xb, 0x400, 0x0, 0x81], [0x6, 0xc7, 0x4, 0x2, 0x8, 0xb, 0xb, 0x4, 0x96, 0x7, 0x9, 0x6, 0x1, 0xfffffffc, 0x0, 0x4, 0x3, 0xffffffff, 0xfffffffe, 0x2, 0x80000000, 0x3, 0x7ff, 0x5, 0x7, 0x6, 0x80000000, 0x7, 0x2, 0x800, 0x81c, 0x5, 0x0, 0x8, 0x100, 0xfffffffb, 0xffff7fff, 0x5, 0x80000001, 0x9, 0xe, 0x3, 0x3, 0x9, 0x6, 0x7, 0x7, 0x7, 0x4, 0x7, 0x400, 0x9, 0x7, 0xffff, 0x93, 0x4, 0x4, 0x80000000, 0x32f, 0x400, 0x6, 0x9, 0x6, 0x7], [0x8, 0x0, 0x1, 0x1, 0x7f, 0x7f5, 0x4e03a57a, 0x10, 0x3, 0x81, 0x860d, 0x6, 0xd, 0x4, 0x6, 0x0, 0x1, 0xe8bd829, 0xfffffff7, 0x2, 0x5, 0xffffffff, 0x4, 0x89, 0xfffffff7, 0x7, 0x0, 0x80, 0x7, 0x7, 0x8, 0xf, 0x6, 0x68, 0xfff, 0x0, 0xc, 0x8, 0x3, 0x5, 0x3, 0x4, 0xa, 0x8f, 0x6, 0x3, 0x3, 0x6, 0xcfc, 0x791, 0x10, 0xd36d, 0x609cd94b, 0xc, 0xe9ebb800, 0xfffff5b0, 0x7, 0xc, 0x1000, 0x8, 0x4, 0x7, 0x75, 0x101]}, 0x45c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r0) r1 = accept4$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2711}, 0x10, 0xa8dfaa8b7401a299) close_range(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/204, 0xcc}, {&(0x7f0000000780)=""/105, 0x69}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/14, 0xe}, {&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/126, 0x7e}, {&(0x7f00000019c0)=""/8, 0x8}, {&(0x7f0000001a00)=""/208, 0xd0}], 0x8}, 0x2}, {{&(0x7f0000001b80)=@tipc, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/29, 0x1d}, {&(0x7f0000001c40)=""/191, 0xbf}, {&(0x7f0000001d00)=""/253, 0xfd}], 0x3, &(0x7f0000001e40)=""/6, 0x6}, 0x5}, {{&(0x7f0000001e80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001f00)=""/24, 0x18}, {&(0x7f0000001f40)=""/4096, 0x1000}], 0x2, &(0x7f0000002f80)=""/23, 0x17}, 0x3}, {{&(0x7f0000002fc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003080)=[{&(0x7f0000003040)=""/43, 0x2b}], 0x1, &(0x7f00000030c0)=""/161, 0xa1}, 0x2}, {{&(0x7f0000003180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000003200)=""/157, 0x9d}, {&(0x7f00000032c0)=""/241, 0xf1}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/79, 0x4f}, {&(0x7f0000004440)=""/249, 0xf9}, {&(0x7f0000004540)=""/147, 0x93}, {&(0x7f0000004600)=""/35, 0x23}, {&(0x7f0000004640)=""/48, 0x30}, {&(0x7f0000004680)=""/54, 0x36}], 0x9, &(0x7f0000004780)=""/26, 0x1a}, 0x1}, {{&(0x7f00000047c0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000004840)=""/4, 0x4}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/209, 0xd1}, {&(0x7f00000069c0)=""/62, 0x3e}, {&(0x7f0000006a00)=""/109, 0x6d}, {&(0x7f0000006a80)=""/65, 0x41}, {&(0x7f0000006b00)=""/220, 0xdc}], 0x9, &(0x7f0000006cc0)=""/98, 0x62}, 0x5}, {{&(0x7f0000006d40)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000008000)=[{&(0x7f0000006dc0)=""/140, 0x8c}, {&(0x7f0000006e80)=""/243, 0xf3}, {&(0x7f0000006f80)=""/4096, 0x1000}, {&(0x7f0000007f80)=""/119, 0x77}], 0x4, &(0x7f0000008040)=""/145, 0x91}, 0x6}, {{&(0x7f0000008100)=@hci, 0x80, &(0x7f0000008300)=[{&(0x7f0000008180)=""/97, 0x61}, {&(0x7f0000008200)=""/221, 0xdd}], 0x2, &(0x7f0000008340)=""/33, 0x21}, 0x401}, {{&(0x7f0000008380)=@phonet, 0x80, &(0x7f0000008780)=[{&(0x7f0000008400)=""/97, 0x61}, {&(0x7f0000008480)=""/218, 0xda}, {&(0x7f0000008580)=""/45, 0x2d}, {&(0x7f00000085c0)=""/174, 0xae}, {&(0x7f0000008680)=""/214, 0xd6}], 0x5, &(0x7f0000008800)=""/246, 0xf6}, 0xffffffff}, {{&(0x7f0000008900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000008a80)=[{&(0x7f0000008980)=""/74, 0x4a}, {&(0x7f0000008a00)=""/124, 0x7c}], 0x2, &(0x7f0000008ac0)=""/34, 0x22}, 0x3}], 0xa, 0x10122, &(0x7f0000008d80)={0x0, 0x989680}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000008dc0), 0x42402, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000008e00)={0x2010}) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000008e40)={'\x00', 0x5, 0x3, 0x7f, 0x0, 0xfff, 0x8080000, 0xffffffff, '\x00', 0x8f1}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000009000), 0x0, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000009040)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000009200), 0x42, 0x0) read$FUSE(r4, &(0x7f0000009240)={0x2020, 0x0, 0x0}, 0x2020) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f000000b280)=0x1) recvmsg$can_raw(r0, &(0x7f000000bb80)={&(0x7f000000b2c0)=@hci, 0x80, &(0x7f000000ba00)=[{&(0x7f000000b340)=""/192, 0xc0}, {&(0x7f000000b400)=""/46, 0x2e}, {&(0x7f000000b440)=""/234, 0xea}, {&(0x7f000000b540)=""/224, 0xe0}, {&(0x7f000000b640)=""/105, 0x69}, {&(0x7f000000b6c0)=""/199, 0xc7}, {&(0x7f000000b7c0)=""/61, 0x3d}, {&(0x7f000000b800)=""/159, 0x9f}, {&(0x7f000000b8c0)=""/213, 0xd5}, {&(0x7f000000b9c0)}], 0xa, &(0x7f000000bac0)=""/161, 0xa1}, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f000000c0c0)={0x0, &(0x7f000000bbc0)=[@nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xf3b, 0x3, 0x1}}, @nested_load_syzos={0x136, 0xc8, {0x2, 0x30, [@nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x1, 0xffffffffffffffff, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro_nat=0x6400, 0xeeb, 0x10, 0x1}}, @cpuid={0x64, 0x18, {0x8, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x1}]}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @code={0xa, 0x63, {"8f29b09167ccf2440f1ad8260f01dfb805000000b9004000000f01c1c744240003960000c7442402106c0000c7442406000000000f01142466ba2000ecc44269ad650066b8b2008ee0c441855f27410f00df"}}, @wr_crn={0x67, 0x20, {0x8, 0x2}}, @out_dx={0x6a, 0x28, {0xb017, 0x2, 0xffffffffffffffff}}, @uexit={0x0, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x8, 0x59ca}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x8, 0x1, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro_nat=0x6408, 0x30, 0x3962ad54, 0x9}}, @cpuid={0x64, 0x18, {0x1, 0x4}}, @nested_amd_invlpga={0x17d, 0x20, {0x58000, 0xbe1f}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x2}, @cpuid={0x64, 0x18, {0xff, 0x3}}, @wrmsr={0x65, 0x20, {0xbf5}}, @nested_load_syzos={0x136, 0x120, {0x0, 0x6aa, [@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x7, @control_area=0xb9, 0x7, 0xffffffffffff960a, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x40}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0xc000, 0x644b}}, @wr_drn={0x68, 0x20, {0x2, 0x5}}, @wr_crn={0x67, 0x20, {0x3, 0x81}}]}}, @nested_amd_stgi={0x17e, 0x10}, @code={0xa, 0x5f, {"c483dd5d6d003a0f20ddc44271aabf783b0000440f72d100c744240000800000c744240205000000c7442406000000000f01142465660fae36643e66470f75023e430fd5010fae4ca5caf3400f09"}}], 0x4d2}) r7 = openat$cgroup_ro(r3, &(0x7f000000c100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$FUSE_LSEEK(r0, &(0x7f000000c140)={0x18, 0xffffffffffffffda, r5, {0x7721}}, 0x18) epoll_pwait(r3, &(0x7f000000c180)=[{}], 0x1, 0xa, &(0x7f000000c1c0)={[0xfa]}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f000000c240), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f000000c700)={&(0x7f000000c200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000c6c0)={&(0x7f000000c280)={0x43c, r9, 0x504, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4d8c}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_OURS={0x3fc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xba7}, @ETHTOOL_A_BITSET_BITS={0x168, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff001}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/selinux/policy\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc1000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/ttynull\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/null\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!\'#}(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, 'blkio.bfq.io_wait_time\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/null\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'^@\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x190, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/null\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/null\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6b63}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/ttynull\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}#-^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+#&:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xc6\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf4ae}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4db}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/ttynull\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/null\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x7f, 0x4, "c45578838446b829472ca4c2e027e1868eadcc1bb55b49528a9cb5070c2163d042e557f0db05f441422ffb26e2934dcc15c1074a02f40179713420c5a840b924179bd665438dbb2e2568153c45da7141ad4b4add4795764f442b69eb26336ef88a67613ebd9d6c5646bb0ee49c2fa025f5f32f0425ae161b412e81"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5e}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfb}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4c050}, 0x40) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f000000c740)={0x0}, &(0x7f000000c780)=0xc) kcmp(0xffffffffffffffff, r10, 0x4, r7, r3) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r11, &(0x7f000000c8c0)={&(0x7f000000c7c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000000c880)={&(0x7f000000c840)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x51}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x70}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) 172.778095ms ago: executing program 2 (id=66): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000080)) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0xc) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) bind$802154_raw(r5, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 94.319017ms ago: executing program 2 (id=67): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0x8000b4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x3, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x30, 0x8, 0x7, 0x81, 0x8a, 0x79, 0x40, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x0, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x8, 0x0, 0xffffff81, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x2844f66d, 0x7, 0xbe, 0x4007f, 0xffffffff, 0x9212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x9, 0x1000, 0x0, 0x200b395, 0x400004, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x3, 0x8, 0x9, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ca, 0x4, 0x80000004, 0x7fffffff, 0x8, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x1ff, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x200006, 0x8, 0x400, 0xfffffffe, 0x400, 0x41, 0x2, 0xee4b, 0x2000004, 0x8000, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x0, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e59, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x0, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x203, 0x5, 0x1], [0xa772, 0x3, 0x200005, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x2, 0x7f, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x539a, 0x936, 0x6, 0x80008001, 0x59, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x2, 0x10004, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xfff, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x1, 0xfffffff9, 0xd, 0xc, 0x463f, 0x7fffffff, 0x7fffffff, 0x8006, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x1a3001, 0x140) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000080, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x7, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') preadv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/110, 0x6e}], 0x1, 0x2, 0x3e) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r8, &(0x7f0000000080)=[{&(0x7f0000000140)='15', 0x2}, {&(0x7f0000000400)='u;', 0x2}], 0x2) (async) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0x65) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 53.135538ms ago: executing program 2 (id=68): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x19) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000040)={0x9, 0x5, 0x1c9}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r4, r2, 0x0) 0s ago: executing program 2 (id=69): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) keyctl$chown(0x4, r0, 0x0, 0x0) fsopen(&(0x7f0000000000)='ncpfs\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x78, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 12.984979][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 12.984995][ T36] audit: type=1400 audit(1775242345.360:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.988982][ T36] audit: type=1400 audit(1775242345.360:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.991877][ T36] audit: type=1400 audit(1775242345.360:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[1466]" dev="pipefs" ino=1466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.994804][ T36] audit: type=1400 audit(1775242345.360:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.997385][ T36] audit: type=1400 audit(1775242345.360:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. [ 20.688092][ T36] audit: type=1400 audit(1775242353.060:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.689192][ T282] cgroup: Unknown subsys name 'net' [ 20.710985][ T36] audit: type=1400 audit(1775242353.060:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.738084][ T36] audit: type=1400 audit(1775242353.090:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.738232][ T282] cgroup: Unknown subsys name 'devices' [ 20.943086][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.948700][ T282] cgroup: Unknown subsys name 'rlimit' [ 21.041732][ T36] audit: type=1400 audit(1775242353.420:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.065023][ T36] audit: type=1400 audit(1775242353.420:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.089897][ T36] audit: type=1400 audit(1775242353.420:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.091237][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.122009][ T36] audit: type=1400 audit(1775242353.500:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.147508][ T36] audit: type=1400 audit(1775242353.500:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.159033][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.173395][ T36] audit: type=1400 audit(1775242353.530:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.207343][ T36] audit: type=1400 audit(1775242353.530:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.003077][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.010233][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.017524][ T290] bridge_slave_0: entered allmulticast mode [ 22.023889][ T290] bridge_slave_0: entered promiscuous mode [ 22.030119][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.037356][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.044559][ T291] bridge_slave_0: entered allmulticast mode [ 22.050692][ T291] bridge_slave_0: entered promiscuous mode [ 22.057131][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.064201][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.071335][ T291] bridge_slave_1: entered allmulticast mode [ 22.077469][ T291] bridge_slave_1: entered promiscuous mode [ 22.092149][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.099197][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.106284][ T290] bridge_slave_1: entered allmulticast mode [ 22.112554][ T290] bridge_slave_1: entered promiscuous mode [ 22.152190][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.159245][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.166329][ T289] bridge_slave_0: entered allmulticast mode [ 22.172541][ T289] bridge_slave_0: entered promiscuous mode [ 22.184747][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.191849][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.198922][ T292] bridge_slave_0: entered allmulticast mode [ 22.205261][ T292] bridge_slave_0: entered promiscuous mode [ 22.211494][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.218531][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.225677][ T289] bridge_slave_1: entered allmulticast mode [ 22.231906][ T289] bridge_slave_1: entered promiscuous mode [ 22.253035][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.260087][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.267208][ T292] bridge_slave_1: entered allmulticast mode [ 22.273438][ T292] bridge_slave_1: entered promiscuous mode [ 22.408472][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.415541][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.422847][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.429865][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.441852][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.448900][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.456199][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.463236][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.473112][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.480154][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.487434][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.494467][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.512117][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.519173][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.526808][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.533926][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.550582][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.557891][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.565882][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.573140][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.580257][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.587805][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.630931][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.638023][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.669049][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.676117][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.684415][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.691483][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.699198][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.706257][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.717904][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.725105][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.739156][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.746228][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.773095][ T290] veth0_vlan: entered promiscuous mode [ 22.780542][ T289] veth0_vlan: entered promiscuous mode [ 22.803625][ T289] veth1_macvtap: entered promiscuous mode [ 22.814342][ T290] veth1_macvtap: entered promiscuous mode [ 22.822299][ T291] veth0_vlan: entered promiscuous mode [ 22.851118][ T291] veth1_macvtap: entered promiscuous mode [ 22.867311][ T292] veth0_vlan: entered promiscuous mode [ 22.877795][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.918000][ T292] veth1_macvtap: entered promiscuous mode [ 23.017570][ T318] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 23.261186][ T50] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.291147][ T307] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.311078][ T323] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.412005][ T50] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 23.430803][ T307] usb 3-1: device descriptor read/64, error -71 [ 23.437183][ T50] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 23.448105][ T50] usb 4-1: config 220 has no interface number 2 [ 23.454667][ T50] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 23.467887][ T323] usb 2-1: Using ep0 maxpacket: 8 [ 23.474579][ T50] usb 4-1: config 220 interface 0 has no altsetting 0 [ 23.481907][ T50] usb 4-1: config 220 interface 76 has no altsetting 0 [ 23.488976][ T323] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 23.499746][ T50] usb 4-1: config 220 interface 1 has no altsetting 0 [ 23.508512][ T323] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=1f.c8 [ 23.517841][ T50] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 23.527158][ T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.535633][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.543818][ T323] usb 2-1: Product: syz [ 23.548032][ T50] usb 4-1: Product: syz [ 23.553674][ T50] usb 4-1: Manufacturer: syz [ 23.558411][ T323] usb 2-1: Manufacturer: syz [ 23.563716][ T50] usb 4-1: SerialNumber: syz [ 23.568483][ T323] usb 2-1: SerialNumber: syz [ 23.690931][ T307] usb 3-1: device descriptor read/64, error -71 [ 23.781331][ T323] snd-usb-audio 2-1:5.0: probe with driver snd-usb-audio failed with error -71 [ 23.795224][ T50] usb 4-1: selecting invalid altsetting 0 [ 23.802377][ T323] usb 2-1: USB disconnect, device number 2 [ 23.809875][ T50] usb 4-1: selecting invalid altsetting 0 [ 23.817149][ T50] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 23.823708][ T50] usb 4-1: No valid video chain found. [ 23.833314][ T50] usb 4-1: USB disconnect, device number 2 [ 23.930925][ T307] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.060924][ T307] usb 3-1: device descriptor read/64, error -71 [ 24.309667][ T307] usb 3-1: device descriptor read/64, error -71 [ 24.363588][ T337] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.433088][ T307] usb usb3-port1: attempt power cycle [ 24.532461][ T345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 24.541660][ T345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 24.580948][ T65] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.643076][ T351] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 24.683608][ T353] ======================================================= [ 24.683608][ T353] WARNING: The mand mount option has been deprecated and [ 24.683608][ T353] and is ignored by this kernel. Remove the mand [ 24.683608][ T353] option from the mount to silence this warning. [ 24.683608][ T353] ======================================================= [ 24.726582][ T353] SELinux: security_context_str_to_sid (syste_uÝGй ‰:) failed with errno=-22 [ 24.731030][ T50] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.752737][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.764106][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.774155][ T65] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 24.783463][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.792140][ T65] usb 4-1: config 0 descriptor?? [ 24.811057][ T307] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 24.831959][ T307] usb 3-1: device descriptor read/8, error -71 [ 24.892095][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.903132][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.912961][ T50] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 24.922187][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.931167][ T50] usb 1-1: config 0 descriptor?? [ 24.961916][ T307] usb 3-1: device descriptor read/8, error -71 [ 25.200062][ T65] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 25.201437][ T307] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 25.209167][ T65] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 25.215099][ T356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.234601][ T356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.265853][ T307] usb 3-1: device descriptor read/8, error -71 [ 25.281225][ T65] cp2112 0003:10C4:EA90.0001: error requesting version [ 25.289622][ T65] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 25.300336][ T65] usb 4-1: USB disconnect, device number 3 [ 25.339031][ T50] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 25.346277][ T50] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 25.353714][ T50] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 25.361464][ T50] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 25.368502][ T50] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 25.401906][ T307] usb 3-1: device descriptor read/8, error -71 [ 25.510908][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.518581][ T307] usb usb3-port1: unable to enumerate USB device [ 25.585203][ T342] usb usb8: usbfs: process 342 (syz.0.10) did not claim interface 0 before use [ 25.585277][ T50] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -32 [ 25.594343][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 25.605467][ T50] usb 1-1: USB disconnect, device number 2 [ 25.680916][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 25.687233][ T31] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 25.695378][ T31] usb 2-1: config 0 has no interface number 0 [ 25.701541][ T31] usb 2-1: config 0 interface 6 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.712767][ T31] usb 2-1: config 0 interface 6 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.722524][ T31] usb 2-1: config 0 interface 6 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.735305][ T31] usb 2-1: config 0 interface 6 has no altsetting 0 [ 25.741981][ T31] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 25.751038][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.759566][ T31] usb 2-1: config 0 descriptor?? [ 25.770942][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 25.777178][ T65] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 25.788867][ T65] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=1f.c8 [ 25.798072][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.806090][ T65] usb 4-1: Product: syz [ 25.810509][ T65] usb 4-1: Manufacturer: syz [ 25.815166][ T65] usb 4-1: SerialNumber: syz [ 26.043161][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 26.043177][ T36] audit: type=1400 audit(1775242358.420:126): avc: denied { create } for pid=365 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.047925][ T65] snd-usb-audio 4-1:5.0: probe with driver snd-usb-audio failed with error -71 [ 26.080870][ T36] audit: type=1400 audit(1775242358.460:127): avc: denied { read write } for pid=365 comm="syz.2.17" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.082691][ T65] usb 4-1: USB disconnect, device number 4 [ 26.104861][ T36] audit: type=1400 audit(1775242358.460:128): avc: denied { open } for pid=365 comm="syz.2.17" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.144952][ T36] audit: type=1400 audit(1775242358.520:129): avc: denied { create } for pid=368 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.170966][ T36] audit: type=1400 audit(1775242358.540:130): avc: denied { bind } for pid=368 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.192189][ T31] uclogic 0003:28BD:0933.0003: interface is invalid, ignoring [ 26.201164][ T36] audit: type=1400 audit(1775242358.540:131): avc: denied { block_suspend } for pid=361 comm="syz.1.24" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.222521][ T36] audit: type=1400 audit(1775242358.540:132): avc: denied { create } for pid=361 comm="syz.1.24" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 26.243091][ T36] audit: type=1400 audit(1775242358.550:133): avc: denied { listen } for pid=368 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.262422][ T36] audit: type=1400 audit(1775242358.550:134): avc: denied { rename } for pid=361 comm="syz.1.24" name="file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 26.304468][ T374] SELinux: Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped). [ 26.314296][ T36] audit: type=1400 audit(1775242358.550:135): avc: denied { unlink } for pid=361 comm="syz.1.24" name="file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 26.392803][ T31] usb 2-1: USB disconnect, device number 3 [ 26.702903][ T382] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.814991][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 27.000947][ T65] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 27.152130][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 27.163034][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.175885][ T65] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 27.180928][ T50] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 27.184985][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.201460][ T65] usb 4-1: config 0 descriptor?? [ 27.206726][ T387] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 27.320939][ T50] usb 2-1: device descriptor read/64, error -71 [ 27.490914][ T307] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.561045][ T50] usb 2-1: device descriptor read/64, error -71 [ 27.660957][ T307] usb 1-1: Using ep0 maxpacket: 8 [ 27.667505][ T307] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.677620][ T307] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.686821][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.694948][ T307] usb 1-1: Product: syz [ 27.699266][ T307] usb 1-1: Manufacturer: syz [ 27.703936][ T307] usb 1-1: SerialNumber: syz [ 27.811111][ T50] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 27.941505][ T50] usb 2-1: device descriptor read/64, error -71 [ 28.071649][ T307] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 28.081389][ T307] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 28.087498][ T307] usb 1-1: 1:1 : invalid channels 0 [ 28.093554][ T307] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 28.110605][ T307] usb 1-1: USB disconnect, device number 3 [ 28.138074][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.145112][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.152143][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.159110][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.166131][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.173127][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.180060][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.187069][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.190898][ T50] usb 2-1: device descriptor read/64, error -71 [ 28.195364][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.207300][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.214644][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.221623][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.228569][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.235715][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.242698][ T65] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 28.249625][ T65] a4tech 0003:09DA:001A.0004: item fetching failed at offset 18/40 [ 28.257766][ T65] a4tech 0003:09DA:001A.0004: parse failed [ 28.263643][ T65] a4tech 0003:09DA:001A.0004: probe with driver a4tech failed with error -22 [ 28.301066][ T50] usb usb2-port1: attempt power cycle [ 28.341762][ T307] usb 4-1: USB disconnect, device number 5 [ 28.608225][ T418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.617321][ T418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.640888][ T50] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 28.661852][ T50] usb 2-1: device descriptor read/8, error -71 [ 28.791901][ T50] usb 2-1: device descriptor read/8, error -71 [ 28.830901][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.831041][ T391] Bluetooth: hci0: command 0x1003 tx timeout [ 28.851838][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.010930][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 29.017219][ T65] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 29.030010][ T65] usb 1-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 29.039262][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.040904][ T50] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 29.047776][ T65] usb 1-1: Product: syz [ 29.059239][ T65] usb 1-1: Manufacturer: syz [ 29.063864][ T65] usb 1-1: SerialNumber: syz [ 29.072122][ T50] usb 2-1: device descriptor read/8, error -71 [ 29.110893][ T307] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 29.170895][ T399] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.201878][ T50] usb 2-1: device descriptor read/8, error -71 [ 29.263258][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.272085][ T307] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 29.279664][ T307] usb 3-1: can't read configurations, error -71 [ 29.311206][ T50] usb usb2-port1: unable to enumerate USB device [ 29.341902][ T399] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 29.351797][ T399] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 29.363039][ T399] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 29.372201][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.380204][ T399] usb 4-1: Product: syz [ 29.384432][ T399] usb 4-1: Manufacturer: syz [ 29.389028][ T399] usb 4-1: SerialNumber: syz [ 29.394789][ T399] usb 4-1: config 0 descriptor?? [ 29.400052][ T423] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 29.407305][ T423] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 29.615759][ T423] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 29.623173][ T423] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 29.774801][ T426] overlayfs: failed to resolve './file2': -2 [ 29.791610][ T65] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 29.806637][ T65] usb 1-1: USB disconnect, device number 4 [ 29.844147][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.943697][ T446] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 30.033798][ T399] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 30.300898][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 30.308476][ T65] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 30.372242][ T399] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 30.384632][ T399] usb 4-1: USB disconnect, device number 6 [ 30.455341][ T461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 30.460912][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 30.471649][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.480467][ T65] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 30.491584][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.499610][ T65] usb 1-1: Product: syz [ 30.503918][ T65] usb 1-1: Manufacturer: syz [ 30.508742][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 30.519663][ T65] usb 1-1: SerialNumber: syz [ 30.524331][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.532678][ T9] usb 2-1: Product: syz [ 30.537056][ T65] usb 1-1: config 0 descriptor?? [ 30.542043][ T9] usb 2-1: Manufacturer: syz [ 30.546638][ T9] usb 2-1: SerialNumber: syz [ 30.552192][ T65] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 30.741789][ T307] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 30.753372][ T65] usb 1-1: USB disconnect, device number 5 [ 30.768728][ T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.777326][ T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.834296][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.851870][ T9] usb 2-1: USB disconnect, device number 8 [ 30.868616][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.910906][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 30.918074][ T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.929008][ T307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.939433][ T307] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 30.948629][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.960881][ T307] usb 3-1: Product: syz [ 30.965078][ T307] usb 3-1: Manufacturer: syz [ 30.979860][ T307] usb 3-1: SerialNumber: syz [ 31.053384][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 31.053401][ T36] audit: type=1400 audit(1775242363.430:194): avc: denied { read } for pid=467 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.198126][ T307] usb 3-1: 0:1 : does not exist [ 31.204639][ T307] usb 3-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 31.213675][ T307] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 31.224080][ T307] usb 3-1: USB disconnect, device number 8 [ 31.236272][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.269904][ T36] audit: type=1400 audit(1775242363.640:195): avc: denied { create } for pid=468 comm="syz.0.53" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.292707][ T36] audit: type=1400 audit(1775242363.650:196): avc: denied { ioctl } for pid=468 comm="syz.0.53" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3964 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.325192][ T36] audit: type=1400 audit(1775242363.700:197): avc: denied { write } for pid=470 comm="syz.0.54" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.372613][ T36] audit: type=1400 audit(1775242363.750:198): avc: denied { read } for pid=472 comm="syz.0.55" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.420795][ T36] audit: type=1400 audit(1775242363.750:199): avc: denied { open } for pid=472 comm="syz.0.55" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.447156][ T36] audit: type=1400 audit(1775242363.770:200): avc: denied { ioctl } for pid=472 comm="syz.0.55" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.473492][ T36] audit: type=1400 audit(1775242363.790:201): avc: denied { create } for pid=478 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 31.482499][ T485] rust_binder: validate_parent_fixup: new_min_offset=17, sg_entry.length=0 [ 31.493516][ T36] audit: type=1400 audit(1775242363.790:202): avc: denied { ioctl } for pid=478 comm="syz.0.57" path="socket:[3989]" dev="sockfs" ino=3989 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 31.506780][ T485] rust_binder: Error while translating object. [ 31.531415][ T485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.541937][ T485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 31.543804][ T36] audit: type=1400 audit(1775242363.860:203): avc: denied { map } for pid=483 comm="syz.0.59" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK [ 31.626998][ T492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 31.637469][ T492] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 31.650983][ T50] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 31.710124][ T494] netlink: 'syz.0.62': attribute type 4 has an invalid length. Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 31.806718][ T50] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 31.821459][ T50] usb 2-1: config 0 has no interface number 0 Stopping network: [ 31.834452][ T50] usb 2-1: config 0 interface 41 has no altsetting 0 [ 31.843516][ T50] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 31.860881][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.877848][ T50] usb 2-1: Product: syz [ 31.882296][ T50] usb 2-1: Manufacturer: syz [ 31.886912][ T50] usb 2-1: SerialNumber: syz [ 31.894972][ T50] usb 2-1: config 0 descriptor?? OK Stopping iptables: OK [ 31.980914][ T324] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.990930][ T65] usb 1-1: new high-speed USB device number 6 using dummy_hcd Stopping system message bus: done [ 32.120905][ T65] usb 1-1: device descriptor read/64, error -71 [ 32.131146][ T324] usb 4-1: Using ep0 maxpacket: 8 [ 32.137608][ T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.160870][ T324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.178667][ T324] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 32.187964][ T324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Stopping klogd: [ 32.197244][ T324] usb 4-1: config 0 descriptor?? OK Stopping acpid: [ 32.360940][ T65] usb 1-1: device descriptor read/64, error -71 [ 32.404721][ T499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.413312][ T499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.600908][ T65] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 32.730904][ T65] usb 1-1: device descriptor read/64, error -71 [ 32.908935][ T50] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 32.918080][ T50] usb 2-1: USB disconnect, device number 9 [ 32.926020][ T324] usbhid 4-1:0.0: can't add hid device: -71 [ 32.932023][ T324] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 32.940391][ T324] usb 4-1: USB disconnect, device number 7 [ 32.991070][ T65] usb 1-1: device descriptor read/64, error -71 [ 33.090895][ T399] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 33.110957][ T65] usb usb1-port1: attempt power cycle [ 33.242036][ T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.254222][ T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 OK [ 33.264820][ T399] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 33.274056][ T399] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 33.282141][ T399] usb 3-1: Manufacturer: syz Stopping syslogd[ 33.287607][ T399] usb 3-1: config 0 descriptor?? : stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only Connection to 10.128.1.25 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 33.450883][ T65] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 33.614215][ T399] usbhid 3-1:0.0: can't add hid device: -71 [ 33.620172][ T399] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.628301][ T306] bridge_slave_1: left allmulticast mode [ 33.633961][ T306] bridge_slave_1: left promiscuous mode [ 33.639621][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.650951][ T306] bridge_slave_0: left allmulticast mode [ 33.656613][ T306] bridge_slave_0: left promiscuous mode [ 33.672236][ T399] usb 3-1: USB disconnect, device number 9 [ 33.679286][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.802864][ T306] veth1_macvtap: left promiscuous mode [ 33.808365][ T306] veth0_vlan: left promiscuous mode [ 33.901013][ T65] usb 1-1: device not accepting address 8, error -71 [ 34.092926][ T306] bridge_slave_1: left allmulticast mode [ 34.098646][ T306] bridge_slave_1: left promiscuous mode [ 34.104860][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.112486][ T306] bridge_slave_0: left allmulticast mode [ 34.118121][ T306] bridge_slave_0: left promiscuous mode [ 34.123842][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.131414][ T306] bridge_slave_1: left allmulticast mode [ 34.137039][ T306] bridge_slave_1: left promiscuous mode [ 34.142704][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.150043][ T306] bridge_slave_0: left allmulticast mode [ 34.155745][ T306] bridge_slave_0: left promiscuous mode [ 34.161417][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.168907][ T306] bridge_slave_1: left allmulticast mode [ 34.174589][ T306] bridge_slave_1: left promiscuous mode [ 34.180254][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.187598][ T306] bridge_slave_0: left allmulticast mode [ 34.193279][ T306] bridge_slave_0: left promiscuous mode [ 34.198847][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.495454][ T306] veth1_macvtap: left promiscuous mode [ 34.500996][ T306] veth0_vlan: left promiscuous mode Sent SIGKILL to[ 34.506639][ T306] veth1_macvtap: left promiscuous mode all processes [ 34.513255][ T306] veth0_vlan: left promiscuous mode Requesting syst[ 34.520021][ T306] veth1_macvtap: left promiscuous mode em poweroff [ 34.526687][ T306] veth0_vlan: left promiscuous mode [ 35.053176][ T306] ------------[ cut here ]------------ [ 35.058658][ T306] WARNING: CPU: 1 PID: 306 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 35.068719][ T306] Modules linked in: [ 35.072695][ T306] CPU: 1 UID: 0 PID: 306 Comm: kworker/u8:4 Not tainted syzkaller #0 90b12aa1a603b2eff3e7fbc29ad65555fd578c6a [ 35.084348][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 35.094451][ T306] Workqueue: netns cleanup_net [ 35.099213][ T306] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 35.105207][ T306] Code: e8 c1 47 d9 fc 4b 83 3c 3e 00 75 19 e8 c5 11 81 fc 49 81 ff f8 07 00 00 74 1b e8 b7 11 81 fc 49 83 c7 08 eb c9 e8 ac 11 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 35.124848][ T306] RSP: 0018:ffffc9000b77fb90 EFLAGS: 00010293 [ 35.130943][ T306] RAX: ffffffff85069934 RBX: ffff88810cee58c0 RCX: ffff88810cb79300 [ 35.138898][ T306] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881043d8000 [ 35.146868][ T306] RBP: ffffc9000b77fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 35.154896][ T306] R10: dffffc0000000000 R11: fffff520016eff04 R12: dffffc0000000000 [ 35.162888][ T306] R13: dffffc0000000000 R14: ffff8881043d8000 R15: 0000000000000000 [ 35.170888][ T306] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.179895][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.186490][ T306] CR2: 00007f30c81f84c0 CR3: 000000010b324000 CR4: 00000000003526b0 [ 35.194478][ T306] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000080083 [ 35.202462][ T306] DR3: ffffffffefffff16 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 35.210442][ T306] Call Trace: [ 35.213729][ T306] [ 35.216654][ T306] cleanup_net+0x6bd/0xc90 [ 35.221074][ T306] ? __cfi_cleanup_net+0x10/0x10 [ 35.226002][ T306] ? kick_pool+0xb9/0x550 [ 35.230309][ T306] process_scheduled_works+0x7d1/0x1020 [ 35.235860][ T306] worker_thread+0xc70/0x10b0 [ 35.240530][ T306] ? __cfi_try_to_wake_up+0x10/0x10 [ 35.245743][ T306] kthread+0x2c6/0x370 [ 35.249800][ T306] ? __cfi_worker_thread+0x10/0x10 [ 35.254934][ T306] ? __cfi_kthread+0x10/0x10 [ 35.259532][ T306] ret_from_fork+0x67/0xa0 [ 35.263963][ T306] ? __cfi_kthread+0x10/0x10 [ 35.268540][ T306] ret_from_fork_asm+0x1a/0x30 [ 35.273309][ T306] [ 35.276313][ T306] ---[ end trace 0000000000000000 ]--- [ 35.281989][ T306] ------------[ cut here ]------------ [ 35.287433][ T306] WARNING: CPU: 0 PID: 306 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 35.297511][ T306] Modules linked in: [ 35.301443][ T306] CPU: 0 UID: 0 PID: 306 Comm: kworker/u8:4 Tainted: G W syzkaller #0 90b12aa1a603b2eff3e7fbc29ad65555fd578c6a [ 35.314570][ T306] Tainted: [W]=WARN [ 35.318449][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 35.328501][ T306] Workqueue: netns cleanup_net [ 35.333308][ T306] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 35.339368][ T306] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 70 11 81 fc 49 81 ff f8 07 00 00 74 1b e8 62 11 81 fc 49 83 c7 08 eb c5 e8 57 11 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 47 11 81 fc 5b 41 5c 41 5e 41 [ 35.358982][ T306] RSP: 0018:ffffc9000b77fb90 EFLAGS: 00010293 [ 35.365158][ T306] RAX: ffffffff85069989 RBX: ffff8881043d8800 RCX: ffff88810cb79300 [ 35.373154][ T306] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881043d8808 [ 35.381132][ T306] RBP: ffffc9000b77fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 35.389094][ T306] R10: dffffc0000000000 R11: fffff520016eff04 R12: dffffc0000000000 [ 35.397067][ T306] R13: dffffc0000000000 R14: ffff8881043d8000 R15: 0000000000000008 [ 35.405112][ T306] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.414126][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.420706][ T306] CR2: 00007ffbbec95e9c CR3: 000000010b324000 CR4: 00000000003526b0 [ 35.428700][ T306] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000080083 [ 35.436692][ T306] DR3: ffffffffefffff16 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 35.444717][ T306] Call Trace: [ 35.447996][ T306] [ 35.450924][ T306] cleanup_net+0x6bd/0xc90 [ 35.455331][ T306] ? __cfi_cleanup_net+0x10/0x10 [ 35.460245][ T306] ? kick_pool+0xb9/0x550 [ 35.464574][ T306] process_scheduled_works+0x7d1/0x1020 [ 35.470123][ T306] worker_thread+0xc70/0x10b0 [ 35.474835][ T306] ? __cfi_try_to_wake_up+0x10/0x10 [ 35.480039][ T306] kthread+0x2c6/0x370 [ 35.484157][ T306] ? __cfi_worker_thread+0x10/0x10 [ 35.489290][ T306] ? __cfi_kthread+0x10/0x10 [ 35.493913][ T306] ret_from_fork+0x67/0xa0 [ 35.498351][ T306] ? __cfi_kthread+0x10/0x10 [ 35.502984][ T306] ret_from_fork_asm+0x1a/0x30 [ 35.507751][ T306] [ 35.510754][ T306] ---[ end trace 0000000000000000 ]--- [ 35.516878][ T562] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 35.523752][ T562] ACPI: PM: Preparing to enter system sleep state S5 [ 35.526567][ T306] ------------[ cut here ]------------ [ 35.535943][ T306] WARNING: CPU: 0 PID: 306 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 35.545423][ T306] Modules linked in: [ 35.549313][ T306] CPU: 0 UID: 0 PID: 306 Comm: kworker/u8:4 Tainted: G W syzkaller #0 90b12aa1a603b2eff3e7fbc29ad65555fd578c6a [ 35.562525][ T306] Tainted: [W]=WARN [ 35.566315][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 35.576409][ T306] Workqueue: netns cleanup_net [ 35.581189][ T306] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 35.586723][ T306] Code: 3c 20 00 74 08 48 89 df e8 bf 13 f4 fc 48 8b 3b e8 27 3c df fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b2 dd 9b fc <0f> 0b e9 b0 fd ff ff e8 a6 dd 9b fc 0f 0b e9 18 fe ff ff e8 9a dd [ 35.606372][ T306] RSP: 0018:ffffc9000b77fb70 EFLAGS: 00010293 [ 35.612449][ T306] RAX: ffffffff84ebcd2e RBX: ffff88810cee58c0 RCX: ffff88810cb79300 [ 35.620409][ T306] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88810cb79300 [ 35.628473][ T306] RBP: ffffc9000b77fb98 R08: ffffffff87d38c07 R09: 1ffffffff0fa7180 [ 35.636500][ T306] R10: dffffc0000000000 R11: fffffbfff0fa7181 R12: 1ffffffff0fa6ed0 [ 35.644500][ T306] R13: dffffc0000000000 R14: ffff88810cee64c0 R15: dffffc0000000000 [ 35.652531][ T306] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.661475][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.668074][ T306] CR2: 00007ffbbec95e9c CR3: 000000010b324000 CR4: 00000000003526b0 [ 35.676097][ T306] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000080083 [ 35.684119][ T306] DR3: ffffffffefffff16 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 35.692225][ T306] Call Trace: [ 35.695508][ T306] [ 35.698431][ T306] xfrm_net_exit+0x31/0x80 [ 35.702910][ T306] cleanup_net+0x6bd/0xc90 [ 35.707331][ T306] ? __cfi_cleanup_net+0x10/0x10 [ 35.712293][ T306] ? kick_pool+0xb9/0x550 [ 35.716622][ T306] process_scheduled_works+0x7d1/0x1020 [ 35.722328][ T306] worker_thread+0xc70/0x10b0 [ 35.727020][ T306] ? __cfi_try_to_wake_up+0x10/0x10 [ 35.732271][ T306] kthread+0x2c6/0x370 [ 35.736350][ T306] ? __cfi_worker_thread+0x10/0x10 [ 35.741533][ T306] ? __cfi_kthread+0x10/0x10 [ 35.746140][ T306] ret_from_fork+0x67/0xa0 [ 35.750594][ T306] ? __cfi_kthread+0x10/0x10 [ 35.755231][ T306] ret_from_fork_asm+0x1a/0x30 [ 35.760012][ T306] [ 35.763068][ T306] ---[ end trace 0000000000000000 ]--- [ 35.768588][ T562] kvm: exiting hardware virtualization [ 35.774156][ T562] reboot: Power down serialport: VM disconnected.