last executing test programs: 1m41.555863597s ago: executing program 32 (id=12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @timestamp], 0x3) sync_file_range(0xffffffffffffffff, 0x8000, 0x8, 0x1) listen(r0, 0xc64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt(r1, 0xfffff784, 0x754, &(0x7f0000000040)=""/159, &(0x7f0000000100)=0x9f) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000140)=0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x43c, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbff, {0x10, 0x0, 0x3c, [0x1, 0x7, 0xfffffffa, 0x8, 0x10001, 0x0, 0x2, 0x7, 0xe65b, 0x2, 0x3, 0x5, 0x10001, 0x1, 0x7, 0x100, 0x14c00, 0x3, 0x8000, 0xd, 0x1, 0x5, 0x100, 0x1, 0x1, 0x9, 0x9, 0x8001, 0x0, 0x1, 0x8, 0x0, 0x7, 0x1, 0x7, 0x59, 0xa8, 0x5, 0xc, 0xcf, 0x693, 0xbb, 0x69a, 0x80000000, 0x3, 0x1, 0x3, 0x4, 0x3, 0x6, 0xd2, 0x4, 0x0, 0x7, 0xb9, 0x3, 0x40000000, 0x1000, 0x75b3, 0x400, 0xfffffffe, 0x747afce4, 0x80, 0x4], [0x1, 0xffffffff, 0xb93, 0x0, 0x7fffffff, 0x7, 0x7d, 0x84, 0x86f0, 0x7, 0x200, 0x8, 0x5, 0xdf, 0x1, 0x100, 0x3, 0x0, 0x5, 0x8001, 0x4, 0x9, 0x8, 0x9, 0x1, 0x30000000, 0x1, 0x81, 0x7fffffff, 0xf, 0x5, 0xffffffff, 0x400, 0x80000000, 0xfff, 0xc26a, 0x5, 0x47, 0x8, 0xa6, 0x8, 0x5, 0x5, 0x7, 0xfffffffe, 0x3, 0x3, 0x30000000, 0xec, 0x200, 0x7fff, 0x3, 0x0, 0xf, 0x0, 0x7, 0xa2e4, 0x7ff, 0x5, 0x2, 0x2, 0xfffffffe, 0x3], [0xc, 0xfb5, 0xd0c9, 0x101, 0xfffffff4, 0x1, 0x1, 0x40, 0x8, 0x5, 0x11, 0x80000000, 0x1, 0xc, 0x400, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0xf, 0x81, 0xf0, 0x1, 0x7fffffff, 0x1, 0xcc26, 0x10000, 0x9, 0x4, 0x3, 0x2d4, 0x401, 0x800, 0x8001, 0x9, 0x7, 0x1, 0x2, 0xe, 0x7ff, 0xda, 0x401, 0x80, 0x8000800, 0x8, 0x1, 0x1, 0x7, 0x0, 0x3, 0x0, 0xdd, 0x2, 0x1, 0x5, 0x41b5, 0x81, 0x7, 0x1, 0x9, 0xdc16, 0x3], [0x2, 0x4, 0x8, 0x0, 0x761, 0xfffffff8, 0x6, 0x5, 0x7ff5, 0x7b, 0x75a, 0x10, 0x5, 0xa3, 0x7, 0xffff684e, 0x7e, 0x5, 0x0, 0x5, 0x4, 0x463a, 0x8, 0x9, 0x3, 0x80000001, 0x5f, 0x37d0, 0x2b, 0x8, 0x53cf3c6b, 0x9, 0x2, 0x4, 0x2, 0x6, 0x4, 0x0, 0x1, 0x1, 0x97, 0x5, 0x1, 0x8001, 0xfffff801, 0x1, 0x8, 0x5, 0xff, 0x4, 0x1, 0x8, 0x80, 0xfffffffd, 0x2, 0xf4e3, 0x0, 0x3, 0x3, 0x8, 0x7, 0x5, 0x9, 0xf35], 0x1a, ['\x00', '}\x00', '\x00', '^@\x00', '\x00', ':^]:,\x00', '}*[\x9b\x00', '])F$#r\x00']}, [""]}, 0x43c}, 0x1, 0x0, 0x0, 0x84}, 0x1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0x8, 0x1, '/..\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xe8, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40004}, 0x40045) ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f0000000980)={0x1, 0x2, 0x1, 0x2}) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000a40)=0x60, 0x80800) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000a80)={'batadv0\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r3) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044810}, 0x20040010) clock_gettime(0x3, &(0x7f0000000c00)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x0, &(0x7f0000000dc0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000e40)=@new_dev={0x3, 0x2ef, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x84}}}, &(0x7f0000000f00)=0x0) r10 = dup(r1) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)={0x0, 0x84ed, 0x100, 0x1, 0x180}, &(0x7f0000001040)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbb4b, 0x1000, 0x0, 0x182}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc683, 0x20, 0x2, 0x314}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xedb9, 0x20, 0x0, 0x31d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc83e, 0x10, 0x2, 0x101}}], 0x4, &(0x7f00000022c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x40}, 0x0, 0x0, '\x00', {0x0, 0x6b6, 0x0, &(0x7f00000012c0)=@buf_1k="bd0122e0d7a87f2cbb9dcd3d592365e6df1918261b89724ddfdb77091329522738cdcfe64e9d89371d863133360f131d1219003cf6ef1b76fe6ac158a34b9413be7d2df35b58d740aafb8426400ec355d319b7ef6a1bb980dcdfe361b9679d70a7a256d6bc68ec189a7a4b9f37fc3ebe9ef506b5d78427d9d3eba81c62c600e16e965ef656e2f44cde9d0ece9c28f7cc2fc9c84d5448bb49c3b96060999b535b9032a1fd77229c635364b30526a4a535ef39a4b37894417a054acf3efea0b99cc41c6baae69b1147fd723e1fa07c473497789ee05d61b6772cc1aea6b118f491feaaffd3c664897c5397d5d4b77f38902dd22ffefb5835aeb8d32a569c803d6e266ea5ba3cb6a966b6bb4d101b5a888154dd34635d994261b7945181034a5e85e429f8f9230f177cd6b795a422a6cfa8e81cc2fb6c535face1c0048587523f9726087191d04a78e941a47e915f5784d64e9af0fad095ce3046502a868f58d0036b75920c836d2d28ed4b6ca670706a131dc3ef67d4820cc78b52fb78c72d7af1c10d0ec34b47b0f403b01ce11223a954a06574c48ba6fb3e32222392a1fb5c6b368bd2cde6cea2fe2354bf60f1ef99398e33579f0d0b3acbe71152975b0630eca2651d70c9e73be802827d7116e6869be436566dd8263c0baa911e706d6880d0b3b37f36f28790c914e956454d6b4adb7458fd18eae2343e1a9a465f74de30a9a69721e452a7fc120fddceeea38a0b72644ebce71b46b9bd93e200f6a0a4b5153811878d385f24059f9e13679106a7cff78c1e6a8dc80c72952395187768a9f2d6cdba5f0ba286666361804b134cb8c53583b51f124bc30040fffeb487fea041d8707ac7a24fc18ace148e84aaf53eaf1c849bad96f6ba0c04655580cfc297a2e0edaa3e055dba2a4ebd853287da4a8d0ac24a05b267bdaf5ec408c02da63768d2cd59d01d62e7a639b74963a065503085ee7a3de9a04e7fdd06b578c78f5f40dce40a1308fa23d54633b1899399c5cfe1a91bf5f5f0c10fd3aa9fdf3816c7f431432cad4fcc721ba8b960ba986435b09a7b01d47eadd05483754aefe0a1c7db0d1555753a864687a3cea06c0319141fe34a4a99799321025cde1bcd8e5d27cf8ecff9a3832c8eb630d201a073e7d84c8ed7f2e5eeeed650c74d45c4808598a67af65fe5ce1744600a6af84d98aff9d7c406cbb6b741513f3a8db71dcb50bbde34db3ef2d6bcb179bc8d0f1a0e107ff41f0cd4d861e5b0791f209691ce087a23d9147dbfbdad7290c39a0977269e6a7fbea3e9169164099bea52420d84c67271967c531a4f2b50ff54dc566817b27d8502c2c72965ec932ef6643dd8bc7169bba617fbfdaa17c93cca4aac26e931a27d04cb4bde9614c1ae2742ab78b60e8b86dcf06c673ca5e4c4bfef8cb202e16a675aa608b7534b0aa53dcb4b02b5f5cf6c"}}, &(0x7f0000002340)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000002380)={0x0, 0x4c5a, 0x20, 0x2, 0x329}, &(0x7f0000002400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa3c5, 0x2000, 0x2, 0x166, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd89, 0x1000, 0x0, 0x3c9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x994b, 0x2000, 0x1, 0x319}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e68, 0x800, 0x1, 0x19a}}], 0x4, &(0x7f0000003680)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xc}, 0x0, 0x0, '\x00', {0x2, 0x497, 0x0, &(0x7f0000002680)=@buf_4k="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"}}, &(0x7f0000003700)) syz_ublk_setup_queues(r5, r9, &(0x7f0000000f40)={0x0, 0x501f, 0x10000, 0x2, 0x1c7, 0x0, r10}, &(0x7f0000003740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa166, 0x1, 0x3, 0xd6, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7083, 0x80, 0x1, 0x3e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2383, 0x4, 0x3, 0xd9, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb48, 0x8000, 0x0, 0x2b5}}], 0x4, &(0x7f00000049c0)={0x2e, 0x28, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x1, 0x266, 0x0, &(0x7f00000039c0)=@buf_4k="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"}}, &(0x7f0000004a40)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004b40)={0x0, 0xee01}, 0xc) 1m40.820999771s ago: executing program 33 (id=18): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0xe8, 0xe8, 0x308, 0x308, 0xe8, 0x4, 0x0, {[{{@arp={@broadcast, @local, 0x0, 0xff000001, 0xa, 0xe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x8002, 0x3, 0x401, 0x79f, 0x0, 0x1000, 'syz_tun\x00', 'nr0\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @private}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010100, @empty, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x7fff, 0x0, 0x8, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, 0x10004002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x8d], 0xeeee0000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m38.826448946s ago: executing program 34 (id=37): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='async\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x18}) 1m36.195899749s ago: executing program 35 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) socket$inet_udp(0x2, 0x2, 0x20000000) 1m34.206712823s ago: executing program 36 (id=76): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000080)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x2b9, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffe}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0xfffffffe, 0xff}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = syz_io_uring_setup(0x5793, &(0x7f0000000340)={0x0, 0xca23, 0x10000, 0xfffffff7, 0x212}, &(0x7f0000000100), &(0x7f0000ff4000), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000100)=0xc, 0x4) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xc73ebdfa468265f4, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0x47}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="050f0f00010a1003"], 0x3, [{0x0, 0x0}, {0x82, &(0x7f00000006c0)=ANY=[@ANYBLOB="82036f0169d19aeed6588b26f90676f9d36f44168fc596401ee1e4180026ad4616e117971647fed3f8047749fd3b69bb7069bbf6de3852f2d4604b262f52a26b5c15d47f2bd5cdec5c9f38a38b5d272267ad719072256f260262550f8646c43c7812b43858f2721705673dc96cfee24b1edea46cc1fc4ac67bb2382e3f939e1b64d329f3a1dbd0477ac6444796c88d9985918a8167f938cb25b04cd6c9322af72ef480288e4f7357ac5f285a4981b75f6e5b4e6a4d84cfbc794fe4a783078a92db4d7da222198eca0b783d275ac2f71f9ce7be"]}, {0x29, &(0x7f0000000080)=@string={0x29, 0x3, "419066255b2882f3d9814909a7fa4b96d659d8ea21c8204d14def1fe02cd7bbba43e1800d5beeb"}}]}) r5 = socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4800) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000002c0)={r0, &(0x7f0000000180)='\x00', 0x105200, &(0x7f00000001c0)={@_ha_fsid={[0x9]}, {0x1, 0x0, 0xb93c0000, 0x5}}, 0x1, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x4}) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_any}, {@cachetag={'cachetag', 0x3d, '%+U'}}, {@cache_mmap}], [{@context={'context', 0x3d, 'root'}}, {@uid_gt={'uid>', r8}}, {@appraise_type}]}}) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900010000000000000000000000003200f112215f00000000", 0x39}], 0x1) 1m33.534570134s ago: executing program 37 (id=88): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x20000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, 0x0) 1m32.701509863s ago: executing program 38 (id=95): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x401, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x7f, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x3, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x7ff, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x3, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x14001, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x104) 1m31.71273993s ago: executing program 39 (id=102): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a01"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x15, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x5, 0x3c]}}) 1m29.866601336s ago: executing program 40 (id=111): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x13, 0x60080) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f00000001c0)) dup(r0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x6f) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x4ea3, 0x0, @mcast1={0xff, 0x7}, 0x7fffffff}}, {{0xa, 0x0, 0x2000, @mcast2}}}, 0x108) recvmsg$can_raw(r3, &(0x7f00000013c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000380)=[{&(0x7f0000001400)=""/169, 0xa9}, {&(0x7f00000002c0)=""/153, 0x99}], 0x2, &(0x7f00000003c0)=""/4096, 0x1000}, 0x1) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 1m22.688417054s ago: executing program 41 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0xc0802, 0x1c9) ioctl(r0, 0xc013fd00, &(0x7f0000001000)="04") (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000000)={0x30003, 0x0, {[0x5, 0x400006891, 0x10, 0x100000000000401, 0x1, 0x5, 0x9, 0x2]}}) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0xb6, 0x0, 0x0) 1m22.151446519s ago: executing program 42 (id=185): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.695258988s ago: executing program 43 (id=193): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000100), 0x6) 1m19.613623208s ago: executing program 44 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x12, r2, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000100), 0x6) 1m8.071764861s ago: executing program 45 (id=294): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = syz_socket_connect_nvme_tcp() clock_gettime(0x0, &(0x7f0000005a00)={0x0, 0x0}) recvmmsg(r9, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/33, 0x21}, {&(0x7f0000000080)=""/13, 0xd}, {&(0x7f0000000180)=""/57, 0x39}, {&(0x7f00000002c0)=""/245, 0xf5}, {&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/133, 0x85}], 0x6}, 0xc}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/17, 0x11}, {&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/106, 0x6a}, {&(0x7f0000000780)=""/191, 0xbf}, {&(0x7f0000000840)=""/2, 0x2}], 0x5, &(0x7f0000000900)=""/228, 0xe4}, 0x9}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000a00)=""/229, 0xe5}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0x2, &(0x7f0000001b40)=""/88, 0x58}, 0xb}, {{&(0x7f0000001bc0)=@qipcrtr, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)=""/150, 0x96}, {&(0x7f0000001d00)=""/154, 0x9a}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x3}, 0xbc16}, {{&(0x7f0000001ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001f40)=""/4096, 0x1000}], 0x1, &(0x7f0000002f80)=""/121, 0x79}, 0x9}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003080)=""/142, 0x8e}, {&(0x7f0000003140)=""/181, 0xb5}, {&(0x7f0000003200)=""/78, 0x4e}, {&(0x7f0000003280)=""/214, 0xd6}, {&(0x7f0000003380)=""/121, 0x79}, {&(0x7f0000003400)=""/233, 0xe9}, {&(0x7f0000003500)=""/202, 0xca}], 0x7, &(0x7f0000003680)=""/27, 0x1b}, 0x6fc7}, {{&(0x7f00000036c0)=@xdp, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003740)=""/123, 0x7b}, {&(0x7f00000037c0)=""/79, 0x4f}, {&(0x7f0000003840)=""/200, 0xc8}, {&(0x7f0000003940)=""/129, 0x81}, {&(0x7f0000003a00)=""/91, 0x5b}, {&(0x7f0000003a80)=""/40, 0x28}, {&(0x7f0000003ac0)=""/115, 0x73}, {&(0x7f0000003b40)=""/33, 0x21}, {&(0x7f0000003b80)=""/80, 0x50}, {&(0x7f0000003c00)=""/66, 0x42}], 0xa, &(0x7f0000003d40)=""/49, 0x31}, 0x2}, {{&(0x7f0000003d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003e00)=""/50, 0x32}, {&(0x7f0000003e40)=""/14, 0xe}, {&(0x7f0000003e80)=""/175, 0xaf}, {&(0x7f0000003f40)=""/27, 0x1b}, {&(0x7f0000003f80)=""/11, 0xb}, {&(0x7f0000004040)=""/117, 0x75}], 0x6, &(0x7f0000004140)=""/208, 0xd0}, 0x6}, {{&(0x7f0000004240)=@nfc, 0x80, &(0x7f0000005700)=[{&(0x7f00000042c0)}, {&(0x7f0000004300)=""/113, 0x71}, {&(0x7f0000004380)=""/99, 0x63}, {&(0x7f0000004400)=""/203, 0xcb}, {&(0x7f0000004500)=""/107, 0x6b}, {&(0x7f0000004580)=""/107, 0x6b}, {&(0x7f0000004600)=""/10, 0xa}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/188, 0xbc}], 0x9}, 0x9}], 0x9, 0x40000021, &(0x7f0000005a40)={r10, r11+60000000}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0xc0506617, 0x0) 1m6.669087247s ago: executing program 46 (id=305): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0x5, 0x7ff, 0x401, 0x5}]}]}, 0x16c}}, 0x0) (fail_nth: 2) 1m5.687706883s ago: executing program 47 (id=314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000240)={0x40, 0x7, 0x2, "a38f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000600)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) setfsgid(0xee00) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x4, 0xf6, 0xe1, 0x81, 0x9, 0xd9, 0x3f, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x0, 0xf0}}) (async, rerun: 32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x80000, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x2, 0x8000], 0x1, 0x3c4210}) (async, rerun: 32) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)={0x6, 0x0, [{0x0, 0x401, 0x4, 0x40, 0x6, 0x7, 0x6}, {0x4, 0xfffffffc, 0x1, 0x7fff, 0x7, 0x1, 0x4}, {0x2, 0xfffffff8, 0x2, 0x1000, 0x8, 0x463145cd, 0x8}, {0x40000000, 0x4, 0x2, 0xf, 0x1000, 0x5, 0x16}, {0xc0000001, 0x81, 0x0, 0x8, 0x3, 0x5, 0x400}, {0xc0000001, 0x4, 0x1, 0xffffffa3, 0x2, 0xfffffffc, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m0.460741619s ago: executing program 4 (id=373): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000600)={"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"}) close_range(r0, 0xffffffffffffffff, 0xcb1) 1m0.328876955s ago: executing program 4 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x3f, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x421, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40805}, 0x400d4) 1m0.20861114s ago: executing program 4 (id=375): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) openat(r0, &(0x7f0000000240)='./mnt\x00', 0x401, 0x1b) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='minix\x00', 0x204c820, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r1, &(0x7f0000000000)="0d9ccf1cb8d871123f1c06000000000000009a42ffffff7f0000000057a02c6bb4a8afdd55b057d1b81536fbdd13d4c4fc4e6e3223649035442a47fccedbea15ad2fcd7e0cb1215da7e6012a7c9db853055d64", 0x53) r2 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r2, &(0x7f00000091c0)=""/16384, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_usb_connect(0x0, 0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c03209040000010209000005240010010524060001052401000007050603"], 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000200)={0xfffffffffffffffe, 0xb000, 0x0, 0xffffffffffffffff, 0x3}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xb1, 0x5, 0x73, 0xff6fffff}, {0x6, 0x8, 0x6}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x102) write(r6, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 59.854856777s ago: executing program 48 (id=380): mmap$IORING_OFF_SQ_RING(0x110e230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 58.833731585s ago: executing program 4 (id=386): unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0\x00') 58.480212142s ago: executing program 4 (id=388): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x4000010, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x88410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086607, 0x0) 58.284533101s ago: executing program 4 (id=391): keyctl$set_reqkey_keyring(0x10, 0xfffffff8) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000240)="00214500002c00000000400600000a0000010a000002005000500000000100001901601009000000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a0000020050005000000b0100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x0) mkdirat(r0, &(0x7f0000000000)='./mnt/file0\x00', 0x8) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x245) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000280)="ac1c5c1de4761625e436eb51f95f3717a73ad665c7e408c2d99094780f4b5208e7e34debd510408a4795de2b5a9fdb7bdf6b74e55ff7879624b0852cc39246a2b966dc8592bafa4b5f515818069aaa5bd2b8ceb794bae9e1eaf1bae2e1d3aab4857991a0ca08c8bb2a686f4eb6a1a63066324db401780a9e1c31ec6edcd2f44b405c19cf352df42bab9fc1deba284c3aa1738f718efbc3ff759e581ede24bc8bac47fe3a65aa7242d44f8cec2838df3f6f85d97a6cdc", 0xb6}, {&(0x7f0000000400)="085cefce04800fd81374b806c610946e1ce00521e2d5a6c208ba12084ea05beaee682ed86f26916f75c90450b54bb3ed585bc0f3833295bb78bedbd6311925a49215b25736674c1d46dfe5937f750dda3a86f3917bb0868532a5599691d4bcb558c72fbabe3023cfa341ac2d354f729dc4df7d29457bf77bf79acfdad1fb31bcf3022191d5e69a45132cfebd16ecec02cf99699f166499fa1893c90cec1f0f8a559256f36f1d8bd0d3a4233997c1c0b4b3112189fe7b0702406536c65763a225371db9359e9b3fe31a3e7b82d3", 0xcd}, {&(0x7f0000000500)="6cd3a4c68f049844f1c83a8f88602bc53f496702401a42668f46f432a5e8fcd47c1579fa85da5aed9b7e578f39d6bd5398ee9485cea9fda4bbc7db220d7f6103264bc031f05924459ab979d85282f2de83d16f8a14fb9022d779704bfc8756e6249df70f7656220a815b10c003ca08fa0b1486a0f37f9a238b", 0x79}], 0x3, 0x5, 0x5) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="1700000021002551241c0165ff00fc0202000000db73de", 0x17) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000a00)={[0x8001]}, 0x8, 0x80800) read$FUSE(r7, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x8c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x97}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7462}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0x16, 0x34, @random="fb3547daae1b86d3ee8e5ef64da53960d37f"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000800) chdir(&(0x7f0000000140)='./file0\x00') 58.146262098s ago: executing program 49 (id=391): keyctl$set_reqkey_keyring(0x10, 0xfffffff8) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000240)="00214500002c00000000400600000a0000010a000002005000500000000100001901601009000000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a0000020050005000000b0100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x0) mkdirat(r0, &(0x7f0000000000)='./mnt/file0\x00', 0x8) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x245) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000280)="ac1c5c1de4761625e436eb51f95f3717a73ad665c7e408c2d99094780f4b5208e7e34debd510408a4795de2b5a9fdb7bdf6b74e55ff7879624b0852cc39246a2b966dc8592bafa4b5f515818069aaa5bd2b8ceb794bae9e1eaf1bae2e1d3aab4857991a0ca08c8bb2a686f4eb6a1a63066324db401780a9e1c31ec6edcd2f44b405c19cf352df42bab9fc1deba284c3aa1738f718efbc3ff759e581ede24bc8bac47fe3a65aa7242d44f8cec2838df3f6f85d97a6cdc", 0xb6}, {&(0x7f0000000400)="085cefce04800fd81374b806c610946e1ce00521e2d5a6c208ba12084ea05beaee682ed86f26916f75c90450b54bb3ed585bc0f3833295bb78bedbd6311925a49215b25736674c1d46dfe5937f750dda3a86f3917bb0868532a5599691d4bcb558c72fbabe3023cfa341ac2d354f729dc4df7d29457bf77bf79acfdad1fb31bcf3022191d5e69a45132cfebd16ecec02cf99699f166499fa1893c90cec1f0f8a559256f36f1d8bd0d3a4233997c1c0b4b3112189fe7b0702406536c65763a225371db9359e9b3fe31a3e7b82d3", 0xcd}, {&(0x7f0000000500)="6cd3a4c68f049844f1c83a8f88602bc53f496702401a42668f46f432a5e8fcd47c1579fa85da5aed9b7e578f39d6bd5398ee9485cea9fda4bbc7db220d7f6103264bc031f05924459ab979d85282f2de83d16f8a14fb9022d779704bfc8756e6249df70f7656220a815b10c003ca08fa0b1486a0f37f9a238b", 0x79}], 0x3, 0x5, 0x5) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="1700000021002551241c0165ff00fc0202000000db73de", 0x17) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000a00)={[0x8001]}, 0x8, 0x80800) read$FUSE(r7, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x8c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x97}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7462}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0x16, 0x34, @random="fb3547daae1b86d3ee8e5ef64da53960d37f"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000800) chdir(&(0x7f0000000140)='./file0\x00') 58.128177628s ago: executing program 8 (id=394): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000740)="00a02173601000e859fc01e341244e11e2d23b8ae7e58c194ecbb3e213df3128dea90388a597845ab3ce05f0168d3e0f9b82b9fcf7ab27d6fad1fc3bff86304f0a", 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x5, 0xffffffff9080edc4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8000000000, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40806685, &(0x7f0000000000)) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="402004000000a00142143e12d67bbf59a738ee914b5cf05cf67a2db7ac6840af242ba7ccf5ed47537fea513e070de7d46f769fd9435d27435ecb5f8be96496030000007c5b33697b89d95d0651101e73292f471aa19c1911de19664463dfc0cb164cdbe94cc8866ddb1c2a214b157a39557d53941cf4a9062970d01a", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0xa0, 0x4) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0xe8, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xb4}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6d}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}]}, 0xe8}}, 0x8000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) listen(0xffffffffffffffff, 0xfff) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000380)={0x0, 0x9, 0x4, "4bdbc7c0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 57.940294397s ago: executing program 1 (id=395): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000)=0x2, 0x4) sync() 57.720632718s ago: executing program 1 (id=396): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/114, 0x72}], 0x1}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r0}, 0x0, 0x7, 0x8000000000000000}) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [{0x20, '\x92\x1f\xed\xec\x98\x13\t'}]}, 0x13) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 57.604069593s ago: executing program 1 (id=397): socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x29, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb697, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0x1000, 0x3, 0x8, 0xffffff83, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff9, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x6, 0x1, 0x7fff, 0xe8f, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0xfffffffe, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x3, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0xa, 0x40008, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x8, 0x463f, 0x4, 0xf, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x4}], 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 57.345738195s ago: executing program 2 (id=393): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x1d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='user.incfs.metadata\x00') 56.620172049s ago: executing program 1 (id=398): unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0\x00') 56.562034012s ago: executing program 1 (id=399): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44008040}, 0x40008d2) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) mmap$IORING_OFF_SQ_RING(0x0, 0x8000202, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r6, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) recvmmsg(r8, &(0x7f0000003980)=[{{&(0x7f00000002c0)=@x25={0x9, @remote}, 0x80, &(0x7f00000003c0)}, 0x4}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/168, 0xa8}, {&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000a80)=""/193, 0xc1}, {&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/51, 0x33}], 0x6, &(0x7f0000000c80)=""/212, 0xd4}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000d80)=""/70, 0x46}, {&(0x7f0000000e00)=""/78, 0x4e}, {&(0x7f0000000e80)=""/49, 0x31}, {&(0x7f0000000ec0)=""/63, 0x3f}, {&(0x7f0000000f00)=""/148, 0x94}, {&(0x7f0000000fc0)=""/61, 0x3d}, {&(0x7f0000001000)=""/102, 0x66}, {&(0x7f0000001080)=""/182, 0xb6}, {&(0x7f0000001140)=""/92, 0x5c}, {&(0x7f00000011c0)=""/226, 0xe2}], 0xa, &(0x7f0000002100)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003100)=""/216, 0xd8}, {&(0x7f0000003200)=""/243, 0xf3}, {&(0x7f0000003300)=""/165, 0xa5}], 0x3, &(0x7f0000003400)=""/189, 0xbd}, 0x10001}, {{&(0x7f00000034c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003540)=""/42, 0x2a}, {&(0x7f0000003580)=""/228, 0xe4}, {&(0x7f0000003680)=""/29, 0x1d}, {&(0x7f00000036c0)=""/157, 0x9d}, {&(0x7f0000003780)=""/180, 0xb4}], 0x5, &(0x7f00000038c0)=""/173, 0xad}, 0x2}], 0x5, 0x20, &(0x7f0000003ac0)={0x0, 0x3938700}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r12, &(0x7f0000000000)='6', 0x32) fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) write$P9_RGETLOCK(r11, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r10, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 56.441853808s ago: executing program 1 (id=400): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) unshare(0x60000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0xffff, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x2000, 0xba88, 0xa3c, 0x4}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x400) 56.398547889s ago: executing program 50 (id=400): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) unshare(0x60000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0xffff, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x2000, 0xba88, 0xa3c, 0x4}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x400) 55.884198964s ago: executing program 2 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0xbc) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x9) write$tcp_mem(r0, &(0x7f0000000080)={0xfff, 0x20, 0x0, 0x20, 0x8000000000010001}, 0x48) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x10404, 0x8) r2 = openat(r1, &(0x7f0000004200)='./file0\x00', 0x43c803, 0xf8) write(r2, 0x0, 0x0) 55.856230055s ago: executing program 2 (id=403): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="b6442bb828fbe59c0c53f7681fabd36925f3902bbf9a13a7b841fcc982257bbdbd0098b280a52638efc55912acbdfa70fd2ce871cb12cd19955f7ae992072b94fc62ef5df22f256aee526757b0120f79b9bbb4c2c54aebec4d3ad93974b13ecafe1ff771797302ae51f0fa41dc9d2f0217b2f9dea84da3a015817f2230305d27dd317ee0a5259c0ae7245acaa921ca77b0568267a33d75556377408766f0918a63a014376b65838ea7b5cf3f201423e3a64cc994ffee78860f57d012781a504d56a7a383520d6b2b0717469cb261b0da6b2c16e7a5"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x20, 0xe, 0x2, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000202, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0x4004af61, 0x0) 55.11218422s ago: executing program 8 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r1, 0x4}, 0x0, &(0x7f0000005840)="00000002", 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x9080}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="f32729bd7000fcdbdf2507000000fc5c88a397b48f7e3ca781c0e8c63ef1f63926ce307bf8804a1dc74ed83060525a0f5849a95e6a9dec119229785fc1c9f499ba8cdc0881b79b5d698abf5c8c6ce312f4d594c7c846886038bb11787b6f7d6aca3c7b67de09106e3308170f0e738d8234fe066399882d7e11a0d2e28438baefa5a57b4db587d666c559b46a132d629e6d5b7dd92bd698278b267882179e4f1f2468dde463769f6fdf371d623b"], 0x14}, 0x1, 0x0, 0x0, 0x24000046}, 0x4020) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) write(r2, &(0x7f00000000c0)='3', 0x1) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xe, &(0x7f0000000040)=0xc, 0x4) landlock_restrict_self(r5, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13) vmsplice(r3, 0x0, 0x0, 0x8) landlock_restrict_self(r5, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 54.968510917s ago: executing program 8 (id=407): socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x29, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb697, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0x1000, 0x3, 0x8, 0xffffff83, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff9, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x6, 0x1, 0x7fff, 0xe8f, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0xfffffffe, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x3, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0xa, 0x40008, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x8, 0x463f, 0x4, 0xf, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x4}], 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 53.844519799s ago: executing program 8 (id=408): unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', 0x0) 53.801302951s ago: executing program 8 (id=409): r0 = fsmount(0xffffffffffffffff, 0x1, 0xa) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x180, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x57facbd6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc74}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7a, 0x3, "88875a8bb37c7fe63d0d7941ca8987a30594aacc61f6fe3905493def6cca1a2cb4d37e16ea5b77f8a9d0da2d86844384f8c1367d5477b63e1e3d5c35808ba4a51ff8484739c94e0571e225c581c954f22f3fd5f8c226950f193501682aa38a181ebde3ca126edb053ee47e1726bd23ff5a6b60fecfe4"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x33}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "8118eabc92dce60d2f14b99fd3f464fa15e600680cbe1304b302"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20008820}, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x224}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x48011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xad87}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4801}, 0x4805) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000005c0)={0x3, 0x9, 0x9, 0x9, 0x7fff, 0xad7d}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x7, 0x6, 0x309a87c760129d9d, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000700)=0xc, 0x4) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000740)={0x101, 0xfffffffffffffffd}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x124, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a40)={'gretap0\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x6, 0x3, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2b}, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xb8, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000880}, 0x804) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000c00)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'sit0\x00', r6, 0x10, 0x8000, 0x2, 0x5, {{0x9, 0x4, 0x2, 0x0, 0x24, 0x64, 0x0, 0x2, 0x29, 0x0, @loopback, @remote, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0xa, [0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000d00)={'syztnl0\x00', r6, 0x29, 0x1, 0x7, 0x7ff, 0x43, @local, @mcast2, 0x700, 0x7800, 0x8, 0x75ab}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001080)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000dc0)={0x26c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x2000841}, 0x4080) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r10, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}}, 0x2404c014) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001200), 0x282001, 0x0) quotactl_fd$Q_SYNC(r11, 0xffffffff80000102, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) sendmsg$nl_generic(r0, &(0x7f0000001480)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xc8, 0x1c, 0x300, 0x70bd26, 0x25dfdbfd, {0x10}, [@typed={0xa9, 0x164, 0x0, 0x0, @binary="b3a4c91412f93d56f438d22a8e76f3735e8584d7cd498a5f44f69a8070254700f725b042178d3a709448007677be9ccaf9d4bc01c3faaba43d8cfe892018d39a3ba6f6fcaf535e67d7235e836938e0bef961bf5f1f29b82db532ab9a57e707b112db10ccbf94ca38c6437545967436c5136c7853194c1d08b1f72116c4784239ce1464197376986b425edc9466a573a8b34bd36919594459d0edf6c981909302f6beb93f2e"}, @typed={0x8, 0x26, 0x0, 0x0, @uid=r12}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f00000014c0)={0x1, 0x6, 0x80000000, 0x4da4, 0x2}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4) sendmsg$inet(r11, &(0x7f0000001840)={&(0x7f0000001500)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001540)="8a7c48b7239b", 0x6}, {&(0x7f0000001580)="bb6dd7c704443b64da076053360e64ae0d2759022781e83148b48fb3a6b1d3a197fa6a7d064739794f5620109de4ef93d37a2070d208dbddf0baade41f199155d7607ff36c72c4b6543272ea94503fb915f4b87c6745bba9fa22b8e51c7f840d2a9e75b7bdd4ed7c780e0e", 0x6b}, {&(0x7f0000001600)="e8f6c5e4e84f803d", 0x8}, {&(0x7f0000001640)="509be511bfe6e023b4037cf08b4b161f10ebb9422588db944db9c935d490e82add66b79d32c45c147a1be6286bc5d72a8b1b2eee8db440a3919caf08ca055cccbddb6f3a713426979a654aad7eac36dfd7768c3da571f672e663c7d7fb6b8962215df8bca8b633c0b0dd466983329a9f7775f59b3238f7cac4d77c4b76be5a8b6711485e3607acdfc087870eb9eafed97a9e71119700bfcbcaffa46912835ae8994d6ef1ba42bc53c0cb22163a7a25873ced62de3527c614f580ee55d490c4", 0xbf}], 0x4, &(0x7f0000001740)=[@ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xde, [@broadcast]}, @timestamp={0x44, 0x1c, 0x8, 0x0, 0x9, [0x540, 0x9, 0x5, 0x61a, 0x2, 0x200]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xfc, [@loopback, @broadcast]}, @lsrr={0x83, 0xb, 0xdc, [@broadcast, @empty]}, @rr={0x7, 0xf, 0x99, [@loopback, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010102]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x6, [{@multicast1, 0x8}, {@private=0xa010101, 0x611c}, {@remote, 0xfc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xd0}, 0x2000) 53.606651621s ago: executing program 8 (id=410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz1\x00', {0x7f, 0x387d, 0x95d, 0x5}, 0x55, [0xa83, 0x4, 0x6, 0xb66165d5, 0x6, 0xa5, 0x7, 0xe5cb, 0x81, 0x80000001, 0xfff, 0x2, 0x6, 0x3, 0x8, 0x9b75, 0x9, 0x5, 0x7, 0x46d0, 0x4, 0x7f, 0x82, 0x0, 0x1, 0x5, 0x0, 0x4986, 0x1, 0x800, 0x8, 0x5, 0x8000, 0xf, 0x6cbf, 0x5, 0xc4b, 0x5, 0x7, 0xd, 0x4, 0x1, 0x6, 0x7, 0x3, 0x1b, 0x8, 0xfffffff8, 0xfee, 0xe, 0x8, 0x2, 0x101, 0x7, 0x1ea6e4d, 0x3062, 0x40, 0xffffff7f, 0x7, 0x824, 0x4, 0x70cc, 0xa8, 0x2], [0x10000, 0x5, 0x5, 0x10001, 0xc580, 0x200, 0x40, 0x10, 0x735, 0x80000000, 0x5, 0xfffffffd, 0x9, 0xffff, 0x7, 0x6, 0x5, 0x1ff, 0x7e, 0x4, 0x6, 0x9, 0x48000000, 0xfffffff9, 0xffff62fb, 0x80, 0x2548acc6, 0x400, 0x8, 0x8, 0x30, 0x51cf, 0x2, 0x8, 0x8, 0xf, 0x9, 0x3, 0x40, 0x0, 0x1b3, 0x5d622418, 0x1, 0x36, 0x200, 0xfffffffe, 0x4, 0x8, 0x40008, 0x76dfd8cf, 0xd0c, 0x2a87, 0x2, 0x8000, 0x80000001, 0x0, 0x1, 0x9, 0x1, 0x5, 0x3, 0x6, 0x80000000, 0x8], [0x4, 0x6, 0x8001, 0x0, 0xb2f6, 0x1, 0x2, 0x6, 0x89be, 0x7fff, 0xa0000, 0x9, 0x4, 0x0, 0xfffffffc, 0xce9, 0x1, 0x6, 0x7, 0xff, 0x0, 0x4, 0x0, 0x5000000, 0x4, 0x1, 0x2, 0xc, 0x2, 0xff, 0x0, 0xd, 0x9, 0x9, 0x0, 0xdce7, 0x401, 0x0, 0x2, 0x5, 0x8, 0x10000, 0x40, 0x0, 0xffff, 0xd, 0x7, 0xcf, 0xfffffff9, 0x80000000, 0xfffffffc, 0xcec, 0x4, 0x4, 0xffff6455, 0xfffffffb, 0xd6471202, 0x0, 0xfffffffe, 0xd5, 0x9, 0xc9, 0x2121, 0x5], [0x200, 0x0, 0x7933, 0x8, 0x8, 0x8, 0x9, 0x42aa3068, 0x8, 0xffff3300, 0x9, 0x1, 0xa8, 0x8, 0x3, 0xce, 0x8, 0xfffffff9, 0x4, 0x10000, 0x587806ba, 0x73, 0x3ff, 0xad64, 0x81, 0xffffffff, 0x9, 0x7, 0x9, 0x9, 0x0, 0x6, 0x9, 0xffffffff, 0xa, 0x3, 0xeccd, 0xe, 0x4, 0x1ff, 0xb9e, 0xfffffffa, 0x1ff, 0x41f4, 0x46, 0x800, 0x4ab4, 0x3, 0x9, 0x7e55, 0x8, 0x0, 0x7, 0x9, 0xc2, 0xf, 0x8, 0x6, 0x1, 0x7, 0x4, 0x6, 0x4, 0x2]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f00000002c0)={0x1b0003, 0x0, {[0x8, 0xa5, 0x4, 0x8d0, 0xa, 0x10000005, 0xffffffffffffffff, 0x6000000000000]}}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)="79b19bd41cce24489194b33eafb527f8753a15674f2e1c943277ceb5cee03850f5b522721d01166b02bd8e7445b97c5dcedca93db442259a6928896c9c3d7eb7c02a9fcd372089334350e878260c1c5c10da80ea479a26cbb9cacd2fe726fd64156a8375bd5b300eeb24c8e58fcb4799415a542dfff13bec115440a3606c52019ecb0f462f08482218d54a0bdef42b02f67b6e9db955a454f165d93159e6ee7df153d71a3122f9fc2dfce2ebe2035cf67983dd7b094c369006dc616b0284f34943821b3429730b9640fda3277d8d43c396fdd8d47a202a2260315428524797e3d55cf7a66d97fe718ed581ca35ade35a3598cba505c362726a453f7db1770e4d79f46a13a5921106b87f574d0790daf64e1d8d3206bf0dbcff15cb1904589ad3c2a60ad8005a469da8b0ee4c8faa23e8c6931e4dbd3f4327939462fdf636641bfa86bdf22f3926be56443f471cfc89c5c534c211f489983d738344d90eb4ae6116c7c462a84ef67bc58c8f4915b7b63edb44321b760074c794b394898aaa4189b4f99f18be9954e6a565c972fdfc461fd452dfb78cd17380c6e257930458b94245ded2c2d1ed88ff3375011f64d99fe00454fe7b1a9bf93f631eab65962b869181944496e1eae4578a19f05fa59e058b5cd6095b1c033238f18eb05fb2fc90850057d63aa8405c5e81e0af3ea8011e5b0052caa6b7862c374a0d48385d0e7483f39d1ebf6c5b2ebd9b494bad6e2de11ee97cf11a0b156124be69caf7e89b3b21984967031028045148e3bef85fc2703d407f514fb082d851e1c95f1eab4fae6f346aa64165195d775a7153b5026540a3a3f482d13cea747c7419997ba6f7fb03776009dedf18d229d127c2f48e35ad239b2c2e1491c5e329f293425e294d07acf3fdb74f1c8d6c76842328da42070810665d37535ae433bd0f2ed265af7bb4064a732016d71504b6d1ae5a7da021b5ca1cc6c91a5df7b841ca00a5e845623db44b88c9bcd64baae5642c043b31ddc5c8ebd6c243871dd7f5abcbbd51cbf8a0a3576c1d396364254b0e3c998e53deff87006ef4908f4c954dc35b120825977f10afd86cfcc8b08259332cf92b3bb904ed06d019270ba3eb3599fdb54d31627624a004b01b8e17aca121629047842c5ed21f701ee2233a4a64829d0b1040f7a645993725bee6aff36626629495cc8fa9e308ff10ac04c78bc8bd9aef042c10b3ba970e0827634df02cfccb67a10c80ed4a200493109eedd4d13f9d40c64c290970caa6042f6ed8638bdae1dfd1094d35cd40124b748e60b4ff0be7201f10a62202972350678d81a28a024f76ee613941793b0d85149f6f527839168868324e83cb92e128726853727ece5a4aba9ffca018f87da440bc4b123f99f8b58ee6726679c18bee80dcdb047c5a743dba4d121874f63623a90ad7e5ec2e65d09ee70d204465d330c57e184cc9c2c47a77e2c4788465ad538797c2f0e677df928f56c24b86824b67fb12effa764f8a5d5aec37edd3fbaa60cd1ec14f9d2fd2c1424415b15e29f5abc6228099cc4431dbb4125f52a79764dddd4513e63d746e9bf1a340139d8126bf7c073385271108475d320e2f9c368929133cc571af95c6c2503c47a186948708a338a23e1db5fd96a088bc6649ef1bf6b5b1462944553aff8b21b7bd6a38e653b08eecd80f705e9c2385504ac6f719f48c5101fe16a49bcb1ce65d3cb8da44ec642d719924a0fb0a179edf711ef8c1f5ba374c7d651211b87408a6a89416b0cdc0cd28c19762c2d3f896ef83cdd7f9df4964109913ab2ddaed36011963e8174dfabf0f8db79a88e270c09dd83d0a2fee8dbd365a16ca67adc0d91f78c30c2e692ad241a854127c1bc36c1b8a365c448fee18eae4a5410cdc28538cdb453f18e3c432440d5ddac9611521439cb2cd1e863a13b8cd5c28573a004c926f017f0460a68ec76c196a6d99d6aba82d1a6d9a4ecb1ff2691f25c65679bfa832cfa1e7a5b72ae8669312260e477c9b1ac1f7b2692cde8306c0bbc10ed6972f01ff8015d9dd64a5ad50a7eacfcb1aca9ac66a489258781ab495a96062c933380be2d5ff4158da422efae20b3dd79cd4a85dbd6d548a510243d9c1e1c25740a74f3cc5fcf063939ad75846f2e3c1c23e74e8a661255c218227cc7e82e1e39eb8f11bf028606dca079a9b63211b3c27777b54706d2bec6a1288c7cd23f114be43686a1e33a157e12fb5297014224dbc7a387141b06f2675e580414dc70b0236d3954cc24bc46cca1d673f1a7fc72a3b6b00d17c62c2ee9b18303bc2aa67482342880286fde404525f829021a2ce1cc4c416d5afd38cf7697eade4f9fcfdf098f62eaf65d49661ba1a68b8a9822143b0ad7b2e7a01b5c37879869666d369535c2efa44b7a2798cac77504bf196762036ead799645ef21ef04ae221bf42db720b2d671ced29c59a8cfd41c69ef1bd94d763d5426cfe137e1d4cf2c4c1a45c791f3e5a3ce5c5108d2c901ff8d657814b13a6f03e57bbb1a2aabdde2d92467d047980a8adcffa12b348f992982b1aa66634e97fe934e5b4b16ec91e3e362e3e0299643055985cd2585e043629c3d73a8ff43062612b13eed8a35f95c73a29892bf4650e4e210e713d4f377ce20320bfa1f1baa06d45a195297c6330136cf46dfd2c54cfe9e9c95c81fe29d0cbc4a51a27e5fb7f9332748ba13bac764cf8ce63a83b3d88230319fe5e3911d3c06014c06a0c232d8bf4f4c3af4c9fbfaac586ab74cf8bf3bb475dc6e80885d7615fc7e98a96f9e0c7623ddc8c457ad378a22c97c2b2a6ec569ec40580e65d644d8f5918861b3947d5b63cf4e58cf61c668cf46b7d3d0a32772911b53d6784e004ead0ecd815390051ef4ef2ef103350dbb9e52e197a15a6705431981547570d8517611198cf144612f662528acdfd8e3cf88ee4da9f3fcb54e9763e8ff49dc3004a7305dad642c2edc2ede6245aa1ddf70a862e7a37436c275e1c7781727bb7dbb91deb4b69684db4b0466a93bf7704fa65e4045e5ae3d59195a50e603116fe933488309575a7a83f5614b6c79486f19deeb5bad96b4e659ec6d3cb6dd1f0d5e7601a1c1f2273aec9d473407443ba5320876b16f63ea26fefd7b9608dccb3dfd92a8db0e6e0d05d701d094c610138c1990bc7100ccc1efc66c546422fecc70af51b71485c87c97b9c2a2abc6eff94415d498d49b17d4ae9adaa4d9daffff5afc6e8ad371b2bb938ac78dfd52eb7ee1a46d8532348060f7db7f368db9f66617e42712f05640451af0ace465089602a79ccc7f3d41dc63630343cbbfcdf870fc32c2db623bb3d74823752fcf45cdbe66185a5a6ed2419317ea7b3d37a13b47a9ab44f8cd142202782c4e30fbe223e51a84a21372264cb12161caec2f9b38c510f30150c4b3847d9cc0a764a567d294f5535c2728bcafaa5fc419c296d14cbcaafb4752845ae09cdaf90b2b5ac6fcd66b81011ea45108530c2cfd846b08fabc09d5641470c07b0df0fb4916de2dcf1fdc64cce988adc3aafb946397a8b4a8ad103853f26eff6074cb22edb51e77edb631302c47e1984990fed7fb52889f680d254a27209f756d4aad6dda26dfcea4fbf9f744c932207a71f747f0a3ec7ddb48e4f7a0dc1ddb942e7d7dff5d0f521193ad9216e09f2b80af0a84dcfd3c737e6c4770926e07aef570e0ce67030a088d5a3764f21983460c66febab49083a5be0bbea4b55917f035e19826ef5a6c28a46055553997da54c58c698d6f67c25067a4cd6c0ab33d0f17812240c7e014cc7b01b8e08bef9e6eb78132eb680b4d94b1aed4fa0a9c74d610cbc93bf2e834dc8b6a9c2b93ba4a27cf275f50dad2a361fea8442722efd35af79d2e5721642d97006b0ba023b45a667eb8670a559a0cd13f3ef91fbd5fe2d0083e2ef105bf0411fd17b6ff13bf9ff5b446cea7902a7bfb86eb14b741de09e3cf847d9c1f2f59cccb0d4f3dc0d890036f84399ad9702fbc89d2e98ca01fc7a02d7058f928957a0c91675285a421dcdaad83f4e9c2637ffe1e82330f493b7657981858dd3788c42c6cb2822c1967092f73a41bbb6340edfa07e84695efd58b4601aff1c648b1e37f14afb01c39e78da8613dbd176d7d14529ebc547c7839fe1a99e08d1661d46058631f4199eb37f519628a84661c87be1d4d67448bbbfe1b52360fa4b80b27511b5317c72f54697ec67928a634692a8960142505d11460ce6c2a4743ad81d6c4c757093cf64a9506101c18fef943510f566c216e0d00f877eee40b790e7efb01df6634925536e60c827a580248c39c8050dea8030e41981a70828f4fd9d2eae178c1f27c15c5e62f0236dba17b108a384488d4d2b34231a91b11508f82b1a7adfecc5647b67628cd8b4b2914cc90d15a12a9b19fb67803213d4f68a6d29ed0db5db45fc26f473ad3bff886e0442fc0182c3981fca95cb8ec667a1101f5e2330f82f5f1ef9b6f21f605c7f8f7f26a353fceb8099750f847b321c6deabbc646ccf25e64c5e7b6d17557ec9a4756a03ae47dec4ba8fd3f7f2d6fa9a5348fb7916904b7784dc36954f4427c924ca69489edd1f1711cc7c786c69a4a8115f958ed5533dd0798a4f68eeb583f893c4b30554372c6c147537a987a41da14e69c6e9682d8a682501f9ec9f573f7016e6d119cc9fb38e4b3e9ce1bbcc2d4e3393f520f8690bbb6ac3a6b88bcfd997e1d02aac765ce01116199f05994126af6532d2ef4e2138bf84750667aca817c3785ad51cbe88dd3dc576050658f8c5c97a2a1a7b94f3572a60a0b36617f8d", 0xd3b}], 0x1}}], 0x1, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x10000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 53.557325483s ago: executing program 51 (id=410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz1\x00', {0x7f, 0x387d, 0x95d, 0x5}, 0x55, [0xa83, 0x4, 0x6, 0xb66165d5, 0x6, 0xa5, 0x7, 0xe5cb, 0x81, 0x80000001, 0xfff, 0x2, 0x6, 0x3, 0x8, 0x9b75, 0x9, 0x5, 0x7, 0x46d0, 0x4, 0x7f, 0x82, 0x0, 0x1, 0x5, 0x0, 0x4986, 0x1, 0x800, 0x8, 0x5, 0x8000, 0xf, 0x6cbf, 0x5, 0xc4b, 0x5, 0x7, 0xd, 0x4, 0x1, 0x6, 0x7, 0x3, 0x1b, 0x8, 0xfffffff8, 0xfee, 0xe, 0x8, 0x2, 0x101, 0x7, 0x1ea6e4d, 0x3062, 0x40, 0xffffff7f, 0x7, 0x824, 0x4, 0x70cc, 0xa8, 0x2], [0x10000, 0x5, 0x5, 0x10001, 0xc580, 0x200, 0x40, 0x10, 0x735, 0x80000000, 0x5, 0xfffffffd, 0x9, 0xffff, 0x7, 0x6, 0x5, 0x1ff, 0x7e, 0x4, 0x6, 0x9, 0x48000000, 0xfffffff9, 0xffff62fb, 0x80, 0x2548acc6, 0x400, 0x8, 0x8, 0x30, 0x51cf, 0x2, 0x8, 0x8, 0xf, 0x9, 0x3, 0x40, 0x0, 0x1b3, 0x5d622418, 0x1, 0x36, 0x200, 0xfffffffe, 0x4, 0x8, 0x40008, 0x76dfd8cf, 0xd0c, 0x2a87, 0x2, 0x8000, 0x80000001, 0x0, 0x1, 0x9, 0x1, 0x5, 0x3, 0x6, 0x80000000, 0x8], [0x4, 0x6, 0x8001, 0x0, 0xb2f6, 0x1, 0x2, 0x6, 0x89be, 0x7fff, 0xa0000, 0x9, 0x4, 0x0, 0xfffffffc, 0xce9, 0x1, 0x6, 0x7, 0xff, 0x0, 0x4, 0x0, 0x5000000, 0x4, 0x1, 0x2, 0xc, 0x2, 0xff, 0x0, 0xd, 0x9, 0x9, 0x0, 0xdce7, 0x401, 0x0, 0x2, 0x5, 0x8, 0x10000, 0x40, 0x0, 0xffff, 0xd, 0x7, 0xcf, 0xfffffff9, 0x80000000, 0xfffffffc, 0xcec, 0x4, 0x4, 0xffff6455, 0xfffffffb, 0xd6471202, 0x0, 0xfffffffe, 0xd5, 0x9, 0xc9, 0x2121, 0x5], [0x200, 0x0, 0x7933, 0x8, 0x8, 0x8, 0x9, 0x42aa3068, 0x8, 0xffff3300, 0x9, 0x1, 0xa8, 0x8, 0x3, 0xce, 0x8, 0xfffffff9, 0x4, 0x10000, 0x587806ba, 0x73, 0x3ff, 0xad64, 0x81, 0xffffffff, 0x9, 0x7, 0x9, 0x9, 0x0, 0x6, 0x9, 0xffffffff, 0xa, 0x3, 0xeccd, 0xe, 0x4, 0x1ff, 0xb9e, 0xfffffffa, 0x1ff, 0x41f4, 0x46, 0x800, 0x4ab4, 0x3, 0x9, 0x7e55, 0x8, 0x0, 0x7, 0x9, 0xc2, 0xf, 0x8, 0x6, 0x1, 0x7, 0x4, 0x6, 0x4, 0x2]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f00000002c0)={0x1b0003, 0x0, {[0x8, 0xa5, 0x4, 0x8d0, 0xa, 0x10000005, 0xffffffffffffffff, 0x6000000000000]}}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)="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", 0xd3b}], 0x1}}], 0x1, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x10000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 53.284031306s ago: executing program 5 (id=415): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x20, 0x17, {0x14, 0x81, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010700000000000000002f"], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x44800) 53.240870988s ago: executing program 5 (id=416): socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x29, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb697, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0x1000, 0x3, 0x8, 0xffffff83, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff9, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x6, 0x1, 0x7fff, 0xe8f, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0xfffffffe, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x3, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0xa, 0x40008, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x8, 0x463f, 0x4, 0xf, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x4}], 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 52.780667709s ago: executing program 2 (id=417): unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', 0x0) 52.684936224s ago: executing program 2 (id=418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f00000000c0)="6667672664660f383a0e000067360f01c5c4c37d183bdc66baf80cb85be7798aef66bafc0cec2e2ef390360f1620b9190600000f3264660f3881b1009000000f0fa8381cbe58a7c4c17e706eacd1", 0x4e}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 52.573768979s ago: executing program 2 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f00000000c0)="6667672664660f383a0e000067360f01c5c4c37d183bdc66baf80cb85be7798aef66bafc0cec2e2ef390360f1620b9190600000f3264660f3881b1009000000f0fa8381cbe58a7c4c17e706eacd1", 0x4e}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 52.501015772s ago: executing program 52 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f00000000c0)="6667672664660f383a0e000067360f01c5c4c37d183bdc66baf80cb85be7798aef66bafc0cec2e2ef390360f1620b9190600000f3264660f3881b1009000000f0fa8381cbe58a7c4c17e706eacd1", 0x4e}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 52.226199085s ago: executing program 5 (id=425): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a01"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0xc0481273, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x15, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x5, 0x3c]}}) 52.152634189s ago: executing program 5 (id=426): unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', 0x0) 51.975029628s ago: executing program 5 (id=427): connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r0 = syz_ublk_setup_io_uring(0xd99, &(0x7f0000000080)={0x0, 0xec76, 0x400, 0x1, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(0x0, 0x8001, 0x2, 0x30, r0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000001c0)=0xfc, 0x4) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = signalfd4(r2, &(0x7f0000000200)={[0x3]}, 0x8, 0x80000) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x7, @loopback, 0x3}}, 0x0, 0x0, 0x40, 0x0, "5b4df86c41ebeaba4a37aceea9a23382779194f4d4ae8f12b7106cc7c7119370aa1760e694acaea7e01e6b9cd26d26b113132f17667c41e6e0abb3c13b6e30c2e4b4f3a95e5cb8d16090ed5ccccf49ee"}, 0xd8) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000340)) ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f0000000380)) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, 0xffffffffffffffff, &(0x7f00000003c0)) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000440)={0x0, 0xa06d, 0x800, 0x3, 0x195, 0x0, r0}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe76d, 0x1000, 0x1, 0x1e3}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab5, 0x2c242, 0x3, 0x2f7, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd659, 0x1000, 0x1, 0x117}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x412d, 0x400, 0x1, 0x1d5}}], 0x4, &(0x7f0000001740)={0x2e, 0x5c, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, '\x00', {0x2, 0xeaf, 0x0, &(0x7f0000000740)=@buf_512="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"}}, &(0x7f00000017c0)) r7 = syz_io_uring_setup(0x1a64, &(0x7f0000001800)={0x0, 0x9ca4, 0x80, 0x3, 0x17c, 0x0, r4}, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)=0x0) r9 = syz_clone(0x80000000, &(0x7f0000001940)="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", 0x1000, &(0x7f0000002940), &(0x7f0000002980), &(0x7f00000029c0)="9c1b3de69c64304eac523212c29ec6d06e21d84799ae6d47dd684da4") r10 = syz_ublk_add_dev(r4, r1, r6, r8, &(0x7f0000002a40)={0x2e, 0x4, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002a00)=@new_dev={0x4, 0x980, 0x0, 0x0, 0x1000, 0xffffffff, r9, 0x0, 0x10}}}, &(0x7f0000002ac0)) r12 = signalfd(r5, &(0x7f0000002b00)={[0xe]}, 0x8) sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x5c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0x12, 0x1, '])^w-@,&*^-^%\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0xa, 0x1, '&\x16{[]\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8094) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r11, 0xc0207511, &(0x7f0000002c80)={r10, 0xffff, 0x0, 0x0, r9}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r7, 0x40786e88, &(0x7f0000002f40)={{&(0x7f0000002d00)=[{0x101, 0x270e, 0x6, {0x8, 0x9}, 0x5, 0xff, 0x3}, {0x8, 0x2, 0x5d, {0xa8b, 0xa0ec00000000000}, 0x7, 0x8, 0x1}, {0x4, 0x1, 0x9, {0x1, 0xbb6}, 0xf, 0x0, 0x7}, {0x0, 0xffffffffffffffd9, 0x1, {0x1b, 0x6}, 0x7, 0x7, 0x7}], 0x4, 0x40, 0xf5b8, 0x200}, {&(0x7f0000002e00)=[{0xb6f7, 0x8}], 0x1, 0x10, 0x4, 0x7}, {&(0x7f0000002e40)=[0xfffffffffffff2a2, 0x4, 0x5, 0x9, 0x9, 0x6, 0x0], 0x7, 0x8, 0x9, 0x40}, {&(0x7f0000002e80)=[{0x0, 0x98, 0xffffffff, 0xc00, 0x64b5}, {0x6, 0x3, 0x8, 0x7, 0x4}], 0x2, 0x28, 0x6, 0x6}, {&(0x7f0000002f00)=[0x0, 0x1, 0x1, 0x0, 0x5e, 0x1, 0x8], 0x7, 0x8, 0x5, 0x7e2e525e}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), r4) sendmsg$NL80211_CMD_GET_MPATH(r13, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x2c, r14, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4404) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000003140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f00000033c0)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003380)={&(0x7f0000003180)={0x1f4, r14, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x2, 0x1}}}}, [@NL80211_ATTR_VENDOR_DATA={0x6e, 0xc5, "352cd1f3de49eb85132721ab6c61a7476c2e158f911ffb4d576d6e2210d4d8133ba51c74ca01f246003249597e253fb7c66d3c26e5de95be02a8a9ea4cbf1ed5f3143aeafad133eb534e4b5fb1430aaac0d5abebb59ed4b8a623bde980a6cacb493278c811729c9d93f5"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xb}, @NL80211_ATTR_VENDOR_DATA={0x26, 0xc5, "432b83af5b3c6f24e7cac29adf77cb1a9410e2296b22776a1cebb870d84464fbb0f3"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_DATA={0x75, 0xc5, "75b70302e3cba29d2e8e90abdc6648f2b17b58b2783f3e8e654f61aac967951e0b6aee2399ba26dc2dd5400e676d0c3d6b8092e4d1830b569d3a0bb4f4bff8772bfabcc21da5c28cb19fa4b286288f5de6611d42535c0f6c18f78d9df941dd57c0bc013d2f3cb4048c51bcc6f2c15347c0"}, @NL80211_ATTR_VENDOR_DATA={0xa4, 0xc5, "02975207593f35a43c124f303389166a767e05612f6b61b71c5a23822f97963d6ad6b6f24c58eedbfa51bd0abfbf063954dc43467acb9918cb04fc4b33a8953b5a4a2221a08cf53fe31c4ad4d2d6d8f625f631214d6bf0f81ddf4499b7246d60a6db35697db4699f44cc7182cd8a401b6be69d00cf1a14f2fcfda0e0974df63b40271a083af734ba18dc94bb280fa4694a6d233c9c67433a86653d985e3676d9"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x14}, 0x1) r17 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003400), 0x1, 0x0) setsockopt$packet_tx_ring(r17, 0x107, 0xd, &(0x7f0000003440)=@req3={0xff, 0x3, 0x0, 0x3, 0xffffb206, 0x7fffffff, 0x7}, 0x1c) fcntl$setstatus(r12, 0x4, 0x400) rt_sigprocmask(0x0, &(0x7f0000003480)={[0x58]}, 0x0, 0x8) sendmsg$NL80211_CMD_TDLS_MGMT(r13, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003580)={&(0x7f0000003500)={0x64, r14, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x80}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x46}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8840) 51.879118882s ago: executing program 5 (id=428): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r1, 0xc138fd09, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r2, &(0x7f0000000240)) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000020, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffff3) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x1000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x20000, 0x2, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 51.70897946s ago: executing program 53 (id=428): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r1, 0xc138fd09, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r2, &(0x7f0000000240)) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000020, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffff3) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x1000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x20000, 0x2, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 45.652586734s ago: executing program 6 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracefs_dir/free_buffer\x00', &(0x7f00000000c0)='ntfs\x00', 0x103a841, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/free_buffer\x00', 0x1, 0x2e) r0 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x28, 0x2, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 45.607659427s ago: executing program 6 (id=479): bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18}) 45.607014677s ago: executing program 6 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8) r0 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x2, r0, 0x0, 0x0, 0x4}]) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) accept4$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000000180)=0xfffffffffffffeb6) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r4, 0x0, &(0x7f0000002580)={0x46, 0x7}, 0x0) 45.512385751s ago: executing program 6 (id=481): socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x29, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb697, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0x1000, 0x3, 0x8, 0xffffff83, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff9, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x6, 0x1, 0x7fff, 0xe8f, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0xfffffffe, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x3, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0xa, 0x40008, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x8, 0x463f, 0x4, 0xf, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x4}], 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 44.233952261s ago: executing program 6 (id=487): r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x906d, 0x604e03) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="800000001e00210000000000fddbdf250a0000000500020000000000620003"], 0x80}, 0x1, 0x0, 0x0, 0x48}, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x7) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) mmap(&(0x7f000039b000/0x3000)=nil, 0x3000, 0xa, 0x4000010, r0, 0x2175e000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4f, 0x1000002, 0xffffeffffffff7fb, 0xfffffffffffffff8, 0xfffc, 0x9, 0x4002004c1, 0xa, 0x5, 0x0, 0x1f, 0x5, 0x402, 0x4, 0x10, 0x7], 0x200000, 0x180403}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, 0x0, &(0x7f0000000200)) ptrace$setregs(0xd, r5, 0x40002, &(0x7f0000000180)) ptrace$cont(0x21, r5, 0x80000001, 0x4) read$FUSE(r4, &(0x7f0000007d40)={0x2020}, 0xfffffffffffffef4) 43.724547265s ago: executing program 6 (id=490): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff010000072401"], 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x100, 0x0) r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) write$evdev(r2, &(0x7f00000014c0)=[{{0x77359400}, 0x14, 0x5, 0xb}, {{}, 0x15, 0x3b, 0xfffffff9}, {{0x77359400}, 0x1e, 0x5, 0x3}], 0x48) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=ANY=[@ANYBLOB="01000000110000000000000000000100", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYBLOB="0000000001"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="c904"]) clock_gettime(0x0, &(0x7f0000001200)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000001140)=[{{&(0x7f0000000580)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000700)=""/191, 0xbf}], 0x2, &(0x7f0000000880)=""/111, 0x6f}, 0x1ff}, {{&(0x7f0000000900)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/13, 0xd}, {&(0x7f00000009c0)=""/103, 0x67}, {&(0x7f0000000a40)=""/32, 0x20}], 0x3, &(0x7f0000000ac0)=""/173, 0xad}, 0x1}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b80)=""/14, 0xe}, {&(0x7f0000000bc0)=""/71, 0x47}, {&(0x7f0000000c40)=""/187, 0xbb}, {&(0x7f0000000d00)=""/146, 0x92}, {&(0x7f0000000dc0)=""/69, 0x45}, {&(0x7f0000000e40)=""/241, 0xf1}, {&(0x7f0000000f40)=""/21, 0x15}, {&(0x7f0000000f80)=""/26, 0x1a}], 0x8, &(0x7f0000001040)=""/227, 0xe3}, 0x10}], 0x3, 0x40000002, &(0x7f0000001240)={r8, r9+10000000}) r10 = openat(r1, 0x0, 0x401, 0x1b) recvmsg$unix(r10, &(0x7f0000001480)={&(0x7f0000001280), 0x6e, &(0x7f0000001400)=[{&(0x7f0000001380)=""/53, 0x35}, {&(0x7f00000013c0)=""/52, 0x34}], 0x2, &(0x7f0000001440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x12062) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f00000000c0)={0x1, 0x1}) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='cramfs\x00', 0x104000, &(0x7f00000002c0)='[{#:\x00') ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000480)={0x0, 0xcb, "c7b6b3536010c56cdc62f7a021fc9ed5c5a5e1e138e75c27d4389cedc3083b3d7da825957d7baccb204e495da4dc4ecfd32c19f9ee959d7a3a1235c006fff2b4e4a35cf9417a50ba3eb4f5bcf06206d418e568e5134529a3172465bdda910d17d9ecd856f664b2b773be23ec7ddef29b566a68d274b2fd09bc35fa445b798255377946c88b272bff133d4fbdfde86919836c484b342014ab3615b0d7913db83a317025aa2e5167aa2b1efd1a3eb31ec8f36cca92202cb017db286c5ef527ddeba92b09fb95aa69f2496c3a"}) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) r11 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r11, &(0x7f00000091c0)=""/16384, 0x4000) 28.658817333s ago: executing program 54 (id=490): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff010000072401"], 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x100, 0x0) r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) write$evdev(r2, &(0x7f00000014c0)=[{{0x77359400}, 0x14, 0x5, 0xb}, {{}, 0x15, 0x3b, 0xfffffff9}, {{0x77359400}, 0x1e, 0x5, 0x3}], 0x48) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=ANY=[@ANYBLOB="01000000110000000000000000000100", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYBLOB="0000000001"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="c904"]) clock_gettime(0x0, &(0x7f0000001200)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000001140)=[{{&(0x7f0000000580)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000700)=""/191, 0xbf}], 0x2, &(0x7f0000000880)=""/111, 0x6f}, 0x1ff}, {{&(0x7f0000000900)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/13, 0xd}, {&(0x7f00000009c0)=""/103, 0x67}, {&(0x7f0000000a40)=""/32, 0x20}], 0x3, &(0x7f0000000ac0)=""/173, 0xad}, 0x1}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b80)=""/14, 0xe}, {&(0x7f0000000bc0)=""/71, 0x47}, {&(0x7f0000000c40)=""/187, 0xbb}, {&(0x7f0000000d00)=""/146, 0x92}, {&(0x7f0000000dc0)=""/69, 0x45}, {&(0x7f0000000e40)=""/241, 0xf1}, {&(0x7f0000000f40)=""/21, 0x15}, {&(0x7f0000000f80)=""/26, 0x1a}], 0x8, &(0x7f0000001040)=""/227, 0xe3}, 0x10}], 0x3, 0x40000002, &(0x7f0000001240)={r8, r9+10000000}) r10 = openat(r1, 0x0, 0x401, 0x1b) recvmsg$unix(r10, &(0x7f0000001480)={&(0x7f0000001280), 0x6e, &(0x7f0000001400)=[{&(0x7f0000001380)=""/53, 0x35}, {&(0x7f00000013c0)=""/52, 0x34}], 0x2, &(0x7f0000001440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x12062) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f00000000c0)={0x1, 0x1}) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='cramfs\x00', 0x104000, &(0x7f00000002c0)='[{#:\x00') ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000480)={0x0, 0xcb, "c7b6b3536010c56cdc62f7a021fc9ed5c5a5e1e138e75c27d4389cedc3083b3d7da825957d7baccb204e495da4dc4ecfd32c19f9ee959d7a3a1235c006fff2b4e4a35cf9417a50ba3eb4f5bcf06206d418e568e5134529a3172465bdda910d17d9ecd856f664b2b773be23ec7ddef29b566a68d274b2fd09bc35fa445b798255377946c88b272bff133d4fbdfde86919836c484b342014ab3615b0d7913db83a317025aa2e5167aa2b1efd1a3eb31ec8f36cca92202cb017db286c5ef527ddeba92b09fb95aa69f2496c3a"}) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) r11 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r11, &(0x7f00000091c0)=""/16384, 0x4000) 11.004329863s ago: executing program 3 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x9, 0x8, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x4d, 0x7f, '\x00', 0x1}, {0x0, 0x20, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x6, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0x10, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xa0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x9c080, 0x0) r4 = geteuid() sendmsg$nl_xfrm(r3, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=@report={0xec, 0x20, 0x20, 0x70bd29, 0x25dfdbfd, {0x3c, {@in=@local, @in=@empty, 0x4e23, 0x63, 0x4e22, 0x7, 0xa, 0x100, 0x80, 0x2f, 0x0, r4}}, [@algo_aead={0x93, 0x12, {{'aegis128-aesni\x00'}, 0x238, 0x80, "0cd1600695bf4fea139a42900b38d4f2d906cfbab400993404957dafb8adf200ec2457d50a6c0dbde3f6cfdbd193bdf03d9888a41f13661b9e337e4b8538713bd3c00d3895a8f9"}}, @lastused={0xc}]}, 0xec}, 0x1, 0x0, 0x0, 0x8010}, 0x4004080) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1, 0x6) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000100000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff0300"/117], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) r8 = socket(0x18, 0x803, 0x9) sendto(r8, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4099, 0x1003}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/71, 0x47}, {&(0x7f00000003c0)=""/4078, 0xfee}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 8.73913408s ago: executing program 3 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x9, 0x8, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x4d, 0x7f, '\x00', 0x1}, {0x0, 0x20, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x6, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0x10, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xa0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x9c080, 0x0) r4 = geteuid() sendmsg$nl_xfrm(r3, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=@report={0xec, 0x20, 0x20, 0x70bd29, 0x25dfdbfd, {0x3c, {@in=@local, @in=@empty, 0x4e23, 0x63, 0x4e22, 0x7, 0xa, 0x100, 0x80, 0x2f, 0x0, r4}}, [@algo_aead={0x93, 0x12, {{'aegis128-aesni\x00'}, 0x238, 0x80, "0cd1600695bf4fea139a42900b38d4f2d906cfbab400993404957dafb8adf200ec2457d50a6c0dbde3f6cfdbd193bdf03d9888a41f13661b9e337e4b8538713bd3c00d3895a8f9"}}, @lastused={0xc}]}, 0xec}, 0x1, 0x0, 0x0, 0x8010}, 0x4004080) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1, 0x6) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000100000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff0300"/117], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) r8 = socket(0x18, 0x803, 0x9) sendto(r8, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4099, 0x1003}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/71, 0x47}, {&(0x7f00000003c0)=""/4078, 0xfee}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 6.81866017s ago: executing program 3 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x9, 0x8, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x4d, 0x7f, '\x00', 0x1}, {0x0, 0x20, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x6, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0x10, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xa0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x9c080, 0x0) r4 = geteuid() sendmsg$nl_xfrm(r3, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=@report={0xec, 0x20, 0x20, 0x70bd29, 0x25dfdbfd, {0x3c, {@in=@local, @in=@empty, 0x4e23, 0x63, 0x4e22, 0x7, 0xa, 0x100, 0x80, 0x2f, 0x0, r4}}, [@algo_aead={0x93, 0x12, {{'aegis128-aesni\x00'}, 0x238, 0x80, "0cd1600695bf4fea139a42900b38d4f2d906cfbab400993404957dafb8adf200ec2457d50a6c0dbde3f6cfdbd193bdf03d9888a41f13661b9e337e4b8538713bd3c00d3895a8f9"}}, @lastused={0xc}]}, 0xec}, 0x1, 0x0, 0x0, 0x8010}, 0x4004080) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1, 0x6) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000100000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff0300"/117], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) r8 = socket(0x18, 0x803, 0x9) sendto(r8, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4099, 0x1003}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/71, 0x47}, {&(0x7f00000003c0)=""/4078, 0xfee}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 4.917309949s ago: executing program 0 (id=642): time(&(0x7f0000000000)) (async) time(&(0x7f0000000040)) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[@nested_load_code={0x12e, 0x61, {0x1, "c42233f5cf26f3640f45abc83800000f78c0c403490ecaa4b8010000000f01c10f0766baf80cb87c2d1a8def66bafc0c66edb9800000c00f3235008000000f3067450f98e02e0f01c8"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xb000, 0x23d2}}, @nested_amd_vmload={0x182, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0x8a, 0x1}}, @nested_vmlaunch={0x12f, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_load_code={0x12e, 0x5c, {0x1, "0faeea450f30c3c4a17d2ee6b93a0a00000f32c7442400e645e768c74424020e000000c7442406000000000f011c24f341aa0f01cb8f092098a2020000006764410f01c4"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18}], 0x1b5}) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000002c0)=@riscv64_csr={0x803000000030000a, &(0x7f0000000280)=0x7}) (async) splice(r0, &(0x7f0000000300)=0x1, r0, &(0x7f0000000340)=0x40e, 0x9, 0x1) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) (async) time(&(0x7f0000000400)) (async) time(&(0x7f0000000440)) (async) time(&(0x7f0000000480)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000001580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001540)={&(0x7f0000000500)={0x1018, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x8800}, 0x190) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x2000, 0x1, 0x20}, 0x18) r4 = openat(r3, &(0x7f0000001640)='./file0\x00', 0x10400, 0xa1) sendmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)=@vsock={0x28, 0x0, 0x12efafb7345ef50d, @host}, 0x80, &(0x7f0000001700)}, 0x4048050) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000001780)={0x7a00000000000000, 0x60000, 0xfffffffffffffff0, 0x9, 0x1}) (async) time(&(0x7f00000017c0)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000001840)={'sit0\x00', &(0x7f0000001800)={@broadcast, 0x0, 0x0, 0x10, 0x0, [{@broadcast}]}}) (async, rerun: 64) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000001880)=0x8) (rerun: 64) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) fcntl$lock(r5, 0x14, &(0x7f0000001900)={0x2, 0x0, 0x6, 0x10001}) (async) time(&(0x7f0000001940)) (async, rerun: 32) time(&(0x7f0000001980)) (rerun: 32) shutdown(r2, 0x1) (async, rerun: 32) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000019c0)=0x0) (rerun: 32) syz_open_procfs(r6, &(0x7f0000001a00)='net/icmp6\x00') time(&(0x7f0000001a40)) (async, rerun: 32) syz_open_procfs$namespace(r6, &(0x7f0000001a80)='ns/mnt\x00') (rerun: 32) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001ac0), 0x90002, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000001b00)={0x0, 0x0, 0x7, 0xf7, r6}) 4.872450711s ago: executing program 9 (id=644): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 4.871580351s ago: executing program 0 (id=645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) (async) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x900f, 0x8000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000180)=0x80000000) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20) (async, rerun: 64) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) r5 = syz_usb_connect$uac3(0x3, 0x118, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x808, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x106, 0x3, 0x1, 0x2, 0xc0, 0x6, {0x8, 0xb, 0x0, 0x1, 0x1, 0x20, 0x30, 0xdc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x1b, 0x7be}, [@processing_unit={0x11, 0x24, 0x9, 0x3, 0x1, [0x2, 0x0, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x2, 0xd, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7, 0x3f, ';'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x4, 0x1, "0715f7ce0e4403"}, @as_header={0x17, 0x24, 0x1, 0x5, 0xe, 0xbc5, 0x0, 0x0, 0x4, 0x800, 0xf1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x9, 0xb0, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0xd, 0x7f, "e71971"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9e, 0x4, 0x7, {0xa, 0x25, 0x25, 0x2, 0x56, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x8, 0x9, "21da", "eb"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x8, 0x9, 0x2, 0x61}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x64e4, 0x3, 0x0, 0x5c}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x7, 0x5, 0x8}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x5, 0xa, '\\', '\x00'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe, 0x5, 0x0, {0xa, 0x25, 0x25, 0xa, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x6, 0x0, 0xe8, 0x8, 0x94}, 0xf1, &(0x7f0000000480)={0x5, 0xf, 0xf1, 0x6, [@generic={0xb4, 0x10, 0x2, "74e237ebe54f315cd3a49ccd55561e939036e30cd80919934a1cdc40948962a83d945fbdb277875538e3a3431323c4fd8d5429f08ee0451d5002fefc618de1a7dafe747e8c836fe3ed9302fb25235580a96b7e65018214295c47d96b2f8640692036af50bf80a5b0a12f6327fc7365ce44ec5afab7149556a0a5ac8445722f05b09bcc5ba3be6342dc7330b0567af40c407ff658e765aca6d0115d034d349bef4532c2d8335d078d1a416810a4a8765fbc"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xd, 0x0, 0x4}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x8, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x26, 0xff00, 0x0, [0xffc00f, 0xc0f0, 0xf0, 0xff0000, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0x6, 0x1}]}, 0x3, [{0x57, &(0x7f00000005c0)=ANY=[@ANYBLOB="57032e1ab842edd2d701201a02718bd8faca4af0f0c910b184e0d54d890a4bca6c39823042658c813c357702d525648d0edc5851daca4584886cb2eb4c5f7344b4e0e3d4588b43ad68f29495d0790451e8063ffdf6a81a"]}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x240a}}, {0x85, &(0x7f0000000680)=ANY=[@ANYBLOB="8503a625fd85e3680ae12c26ece8a2905329ba55a85506bcfcf23e11dff29f94fc5f19f38807f2f96cd218b87d822f59fe996f23b02461e4f7fc39f6b6234d5d30111bafb091b71fb52d4187cb534cb4ea191c90d95dcf9b24a287a95192d00134473b41ebd6e3d3588be62b2a4a02bdcf009fccfd25368f6ddd757520390ee5fb8a388a3e"]}]}) syz_usb_disconnect(r5) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async, rerun: 64) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000080)=0x5, 0x1) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r8, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02031b0030001400060065931c1000203b00fc020000000000000000000000000001fe8800"/46], 0x52) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000001c0)) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async, rerun: 32) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x80800) (async, rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r10, 0x8070ae9f, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async, rerun: 64) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000780)=0xd5) 4.866998522s ago: executing program 9 (id=646): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x80502, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) listen(r3, 0x5) r4 = accept4$tipc(r3, 0x0, &(0x7f00000000c0), 0x80000) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000140)={0x77359400}, 0x10) write(r1, &(0x7f0000000080)='4', 0x1f) 4.609484163s ago: executing program 3 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x9, 0x8, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x4d, 0x7f, '\x00', 0x1}, {0x0, 0x20, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x6, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0x10, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xa0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x9c080, 0x0) r4 = geteuid() sendmsg$nl_xfrm(r3, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=@report={0xec, 0x20, 0x20, 0x70bd29, 0x25dfdbfd, {0x3c, {@in=@local, @in=@empty, 0x4e23, 0x63, 0x4e22, 0x7, 0xa, 0x100, 0x80, 0x2f, 0x0, r4}}, [@algo_aead={0x93, 0x12, {{'aegis128-aesni\x00'}, 0x238, 0x80, "0cd1600695bf4fea139a42900b38d4f2d906cfbab400993404957dafb8adf200ec2457d50a6c0dbde3f6cfdbd193bdf03d9888a41f13661b9e337e4b8538713bd3c00d3895a8f9"}}, @lastused={0xc}]}, 0xec}, 0x1, 0x0, 0x0, 0x8010}, 0x4004080) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1, 0x6) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000100000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff0300"/117], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) r8 = socket(0x18, 0x803, 0x9) sendto(r8, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4099, 0x1003}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/71, 0x47}, {&(0x7f00000003c0)=""/4078, 0xfee}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 2.618650787s ago: executing program 0 (id=647): r0 = socket$inet6(0xa, 0x2, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x101041, 0xa4, 0xb}, 0x18) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x12}, {&(0x7f0000000180)=""/244, 0xf4}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}], 0x2, 0x20e8086) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x3}) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2.617992417s ago: executing program 7 (id=648): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0x98}}, 0x40080) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c0c2) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030028bd7000fbdbdf2544000000080003000d666b7375f06647e529b02874ef51f98a02d20677be918277d8ef17246671639f8f878f7838f796e04ad93b7b813fdc278d2526adf69ad1af1a97209d1a908717093e154daa7fd70f7b66632445de69e22b7356e5", @ANYRES32=0x0, @ANYBLOB="0a001800030303030303000008000d0000007800"], 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a74000000060a030400000000000000000a00000a0900010073797a3100000000400004803c0001800a00010071756575650000002c000280060002400fea000006000140000100000600034000010000060002"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x2000001}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x40, 0x700, 0x4, 0x1, {{0x2b, 0x4, 0x2, 0x2, 0xac, 0x67, 0x0, 0xb, 0x4, 0x0, @private=0xa010102, @broadcast, {[@cipso={0x86, 0xc, 0x3, [{0x7, 0x6, "07d92d43"}]}, @cipso={0x86, 0x51, 0x1, [{0x5, 0xb, "fcf0c8bbc33591525a"}, {0x7, 0x8, "68521acd98fb"}, {0x2, 0xb, "377ad3a36ca23a1d1a"}, {0x0, 0x11, "ea7ed2c98c971ff0b5fabd94d944ca"}, {0x6, 0x11, "7cd1b724d8417dfcd4b6a4f89ca038"}, {0x6, 0x2}, {0x7, 0x9, "4854c1c6b065c8"}]}, @generic={0x83, 0xc, "f6348e20465c9b749331"}, @timestamp={0x44, 0x2c, 0xba, 0x0, 0x7, [0x10001, 0x65, 0x7, 0x3, 0x1, 0x0, 0x3, 0x2, 0x6, 0x6]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x2f, 0x6f, 0x0, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7, 0x1, 0xfffffffb, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000b40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="04022cbd7000fbdbdf250d0000004c0001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="0e0008", @ANYRES32=r4, @ANYBLOB="08000300000000001400020077673200000000000000000000000000080003000300000054000180080003000200000008000300020000001400020076657468305f746f5f6272696467650008000300030000001400020067656e6576653100000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="8c000180140002007465616d5f736c6176655f300000000014000200697036746e6c30000000000000000000140002007465616d5f736c6176655f3100000000140002006e657464657673696d3000000000000008000100", @ANYRES32=r7, @ANYBLOB="14000200697036677265300000000000000000001400020069703665727370616e300000000000000800030003000000"], 0x140}}, 0x40891) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000180)=0x4) close_range(r0, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd536, 0x80000, 0x1000000, 0x8e, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffdfffff, 0x1000, 0xb, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x80000002, 0x305, 0x0, r3}}], 0x1, 0x0, 0x0) 2.617841977s ago: executing program 9 (id=649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x16, @dev={0xac, 0x14, 0x14, 0x35}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44008040}, 0x40008d2) 2.524532662s ago: executing program 9 (id=650): socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x29, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb697, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0x1000, 0x3, 0x8, 0xffffff83, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff9, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x6, 0x1, 0x7fff, 0xe8f, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0xfffffffe, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x3, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0xa, 0x40008, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x8, 0x463f, 0x4, 0xf, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.523647212s ago: executing program 7 (id=651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0xffaf, 0x5000, 0x0, 0xffffffffffffffff, 0xe0205399c3365dca}) 2.402344367s ago: executing program 7 (id=652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000000c0)=0xce7, 0x4) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="667558de22fe4b17e92c4dee7d910fdad9", 0x11, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) unshare(0x26020600) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x16) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000006, 0x401d032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2c, &(0x7f0000000340)={0x7, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e32, @loopback}}}, 0x108) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r5, 0x1, 0x703d2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000161000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000180)="b9aa080000b8e5920124ba000000000f30c4e239b8f1640f38ccd5a60f013266b8a6008ed0c4e245463666b856008ec8660f38817c77b7b984080000b800000000ba010000000f30", 0x48}], 0x1, 0x58, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x100}, 0x1c, 0x0}, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r12, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8804}, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.335502451s ago: executing program 0 (id=653): mmap$IORING_OFF_SQ_RING(0x0, 0x8000202, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0x4004af61, 0x0) 2.321312851s ago: executing program 3 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x9, 0x8, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x4d, 0x7f, '\x00', 0x1}, {0x0, 0x20, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x6, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0x10, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xa0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x9c080, 0x0) r4 = geteuid() sendmsg$nl_xfrm(r3, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=@report={0xec, 0x20, 0x20, 0x70bd29, 0x25dfdbfd, {0x3c, {@in=@local, @in=@empty, 0x4e23, 0x63, 0x4e22, 0x7, 0xa, 0x100, 0x80, 0x2f, 0x0, r4}}, [@algo_aead={0x93, 0x12, {{'aegis128-aesni\x00'}, 0x238, 0x80, "0cd1600695bf4fea139a42900b38d4f2d906cfbab400993404957dafb8adf200ec2457d50a6c0dbde3f6cfdbd193bdf03d9888a41f13661b9e337e4b8538713bd3c00d3895a8f9"}}, @lastused={0xc}]}, 0xec}, 0x1, 0x0, 0x0, 0x8010}, 0x4004080) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1, 0x6) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000100000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff0300"/117], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) r8 = socket(0x18, 0x803, 0x9) sendto(r8, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4099, 0x1003}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/71, 0x47}, {&(0x7f00000003c0)=""/4078, 0xfee}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 203.706861ms ago: executing program 0 (id=654): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xf0}}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) socket$igmp6(0xa, 0x3, 0x2) 201.054161ms ago: executing program 7 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='veth1_to_team\x00', 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x1, 'bridge_slave_0\x00', {}, 0x8}) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x32, &(0x7f0000006c40)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000190015000000ffffffffffff02"], 0x1c}], 0x1, 0x0, 0x0, 0x40000}, 0x0) 200.191221ms ago: executing program 9 (id=656): mmap$IORING_OFF_SQ_RING(0x0, 0x8000202, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0x4004af61, 0x0) (fail_nth: 2) 140.617344ms ago: executing program 0 (id=657): mmap$IORING_OFF_SQ_RING(0x0, 0x8000202, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0xffffffffffffffff, 0x3, 0x20404, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0x4004af61, 0x0) 140.297964ms ago: executing program 7 (id=658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0xc}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x1, 0x11, r2, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$UBLK_U_CMD_SET_PARAMS(r2, 0xc0207508, &(0x7f0000000100)={r3, 0xffff, 0x70, &(0x7f0000000080)={0x70, 0x8, {0x1, 0xc, 0xa, 0x1e, 0xff, 0xffffff81, 0xec2, 0xdf84, 0x4}, {0x7fff, 0x2, 0x0, 0x95b, 0x8}, {0xffffff00, 0x0, 0x3}, {0x90a, 0x5, 0x1c17}}}) 140.135254ms ago: executing program 7 (id=659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) close_range(r1, 0xffffffffffffffff, 0x0) 59.858977ms ago: executing program 9 (id=660): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414"], 0xfdef) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="0100000000000000000003000000580001804400040020000100"], 0x6c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$cont(0x7, r6, 0x80000001, 0x1000) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@svm={0xa, 0x1, 0x1080, {0xe6ee1ffc, 0x100}, {"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"}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000023000/0x3000)=nil, 0x3000, 0x8) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r8, 0x800454d7, &(0x7f0000000040)) ioctl$TUNSETIFF(r8, 0xc0096616, 0x0) 0s ago: executing program 3 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x9, 0x8, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x4d, 0x7f, '\x00', 0x1}, {0x0, 0x20, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x6, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0x10, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xa0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x9c080, 0x0) r4 = geteuid() sendmsg$nl_xfrm(r3, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=@report={0xec, 0x20, 0x20, 0x70bd29, 0x25dfdbfd, {0x3c, {@in=@local, @in=@empty, 0x4e23, 0x63, 0x4e22, 0x7, 0xa, 0x100, 0x80, 0x2f, 0x0, r4}}, [@algo_aead={0x93, 0x12, {{'aegis128-aesni\x00'}, 0x238, 0x80, "0cd1600695bf4fea139a42900b38d4f2d906cfbab400993404957dafb8adf200ec2457d50a6c0dbde3f6cfdbd193bdf03d9888a41f13661b9e337e4b8538713bd3c00d3895a8f9"}}, @lastused={0xc}]}, 0xec}, 0x1, 0x0, 0x0, 0x8010}, 0x4004080) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1, 0x6) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000100000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff0300"/117], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) r8 = socket(0x18, 0x803, 0x9) sendto(r8, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4099, 0x1003}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/71, 0x47}, {&(0x7f00000003c0)=""/4078, 0xfee}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.298487][ T1210] RSP: 002b:00007f993d5f6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 58.298515][ T1210] RAX: ffffffffffffffda RBX: 00007f993d5f76c0 RCX: 00007f993eb5e98e [ 58.298532][ T1210] RDX: 0000000000000002 RSI: 00007f993d5f6f90 RDI: ffffffffffffff9c [ 58.298549][ T1210] RBP: 00007f993ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 58.298564][ T1210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.298586][ T1210] R13: 00007f993ee26038 R14: 00007f993ee25fa0 R15: 00007ffcf487d5a8 [ 58.298606][ T1210] [ 58.637838][ T640] usb 7-1: device descriptor read/8, error -71 [ 58.763924][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.771800][ T1212] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.780717][ T1212] bridge_slave_0: entered allmulticast mode [ 58.787301][ T640] usb 7-1: device descriptor read/8, error -71 [ 58.788511][ T1212] bridge_slave_0: entered promiscuous mode [ 58.802295][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.810555][ T1212] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.818584][ T1212] bridge_slave_1: entered allmulticast mode [ 58.827551][ T1212] bridge_slave_1: entered promiscuous mode [ 58.838089][ T479] veth1_macvtap: left promiscuous mode [ 58.843688][ T479] veth0_vlan: left promiscuous mode [ 59.026723][ T640] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 59.053090][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.060202][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.067577][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.074628][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.084322][ T640] usb 7-1: device descriptor read/8, error -71 [ 59.092429][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.101137][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.144072][ T619] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.151292][ T619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.163535][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.170934][ T619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.183980][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 59.184005][ T36] audit: type=1400 audit(1789817674.570:853): avc: denied { search } for pid=1225 comm="syz.7.300" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.218320][ T640] usb 7-1: device descriptor read/8, error -71 [ 59.244893][ T1212] veth0_vlan: entered promiscuous mode [ 59.277427][ T1212] veth1_macvtap: entered promiscuous mode [ 59.336960][ T640] usb usb7-port1: unable to enumerate USB device [ 59.506759][ T1236] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2822905896 (361331954688 ns) > initial count (78097839872 ns). Using initial count to start timer. [ 59.581549][ T1239] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 59.593341][ T36] audit: type=1400 audit(1789817674.980:854): avc: denied { relabelto } for pid=1238 comm="syz.8.307" name="1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 59.635112][ T36] audit: type=1400 audit(1789817674.980:855): avc: denied { associate } for pid=1238 comm="syz.8.307" name="1" dev="tmpfs" ino=18 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 59.663535][ T36] audit: type=1400 audit(1789817675.020:856): avc: denied { write } for pid=1212 comm="syz-executor" name="1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 59.700518][ T36] audit: type=1400 audit(1789817675.020:857): avc: denied { remove_name } for pid=1212 comm="syz-executor" name="binderfs" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 59.732736][ T36] audit: type=1400 audit(1789817675.020:858): avc: denied { rmdir } for pid=1212 comm="syz-executor" name="1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 59.774042][ T13] bridge_slave_1: left allmulticast mode [ 59.786242][ T13] bridge_slave_1: left promiscuous mode [ 59.794063][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.804805][ T13] bridge_slave_0: left allmulticast mode [ 59.812469][ T13] bridge_slave_0: left promiscuous mode [ 59.818434][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.936345][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 59.984603][ T13] veth1_macvtap: left promiscuous mode [ 59.992046][ T13] veth0_vlan: left promiscuous mode [ 60.096249][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 60.114090][ T31] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 60.123129][ T31] usb 9-1: config 0 has no interface number 0 [ 60.133287][ T31] usb 9-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 60.159211][ T31] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 60.171074][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.190281][ T31] usb 9-1: Product: syz [ 60.207780][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.214864][ T1243] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.216253][ T31] usb 9-1: Manufacturer: syz [ 60.222174][ T1243] bridge_slave_0: entered allmulticast mode [ 60.233874][ T1243] bridge_slave_0: entered promiscuous mode [ 60.243011][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.250108][ T36] audit: type=1400 audit(1789817675.620:859): avc: denied { unmount } for pid=422 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.250869][ T1243] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.276212][ T31] usb 9-1: SerialNumber: syz [ 60.280201][ T1243] bridge_slave_1: entered allmulticast mode [ 60.291550][ T1243] bridge_slave_1: entered promiscuous mode [ 60.321021][ T31] usb 9-1: config 0 descriptor?? [ 60.337639][ T31] smsc95xx v2.0.0 [ 60.343813][ T31] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 60.365087][ T31] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 60.457726][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.464937][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.472747][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.480033][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.551382][ T9] usb 9-1: USB disconnect, device number 2 [ 60.579186][ T13] bridge_slave_1: left allmulticast mode [ 60.595796][ T13] bridge_slave_1: left promiscuous mode [ 60.606046][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.615702][ T13] bridge_slave_0: left allmulticast mode [ 60.621752][ T13] bridge_slave_0: left promiscuous mode [ 60.627984][ T1265] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.628093][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.776343][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.784234][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.799416][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.806585][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.834591][ T391] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.841859][ T391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.864150][ T13] veth1_macvtap: left promiscuous mode [ 60.870367][ T13] veth0_vlan: left promiscuous mode [ 60.985639][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.996049][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.003985][ T1267] bridge_slave_0: entered allmulticast mode [ 61.011264][ T1267] bridge_slave_0: entered promiscuous mode [ 61.018512][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.027057][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.034758][ T1267] bridge_slave_1: entered allmulticast mode [ 61.041564][ T1267] bridge_slave_1: entered promiscuous mode [ 61.207369][ T1243] veth0_vlan: entered promiscuous mode [ 61.275492][ T1243] veth1_macvtap: entered promiscuous mode [ 61.281893][ T36] audit: type=1400 audit(1789817676.660:860): avc: denied { listen } for pid=1282 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.318098][ T36] audit: type=1400 audit(1789817676.670:861): avc: denied { write } for pid=1282 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.408335][ T1294] overlayfs: missing 'workdir' [ 61.418884][ T36] audit: type=1400 audit(1789817676.810:862): avc: denied { mount } for pid=1243 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.446527][ T619] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.453699][ T619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.470491][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.477785][ T619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.554366][ T1267] veth0_vlan: entered promiscuous mode [ 61.592744][ T1267] veth1_macvtap: entered promiscuous mode [ 62.949051][ T1349] FAULT_INJECTION: forcing a failure. [ 62.949051][ T1349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.962545][ T1349] CPU: 0 UID: 0 PID: 1349 Comm: syz.9.338 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 62.962586][ T1349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.962602][ T1349] Call Trace: [ 62.962611][ T1349] [ 62.962622][ T1349] __dump_stack+0x21/0x30 [ 62.962659][ T1349] dump_stack_lvl+0x140/0x1c0 [ 62.962700][ T1349] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.962731][ T1349] ? check_stack_object+0x138/0x150 [ 62.962757][ T1349] dump_stack+0x19/0x20 [ 62.962786][ T1349] should_fail_ex+0x3c2/0x510 [ 62.962813][ T1349] should_fail+0xf/0x20 [ 62.962838][ T1349] should_fail_usercopy+0x1e/0x30 [ 62.962857][ T1349] _copy_to_user+0x24/0xa0 [ 62.962876][ T1349] simple_read_from_buffer+0xed/0x160 [ 62.962896][ T1349] proc_fail_nth_read+0x1aa/0x220 [ 62.962915][ T1349] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 62.962934][ T1349] ? bpf_lsm_file_permission+0xd/0x20 [ 62.962952][ T1349] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 62.962970][ T1349] vfs_read+0x288/0xc70 [ 62.962984][ T1349] ? rb_commit+0x753/0x7b0 [ 62.963000][ T1349] ? __cfi_vfs_read+0x10/0x10 [ 62.963014][ T1349] ? __kasan_check_write+0x18/0x20 [ 62.963029][ T1349] ? mutex_lock+0x97/0x1d0 [ 62.963045][ T1349] ? __cfi_mutex_lock+0x10/0x10 [ 62.963061][ T1349] ksys_read+0x145/0x260 [ 62.963076][ T1349] ? __cfi_ksys_read+0x10/0x10 [ 62.963090][ T1349] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 62.963111][ T1349] __x64_sys_read+0x7f/0x90 [ 62.963125][ T1349] x64_sys_call+0x2638/0x2ee0 [ 62.963138][ T1349] do_syscall_64+0x57/0xf0 [ 62.963151][ T1349] ? clear_bhb_loop+0x50/0xa0 [ 62.963168][ T1349] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.963185][ T1349] RIP: 0033:0x7f8fcbd5e98e [ 62.963201][ T1349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 62.963214][ T1349] RSP: 002b:00007f8fccce2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.963233][ T1349] RAX: ffffffffffffffda RBX: 00007f8fccce36c0 RCX: 00007f8fcbd5e98e [ 62.963244][ T1349] RDX: 000000000000000f RSI: 00007f8fccce30a0 RDI: 0000000000000005 [ 62.963254][ T1349] RBP: 00007f8fccce3090 R08: 0000000000000000 R09: 0000000000000000 [ 62.963264][ T1349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.963273][ T1349] R13: 00007f8fcc026128 R14: 00007f8fcc026090 R15: 00007fff1303f998 [ 62.963286][ T1349] [ 63.210678][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 63.346493][ T9] usb 5-1: device descriptor read/64, error -71 [ 63.570437][ T63] wiimote 0005:057E:0330.0008: item fetching failed at offset 3/4 [ 63.583315][ T63] wiimote 0005:057E:0330.0008: HID parse failed [ 63.589928][ T63] wiimote 0005:057E:0330.0008: probe with driver wiimote failed with error -22 [ 63.606493][ T9] usb 5-1: device descriptor read/64, error -71 [ 63.858941][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 63.996230][ T9] usb 5-1: device descriptor read/64, error -71 [ 64.246273][ T9] usb 5-1: device descriptor read/64, error -71 [ 64.301674][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 64.301697][ T36] audit: type=1400 audit(1789817679.690:871): avc: denied { write } for pid=1398 comm="syz.8.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.366628][ T9] usb usb5-port1: attempt power cycle [ 64.416112][ T36] audit: type=1400 audit(1789817679.800:872): avc: denied { create } for pid=1430 comm="syz.8.353" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.438700][ T36] audit: type=1400 audit(1789817679.810:873): avc: denied { write } for pid=1430 comm="syz.8.353" name="file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.440206][ T1431] netlink: 12 bytes leftover after parsing attributes in process `syz.8.353'. [ 64.461759][ T36] audit: type=1400 audit(1789817679.810:874): avc: denied { open } for pid=1430 comm="syz.8.353" path="/18/file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.495454][ T36] audit: type=1400 audit(1789817679.820:875): avc: denied { cmd } for pid=1430 comm="syz.8.353" path="/18/file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 64.649649][ T1440] FAULT_INJECTION: forcing a failure. [ 64.649649][ T1440] name failslab, interval 1, probability 0, space 0, times 0 [ 64.663770][ T1440] CPU: 0 UID: 0 PID: 1440 Comm: syz.8.356 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 64.663812][ T1440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.663827][ T1440] Call Trace: [ 64.663837][ T1440] [ 64.663848][ T1440] __dump_stack+0x21/0x30 [ 64.663887][ T1440] dump_stack_lvl+0x140/0x1c0 [ 64.663918][ T1440] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.663949][ T1440] ? kstrdup_const+0x45/0x60 [ 64.663971][ T1440] ? trace_event_raw_event_kmalloc+0xac/0xf0 [ 64.664005][ T1440] dump_stack+0x19/0x20 [ 64.664036][ T1440] should_fail_ex+0x3c2/0x510 [ 64.664064][ T1440] should_failslab+0xac/0x100 [ 64.664093][ T1440] kmem_cache_alloc_noprof+0x42/0x410 [ 64.664118][ T1440] ? __kernfs_new_node+0xf1/0x740 [ 64.664148][ T1440] __kernfs_new_node+0xf1/0x740 [ 64.664177][ T1440] ? down_write+0xee/0x2b0 [ 64.664207][ T1440] ? kernfs_new_node+0x280/0x280 [ 64.664237][ T1440] ? __kasan_check_write+0x18/0x20 [ 64.664260][ T1440] ? down_write+0xee/0x2b0 [ 64.664291][ T1440] ? __cfi_down_write+0x10/0x10 [ 64.664320][ T1440] ? __kasan_check_write+0x18/0x20 [ 64.664345][ T1440] kernfs_new_node+0x154/0x280 [ 64.664375][ T1440] __kernfs_create_file+0x52/0x280 [ 64.664421][ T1440] cgroup_addrm_files+0x775/0xac0 [ 64.664458][ T1440] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 64.664498][ T1440] ? __kasan_check_write+0x18/0x20 [ 64.664523][ T1440] ? _raw_spin_lock_irq+0x93/0x120 [ 64.664555][ T1440] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 64.664579][ T1440] css_populate_dir+0x2be/0x3d0 [ 64.664606][ T1440] cgroup_mkdir+0x124d/0x1600 [ 64.664639][ T1440] ? __cfi_cgroup_mkdir+0x10/0x10 [ 64.664667][ T1440] kernfs_iop_mkdir+0x1be/0x2d0 [ 64.664699][ T1440] vfs_mkdir+0x591/0x810 [ 64.664742][ T1440] do_mkdirat+0x240/0x530 [ 64.664776][ T1440] ? __cfi_do_mkdirat+0x10/0x10 [ 64.664808][ T1440] ? __kasan_check_write+0x18/0x20 [ 64.664833][ T1440] ? getname_flags+0x203/0x6b0 [ 64.664858][ T1440] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 64.664893][ T1440] __x64_sys_mkdirat+0x8b/0xa0 [ 64.664924][ T1440] x64_sys_call+0x2ba8/0x2ee0 [ 64.664948][ T1440] do_syscall_64+0x57/0xf0 [ 64.664971][ T1440] ? clear_bhb_loop+0x50/0xa0 [ 64.665001][ T1440] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.665028][ T1440] RIP: 0033:0x7f2c1dd9e159 [ 64.665049][ T1440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.665071][ T1440] RSP: 002b:00007f2c1ed18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 64.665100][ T1440] RAX: ffffffffffffffda RBX: 00007f2c1e025fa0 RCX: 00007f2c1dd9e159 [ 64.665119][ T1440] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 64.665138][ T1440] RBP: 00007f2c1de3506b R08: 0000000000000000 R09: 0000000000000000 [ 64.665154][ T1440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.665171][ T1440] R13: 00007f2c1e026038 R14: 00007f2c1e025fa0 R15: 00007ffc8d173408 [ 64.665192][ T1440] [ 64.665318][ T1440] cgroup: cgroup_addrm_files: failed to add cgroup.stat.local, err=-12 [ 64.984349][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 65.015679][ T9] usb 5-1: device descriptor read/8, error -71 [ 65.147578][ T9] usb 5-1: device descriptor read/8, error -71 [ 65.256350][ T36] audit: type=1400 audit(1789817680.640:876): avc: denied { getattr } for pid=1458 comm="syz.9.365" path="cgroup:[4026532366]" dev="nsfs" ino=4026532366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.313340][ T497] wiimote 0005:057E:0330.0009: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 65.336439][ T497] wiimote 0005:057E:0330.0009: New device registered [ 65.406344][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 65.427579][ T9] usb 5-1: device descriptor read/8, error -71 [ 65.559322][ T9] usb 5-1: device descriptor read/8, error -71 [ 65.629087][ T36] audit: type=1400 audit(1789817681.020:877): avc: denied { ioctl } for pid=1478 comm="syz.8.372" path="socket:[20221]" dev="sockfs" ino=20221 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.629288][ T1479] vcan0: entered allmulticast mode [ 65.676599][ T9] usb usb5-port1: unable to enumerate USB device [ 66.129378][ T1463] wiimote 0005:057E:0330.0009: Device removed [ 66.266381][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 66.269525][ T1490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=1490 comm=syz.8.378 [ 66.427902][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 66.440319][ T497] wiimote 0005:057E:0330.0009: detected device: Nintendo Wii Remote Plus (Gen 2) [ 66.453421][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 66.464812][ T476] bridge_slave_1: left allmulticast mode [ 66.467222][ T497] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0009/input/input15 [ 66.480980][ T476] bridge_slave_1: left promiscuous mode [ 66.499516][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.502123][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 66.517183][ T1498] netlink: 'syz.8.383': attribute type 3 has an invalid length. [ 66.518168][ T497] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0009/input/input16 [ 66.537410][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.544494][ T476] bridge_slave_0: left allmulticast mode [ 66.545804][ T31] usb 5-1: Product: syz [ 66.555908][ T31] usb 5-1: Manufacturer: syz [ 66.562703][ T497] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0009/input/input14 [ 66.570992][ T476] bridge_slave_0: left promiscuous mode [ 66.577081][ T31] usb 5-1: SerialNumber: syz [ 66.591494][ T31] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 66.596924][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.753716][ T476] veth1_macvtap: left promiscuous mode [ 66.761864][ T476] ÿÿÿÿÿÿ: left promiscuous mode [ 66.890233][ T31] usb 5-1: USB disconnect, device number 6 [ 66.944196][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.952057][ T1500] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.960437][ T1500] bridge_slave_0: entered allmulticast mode [ 66.967875][ T1500] bridge_slave_0: entered promiscuous mode [ 66.977693][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.984963][ T1500] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.992868][ T1500] bridge_slave_1: entered allmulticast mode [ 67.000892][ T1500] bridge_slave_1: entered promiscuous mode [ 67.125747][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.132990][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.140480][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.148053][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.195273][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.204975][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.229395][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.236564][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.245843][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.252977][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.299786][ T1500] veth0_vlan: entered promiscuous mode [ 67.321526][ T1500] veth1_macvtap: entered promiscuous mode [ 67.388738][ T1510] FAULT_INJECTION: forcing a failure. [ 67.388738][ T1510] name failslab, interval 1, probability 0, space 0, times 0 [ 67.402166][ T1510] CPU: 0 UID: 0 PID: 1510 Comm: syz.1.381 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 67.402211][ T1510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.402227][ T1510] Call Trace: [ 67.402237][ T1510] [ 67.402248][ T1510] __dump_stack+0x21/0x30 [ 67.402287][ T1510] dump_stack_lvl+0x140/0x1c0 [ 67.402324][ T1510] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.402358][ T1510] dump_stack+0x19/0x20 [ 67.402386][ T1510] should_fail_ex+0x3c2/0x510 [ 67.402420][ T1510] should_failslab+0xac/0x100 [ 67.402451][ T1510] __kmalloc_cache_noprof+0x41/0x470 [ 67.402477][ T1510] ? alloc_super+0x67/0x950 [ 67.402507][ T1510] ? _raw_spin_lock+0x92/0x120 [ 67.402535][ T1510] alloc_super+0x67/0x950 [ 67.402577][ T1510] ? kernfs_test_super+0xb0/0x100 [ 67.402606][ T1510] ? __cfi_kernfs_test_super+0x10/0x10 [ 67.402638][ T1510] sget_fc+0x325/0xa70 [ 67.402670][ T1510] ? __cfi_kernfs_set_super+0x10/0x10 [ 67.402700][ T1510] kernfs_get_tree+0x1ff/0x9a0 [ 67.402727][ T1510] ? __kasan_check_write+0x18/0x20 [ 67.402751][ T1510] ? __cfi_kernfs_get_tree+0x10/0x10 [ 67.402778][ T1510] ? selinux_capable+0x38/0x50 [ 67.402809][ T1510] ? bpf_lsm_capable+0xd/0x20 [ 67.402842][ T1510] ? security_capable+0x44/0x130 [ 67.402869][ T1510] sysfs_get_tree+0x44/0x110 [ 67.402896][ T1510] vfs_get_tree+0xa1/0x290 [ 67.402921][ T1510] do_new_mount+0x251/0xb40 [ 67.402944][ T1510] ? security_capable+0x44/0x130 [ 67.402971][ T1510] path_mount+0x66a/0xff0 [ 67.402995][ T1510] ? putname+0x113/0x150 [ 67.403023][ T1510] __se_sys_mount+0x2bf/0x480 [ 67.403046][ T1510] ? __x64_sys_mount+0xf0/0xf0 [ 67.403069][ T1510] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 67.403102][ T1510] __x64_sys_mount+0xc3/0xf0 [ 67.403124][ T1510] x64_sys_call+0x2021/0x2ee0 [ 67.403143][ T1510] do_syscall_64+0x57/0xf0 [ 67.403163][ T1510] ? clear_bhb_loop+0x50/0xa0 [ 67.403189][ T1510] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.403218][ T1510] RIP: 0033:0x7f7ddd99e159 [ 67.403242][ T1510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.403266][ T1510] RSP: 002b:00007f7dde8b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.403298][ T1510] RAX: ffffffffffffffda RBX: 00007f7dddc25fa0 RCX: 00007f7ddd99e159 [ 67.403321][ T1510] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 67.403339][ T1510] RBP: 00007f7ddda3506b R08: 0000000000000000 R09: 0000000000000000 [ 67.403357][ T1510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.403374][ T1510] R13: 00007f7dddc26038 R14: 00007f7dddc25fa0 R15: 00007ffc6ee72288 [ 67.403395][ T1510] [ 67.775162][ T9] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 67.783492][ T9] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 67.791843][ T9] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 67.799523][ T9] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 67.807302][ T9] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 67.815139][ T9] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 67.822887][ T9] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 67.830580][ T9] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 67.839099][ T9] hid-generic 0000:0000:0001.000A: hidraw1: HID v0.10 Device [syz0] on syz1 [ 67.879873][ T1517] fido_id[1517]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.991839][ T1420] bridge_slave_1: left allmulticast mode [ 68.000540][ T1420] bridge_slave_1: left promiscuous mode [ 68.018215][ T1420] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.027047][ T1420] bridge_slave_0: left allmulticast mode [ 68.033090][ T1420] bridge_slave_0: left promiscuous mode [ 68.040769][ T1420] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.244941][ T1420] veth1_macvtap: left promiscuous mode [ 68.250759][ T1420] veth0_vlan: left promiscuous mode [ 68.356428][ T31] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 68.397723][ T1537] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.405778][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.413856][ T1537] bridge_slave_0: entered allmulticast mode [ 68.420965][ T1537] bridge_slave_0: entered promiscuous mode [ 68.428961][ T1537] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.436696][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.444093][ T1537] bridge_slave_1: entered allmulticast mode [ 68.451539][ T1537] bridge_slave_1: entered promiscuous mode [ 68.506256][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 68.521960][ T36] audit: type=1400 audit(1789817683.910:878): avc: denied { execute } for pid=1543 comm="syz.1.396" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.544114][ T1544] process 'syz.1.396' launched '/dev/fd/4' with NULL argv: empty string added [ 68.550367][ T1537] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.557540][ T36] audit: type=1400 audit(1789817683.940:879): avc: denied { execute_no_trans } for pid=1543 comm="syz.1.396" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.560248][ T1537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.597380][ T1537] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.604423][ T1537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.612599][ T31] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 68.621255][ T31] usb 9-1: config 0 has no interface number 0 [ 68.628197][ T31] usb 9-1: config 0 interface 184 has no altsetting 0 [ 68.647141][ T31] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 68.658208][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.666882][ T31] usb 9-1: Product: syz [ 68.671530][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.679624][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.686993][ T31] usb 9-1: Manufacturer: syz [ 68.695349][ T31] usb 9-1: SerialNumber: syz [ 68.706629][ T31] usb 9-1: config 0 descriptor?? [ 68.714815][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.722295][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.731724][ T31] smsc75xx v1.0.0 [ 68.733608][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.742802][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.804476][ T1537] veth0_vlan: entered promiscuous mode [ 68.835145][ T1537] veth1_macvtap: entered promiscuous mode [ 69.156346][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 69.326972][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 69.333863][ T9] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 69.342915][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.353672][ T9] usb 3-1: config 1 has no interface number 0 [ 69.360564][ T9] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.375252][ T9] usb 3-1: config 1 interface 105 has no altsetting 0 [ 69.388222][ T9] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 69.398856][ T9] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 69.407142][ T9] usb 3-1: Product: syz [ 69.411413][ T9] usb 3-1: Manufacturer: syz [ 69.416292][ T9] usb 3-1: SerialNumber: syz [ 69.455921][ T31] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 69.467804][ T31] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 69.628433][ T9] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 69.834280][ T640] usb 3-1: USB disconnect, device number 5 [ 69.840683][ T476] bridge_slave_1: left allmulticast mode [ 69.852493][ T476] bridge_slave_1: left promiscuous mode [ 69.858388][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.866711][ T476] bridge_slave_0: left allmulticast mode [ 69.872393][ T476] bridge_slave_0: left promiscuous mode [ 69.879072][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.022275][ T476] veth1_macvtap: left promiscuous mode [ 70.028522][ T476] veth0_vlan: left promiscuous mode [ 70.182821][ T1557] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.190534][ T1557] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.198256][ T1557] bridge_slave_0: entered allmulticast mode [ 70.205059][ T1557] bridge_slave_0: entered promiscuous mode [ 70.213033][ T1557] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.220919][ T1557] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.228369][ T1557] bridge_slave_1: entered allmulticast mode [ 70.235212][ T1557] bridge_slave_1: entered promiscuous mode [ 70.324109][ T1557] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.331257][ T1557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.338719][ T1557] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.345872][ T1557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.368297][ T1420] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.376261][ T1420] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.434428][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.442046][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.457569][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.464946][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.509334][ T1557] veth0_vlan: entered promiscuous mode [ 70.527698][ T1557] veth1_macvtap: entered promiscuous mode [ 70.636633][ T640] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 70.687234][ T36] audit: type=1400 audit(1789817686.080:880): avc: denied { set_context_mgr } for pid=1567 comm="syz.5.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 70.706932][ T1568] rust_binder: Write failure EINVAL in pid:4 [ 70.747284][ T36] audit: type=1400 audit(1789817686.140:881): avc: denied { setopt } for pid=1567 comm="syz.5.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.773424][ T640] usb 3-1: device descriptor read/64, error -71 [ 70.816106][ T36] audit: type=1400 audit(1789817686.200:882): avc: denied { bind } for pid=1567 comm="syz.5.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.036518][ T640] usb 3-1: device descriptor read/64, error -71 [ 71.121495][ T31] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 71.133641][ T31] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 71.144281][ T31] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 71.155287][ T31] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 71.167312][ T31] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 71.188378][ T31] usb 9-1: USB disconnect, device number 3 [ 71.201726][ T1576] FAULT_INJECTION: forcing a failure. [ 71.201726][ T1576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.206340][ T63] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 71.215379][ T1576] CPU: 0 UID: 0 PID: 1576 Comm: syz.8.406 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 71.215414][ T1576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.215432][ T1576] Call Trace: [ 71.215441][ T1576] [ 71.215452][ T1576] __dump_stack+0x21/0x30 [ 71.215488][ T1576] dump_stack_lvl+0x140/0x1c0 [ 71.215518][ T1576] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.215549][ T1576] ? check_stack_object+0x10f/0x150 [ 71.215575][ T1576] dump_stack+0x19/0x20 [ 71.215603][ T1576] should_fail_ex+0x3c2/0x510 [ 71.215638][ T1576] should_fail+0xf/0x20 [ 71.215662][ T1576] should_fail_usercopy+0x1e/0x30 [ 71.215689][ T1576] _copy_from_user+0x20/0xa0 [ 71.215717][ T1576] __se_sys_landlock_create_ruleset+0x308/0x4b0 [ 71.215746][ T1576] ? __x64_sys_landlock_create_ruleset+0xa0/0xa0 [ 71.215773][ T1576] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 71.215806][ T1576] __x64_sys_landlock_create_ruleset+0x7f/0xa0 [ 71.215834][ T1576] x64_sys_call+0x2848/0x2ee0 [ 71.215855][ T1576] do_syscall_64+0x57/0xf0 [ 71.215877][ T1576] ? clear_bhb_loop+0x50/0xa0 [ 71.215903][ T1576] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.215928][ T1576] RIP: 0033:0x7f2c1dd9e159 [ 71.215948][ T1576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.215966][ T1576] RSP: 002b:00007f2c1ed18028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 71.215995][ T1576] RAX: ffffffffffffffda RBX: 00007f2c1e025fa0 RCX: 00007f2c1dd9e159 [ 71.216012][ T1576] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000200000000080 [ 71.216028][ T1576] RBP: 00007f2c1de3506b R08: 0000000000000000 R09: 0000000000000000 [ 71.216044][ T1576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.216058][ T1576] R13: 00007f2c1e026038 R14: 00007f2c1e025fa0 R15: 00007ffc8d173408 [ 71.216076][ T1576] [ 71.316242][ T640] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 71.477152][ T63] usb 6-1: Using ep0 maxpacket: 16 [ 71.494219][ T63] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 71.502919][ T63] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.514668][ T63] usb 6-1: config 0 has no interface number 0 [ 71.521149][ T63] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 71.531409][ T63] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 71.542339][ T63] usb 6-1: config 0 interface 98 has no altsetting 0 [ 71.553749][ T63] usb 6-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 71.565423][ T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.566322][ T640] usb 3-1: device descriptor read/64, error -71 [ 71.574304][ T63] usb 6-1: Product: syz [ 71.584812][ T63] usb 6-1: Manufacturer: syz [ 71.589692][ T63] usb 6-1: SerialNumber: syz [ 71.601365][ T63] usb 6-1: config 0 descriptor?? [ 71.607261][ T1573] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 71.616442][ T1573] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 71.826335][ T640] usb 3-1: device descriptor read/64, error -71 [ 71.833559][ T1573] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 71.841458][ T1573] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 71.936577][ T640] usb usb3-port1: attempt power cycle [ 72.054875][ T1573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.066041][ T1573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.281377][ T63] asix 6-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 72.296267][ T640] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 72.304459][ T63] asix 6-1:0.98: probe with driver asix failed with error -71 [ 72.317080][ T63] usb 6-1: USB disconnect, device number 4 [ 72.327660][ T640] usb 3-1: device descriptor read/8, error -71 [ 72.457963][ T640] usb 3-1: device descriptor read/8, error -71 [ 72.611551][ T1421] bridge_slave_1: left allmulticast mode [ 72.617435][ T1421] bridge_slave_1: left promiscuous mode [ 72.623396][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.633938][ T1421] bridge_slave_0: left allmulticast mode [ 72.640337][ T1421] bridge_slave_0: left promiscuous mode [ 72.646963][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.706304][ T640] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 72.727645][ T640] usb 3-1: device descriptor read/8, error -71 [ 72.811790][ T1421] veth1_macvtap: left promiscuous mode [ 72.824655][ T1421] veth0_vlan: left promiscuous mode [ 72.858511][ T640] usb 3-1: device descriptor read/8, error -71 [ 72.924702][ T1421] vcan0 (unregistering): left allmulticast mode [ 72.981079][ T640] usb usb3-port1: unable to enumerate USB device [ 73.044496][ T1586] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.051680][ T1586] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.059586][ T1586] bridge_slave_0: entered allmulticast mode [ 73.066735][ T1586] bridge_slave_0: entered promiscuous mode [ 73.074460][ T1586] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.081894][ T1586] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.089592][ T1586] bridge_slave_1: entered allmulticast mode [ 73.096888][ T1586] bridge_slave_1: entered promiscuous mode [ 73.205978][ T1586] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.213152][ T1586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.220909][ T1586] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.228061][ T1586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.274101][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.282549][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.300558][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.307824][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.317476][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.324985][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.385333][ T1586] veth0_vlan: entered promiscuous mode [ 73.407650][ T1586] veth1_macvtap: entered promiscuous mode [ 73.833087][ T476] bridge_slave_1: left allmulticast mode [ 73.847346][ T476] bridge_slave_1: left promiscuous mode [ 73.853298][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.880061][ T476] bridge_slave_0: left allmulticast mode [ 73.896200][ T476] bridge_slave_0: left promiscuous mode [ 73.902028][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.107410][ T476] veth1_macvtap: left promiscuous mode [ 74.114229][ T476] veth0_vlan: left promiscuous mode [ 74.335040][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.342821][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.351899][ T1614] bridge_slave_0: entered allmulticast mode [ 74.360723][ T1614] bridge_slave_0: entered promiscuous mode [ 74.370705][ T1614] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.379536][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.387661][ T1614] bridge_slave_1: entered allmulticast mode [ 74.394661][ T1614] bridge_slave_1: entered promiscuous mode [ 74.445875][ T476] bridge_slave_1: left allmulticast mode [ 74.458678][ T476] bridge_slave_1: left promiscuous mode [ 74.471340][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.491536][ T476] bridge_slave_0: left allmulticast mode [ 74.503804][ T476] bridge_slave_0: left promiscuous mode [ 74.517864][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.728104][ T476] veth1_macvtap: left promiscuous mode [ 74.733732][ T476] veth0_vlan: left promiscuous mode [ 75.030356][ T1627] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.037779][ T1627] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.045520][ T1627] bridge_slave_0: entered allmulticast mode [ 75.056789][ T1627] bridge_slave_0: entered promiscuous mode [ 75.068542][ T1627] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.075815][ T1627] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.100108][ T1627] bridge_slave_1: entered allmulticast mode [ 75.111020][ T1627] bridge_slave_1: entered promiscuous mode [ 75.258748][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.265943][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.294393][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.301816][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.345364][ T36] audit: type=1400 audit(1789817690.730:883): avc: denied { remount } for pid=1645 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.371933][ T1647] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 75.507231][ T1614] veth0_vlan: entered promiscuous mode [ 75.557466][ T1614] veth1_macvtap: entered promiscuous mode [ 75.606021][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.613171][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.628388][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.635779][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.733464][ T1627] veth0_vlan: entered promiscuous mode [ 75.747755][ T36] audit: type=1400 audit(1789817691.130:884): avc: denied { append } for pid=1656 comm="syz.7.420" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.794566][ T1627] veth1_macvtap: entered promiscuous mode [ 75.808724][ T36] audit: type=1400 audit(1789817691.170:885): avc: denied { remount } for pid=1656 comm="syz.7.420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.888288][ T315] wiimote 0005:057E:0330.000B: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 75.926765][ T315] wiimote 0005:057E:0330.000B: New device registered [ 75.933870][ T1664] FAULT_INJECTION: forcing a failure. [ 75.933870][ T1664] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 75.936581][ T1666] FAULT_INJECTION: forcing a failure. [ 75.936581][ T1666] name failslab, interval 1, probability 0, space 0, times 0 [ 75.965120][ T1666] CPU: 0 UID: 0 PID: 1666 Comm: syz.0.441 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 75.965170][ T1666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.965188][ T1666] Call Trace: [ 75.965198][ T1666] [ 75.965210][ T1666] __dump_stack+0x21/0x30 [ 75.965252][ T1666] dump_stack_lvl+0x140/0x1c0 [ 75.965290][ T1666] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.965328][ T1666] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 75.965362][ T1666] dump_stack+0x19/0x20 [ 75.965397][ T1666] should_fail_ex+0x3c2/0x510 [ 75.965430][ T1666] ? security_sk_alloc+0x65/0x260 [ 75.965469][ T1666] should_failslab+0xac/0x100 [ 75.965503][ T1666] __kmalloc_noprof+0x69/0x510 [ 75.965532][ T1666] ? security_sk_alloc+0x65/0x260 [ 75.965568][ T1666] security_sk_alloc+0x65/0x260 [ 75.965606][ T1666] sk_prot_alloc+0x123/0x3a0 [ 75.965640][ T1666] sk_alloc+0x40/0x590 [ 75.965672][ T1666] __vsock_create+0x3e/0x950 [ 75.965700][ T1666] vsock_create+0x13e/0x460 [ 75.965728][ T1666] __sock_create+0x3a2/0x810 [ 75.965760][ T1666] __sys_socket+0xe1/0x1c0 [ 75.965791][ T1666] __x64_sys_socket+0x7e/0x90 [ 75.965819][ T1666] x64_sys_call+0x2608/0x2ee0 [ 75.965845][ T1666] do_syscall_64+0x57/0xf0 [ 75.965872][ T1666] ? clear_bhb_loop+0x50/0xa0 [ 75.965905][ T1666] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.965938][ T1666] RIP: 0033:0x7ff3a9f9e159 [ 75.965962][ T1666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.965990][ T1666] RSP: 002b:00007ff3aadcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 75.966025][ T1666] RAX: ffffffffffffffda RBX: 00007ff3aa225fa0 RCX: 00007ff3a9f9e159 [ 75.966050][ T1666] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 75.966083][ T1666] RBP: 00007ff3aa03506b R08: 0000000000000000 R09: 0000000000000000 [ 75.966105][ T1666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.966129][ T1666] R13: 00007ff3aa226038 R14: 00007ff3aa225fa0 R15: 00007ffddec86ae8 [ 75.966153][ T1666] [ 75.966785][ T1664] CPU: 1 UID: 0 PID: 1664 Comm: syz.6.429 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 75.966822][ T1664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.966836][ T1664] Call Trace: [ 75.966845][ T1664] [ 75.966855][ T1664] __dump_stack+0x21/0x30 [ 75.966889][ T1664] dump_stack_lvl+0x140/0x1c0 [ 75.966919][ T1664] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.966948][ T1664] ? trace_event_raw_event_sched_wakeup_template+0x1aa/0x2e0 [ 75.966973][ T1664] dump_stack+0x19/0x20 [ 75.967000][ T1664] should_fail_ex+0x3c2/0x510 [ 75.967027][ T1664] should_fail_alloc_page+0xec/0x110 [ 75.967054][ T1664] __alloc_pages_noprof+0x1c0/0x7e0 [ 75.967084][ T1664] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 75.967115][ T1664] ? __cfi_trace_clock_local+0x10/0x10 [ 75.967136][ T1664] ? __cfi_trace_clock_local+0x10/0x10 [ 75.967156][ T1664] ? kvm_sched_clock_read+0x15/0x30 [ 75.967185][ T1664] __pmd_alloc+0xb0/0x9a0 [ 75.967209][ T1664] ? __kasan_check_read+0x15/0x20 [ 75.967231][ T1664] ? __cfi___pmd_alloc+0x10/0x10 [ 75.967257][ T1664] handle_mm_fault+0xd23/0x1ba0 [ 75.967285][ T1664] ? __cfi_handle_mm_fault+0x10/0x10 [ 75.967308][ T1664] ? lock_vma_under_rcu+0x4cf/0x590 [ 75.967337][ T1664] ? trace_event_raw_event_x86_exceptions+0x19e/0x240 [ 75.967369][ T1664] do_user_addr_fault+0x951/0x1230 [ 75.967391][ T1664] exc_page_fault+0x58/0xc0 [ 75.967417][ T1664] asm_exc_page_fault+0x2b/0x30 [ 75.967443][ T1664] RIP: 0033:0x7ffb1c852c43 [ 75.967462][ T1664] Code: 10 4c 89 44 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 <48> 8b 59 38 48 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 [ 75.967481][ T1664] RSP: 002b:00007ffb1d7abfd0 EFLAGS: 00010246 [ 75.967504][ T1664] RAX: 00007ffb1c852c00 RBX: 00007ffb1cc25fa0 RCX: 0000000000000000 [ 75.967522][ T1664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.967537][ T1664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.967551][ T1664] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000000000 [ 75.967574][ T1664] R13: 00007ffb1cc26038 R14: 00007ffb1cc25fa0 R15: 00007ffde8144b48 [ 75.967593][ T1664] [ 75.967607][ T1664] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 75.985336][ T1660] wiimote 0005:057E:0330.000B: Device removed [ 75.990643][ T1663] fido_id[1663]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.442922][ T1669] FAULT_INJECTION: forcing a failure. [ 76.442922][ T1669] name failslab, interval 1, probability 0, space 0, times 0 [ 76.456001][ T1669] CPU: 0 UID: 0 PID: 1669 Comm: syz.0.442 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 76.456040][ T1669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.456055][ T1669] Call Trace: [ 76.456064][ T1669] [ 76.456075][ T1669] __dump_stack+0x21/0x30 [ 76.456112][ T1669] dump_stack_lvl+0x140/0x1c0 [ 76.456149][ T1669] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.456181][ T1669] ? __cfi_avc_has_perm+0x10/0x10 [ 76.456211][ T1669] ? _raw_spin_lock+0x92/0x120 [ 76.456233][ T1669] dump_stack+0x19/0x20 [ 76.456261][ T1669] should_fail_ex+0x3c2/0x510 [ 76.456289][ T1669] should_failslab+0xac/0x100 [ 76.456317][ T1669] __kmalloc_cache_noprof+0x41/0x470 [ 76.456343][ T1669] ? proc_thread_self_get_link+0x11a/0x290 [ 76.456378][ T1669] proc_thread_self_get_link+0x11a/0x290 [ 76.456411][ T1669] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 76.456439][ T1669] ? __cfi_proc_thread_self_get_link+0x10/0x10 [ 76.456471][ T1669] pick_link+0x670/0xe80 [ 76.456496][ T1669] step_into+0xc33/0xf10 [ 76.456520][ T1669] ? read_word_at_a_time+0x1a/0x40 [ 76.456549][ T1669] ? set_root+0x420/0x420 [ 76.456572][ T1669] ? inode_permission+0xf3/0x4c0 [ 76.456610][ T1669] link_path_walk+0x746/0xeb0 [ 76.456636][ T1669] path_openat+0x298/0x35a0 [ 76.456669][ T1669] ? rb_commit+0x753/0x7b0 [ 76.456698][ T1669] ? do_filp_open+0x440/0x440 [ 76.456730][ T1669] do_filp_open+0x1f2/0x440 [ 76.456762][ T1669] ? __cfi_do_filp_open+0x10/0x10 [ 76.456795][ T1669] ? alloc_fd+0x4c1/0x570 [ 76.456823][ T1669] do_sys_openat2+0x134/0x1d0 [ 76.456857][ T1669] ? do_sys_open+0x100/0x100 [ 76.456891][ T1669] __x64_sys_openat+0x13a/0x170 [ 76.456924][ T1669] x64_sys_call+0xe69/0x2ee0 [ 76.456948][ T1669] do_syscall_64+0x57/0xf0 [ 76.456971][ T1669] ? clear_bhb_loop+0x50/0xa0 [ 76.457001][ T1669] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.457029][ T1669] RIP: 0033:0x7ff3a9f5e98e [ 76.457050][ T1669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.457073][ T1669] RSP: 002b:00007ff3aadccf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.457104][ T1669] RAX: ffffffffffffffda RBX: 00007ff3aadcd6c0 RCX: 00007ff3a9f5e98e [ 76.457124][ T1669] RDX: 0000000000000002 RSI: 00007ff3aa034972 RDI: ffffffffffffff9c [ 76.457142][ T1669] RBP: 00007ff3aa03506b R08: 0000000000000000 R09: 0000000000000000 [ 76.457158][ T1669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.457173][ T1669] R13: 00007ff3aa226038 R14: 00007ff3aa225fa0 R15: 00007ffddec86ae8 [ 76.457194][ T1669] [ 76.996457][ T315] wiimote 0005:057E:0330.000B: detected device: Nintendo Wii Remote Plus (Gen 2) [ 77.009567][ T315] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.000B/input/input18 [ 77.084368][ T315] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.000B/input/input19 [ 77.150066][ T315] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.000B/input/input17 [ 77.567858][ T1689] netlink: 'syz.6.449': attribute type 11 has an invalid length. [ 77.577792][ T1689] netlink: 'syz.6.449': attribute type 1 has an invalid length. [ 77.587512][ T1689] netlink: 3593 bytes leftover after parsing attributes in process `syz.6.449'. [ 77.626201][ T36] audit: type=1400 audit(1789817693.010:886): avc: denied { read } for pid=1691 comm="syz.0.450" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.653474][ T36] audit: type=1400 audit(1789817693.010:887): avc: denied { open } for pid=1691 comm="syz.0.450" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.026280][ T1571] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 78.207932][ T1571] usb 7-1: unable to get BOS descriptor or descriptor too short [ 78.228869][ T1571] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 78.238314][ T1571] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.256192][ T1571] usb 7-1: Product: syz [ 78.260620][ T1571] usb 7-1: Manufacturer: syz [ 78.265246][ T1571] usb 7-1: SerialNumber: syz [ 78.792693][ T1571] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 78.800226][ T1571] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 78.826180][ T1571] usb 7-1: USB disconnect, device number 10 [ 78.857832][ T1574] udevd[1574]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.985467][ T1713] fuse: Bad value for 'user_id' [ 78.990884][ T1713] fuse: Bad value for 'user_id' [ 79.001638][ T36] audit: type=1400 audit(1789817694.390:888): avc: denied { mount } for pid=1712 comm="syz.0.458" name="/" dev="ramfs" ino=24221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.266073][ T36] audit: type=1400 audit(1789817694.650:889): avc: denied { nlmsg_write } for pid=1726 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 79.553078][ T36] audit: type=1400 audit(1789817694.940:890): avc: denied { watch watch_reads } for pid=1742 comm="syz.0.465" path="/27/file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.615460][ T36] audit: type=1400 audit(1789817694.940:891): avc: denied { append } for pid=1742 comm="syz.0.465" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.647805][ T36] audit: type=1400 audit(1789817694.980:892): avc: denied { read write } for pid=1742 comm="syz.0.465" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 79.673203][ T36] audit: type=1400 audit(1789817694.980:893): avc: denied { open } for pid=1742 comm="syz.0.465" path="/27/dev/cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 79.798032][ T1755] raw_sendmsg: syz.9.469 forgot to set AF_INET. Fix it! [ 79.849461][ T1758] FAULT_INJECTION: forcing a failure. [ 79.849461][ T1758] name failslab, interval 1, probability 0, space 0, times 0 [ 79.862564][ T1758] CPU: 1 UID: 0 PID: 1758 Comm: syz.9.470 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 79.862602][ T1758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.862620][ T1758] Call Trace: [ 79.862631][ T1758] [ 79.862642][ T1758] __dump_stack+0x21/0x30 [ 79.862679][ T1758] dump_stack_lvl+0x140/0x1c0 [ 79.862717][ T1758] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.862753][ T1758] dump_stack+0x19/0x20 [ 79.862784][ T1758] should_fail_ex+0x3c2/0x510 [ 79.862812][ T1758] should_failslab+0xac/0x100 [ 79.862844][ T1758] kmem_cache_alloc_noprof+0x42/0x410 [ 79.862870][ T1758] ? __cfi_trace_event_raw_event_ext4_journal_start_inode+0x10/0x10 [ 79.862903][ T1758] ? jbd2__journal_start+0x16d/0x860 [ 79.862931][ T1758] jbd2__journal_start+0x16d/0x860 [ 79.862962][ T1758] __ext4_journal_start_sb+0x111/0x3f0 [ 79.862995][ T1758] ext4_truncate+0x726/0xff0 [ 79.863019][ T1758] ? __cfi_ext4_truncate+0x10/0x10 [ 79.863043][ T1758] ext4_setattr+0x11a4/0x1e90 [ 79.863076][ T1758] ? __cfi_ext4_setattr+0x10/0x10 [ 79.863103][ T1758] notify_change+0xbb9/0xef0 [ 79.863128][ T1758] do_truncate+0x1b0/0x250 [ 79.863154][ T1758] ? __cfi_do_truncate+0x10/0x10 [ 79.863185][ T1758] ? __cfi_vfs_open+0x10/0x10 [ 79.863216][ T1758] ? hook_file_truncate+0x85/0xd0 [ 79.863247][ T1758] ? bpf_lsm_file_truncate+0xd/0x20 [ 79.863281][ T1758] path_openat+0x2de7/0x35a0 [ 79.863318][ T1758] ? do_filp_open+0x440/0x440 [ 79.863349][ T1758] do_filp_open+0x1f2/0x440 [ 79.863379][ T1758] ? __cfi_do_filp_open+0x10/0x10 [ 79.863415][ T1758] ? alloc_fd+0x4c1/0x570 [ 79.863443][ T1758] do_sys_openat2+0x134/0x1d0 [ 79.863479][ T1758] ? do_sys_open+0x100/0x100 [ 79.863524][ T1758] __x64_sys_openat+0x13a/0x170 [ 79.863557][ T1758] x64_sys_call+0xe69/0x2ee0 [ 79.863579][ T1758] do_syscall_64+0x57/0xf0 [ 79.863603][ T1758] ? clear_bhb_loop+0x50/0xa0 [ 79.863632][ T1758] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.863659][ T1758] RIP: 0033:0x7f8fcbd9e159 [ 79.863681][ T1758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.863702][ T1758] RSP: 002b:00007f8fccd04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.863736][ T1758] RAX: ffffffffffffffda RBX: 00007f8fcc025fa0 RCX: 00007f8fcbd9e159 [ 79.863755][ T1758] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 79.863773][ T1758] RBP: 00007f8fccd04090 R08: 0000000000000000 R09: 0000000000000000 [ 79.863790][ T1758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.863806][ T1758] R13: 00007f8fcc026038 R14: 00007f8fcc025fa0 R15: 00007fff1303f998 [ 79.863826][ T1758] [ 79.863949][ T1758] EXT4-fs error (device sda1) in ext4_setattr:5642: Out of memory [ 80.846333][ T10] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 80.998066][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.022869][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.038436][ T10] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 81.048277][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.059215][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 81.059235][ T36] audit: type=1400 audit(1789817696.450:897): avc: denied { mounton } for pid=1788 comm="syz.9.482" path="/30/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 81.060125][ T10] usb 1-1: config 0 descriptor?? [ 81.502246][ T10] hid-generic 0003:0C70:F0B6.000C: hidraw1: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 81.526020][ T1794] usb 1-1: USB disconnect, device number 6 [ 81.583270][ T1796] fido_id[1796]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 81.587450][ T1798] FAULT_INJECTION: forcing a failure. [ 81.587450][ T1798] name failslab, interval 1, probability 0, space 0, times 0 [ 81.617728][ T1798] CPU: 1 UID: 0 PID: 1798 Comm: syz.9.484 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 81.617770][ T1798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.617784][ T1798] Call Trace: [ 81.617794][ T1798] [ 81.617805][ T1798] __dump_stack+0x21/0x30 [ 81.617843][ T1798] dump_stack_lvl+0x140/0x1c0 [ 81.617873][ T1798] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.617906][ T1798] dump_stack+0x19/0x20 [ 81.617951][ T1798] should_fail_ex+0x3c2/0x510 [ 81.617980][ T1798] should_failslab+0xac/0x100 [ 81.618010][ T1798] __kmalloc_cache_noprof+0x41/0x470 [ 81.618034][ T1798] ? memtype_get_idx+0x5e/0x170 [ 81.618062][ T1798] ? __kasan_slab_free+0x6a/0x80 [ 81.618092][ T1798] memtype_get_idx+0x5e/0x170 [ 81.618118][ T1798] memtype_seq_next+0x4b/0x60 [ 81.618143][ T1798] seq_read_iter+0x91e/0xf30 [ 81.618176][ T1798] seq_read+0x368/0x490 [ 81.618206][ T1798] ? __cfi_seq_read+0x10/0x10 [ 81.618236][ T1798] ? debugfs_file_get+0x3be/0x590 [ 81.618264][ T1798] ? __cfi_debugfs_file_get+0x10/0x10 [ 81.618297][ T1798] full_proxy_read+0x128/0x1e0 [ 81.618329][ T1798] ? __cfi_full_proxy_read+0x10/0x10 [ 81.618358][ T1798] vfs_read+0x288/0xc70 [ 81.618382][ T1798] ? rb_commit+0x753/0x7b0 [ 81.618412][ T1798] ? __cfi_vfs_read+0x10/0x10 [ 81.618435][ T1798] ? __kasan_check_write+0x18/0x20 [ 81.618460][ T1798] ? mutex_lock+0x97/0x1d0 [ 81.618486][ T1798] ? __cfi_mutex_lock+0x10/0x10 [ 81.618518][ T1798] ksys_read+0x145/0x260 [ 81.618542][ T1798] ? __cfi_ksys_read+0x10/0x10 [ 81.618568][ T1798] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 81.618603][ T1798] __x64_sys_read+0x7f/0x90 [ 81.618633][ T1798] x64_sys_call+0x2638/0x2ee0 [ 81.618654][ T1798] do_syscall_64+0x57/0xf0 [ 81.618677][ T1798] ? clear_bhb_loop+0x50/0xa0 [ 81.618705][ T1798] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.618735][ T1798] RIP: 0033:0x7f8fcbd9e159 [ 81.618757][ T1798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.618779][ T1798] RSP: 002b:00007f8fccd04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.618807][ T1798] RAX: ffffffffffffffda RBX: 00007f8fcc025fa0 RCX: 00007f8fcbd9e159 [ 81.618825][ T1798] RDX: 0000000000002020 RSI: 0000200000000440 RDI: 0000000000000003 [ 81.618846][ T1798] RBP: 00007f8fccd04090 R08: 0000000000000000 R09: 0000000000000000 [ 81.618863][ T1798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.618880][ T1798] R13: 00007f8fcc026038 R14: 00007f8fcc025fa0 R15: 00007fff1303f998 [ 81.618900][ T1798] [ 81.959754][ T36] audit: type=1400 audit(1789817697.350:898): avc: denied { append } for pid=1802 comm="syz.9.486" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.058027][ T36] audit: type=1326 audit(1789817697.450:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1806 comm="syz.9.488" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fcbd9e159 code=0x0 [ 82.905051][ T1816] 9pnet_fd: p9_fd_create_tcp (1816): problem connecting socket to 127.0.0.1 [ 83.348178][ T1822] tipc: Started in network mode [ 83.353122][ T1822] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 83.361327][ T1822] tipc: Enabled bearer , priority 10 [ 83.673339][ T36] audit: type=1400 audit(1789817699.060:900): avc: denied { rmdir } for pid=1627 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.476289][ T640] tipc: Node number set to 9349802 [ 84.723587][ T36] audit: type=1400 audit(1789817700.110:901): avc: denied { setopt } for pid=1841 comm="syz.9.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.723908][ T1842] netlink: 68 bytes leftover after parsing attributes in process `syz.9.500'. [ 84.770454][ T1842] FAULT_INJECTION: forcing a failure. [ 84.770454][ T1842] name failslab, interval 1, probability 0, space 0, times 0 [ 84.786273][ T1842] CPU: 1 UID: 0 PID: 1842 Comm: syz.9.500 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 84.786334][ T1842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.786352][ T1842] Call Trace: [ 84.786362][ T1842] [ 84.786375][ T1842] __dump_stack+0x21/0x30 [ 84.786421][ T1842] dump_stack_lvl+0x140/0x1c0 [ 84.786456][ T1842] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.786490][ T1842] ? avc_has_perm_noaudit+0x289/0x360 [ 84.786533][ T1842] dump_stack+0x19/0x20 [ 84.786565][ T1842] should_fail_ex+0x3c2/0x510 [ 84.786596][ T1842] should_failslab+0xac/0x100 [ 84.786627][ T1842] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 84.786654][ T1842] ? sock_alloc_inode+0x48/0x150 [ 84.786679][ T1842] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 84.786709][ T1842] sock_alloc_inode+0x48/0x150 [ 84.786733][ T1842] ? __cfi_sock_alloc_inode+0x10/0x10 [ 84.786758][ T1842] alloc_inode+0x7a/0x270 [ 84.786788][ T1842] ? bpf_lsm_socket_create+0xd/0x20 [ 84.786814][ T1842] new_inode_pseudo+0x19/0x40 [ 84.786843][ T1842] __sock_create+0x130/0x810 [ 84.786870][ T1842] __sys_socket+0xe1/0x1c0 [ 84.786898][ T1842] __x64_sys_socket+0x7e/0x90 [ 84.786924][ T1842] x64_sys_call+0x2608/0x2ee0 [ 84.786946][ T1842] do_syscall_64+0x57/0xf0 [ 84.786967][ T1842] ? clear_bhb_loop+0x50/0xa0 [ 84.786995][ T1842] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.787020][ T1842] RIP: 0033:0x7f8fcbd9e159 [ 84.787038][ T1842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.787052][ T1842] RSP: 002b:00007f8fccd04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 84.787071][ T1842] RAX: ffffffffffffffda RBX: 00007f8fcc025fa0 RCX: 00007f8fcbd9e159 [ 84.787083][ T1842] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 84.787094][ T1842] RBP: 00007f8fcbe3506b R08: 0000000000000000 R09: 0000000000000000 [ 84.787104][ T1842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.787115][ T1842] R13: 00007f8fcc026038 R14: 00007f8fcc025fa0 R15: 00007fff1303f998 [ 84.787128][ T1842] [ 84.787321][ T1842] socket: no more sockets [ 85.019395][ T640] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 85.116227][ T36] audit: type=1400 audit(1789817700.500:902): avc: denied { mounton } for pid=1844 comm="syz.9.501" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.176246][ T640] usb 8-1: Using ep0 maxpacket: 8 [ 85.184966][ T640] usb 8-1: unable to get BOS descriptor or descriptor too short [ 85.198395][ T640] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.209894][ T640] usb 8-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.223528][ T640] usb 8-1: config 1 interface 0 has no altsetting 0 [ 85.233656][ T640] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.244007][ T640] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.252515][ T640] usb 8-1: Product: syz [ 85.257123][ T640] usb 8-1: Manufacturer: syz [ 85.261767][ T640] usb 8-1: SerialNumber: syz [ 86.726264][ T315] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 86.876278][ T315] usb 10-1: Using ep0 maxpacket: 16 [ 86.884739][ T315] usb 10-1: config 0 interface 0 has no altsetting 0 [ 86.892397][ T315] usb 10-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 86.903007][ T315] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.913316][ T315] usb 10-1: config 0 descriptor?? [ 87.333194][ T315] input: HID 258a:6a88 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:258A:6A88.000D/input/input20 [ 87.386671][ T315] itetech 0003:258A:6A88.000D: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.9-1/input0 [ 87.540862][ T1571] usb 10-1: USB disconnect, device number 2 [ 87.547810][ T640] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 87.583570][ T640] usb 8-1: USB disconnect, device number 7 [ 87.634789][ T1869] FAULT_INJECTION: forcing a failure. [ 87.634789][ T1869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.637300][ T1870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=1870 comm=syz.0.511 [ 87.653240][ T1869] CPU: 1 UID: 0 PID: 1869 Comm: syz.7.510 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 87.653275][ T1869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.653290][ T1869] Call Trace: [ 87.653297][ T1869] [ 87.653306][ T1869] __dump_stack+0x21/0x30 [ 87.653339][ T1869] dump_stack_lvl+0x140/0x1c0 [ 87.653367][ T1869] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.653394][ T1869] ? _parse_integer+0x2e/0x40 [ 87.653419][ T1869] dump_stack+0x19/0x20 [ 87.653446][ T1869] should_fail_ex+0x3c2/0x510 [ 87.653471][ T1869] should_fail+0xf/0x20 [ 87.653493][ T1869] should_fail_usercopy+0x1e/0x30 [ 87.653519][ T1869] _copy_from_user+0x20/0xa0 [ 87.653547][ T1869] get_user_ifreq+0x70/0x180 [ 87.653569][ T1869] ieee802154_sock_ioctl+0xf2/0x400 [ 87.653596][ T1869] ? __cfi_ieee802154_sock_ioctl+0x10/0x10 [ 87.653629][ T1869] sock_do_ioctl+0x115/0x330 [ 87.653651][ T1869] ? sock_show_fdinfo+0xd0/0xd0 [ 87.653673][ T1869] ? __kasan_check_read+0x15/0x20 [ 87.653695][ T1869] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 87.653720][ T1869] sock_ioctl+0x568/0x7e0 [ 87.653741][ T1869] ? __cfi_sock_ioctl+0x10/0x10 [ 87.653761][ T1869] ? __fget_files+0x2bc/0x330 [ 87.653787][ T1869] ? bpf_lsm_file_ioctl+0xd/0x20 [ 87.653813][ T1869] ? security_file_ioctl+0x3e/0x110 [ 87.653836][ T1869] ? __cfi_sock_ioctl+0x10/0x10 [ 87.653855][ T1869] __se_sys_ioctl+0x123/0x1b0 [ 87.653882][ T1869] __x64_sys_ioctl+0x7f/0xa0 [ 87.653906][ T1869] x64_sys_call+0x1878/0x2ee0 [ 87.653926][ T1869] do_syscall_64+0x57/0xf0 [ 87.653955][ T1869] ? clear_bhb_loop+0x50/0xa0 [ 87.653981][ T1869] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.654006][ T1869] RIP: 0033:0x7f8f9c59e159 [ 87.654025][ T1869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.654044][ T1869] RSP: 002b:00007f8f9d4fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.654071][ T1869] RAX: ffffffffffffffda RBX: 00007f8f9c825fa0 RCX: 00007f8f9c59e159 [ 87.654088][ T1869] RDX: 0000200000000780 RSI: 0000000000008916 RDI: 0000000000000004 [ 87.654104][ T1869] RBP: 00007f8f9d4fb090 R08: 0000000000000000 R09: 0000000000000000 [ 87.654120][ T1869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.654134][ T1869] R13: 00007f8f9c826038 R14: 00007f8f9c825fa0 R15: 00007fff262ef008 [ 87.654153][ T1869] [ 87.745244][ T1872] netlink: 'syz.7.512': attribute type 21 has an invalid length. [ 87.749608][ T1870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1870 comm=syz.0.511 [ 87.850343][ T1876] netlink: 'syz.7.513': attribute type 1 has an invalid length. [ 87.927997][ T36] audit: type=1400 audit(1789817703.310:903): avc: denied { read } for pid=1875 comm="syz.7.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.984055][ T36] audit: type=1400 audit(1789817703.370:904): avc: denied { ioctl } for pid=1875 comm="syz.7.513" path="socket:[25517]" dev="sockfs" ino=25517 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.017951][ T36] audit: type=1400 audit(1789817703.400:905): avc: denied { bind } for pid=1875 comm="syz.7.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.094665][ T36] audit: type=1400 audit(1789817703.480:906): avc: denied { bind } for pid=1878 comm="syz.9.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.778062][ T36] audit: type=1400 audit(1789817704.170:907): avc: denied { search } for pid=1888 comm="syz.7.518" name="/" dev="configfs" ino=1905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.801396][ T36] audit: type=1400 audit(1789817704.170:908): avc: denied { write } for pid=1888 comm="syz.7.518" name="c.1" dev="configfs" ino=14276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.818714][ T1889] UDC core: g1: couldn't find an available UDC or it's busy [ 88.825152][ T36] audit: type=1400 audit(1789817704.170:909): avc: denied { add_name } for pid=1888 comm="syz.7.518" name="geth.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.926816][ T36] audit: type=1400 audit(1789817704.320:910): avc: denied { map } for pid=1895 comm="syz.7.519" path="socket:[26694]" dev="sockfs" ino=26694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 88.996292][ T36] audit: type=1400 audit(1789817704.320:911): avc: denied { accept } for pid=1895 comm="syz.7.519" path="socket:[26694]" dev="sockfs" ino=26694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 89.033376][ T36] audit: type=1400 audit(1789817704.390:912): avc: denied { getopt } for pid=1898 comm="syz.7.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.944560][ T1943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=1943 comm=syz.7.537 [ 91.316286][ T1571] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 91.476252][ T1571] usb 8-1: Using ep0 maxpacket: 8 [ 91.488181][ T1571] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 91.503182][ T1571] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 91.523082][ T1571] usb 8-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 91.538486][ T1571] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.552646][ T1571] usb 8-1: config 0 descriptor?? [ 92.626394][ T640] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 92.766297][ T640] usb 10-1: device descriptor read/64, error -71 [ 93.006287][ T640] usb 10-1: device descriptor read/64, error -71 [ 93.246379][ T640] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 93.386309][ T640] usb 10-1: device descriptor read/64, error -71 [ 93.626256][ T640] usb 10-1: device descriptor read/64, error -71 [ 93.738191][ T640] usb usb10-port1: attempt power cycle [ 93.970220][ T1571] usbhid 8-1:0.0: can't add hid device: -71 [ 93.979491][ T1571] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 93.996996][ T1571] usb 8-1: USB disconnect, device number 8 [ 94.063515][ T1973] FAULT_INJECTION: forcing a failure. [ 94.063515][ T1973] name failslab, interval 1, probability 0, space 0, times 0 [ 94.078190][ T1973] CPU: 0 UID: 0 PID: 1973 Comm: syz.7.544 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 94.078232][ T1973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.078247][ T1973] Call Trace: [ 94.078257][ T1973] [ 94.078269][ T1973] __dump_stack+0x21/0x30 [ 94.078305][ T1973] dump_stack_lvl+0x140/0x1c0 [ 94.078331][ T1973] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.078350][ T1973] dump_stack+0x19/0x20 [ 94.078368][ T1973] should_fail_ex+0x3c2/0x510 [ 94.078384][ T1973] ? io_alloc_hash_table+0x52/0x160 [ 94.078399][ T1973] should_failslab+0xac/0x100 [ 94.078425][ T1973] __kmalloc_noprof+0x69/0x510 [ 94.078439][ T1973] ? io_alloc_hash_table+0x52/0x160 [ 94.078453][ T1973] ? init_hash_table+0x1ae/0x270 [ 94.078466][ T1973] io_alloc_hash_table+0x52/0x160 [ 94.078480][ T1973] io_ring_ctx_alloc+0x10b/0x1dc0 [ 94.078496][ T1973] io_uring_create+0x2e0/0x13f0 [ 94.078511][ T1973] ? __kasan_check_write+0x18/0x20 [ 94.078532][ T1973] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 94.078551][ T1973] ? __x64_sys_io_uring_setup+0x80/0x80 [ 94.078569][ T1973] ? trace_event_buffer_commit+0x256/0x8f0 [ 94.078586][ T1973] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 94.078606][ T1973] __x64_sys_io_uring_setup+0x5f/0x80 [ 94.078625][ T1973] x64_sys_call+0x22c0/0x2ee0 [ 94.078638][ T1973] do_syscall_64+0x57/0xf0 [ 94.078652][ T1973] ? clear_bhb_loop+0x50/0xa0 [ 94.078669][ T1973] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.078685][ T1973] RIP: 0033:0x7f8f9c59e159 [ 94.078699][ T1973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.078711][ T1973] RSP: 002b:00007f8f9d4faee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 94.078731][ T1973] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f8f9c59e159 [ 94.078742][ T1973] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9 [ 94.078752][ T1973] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 94.078762][ T1973] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 94.078772][ T1973] R13: 0000000000000090 R14: 00007f8f9d4fafd8 R15: 0000000000000000 [ 94.078862][ T1973] [ 94.137276][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 94.137296][ T36] audit: type=1400 audit(1789817709.530:916): avc: denied { write } for pid=1974 comm="syz.0.545" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.140910][ T640] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 94.160518][ T36] audit: type=1400 audit(1789817709.540:917): avc: denied { ioctl } for pid=1974 comm="syz.0.545" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.208003][ T640] usb 10-1: device descriptor read/8, error -71 [ 94.570353][ T640] usb 10-1: device descriptor read/8, error -71 [ 94.627260][ T1988] FAULT_INJECTION: forcing a failure. [ 94.627260][ T1988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.641286][ T1988] CPU: 0 UID: 0 PID: 1988 Comm: syz.7.549 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 94.641323][ T1988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.641333][ T1988] Call Trace: [ 94.641338][ T1988] [ 94.641344][ T1988] __dump_stack+0x21/0x30 [ 94.641369][ T1988] dump_stack_lvl+0x140/0x1c0 [ 94.641388][ T1988] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.641406][ T1988] ? _parse_integer+0x2e/0x40 [ 94.641422][ T1988] ? kstrtoull+0x13b/0x1e0 [ 94.641437][ T1988] dump_stack+0x19/0x20 [ 94.641454][ T1988] should_fail_ex+0x3c2/0x510 [ 94.641470][ T1988] should_fail+0xf/0x20 [ 94.641485][ T1988] should_fail_usercopy+0x1e/0x30 [ 94.641510][ T1988] _copy_from_user+0x20/0xa0 [ 94.641544][ T1988] ___sys_sendmsg+0x1c7/0x370 [ 94.641563][ T1988] ? __sys_sendmsg+0x260/0x260 [ 94.641582][ T1988] ? rb_commit+0x753/0x7b0 [ 94.641599][ T1988] ? __fget_files+0x2bc/0x330 [ 94.641616][ T1988] __x64_sys_sendmsg+0x1be/0x2a0 [ 94.641635][ T1988] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 94.641654][ T1988] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 94.641677][ T1988] x64_sys_call+0x2a4c/0x2ee0 [ 94.641699][ T1988] do_syscall_64+0x57/0xf0 [ 94.641723][ T1988] ? clear_bhb_loop+0x50/0xa0 [ 94.641754][ T1988] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.641782][ T1988] RIP: 0033:0x7f8f9c59e159 [ 94.641803][ T1988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.641824][ T1988] RSP: 002b:00007f8f9d4fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.641856][ T1988] RAX: ffffffffffffffda RBX: 00007f8f9c825fa0 RCX: 00007f8f9c59e159 [ 94.641876][ T1988] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 94.641893][ T1988] RBP: 00007f8f9d4fb090 R08: 0000000000000000 R09: 0000000000000000 [ 94.641911][ T1988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.641926][ T1988] R13: 00007f8f9c826038 R14: 00007f8f9c825fa0 R15: 00007fff262ef008 [ 94.641947][ T1988] [ 94.895455][ T1991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.904645][ T1991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.914554][ T36] audit: type=1400 audit(1789817710.300:918): avc: denied { bind } for pid=1989 comm="syz.7.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.916838][ T1991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.944677][ T1992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.944770][ T1991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.963012][ T1992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.996954][ T640] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 95.019297][ T640] usb 10-1: device descriptor read/8, error -71 [ 95.126304][ T503] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 95.147794][ T640] usb 10-1: device descriptor read/8, error -71 [ 95.256323][ T503] usb 8-1: device descriptor read/64, error -71 [ 95.263164][ T640] usb usb10-port1: unable to enumerate USB device [ 95.392536][ T36] audit: type=1400 audit(1789817710.780:919): avc: denied { watch_reads } for pid=1997 comm="syz.9.553" path="/62" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 95.417733][ T36] audit: type=1400 audit(1789817710.780:920): avc: denied { execute } for pid=1997 comm="syz.9.553" name="file0" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.441765][ T36] audit: type=1400 audit(1789817710.780:921): avc: denied { execute_no_trans } for pid=1997 comm="syz.9.553" path="/62/file0" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.465879][ T36] audit: type=1400 audit(1789817710.850:922): avc: denied { sqpoll } for pid=1999 comm="syz.9.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 95.528199][ T503] usb 8-1: device descriptor read/64, error -71 [ 95.776503][ T503] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 95.906882][ T503] usb 8-1: device descriptor read/64, error -71 [ 96.156352][ T503] usb 8-1: device descriptor read/64, error -71 [ 96.276425][ T503] usb usb8-port1: attempt power cycle [ 96.646345][ T503] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 96.677825][ T503] usb 8-1: device descriptor read/8, error -71 [ 96.807908][ T503] usb 8-1: device descriptor read/8, error -71 [ 97.046320][ T503] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 97.067664][ T503] usb 8-1: device descriptor read/8, error -71 [ 97.196061][ T2015] FAULT_INJECTION: forcing a failure. [ 97.196061][ T2015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.210620][ T2015] CPU: 0 UID: 0 PID: 2015 Comm: syz.0.559 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 97.210652][ T2015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.210662][ T2015] Call Trace: [ 97.210668][ T2015] [ 97.210675][ T2015] __dump_stack+0x21/0x30 [ 97.210699][ T2015] dump_stack_lvl+0x140/0x1c0 [ 97.210723][ T2015] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.210743][ T2015] ? __kasan_check_read+0x15/0x20 [ 97.210759][ T2015] ? rb_commit+0x753/0x7b0 [ 97.210775][ T2015] dump_stack+0x19/0x20 [ 97.210792][ T2015] should_fail_ex+0x3c2/0x510 [ 97.210809][ T2015] should_fail+0xf/0x20 [ 97.210824][ T2015] should_fail_usercopy+0x1e/0x30 [ 97.210842][ T2015] _copy_from_user+0x20/0xa0 [ 97.210862][ T2015] __se_sys_io_uring_setup+0x170/0x2b0 [ 97.210890][ T2015] ? __x64_sys_io_uring_setup+0x80/0x80 [ 97.210922][ T2015] ? trace_event_buffer_commit+0x256/0x8f0 [ 97.210950][ T2015] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 97.210986][ T2015] __x64_sys_io_uring_setup+0x5f/0x80 [ 97.211033][ T2015] x64_sys_call+0x22c0/0x2ee0 [ 97.211056][ T2015] do_syscall_64+0x57/0xf0 [ 97.211080][ T2015] ? clear_bhb_loop+0x50/0xa0 [ 97.211110][ T2015] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.211138][ T2015] RIP: 0033:0x7ff3a9f9e159 [ 97.211160][ T2015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.211182][ T2015] RSP: 002b:00007ff3aadccfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 97.211211][ T2015] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007ff3a9f9e159 [ 97.211231][ T2015] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 0000000000000b97 [ 97.211249][ T2015] RBP: 00007ff3aa03506b R08: 0000000000000000 R09: 0000000000000000 [ 97.211267][ T2015] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 97.211284][ T2015] R13: 0000200000000280 R14: 0000200000000200 R15: 00007ffddec86ae8 [ 97.211304][ T2015] [ 97.213510][ T503] usb 8-1: device descriptor read/8, error -71 [ 97.443513][ T2018] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 97.454902][ T36] audit: type=1400 audit(1789817712.840:923): avc: denied { relabelto } for pid=2016 comm="syz.0.560" name="47" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 97.483351][ T36] audit: type=1400 audit(1789817712.840:924): avc: denied { associate } for pid=2016 comm="syz.0.560" name="47" dev="tmpfs" ino=279 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 97.512418][ T36] audit: type=1400 audit(1789817712.840:925): avc: denied { write } for pid=2016 comm="syz.0.560" name="47" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 97.542357][ T503] usb usb8-port1: unable to enumerate USB device [ 98.449339][ T476] bridge_slave_1: left allmulticast mode [ 98.455155][ T476] bridge_slave_1: left promiscuous mode [ 98.490109][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.500436][ T476] bridge_slave_0: left allmulticast mode [ 98.508826][ T476] bridge_slave_0: left promiscuous mode [ 98.514514][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.773600][ T2047] FAULT_INJECTION: forcing a failure. [ 98.773600][ T2047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.787463][ T476] veth1_macvtap: left promiscuous mode [ 98.794101][ T476] veth0_vlan: left promiscuous mode [ 98.806248][ T2047] CPU: 0 UID: 0 PID: 2047 Comm: syz.7.568 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 98.806288][ T2047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.806305][ T2047] Call Trace: [ 98.806314][ T2047] [ 98.806325][ T2047] __dump_stack+0x21/0x30 [ 98.806365][ T2047] dump_stack_lvl+0x140/0x1c0 [ 98.806397][ T2047] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.806431][ T2047] ? __kasan_check_read+0x15/0x20 [ 98.806457][ T2047] ? rb_commit+0x753/0x7b0 [ 98.806485][ T2047] dump_stack+0x19/0x20 [ 98.806517][ T2047] should_fail_ex+0x3c2/0x510 [ 98.806558][ T2047] should_fail+0xf/0x20 [ 98.806585][ T2047] should_fail_usercopy+0x1e/0x30 [ 98.806615][ T2047] _copy_from_user+0x20/0xa0 [ 98.806650][ T2047] __se_sys_io_uring_setup+0x170/0x2b0 [ 98.806686][ T2047] ? __x64_sys_io_uring_setup+0x80/0x80 [ 98.806720][ T2047] ? trace_event_buffer_commit+0x256/0x8f0 [ 98.806750][ T2047] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 98.806788][ T2047] __x64_sys_io_uring_setup+0x5f/0x80 [ 98.806821][ T2047] x64_sys_call+0x22c0/0x2ee0 [ 98.806845][ T2047] do_syscall_64+0x57/0xf0 [ 98.806867][ T2047] ? clear_bhb_loop+0x50/0xa0 [ 98.806895][ T2047] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.806923][ T2047] RIP: 0033:0x7f8f9c59e159 [ 98.806944][ T2047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.806969][ T2047] RSP: 002b:00007f8f9d4fafb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 98.807000][ T2047] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f8f9c59e159 [ 98.807020][ T2047] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 0000000000000b97 [ 98.807038][ T2047] RBP: 00007f8f9c63506b R08: 0000000000000000 R09: 0000000000000000 [ 98.807056][ T2047] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 98.807074][ T2047] R13: 0000200000000280 R14: 00002000000000c0 R15: 00007fff262ef008 [ 98.807096][ T2047] [ 99.027111][ T1571] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 99.064504][ T2051] FAULT_INJECTION: forcing a failure. [ 99.064504][ T2051] name failslab, interval 1, probability 0, space 0, times 0 [ 99.077723][ T2051] CPU: 1 UID: 0 PID: 2051 Comm: syz.0.569 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 99.077761][ T2051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.077776][ T2051] Call Trace: [ 99.077784][ T2051] [ 99.077794][ T2051] __dump_stack+0x21/0x30 [ 99.077830][ T2051] dump_stack_lvl+0x140/0x1c0 [ 99.077861][ T2051] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.077893][ T2051] dump_stack+0x19/0x20 [ 99.077922][ T2051] should_fail_ex+0x3c2/0x510 [ 99.077960][ T2051] should_failslab+0xac/0x100 [ 99.077990][ T2051] __kmalloc_node_noprof+0x69/0x500 [ 99.078016][ T2051] ? __kvmalloc_node_noprof+0x128/0x300 [ 99.078042][ T2051] __kvmalloc_node_noprof+0x128/0x300 [ 99.078065][ T2051] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 99.078089][ T2051] ? percpu_ref_init+0x160/0x4d0 [ 99.078116][ T2051] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 99.078142][ T2051] io_ring_ctx_alloc+0x35a/0x1dc0 [ 99.078166][ T2051] io_uring_create+0x2e0/0x13f0 [ 99.078190][ T2051] ? __kasan_check_write+0x18/0x20 [ 99.078214][ T2051] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 99.078247][ T2051] ? __x64_sys_io_uring_setup+0x80/0x80 [ 99.078279][ T2051] ? trace_event_buffer_commit+0x256/0x8f0 [ 99.078307][ T2051] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 99.078342][ T2051] __x64_sys_io_uring_setup+0x5f/0x80 [ 99.078374][ T2051] x64_sys_call+0x22c0/0x2ee0 [ 99.078395][ T2051] do_syscall_64+0x57/0xf0 [ 99.078417][ T2051] ? clear_bhb_loop+0x50/0xa0 [ 99.078445][ T2051] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.078472][ T2051] RIP: 0033:0x7ff3a9f9e159 [ 99.078493][ T2051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.078514][ T2051] RSP: 002b:00007ff3aadccfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 99.078544][ T2051] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007ff3a9f9e159 [ 99.078563][ T2051] RDX: 00002000000004c0 RSI: 0000200000000000 RDI: 00000000000034a8 [ 99.078580][ T2051] RBP: 00007ff3aadcd090 R08: 0000000000000000 R09: 0000000000000101 [ 99.078598][ T2051] R10: 0000200000000140 R11: 0000000000000206 R12: 00002000000004c0 [ 99.078617][ T2051] R13: 0000200000000140 R14: 0000200000000080 R15: 00007ffddec86ae8 [ 99.078639][ T2051] [ 99.447689][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 99.447712][ T36] audit: type=1400 audit(1789817714.840:939): avc: denied { write } for pid=2054 comm="syz.0.570" name="events" dev="tracefs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.478556][ T36] audit: type=1400 audit(1789817714.870:940): avc: denied { add_name } for pid=2054 comm="syz.0.570" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.493944][ T2058] netlink: 188 bytes leftover after parsing attributes in process `syz.7.572'. [ 99.500236][ T1571] usb 10-1: Using ep0 maxpacket: 8 [ 99.514770][ T36] audit: type=1400 audit(1789817714.870:941): avc: denied { create } for pid=2054 comm="syz.0.570" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 99.536289][ T36] audit: type=1400 audit(1789817714.870:942): avc: denied { read write } for pid=2054 comm="syz.0.570" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.561206][ T1571] usb 10-1: config 3 has an invalid interface number: 193 but max is 0 [ 99.569660][ T1571] usb 10-1: config 3 has no interface number 0 [ 99.576275][ T1571] usb 10-1: config 3 interface 193 altsetting 3 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 99.587652][ T1571] usb 10-1: config 3 interface 193 has no altsetting 0 [ 99.596978][ T36] audit: type=1400 audit(1789817714.870:943): avc: denied { open } for pid=2054 comm="syz.0.570" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.623870][ T36] audit: type=1400 audit(1789817714.870:944): avc: denied { ioctl } for pid=2054 comm="syz.0.570" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.650345][ T1571] usb 10-1: string descriptor 0 read error: -22 [ 99.656856][ T1571] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=7d.90 [ 99.667212][ T1571] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.685181][ T1571] usbhid 10-1:3.193: couldn't find an input interrupt endpoint [ 99.909391][ T311] usb 10-1: USB disconnect, device number 7 [ 102.061306][ T36] audit: type=1400 audit(1789817717.450:945): avc: denied { ioctl } for pid=2086 comm="syz.7.580" path="socket:[28365]" dev="sockfs" ino=28365 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.941976][ T36] audit: type=1400 audit(1789817718.330:946): avc: denied { read } for pid=2093 comm="syz.7.582" path="socket:[28520]" dev="sockfs" ino=28520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.928420][ T36] audit: type=1400 audit(1789817719.320:947): avc: denied { bind } for pid=2111 comm="syz.7.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.952133][ T2114] FAULT_INJECTION: forcing a failure. [ 103.952133][ T2114] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.986416][ T2114] CPU: 0 UID: 0 PID: 2114 Comm: syz.0.587 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 103.986463][ T2114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.986482][ T2114] Call Trace: [ 103.986493][ T2114] [ 103.986504][ T2114] __dump_stack+0x21/0x30 [ 103.986549][ T2114] dump_stack_lvl+0x140/0x1c0 [ 103.986585][ T2114] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.986622][ T2114] ? mas_wr_store_entry+0x2559/0x3120 [ 103.986657][ T2114] dump_stack+0x19/0x20 [ 103.986691][ T2114] should_fail_ex+0x3c2/0x510 [ 103.986723][ T2114] should_fail_alloc_page+0xec/0x110 [ 103.986765][ T2114] __alloc_pages_noprof+0x1c0/0x7e0 [ 103.986802][ T2114] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 103.986836][ T2114] ? kvm_sched_clock_read+0x15/0x30 [ 103.986868][ T2114] ? sched_clock_noinstr+0xd/0x30 [ 103.986901][ T2114] ? __kasan_check_read+0x15/0x20 [ 103.986931][ T2114] __pud_alloc+0xb0/0x8f0 [ 103.986962][ T2114] ? mas_destroy+0x2768/0x3050 [ 103.986990][ T2114] ? __cfi___pud_alloc+0x10/0x10 [ 103.987020][ T2114] ? __kasan_check_read+0x15/0x20 [ 103.987046][ T2114] ? rb_commit+0x753/0x7b0 [ 103.987075][ T2114] copy_page_range+0x36d6/0x3990 [ 103.987102][ T2114] ? __cfi_mas_destroy+0x10/0x10 [ 103.987131][ T2114] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 103.987165][ T2114] ? __cfi_copy_page_range+0x10/0x10 [ 103.987191][ T2114] ? mas_store+0x897/0xcc0 [ 103.987221][ T2114] ? __vma_enter_locked+0x24d/0x3c0 [ 103.987251][ T2114] ? __cfi_mas_store+0x10/0x10 [ 103.987279][ T2114] ? anon_vma_fork+0x45b/0x610 [ 103.987307][ T2114] copy_mm+0x10cd/0x1da0 [ 103.987342][ T2114] ? copy_signal+0x6a0/0x6a0 [ 103.987372][ T2114] ? _raw_spin_lock+0x92/0x120 [ 103.987397][ T2114] ? __asan_memset+0x39/0x50 [ 103.987421][ T2114] ? __init_rwsem+0x110/0x1f0 [ 103.987454][ T2114] ? copy_signal+0x4d5/0x6a0 [ 103.987482][ T2114] copy_process+0x12a4/0x3350 [ 103.987514][ T2114] ? __cfi_copy_process+0x10/0x10 [ 103.987543][ T2114] kernel_clone+0x233/0x810 [ 103.987573][ T2114] ? rb_commit+0x753/0x7b0 [ 103.987599][ T2114] ? __cfi_kernel_clone+0x10/0x10 [ 103.987627][ T2114] ? __kasan_check_read+0x15/0x20 [ 103.987652][ T2114] __x64_sys_clone+0x1b7/0x230 [ 103.987682][ T2114] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 103.987710][ T2114] ? __cfi___x64_sys_clone+0x10/0x10 [ 103.987741][ T2114] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 103.987786][ T2114] x64_sys_call+0x2b3c/0x2ee0 [ 103.987810][ T2114] do_syscall_64+0x57/0xf0 [ 103.987832][ T2114] ? clear_bhb_loop+0x50/0xa0 [ 103.987859][ T2114] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.987885][ T2114] RIP: 0033:0x7ff3a9f9e159 [ 103.987908][ T2114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.987929][ T2114] RSP: 002b:00007ff3aadccfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 103.987975][ T2114] RAX: ffffffffffffffda RBX: 00007ff3aa225fa0 RCX: 00007ff3a9f9e159 [ 103.987995][ T2114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411 [ 103.988012][ T2114] RBP: 00007ff3aa03506b R08: 0000000000000000 R09: 0000000000000000 [ 103.988029][ T2114] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.988046][ T2114] R13: 00007ff3aa226038 R14: 00007ff3aa225fa0 R15: 00007ffddec86ae8 [ 103.988068][ T2114] [ 103.992638][ T36] audit: type=1326 audit(1789817719.370:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2116 comm="syz.7.590" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f9c59e159 code=0x0 [ 105.225563][ T2132] netlink: 'syz.0.594': attribute type 46 has an invalid length. [ 105.310740][ T2137] netlink: 8 bytes leftover after parsing attributes in process `syz.9.596'. [ 105.367306][ T2139] netlink: 'syz.9.597': attribute type 27 has an invalid length. [ 105.527556][ T45] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 105.686325][ T45] usb 8-1: Using ep0 maxpacket: 8 [ 105.692995][ T45] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.703657][ T45] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.714818][ T45] usb 8-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 105.724041][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.732483][ T45] usb 8-1: Product: syz [ 105.736806][ T45] usb 8-1: Manufacturer: syz [ 105.741419][ T45] usb 8-1: SerialNumber: syz [ 105.953635][ T2134] syzkaller1: entered promiscuous mode [ 105.959895][ T2134] syzkaller1: entered allmulticast mode [ 105.968975][ T2134] netlink: 12 bytes leftover after parsing attributes in process `syz.7.595'. [ 106.188600][ T45] usb 8-1: USB disconnect, device number 13 [ 106.202193][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.578626][ T36] audit: type=1326 audit(1789817721.970:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.9.601" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fcbd9e159 code=0x0 [ 106.660845][ T36] audit: type=1400 audit(1789817722.050:950): avc: denied { map } for pid=2152 comm="syz.9.601" path="socket:[29822]" dev="sockfs" ino=29822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.730109][ T36] audit: type=1400 audit(1789817722.050:951): avc: denied { accept } for pid=2152 comm="syz.9.601" path="socket:[29822]" dev="sockfs" ino=29822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.770167][ T36] audit: type=1400 audit(1789817722.080:952): avc: denied { write } for pid=2152 comm="syz.9.601" path="socket:[29824]" dev="sockfs" ino=29824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.807434][ T36] audit: type=1400 audit(1789817722.150:953): avc: denied { read } for pid=2152 comm="syz.9.601" name="/" dev="configfs" ino=1905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.853225][ T36] audit: type=1400 audit(1789817722.150:954): avc: denied { open } for pid=2152 comm="syz.9.601" path="/" dev="configfs" ino=1905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.896539][ T36] audit: type=1400 audit(1789817722.150:955): avc: denied { ioctl } for pid=2152 comm="syz.9.601" path="/" dev="configfs" ino=1905 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.488461][ T36] audit: type=1326 audit(1789817722.880:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2156 comm="syz.0.603" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a9f9e159 code=0x7fc00000 [ 108.056594][ T2169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.070476][ T2169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.276908][ T503] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 108.406292][ T311] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 108.427921][ T503] usb 10-1: config 1 has an invalid interface number: 33 but max is 1 [ 108.436721][ T503] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.447241][ T503] usb 10-1: config 1 has no interface number 1 [ 108.453537][ T503] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.465775][ T503] usb 10-1: config 1 interface 33 has no altsetting 0 [ 108.474548][ T503] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.484736][ T503] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.493224][ T503] usb 10-1: Product: syz [ 108.497757][ T503] usb 10-1: Manufacturer: syz [ 108.502543][ T503] usb 10-1: SerialNumber: syz [ 108.511006][ T503] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 108.518068][ T503] cdc_ncm 10-1:1.0: bind() failure [ 108.566259][ T311] usb 8-1: Using ep0 maxpacket: 16 [ 108.574981][ T311] usb 8-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 108.584385][ T311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.592507][ T311] usb 8-1: Product: syz [ 108.596859][ T311] usb 8-1: Manufacturer: syz [ 108.601485][ T311] usb 8-1: SerialNumber: syz [ 108.768774][ T45] usb 10-1: USB disconnect, device number 8 [ 108.810576][ T2175] netlink: 'syz.7.607': attribute type 1 has an invalid length. [ 108.823707][ T311] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.830860][ T311] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 108.838814][ T311] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 108.849645][ T311] usb 8-1: USB disconnect, device number 14 [ 108.865941][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.716617][ T503] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 109.866256][ T503] usb 8-1: Using ep0 maxpacket: 32 [ 109.873258][ T503] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 109.883995][ T503] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 109.895380][ T503] usb 8-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 109.904961][ T503] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.913127][ T503] usb 8-1: Product: syz [ 109.917345][ T503] usb 8-1: Manufacturer: syz [ 109.922035][ T503] usb 8-1: SerialNumber: syz [ 110.154009][ T36] audit: type=1400 audit(1789817725.540:957): avc: denied { create } for pid=2180 comm="syz.7.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 110.177498][ T36] audit: type=1400 audit(1789817725.570:958): avc: denied { write } for pid=2180 comm="syz.7.609" path="socket:[29112]" dev="sockfs" ino=29112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 110.221801][ T503] usb 8-1: unit 8 not found! [ 110.230314][ T503] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 110.241462][ T503] usb 8-1: USB disconnect, device number 15 [ 111.143257][ T2207] FAULT_INJECTION: forcing a failure. [ 111.143257][ T2207] name failslab, interval 1, probability 0, space 0, times 0 [ 111.166253][ T2207] CPU: 0 UID: 0 PID: 2207 Comm: syz.7.618 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 111.166293][ T2207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.166309][ T2207] Call Trace: [ 111.166318][ T2207] [ 111.166329][ T2207] __dump_stack+0x21/0x30 [ 111.166367][ T2207] dump_stack_lvl+0x140/0x1c0 [ 111.166397][ T2207] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.166429][ T2207] dump_stack+0x19/0x20 [ 111.166459][ T2207] should_fail_ex+0x3c2/0x510 [ 111.166488][ T2207] should_failslab+0xac/0x100 [ 111.166517][ T2207] kmem_cache_alloc_node_noprof+0x45/0x420 [ 111.166554][ T2207] ? __virt_addr_valid+0x2a1/0x370 [ 111.166582][ T2207] ? __alloc_skb+0x10c/0x360 [ 111.166608][ T2207] ? __cfi__copy_from_iter+0x10/0x10 [ 111.166641][ T2207] __alloc_skb+0x10c/0x360 [ 111.166667][ T2207] tipc_buf_acquire+0x2f/0xe0 [ 111.166698][ T2207] tipc_msg_build+0x904/0xf20 [ 111.166731][ T2207] ? __cfi_tipc_msg_build+0x10/0x10 [ 111.166764][ T2207] ? tipc_group_bc_cong+0x169/0x220 [ 111.166796][ T2207] tipc_send_group_bcast+0x76f/0xab0 [ 111.166826][ T2207] ? tipc_wait_for_connect+0x630/0x630 [ 111.166853][ T2207] ? avc_has_perm+0x155/0x240 [ 111.166882][ T2207] ? __cfi_avc_has_perm+0x10/0x10 [ 111.166910][ T2207] ? __cfi_woken_wake_function+0x10/0x10 [ 111.166941][ T2207] __tipc_sendmsg+0x33a/0x28a0 [ 111.166970][ T2207] ? tipc_sk_respond+0x430/0x430 [ 111.166996][ T2207] ? avc_has_perm_noaudit+0x26b/0x360 [ 111.167023][ T2207] ? __asan_memcpy+0x5a/0x80 [ 111.167048][ T2207] ? avc_has_perm_noaudit+0x289/0x360 [ 111.167077][ T2207] ? avc_has_perm+0x155/0x240 [ 111.167104][ T2207] ? __cfi_avc_has_perm+0x10/0x10 [ 111.167132][ T2207] ? __kasan_check_write+0x18/0x20 [ 111.167155][ T2207] ? _raw_spin_lock_bh+0x96/0x130 [ 111.167178][ T2207] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 111.167201][ T2207] ? selinux_socket_sendmsg+0x281/0x380 [ 111.167233][ T2207] ? lock_sock_nested+0x216/0x2a0 [ 111.167256][ T2207] ? __cfi_lock_sock_nested+0x10/0x10 [ 111.167279][ T2207] ? avc_has_perm+0x155/0x240 [ 111.167310][ T2207] tipc_sendmsg+0x59/0x90 [ 111.167338][ T2207] ? __cfi_tipc_sendmsg+0x10/0x10 [ 111.167364][ T2207] sock_write_iter+0x445/0x490 [ 111.167388][ T2207] ? __cfi_sock_write_iter+0x10/0x10 [ 111.167415][ T2207] vfs_write+0x75f/0xfd0 [ 111.167441][ T2207] ? __cfi_vfs_write+0x10/0x10 [ 111.167469][ T2207] ksys_write+0x145/0x260 [ 111.167494][ T2207] ? __cfi_ksys_write+0x10/0x10 [ 111.167527][ T2207] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 111.167563][ T2207] __x64_sys_write+0x7f/0x90 [ 111.167588][ T2207] x64_sys_call+0x271c/0x2ee0 [ 111.167610][ T2207] do_syscall_64+0x57/0xf0 [ 111.167633][ T2207] ? clear_bhb_loop+0x50/0xa0 [ 111.167662][ T2207] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.167690][ T2207] RIP: 0033:0x7f8f9c59e159 [ 111.167710][ T2207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.167730][ T2207] RSP: 002b:00007f8f9d4da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.167759][ T2207] RAX: ffffffffffffffda RBX: 00007f8f9c826090 RCX: 00007f8f9c59e159 [ 111.167780][ T2207] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 0000000000000004 [ 111.167797][ T2207] RBP: 00007f8f9d4da090 R08: 0000000000000000 R09: 0000000000000000 [ 111.167813][ T2207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.167830][ T2207] R13: 00007f8f9c826128 R14: 00007f8f9c826090 R15: 00007fff262ef008 [ 111.167852][ T2207] [ 111.174185][ T2208] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 112.999969][ T2216] FAULT_INJECTION: forcing a failure. [ 112.999969][ T2216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.022472][ T2216] CPU: 0 UID: 0 PID: 2216 Comm: syz.0.620 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 113.022516][ T2216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.022532][ T2216] Call Trace: [ 113.022543][ T2216] [ 113.022553][ T2216] __dump_stack+0x21/0x30 [ 113.022593][ T2216] dump_stack_lvl+0x140/0x1c0 [ 113.022628][ T2216] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.022661][ T2216] ? check_stack_object+0x138/0x150 [ 113.022688][ T2216] dump_stack+0x19/0x20 [ 113.022719][ T2216] should_fail_ex+0x3c2/0x510 [ 113.022749][ T2216] should_fail+0xf/0x20 [ 113.022776][ T2216] should_fail_usercopy+0x1e/0x30 [ 113.022806][ T2216] _copy_to_user+0x24/0xa0 [ 113.022839][ T2216] simple_read_from_buffer+0xed/0x160 [ 113.022875][ T2216] proc_fail_nth_read+0x1aa/0x220 [ 113.022918][ T2216] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 113.022953][ T2216] ? bpf_lsm_file_permission+0xd/0x20 [ 113.022985][ T2216] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 113.023018][ T2216] vfs_read+0x288/0xc70 [ 113.023043][ T2216] ? rb_commit+0x753/0x7b0 [ 113.023070][ T2216] ? __cfi_vfs_read+0x10/0x10 [ 113.023095][ T2216] ? __kasan_check_write+0x18/0x20 [ 113.023120][ T2216] ? mutex_lock+0x97/0x1d0 [ 113.023150][ T2216] ? __cfi_mutex_lock+0x10/0x10 [ 113.023181][ T2216] ksys_read+0x145/0x260 [ 113.023206][ T2216] ? __cfi_ksys_read+0x10/0x10 [ 113.023232][ T2216] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 113.023270][ T2216] __x64_sys_read+0x7f/0x90 [ 113.023296][ T2216] x64_sys_call+0x2638/0x2ee0 [ 113.023320][ T2216] do_syscall_64+0x57/0xf0 [ 113.023343][ T2216] ? clear_bhb_loop+0x50/0xa0 [ 113.023373][ T2216] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.023402][ T2216] RIP: 0033:0x7ff3a9f5e98e [ 113.023424][ T2216] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.023447][ T2216] RSP: 002b:00007ff3aadccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.023478][ T2216] RAX: ffffffffffffffda RBX: 00007ff3aadcd6c0 RCX: 00007ff3a9f5e98e [ 113.023503][ T2216] RDX: 000000000000000f RSI: 00007ff3aadcd0a0 RDI: 000000000000000c [ 113.023522][ T2216] RBP: 00007ff3aadcd090 R08: 0000000000000000 R09: 0000000000000000 [ 113.023539][ T2216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.023556][ T2216] R13: 00007ff3aa226038 R14: 00007ff3aa225fa0 R15: 00007ffddec86ae8 [ 113.023577][ T2216] [ 114.929920][ T2233] x_tables: duplicate underflow at hook 4 [ 115.020724][ T36] audit: type=1400 audit(1789817730.410:959): avc: denied { mounton } for pid=2234 comm="syz.7.628" path="/53/file0" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.070590][ T2235] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 115.195683][ T2245] FAULT_INJECTION: forcing a failure. [ 115.195683][ T2245] name failslab, interval 1, probability 0, space 0, times 0 [ 115.227081][ T2245] CPU: 1 UID: 0 PID: 2245 Comm: syz.9.631 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 115.227121][ T2245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.227136][ T2245] Call Trace: [ 115.227146][ T2245] [ 115.227157][ T2245] __dump_stack+0x21/0x30 [ 115.227195][ T2245] dump_stack_lvl+0x140/0x1c0 [ 115.227226][ T2245] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.227258][ T2245] ? release_sock+0x171/0x1f0 [ 115.227285][ T2245] dump_stack+0x19/0x20 [ 115.227338][ T2245] should_fail_ex+0x3c2/0x510 [ 115.227368][ T2245] should_failslab+0xac/0x100 [ 115.227398][ T2245] kmem_cache_alloc_node_noprof+0x45/0x420 [ 115.227424][ T2245] ? netlink_data_ready+0x20/0x20 [ 115.227462][ T2245] ? __alloc_skb+0x10c/0x360 [ 115.227490][ T2245] __alloc_skb+0x10c/0x360 [ 115.227517][ T2245] netlink_alloc_large_skb+0xf7/0x1b0 [ 115.227546][ T2245] netlink_sendmsg+0x576/0xad0 [ 115.227579][ T2245] ? __cfi_netlink_sendmsg+0x10/0x10 [ 115.227612][ T2245] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 115.227640][ T2245] ? security_socket_sendmsg+0x3d/0x100 [ 115.227674][ T2245] ____sys_sendmsg+0x99e/0xa00 [ 115.227707][ T2245] ? __import_iovec+0x5b9/0x7d0 [ 115.227730][ T2245] ? __sys_sendmsg_sock+0x50/0x50 [ 115.227763][ T2245] ? import_iovec+0x80/0xb0 [ 115.227786][ T2245] ___sys_sendmsg+0x2a6/0x370 [ 115.227818][ T2245] ? __sys_sendmsg+0x260/0x260 [ 115.227853][ T2245] ? rb_commit+0x753/0x7b0 [ 115.227881][ T2245] ? __fget_files+0x2bc/0x330 [ 115.227911][ T2245] __x64_sys_sendmsg+0x1be/0x2a0 [ 115.227943][ T2245] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 115.227978][ T2245] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 115.228014][ T2245] x64_sys_call+0x2a4c/0x2ee0 [ 115.228037][ T2245] do_syscall_64+0x57/0xf0 [ 115.228061][ T2245] ? clear_bhb_loop+0x50/0xa0 [ 115.228090][ T2245] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.228118][ T2245] RIP: 0033:0x7f8fcbd9e159 [ 115.228140][ T2245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.228161][ T2245] RSP: 002b:00007f8fccd04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.228190][ T2245] RAX: ffffffffffffffda RBX: 00007f8fcc025fa0 RCX: 00007f8fcbd9e159 [ 115.228209][ T2245] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 115.228227][ T2245] RBP: 00007f8fccd04090 R08: 0000000000000000 R09: 0000000000000000 [ 115.228243][ T2245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.228260][ T2245] R13: 00007f8fcc026038 R14: 00007f8fcc025fa0 R15: 00007fff1303f998 [ 115.228283][ T2245] [ 117.163065][ T2257] FAULT_INJECTION: forcing a failure. [ 117.163065][ T2257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.179329][ T2257] CPU: 0 UID: 0 PID: 2257 Comm: syz.7.634 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 117.179370][ T2257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.179385][ T2257] Call Trace: [ 117.179395][ T2257] [ 117.179405][ T2257] __dump_stack+0x21/0x30 [ 117.179446][ T2257] dump_stack_lvl+0x140/0x1c0 [ 117.179477][ T2257] ? __cfi_dump_stack_lvl+0x10/0x10 [ 117.179507][ T2257] ? rb_commit+0x753/0x7b0 [ 117.179535][ T2257] dump_stack+0x19/0x20 [ 117.179563][ T2257] should_fail_ex+0x3c2/0x510 [ 117.179591][ T2257] should_fail+0xf/0x20 [ 117.179617][ T2257] should_fail_usercopy+0x1e/0x30 [ 117.179645][ T2257] _copy_to_iter+0x56d/0x1520 [ 117.179677][ T2257] ? __cfi__copy_to_iter+0x10/0x10 [ 117.179706][ T2257] ? __check_object_size+0x54c/0x870 [ 117.179730][ T2257] ? __cfi___check_object_size+0x10/0x10 [ 117.179754][ T2257] ? trace_event_raw_event_skb_copy_datagram_iovec+0x159/0x220 [ 117.179786][ T2257] __skb_datagram_iter+0x103/0x940 [ 117.179817][ T2257] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 117.179847][ T2257] skb_copy_datagram_iter+0x44/0x160 [ 117.179876][ T2257] netlink_recvmsg+0x2d4/0xe60 [ 117.179909][ T2257] ? __cfi_netlink_recvmsg+0x10/0x10 [ 117.179939][ T2257] ? trace_event_buffer_commit+0x256/0x8f0 [ 117.179966][ T2257] ? iovec_from_user+0x94/0x310 [ 117.179987][ T2257] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 117.180012][ T2257] ? security_socket_recvmsg+0x44/0x130 [ 117.180044][ T2257] ? __cfi_netlink_recvmsg+0x10/0x10 [ 117.180074][ T2257] sock_recvmsg+0x185/0x1e0 [ 117.180099][ T2257] ____sys_recvmsg+0x1e7/0x4a0 [ 117.180130][ T2257] ? __sys_recvmsg_sock+0x60/0x60 [ 117.180163][ T2257] ? import_iovec+0x80/0xb0 [ 117.180183][ T2257] ___sys_recvmsg+0x214/0x590 [ 117.180224][ T2257] ? kstrtoull+0x13b/0x1e0 [ 117.180246][ T2257] ? __sys_recvmsg+0x260/0x260 [ 117.180280][ T2257] do_recvmmsg+0x328/0x790 [ 117.180310][ T2257] ? __sys_recvmmsg+0x2a0/0x2a0 [ 117.180342][ T2257] ? _copy_from_user+0x87/0xa0 [ 117.180374][ T2257] ? trace_event_buffer_commit+0x256/0x8f0 [ 117.180401][ T2257] __x64_sys_recvmmsg+0x1b8/0x250 [ 117.180433][ T2257] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 117.180467][ T2257] x64_sys_call+0x292c/0x2ee0 [ 117.180490][ T2257] do_syscall_64+0x57/0xf0 [ 117.180513][ T2257] ? clear_bhb_loop+0x50/0xa0 [ 117.180543][ T2257] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.180571][ T2257] RIP: 0033:0x7f8f9c59e159 [ 117.180593][ T2257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.180614][ T2257] RSP: 002b:00007f8f9d4fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 117.180642][ T2257] RAX: ffffffffffffffda RBX: 00007f8f9c825fa0 RCX: 00007f8f9c59e159 [ 117.180660][ T2257] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 117.180677][ T2257] RBP: 00007f8f9d4fb090 R08: 0000200000003700 R09: 0000000000000000 [ 117.180694][ T2257] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 117.180709][ T2257] R13: 00007f8f9c826038 R14: 00007f8f9c825fa0 R15: 00007fff262ef008 [ 117.180729][ T2257] [ 119.253458][ T36] audit: type=1400 audit(1789817734.640:960): avc: denied { setopt } for pid=2274 comm="syz.9.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.500727][ T315] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 119.657627][ T315] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 119.678653][ T315] usb 10-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 119.697766][ T315] usb 10-1: config 220 interface 0 has no altsetting 0 [ 119.714039][ T315] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 119.733568][ T315] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.749972][ T315] usb 10-1: Product: syz [ 119.754505][ T315] usb 10-1: Manufacturer: syz [ 119.770001][ T315] usb 10-1: SerialNumber: syz [ 119.995755][ T315] usb 10-1: USB disconnect, device number 9 [ 121.339630][ T36] audit: type=1400 audit(1789817736.730:961): avc: denied { shutdown } for pid=2288 comm="syz.0.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.471792][ T36] audit: type=1400 audit(1789817736.860:962): avc: denied { accept } for pid=2302 comm="syz.9.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.640994][ T2320] netlink: 'syz.7.648': attribute type 2 has an invalid length. [ 123.649089][ T2320] netlink: 16 bytes leftover after parsing attributes in process `syz.7.648'. [ 126.071140][ T2340] FAULT_INJECTION: forcing a failure. [ 126.071140][ T2340] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 126.096371][ T2340] CPU: 1 UID: 0 PID: 2340 Comm: syz.9.656 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 126.096410][ T2340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.096426][ T2340] Call Trace: [ 126.096436][ T2340] [ 126.096449][ T2340] __dump_stack+0x21/0x30 [ 126.096488][ T2340] dump_stack_lvl+0x140/0x1c0 [ 126.096521][ T2340] ? __cfi_dump_stack_lvl+0x10/0x10 [ 126.096553][ T2340] dump_stack+0x19/0x20 [ 126.096583][ T2340] should_fail_ex+0x3c2/0x510 [ 126.096614][ T2340] should_fail_alloc_page+0xec/0x110 [ 126.096646][ T2340] __alloc_pages_noprof+0x1c0/0x7e0 [ 126.096679][ T2340] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 126.096715][ T2340] __pmd_alloc+0xb0/0x9a0 [ 126.096745][ T2340] ? __cfi___pmd_alloc+0x10/0x10 [ 126.096773][ T2340] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 126.096805][ T2340] handle_mm_fault+0xd23/0x1ba0 [ 126.096833][ T2340] ? __cfi_handle_mm_fault+0x10/0x10 [ 126.096870][ T2340] ? find_vma+0xd3/0x120 [ 126.096895][ T2340] ? lock_mm_and_find_vma+0xb8/0x390 [ 126.096924][ T2340] do_user_addr_fault+0x4ee/0x1230 [ 126.096950][ T2340] exc_page_fault+0x58/0xc0 [ 126.096980][ T2340] asm_exc_page_fault+0x2b/0x30 [ 126.097007][ T2340] RIP: 0010:rep_movs_alternative+0x13/0xa0 [ 126.097041][ T2340] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 126.097062][ T2340] RSP: 0018:ffffc90004fbfd50 EFLAGS: 00050202 [ 126.097087][ T2340] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 126.097106][ T2340] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004fbfe20 [ 126.097123][ T2340] RBP: ffffc90004fbfd70 R08: 0000000000000003 R09: 0000000000000004 [ 126.097140][ T2340] R10: dffffc0000000000 R11: fffff520009f7fc4 R12: ffffc90004fbfe00 [ 126.097158][ T2340] R13: 1ffff920009f7fb8 R14: ffffc90004fbfe20 R15: 0000000000000000 [ 126.097178][ T2340] ? _copy_from_user+0x6d/0xa0 [ 126.097212][ T2340] vhost_vsock_dev_ioctl+0x141/0xdc0 [ 126.097245][ T2340] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 126.097284][ T2340] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 126.097318][ T2340] ? __fget_files+0x2bc/0x330 [ 126.097345][ T2340] ? bpf_lsm_file_ioctl+0xd/0x20 [ 126.097374][ T2340] ? security_file_ioctl+0x3e/0x110 [ 126.097399][ T2340] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 126.097431][ T2340] __se_sys_ioctl+0x123/0x1b0 [ 126.097461][ T2340] __x64_sys_ioctl+0x7f/0xa0 [ 126.097488][ T2340] x64_sys_call+0x1878/0x2ee0 [ 126.097511][ T2340] do_syscall_64+0x57/0xf0 [ 126.097533][ T2340] ? clear_bhb_loop+0x50/0xa0 [ 126.097561][ T2340] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.097589][ T2340] RIP: 0033:0x7f8fcbd9e159 [ 126.097610][ T2340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.097630][ T2340] RSP: 002b:00007f8fccd04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.097658][ T2340] RAX: ffffffffffffffda RBX: 00007f8fcc025fa0 RCX: 00007f8fcbd9e159 [ 126.097677][ T2340] RDX: 0000000000000000 RSI: 000000004004af61 RDI: 0000000000000003 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=3 req=563 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 126.097695][ T2340] RBP: 00007f8fccd04090 R08: 0000000000000000 R09: 0000000000000000 [ 126.097713][ T2340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.097729][ T2340] R13: 00007f8fcc026038 R14: 00007f8fcc025fa0 R15: 00007fff1303f998 [ 126.097750][ T2340] [ 126.473221][ T36] audit: type=1400 audit(1789817741.850:963): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2247]" dev="pipefs" ino=2247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 126.496665][ T36] audit: type=1400 audit(1789817741.860:964): avc: denied { setopt } for pid=2351 comm="syz.9.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.582901][ T1420] bridge_slave_1: left allmulticast mode [ 126.588741][ T1420] bridge_slave_1: left promiscuous mode [ 126.595698][ T1420] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.647465][ T1420] bridge_slave_0: left allmulticast mode [ 126.653351][ T1420] bridge_slave_0: left promiscuous mode [ 126.659755][ T1420] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.872793][ T1420] tipc: Disabling bearer [ 126.878500][ T1420] tipc: Left network mode [ 126.890076][ T1420] veth1_macvtap: left promiscuous mode [ 126.895694][ T1420] veth0_vlan: left promiscuous mode [ 127.231539][ T1420] bridge_slave_1: left allmulticast mode [ 127.237367][ T1420] bridge_slave_1: left promiscuous mode [ 127.243485][ T1420] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.251694][ T1420] bridge_slave_0: left allmulticast mode [ 127.257778][ T1420] bridge_slave_0: left promiscuous mode [ 127.263504][ T1420] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.272022][ T1420] bridge_slave_1: left allmulticast mode [ 127.278054][ T1420] bridge_slave_1: left promiscuous mode [ 127.283900][ T1420] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.292198][ T1420] bridge_slave_0: left allmulticast mode [ 127.298066][ T1420] bridge_slave_0: left promiscuous mode [ 127.303675][ T1420] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.475670][ T1420] veth1_macvtap: left promiscuous mode [ 127.481363][ T1420] veth0_vlan: left promiscuous mode [ 127.487447][ T1420] veth1_macvtap: left promiscuous mode [ 127.492971][ T1420] veth0_vlan: left promiscuous mode