last executing test programs: 4.926942828s ago: executing program 0 (id=1): syz_usb_connect$uac3(0x3, 0xa4, &(0x7f0000000280)=ANY=[], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x10000) syz_usb_connect$cdc_ecm(0x0, 0x93, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x1, 0x1, 0x80, 0x70, 0x0, "", [{{0x9, 0x4, 0x0, 0x5c, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "1ef15a"}, {0x5, 0x24, 0x0, 0x19}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x2, 0x9, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x7f}, @dmm={0x7, 0x24, 0x14, 0xc15a, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x16, 0x8, [0x8001, 0x7, 0xfffa, 0x7, 0x10, 0x5]}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x3, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xb}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xd1, 0xff, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x3, 0x3}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x7f, 0x7, 0x7, 0x20, 0x6}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) syz_usb_connect$uac3(0x3, 0xa4, &(0x7f0000000280)=ANY=[], 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x10000) (async) syz_usb_connect$cdc_ecm(0x0, 0x93, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x1, 0x1, 0x80, 0x70, 0x0, "", [{{0x9, 0x4, 0x0, 0x5c, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "1ef15a"}, {0x5, 0x24, 0x0, 0x19}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x2, 0x9, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x7f}, @dmm={0x7, 0x24, 0x14, 0xc15a, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x16, 0x8, [0x8001, 0x7, 0xfffa, 0x7, 0x10, 0x5]}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x3, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xb}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xd1, 0xff, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x3, 0x3}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x7f, 0x7, 0x7, 0x20, 0x6}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) (async) 4.769788016s ago: executing program 1 (id=6): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5028, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xa7, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090192008c0508950129309102c0"], 0x0}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000009058103000200000009040100"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x82, 0x3, &(0x7f0000002340)='hel') syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0xf, 0xf5, {0xf5, 0x23, "aba79d0cc21cb37ae936fd3b0834ae4f488b9b9d446e5cba381949bd9c26bb8cd24b04b8a11c49d0e88e71e845a91aed252c3d60e35e4b36602461d316343179a7a8a21d0c9e7db35c34898433b329f6a2a21e0d078c7afaa2505422c3c739ed2734840ff222c17e95635a7e026879ec755d0aea530d598c20b35ef6747aeafe3491615daba0a18a2094908f43027b784597309458fa3683e9512a778ef162a691b5597068e12b58bfe0a61210eb5032a337e4a1f2b7b9340d484124b6b84b2e44b3b0fbf65da3cffb98fa28e66fe7f6650dda4a03a3046f5ac2b865eec519e7a67de1999bfdb864979c96e37deee2ecc0906a"}}, &(0x7f0000000180)={0x0, 0x3, 0x17, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x40, 0x17, 0xec, "33e59096bf1d0792cf9db26d0114386fc91e55537e1ca7a04fbe0aa8d8062da61782983455146678a511da2f9cd1bc1c4a640c4bec986222b8073170683a3180ce386eb4dc975bed80b8a2cb34449b65992d16e05d6b8f1fbe89c0e3fa904e373451c37896e98aed2e4ca5304df9241c6b4b1681a1cc97819840da9c73157be6afab2248ddbbf5b2c3b3ca8a7fa38e4063e05736de1fde7ff7d8e4391a890368f0630d16da1f0f05194fa650bdd84fe46eb4c0e255bcceae6ffc1d7d5678ddaad8936a5f641635bfd0a5e54f867d7fa5882c1d30192c082ccb84c0a5ea857cf8b6148a46eb0d6f65fa50e847"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x7, 0xf3, 0x43a, 0x40, 0x5, 0xfffd, 0x759, 0x40000, 0xac8, 0x1, 0x7, 0x845}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000000)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0xf, 0xf5, {0xf5, 0x23, "aba79d0cc21cb37ae936fd3b0834ae4f488b9b9d446e5cba381949bd9c26bb8cd24b04b8a11c49d0e88e71e845a91aed252c3d60e35e4b36602461d316343179a7a8a21d0c9e7db35c34898433b329f6a2a21e0d078c7afaa2505422c3c739ed2734840ff222c17e95635a7e026879ec755d0aea530d598c20b35ef6747aeafe3491615daba0a18a2094908f43027b784597309458fa3683e9512a778ef162a691b5597068e12b58bfe0a61210eb5032a337e4a1f2b7b9340d484124b6b84b2e44b3b0fbf65da3cffb98fa28e66fe7f6650dda4a03a3046f5ac2b865eec519e7a67de1999bfdb864979c96e37deee2ecc0906a"}}, &(0x7f0000000180)={0x0, 0x3, 0x17, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x40, 0x17, 0xec, "33e59096bf1d0792cf9db26d0114386fc91e55537e1ca7a04fbe0aa8d8062da61782983455146678a511da2f9cd1bc1c4a640c4bec986222b8073170683a3180ce386eb4dc975bed80b8a2cb34449b65992d16e05d6b8f1fbe89c0e3fa904e373451c37896e98aed2e4ca5304df9241c6b4b1681a1cc97819840da9c73157be6afab2248ddbbf5b2c3b3ca8a7fa38e4063e05736de1fde7ff7d8e4391a890368f0630d16da1f0f05194fa650bdd84fe46eb4c0e255bcceae6ffc1d7d5678ddaad8936a5f641635bfd0a5e54f867d7fa5882c1d30192c082ccb84c0a5ea857cf8b6148a46eb0d6f65fa50e847"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x7, 0xf3, 0x43a, 0x40, 0x5, 0xfffd, 0x759, 0x40000, 0xac8, 0x1, 0x7, 0x845}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000000)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) 3.009671268s ago: executing program 1 (id=12): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x7f, 0x0, 0xf3}) (async) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4) 2.96961674s ago: executing program 1 (id=13): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) (async) getrandom(0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x81) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/134, 0x86}], 0x1) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2.873230565s ago: executing program 1 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffff0040950b90170001000000010902270001010080fa0904000003ffff000007058102000200070502020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x400, 0x0, {0x7}, [@generic='~']}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0xa) (rerun: 32) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x200, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0c0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000007c0)={0x34, &(0x7f00000004c0)={0x20, 0xb, 0x56, "37cfa5b7d2d6a8cb78ea6afc1b498ac9915429b88b59f09cf47063dd2dff3b5a6170a52051177bea49000ce4a1887e572d46b4b2a6b8d520cf68d74f665f367d8701c6c4ad592f6883fe96d44bb62913eee8d60642cd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000080)='[}\x00', 0x7) fsetxattr(r6, &(0x7f00000000c0)=@random={'user.', '/dev/kvm\x00'}, &(0x7f0000000100)='/dev/kvm\x00', 0x9, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r7, &(0x7f00000001c0)="2b351cdb", 0x4) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b7, 0x0, 0xa}]}) 1.832850673s ago: executing program 0 (id=15): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x140000000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r2, 0x32871000) setns(0xc9, 0x0) r3 = socket$inet6(0x10, 0x3, 0x7) sendto$inet6(r3, &(0x7f0000000080)='L\x00\x00', 0x3, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r4, 0x1269, 0x0) sendto$inet(r0, &(0x7f0000000040)="c2f3534da3d24b64e5812310888956f0670248a1d5807dd975d5b3ae29ea21a7630f395f3bea3e633b86fb", 0x2b, 0x20040081, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f01000000000600000020062407040700090581034000000000090582021000000000090503024002"], 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4093, 0xffd}], 0x1, 0x1, 0x3, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 909.847106ms ago: executing program 2 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x220000, 0x20, 0x4}, 0x18) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140200001e00010a020000000000000007000000e2a639a18a22c39b30fa2a82a7d9d7bf78e4199a5b31cc8685219f400705066b30e445ccd91e5c96902d70b647e93d3317b48c17c99abe0749e0a94d7138aaca2e389289006e8da485a40a249d00fff3f3cfb5da1178498bfb0b2ec8b67bdb4b65f40954e9e484904eca1ea78a08958d3119e3212e8d76bb8dee70dd591d4ccb7dce32c75e557d3da1a56cc4dab3476032f2fa4c97e541a1fd4a634e060c23acab79a7f811fce5c86ccec4b6d606e019062008963dd5b1f33634b9f0c64e4df996516c9c6ed874a57805d0e15d43a2d104b31713bb"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r6) sendmmsg$unix(r5, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x4000004) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_driver\x00', 0x0, 0x0) read(r7, &(0x7f0000000100)=""/256, 0x100) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @pic={0x45, 0x4, 0xd, 0x86, 0xf, 0x9, 0xf9, 0x0, 0x2, 0xc, 0xca, 0x3, 0x5, 0x49, 0xf7, 0x19}}) 793.117122ms ago: executing program 2 (id=22): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2e, 0x6, 0x0, {0x5, 0x4, 0x5, 0x0, '*]:*&'}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x10, &(0x7f0000000880)=0x5, 0x4) sendto$inet6(r7, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @empty, 0x6}, 0x1c) close_range(r6, 0xffffffffffffffff, 0x0) 549.853134ms ago: executing program 2 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x1c1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) preadv(r0, 0x0, 0x0, 0x3, 0xffffffff) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2004402, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noxattr}]}}) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000080)={0x9c, 0x2, 0x7fffffffffffffff, 0x45, 0x3}) sendmsg$AUDIT_TTY_GET(r3, 0x0, 0x14) 548.886334ms ago: executing program 2 (id=24): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) ioctl$KVM_TDX_INIT_VM(r2, 0xc008aeba, &(0x7f00000005c0)={0x1, 0x0, &(0x7f0000000600)={0xc000000008000001, 0xe0, [0x2, 0x4f7, 0x8001, 0x4, 0x0, 0x1], [0x271, 0x8, 0x5, 0x7fff, 0x401], [0x1000, 0xd5c, 0x800, 0x0, 0x145, 0x2], '\x00', {0x2, 0x0, [{0x6, 0x4, 0x1, 0xfffffff8, 0x6, 0xda3, 0x29a}, {0x6, 0x7ff, 0x1, 0x6210, 0xa9, 0x9, 0x4}]}}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x40000000, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 483.173717ms ago: executing program 2 (id=25): arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) listen(r0, 0x1) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x4000000) r2 = accept(r0, &(0x7f0000000080), &(0x7f0000000100)=0x80) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x3) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) 470.143137ms ago: executing program 2 (id=26): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x6bba950d, 0x2, 0x2, 0x7f, 0x20000006, 0x4d, 0x6, 0x8100, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x9, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x27, 0x8, 0x1, 0x5, 0x2, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x571c, 0x0, 0x0, 0x80008071, 0x7, 0xe451, 0x2, 0xd21, 0x4, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x2, 0x7, 0x8, 0x4, 0x2000000, 0x3e], [0x10000007, 0x9, 0x101, 0x8004, 0x5, 0x6, 0x129432e6, 0x105, 0xfd, 0xb, 0x2bd, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x2, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0xfffffffd, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x0, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x1047, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0x5, 0xfffffff2, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x7, 0x126, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7ffc, 0x6, 0x5, 0xb, 0x4, 0x9, 0x5, 0x4, 0x1f2, 0x8, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0xc23, 0x2, 0x2, 0x3, 0x2000000a, 0x4, 0x6d01, 0x1005, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0x9e, 0x7, 0x7, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0xfffffffa, 0x81, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x4, 0x2, 0x57, 0x9, 0x3, 0xc, 0x10000, 0x4, 0xfffffff9, 0xffff, 0x2000a620, 0x2, 0x5, 0x4c, 0x5, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x9, 0x4, 0x1, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x8, 0x7fffffff, 0x2, 0xf40, 0x7, 0x3, 0x6c1b, 0x20000, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x2272, 0x0) (async) ioctl$FIBMAP(r4, 0x2272, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcd9df251100000024000980080001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48000) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x47, &(0x7f0000000380)={0x20, 0x12, 0x4}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x47, &(0x7f0000000380)={0x20, 0x12, 0x4}, 0x0, 0x0}) 398.074641ms ago: executing program 3 (id=27): iopl(0x3) gettid() (async) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) iopl(0x4b) iopl(0x2) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd(0x80000) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3b6, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5a6a, &(0x7f0000000140)={0x0, 0x44df, 0x0, 0x6, 0x10800}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x5a6a, &(0x7f0000000140)={0x0, 0x44df, 0x0, 0x6, 0x10800}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 327.526914ms ago: executing program 3 (id=28): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000540)={{@_ha_fsid={[0x101, 0xfffffff2]}, {0x3ff, 0x9, 0x1ff, 0x263c80000000000}}, {{[0xffff, 0x8, 0xa8f6, 0xfffffa78]}, 0x0, 0x2, 0x7fffffff, 0x0, &(0x7f0000000340)=[{{@align=0x5, {0x9, 0x6, 0xeab, 0x21f}}, 0x1ff, 0x0, '.}-+(\x9f\'@($\x00'}, {{@_ha_fsid={[0x2, 0xc9]}, {0x3ff, 0x6, 0x4, 0xb1b4}}, 0x40, 0x0, '\x00'}, {{@_ha_fsid={[0x100, 0x174d]}, {0xffc2, 0x25f3, 0xd, 0x10000}}, 0x6, 0x0, '\x00'}, {{@align=0x2, {0x2, 0xfffd, 0x7, 0x9}}, 0x400, 0x0, '@@#^!&@/^_$\\\x00'}, {{@_ha_fsid={[0x137e4cc9, 0xffff1ab2]}, {0xe3, 0x101, 0x0, 0x3}}, 0x1, 0x0, '\x00'}, {{@align=0x80000001, {0xd, 0x6, 0x7, 0xdddd}}, 0x81, 0x0, '\x00'}, {{@_ha_fsid={[0x4, 0x8]}, {0xfff2, 0x447, 0x7}}, 0x1, 0x0, '\x00'}, {{@align=0x6, {0x2, 0xfffb, 0xfff, 0x200}}, 0xb, 0x0, '!\x00'}, {{@align=0x1, {0x4, 0x3, 0x9, 0x3}}, 0x8, 0x0, '$.$^,\x00'}]}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 267.352877ms ago: executing program 3 (id=29): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0603d0f, &(0x7f00000001c0)={0xfffffffd, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006b0000/0x2000)=nil, 0x2000, 0x8) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) 165.928891ms ago: executing program 1 (id=30): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x69a8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x4044014) r0 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'macvtap0\x00', 0x200}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000001c0)={0x8001, 0x9}) sync_file_range(r0, 0x7f, 0x1, 0x3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000340)=""/50, 0x32, 0x160, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000400)=0xfffffffb, 0x4) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$NILFS_IOCTL_SYNC(r3, 0x80086e8a, &(0x7f0000002480)) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000024c0)={{0xe, 0x353}, 0x100, './file0\x00'}) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) write$selinux_user(r6, &(0x7f0000002640)={'system_u:object_r:initrc_exec_t:s0', 0x20, 'root\x00'}, 0x28) r7 = fcntl$dupfd(r0, 0x0, r5) bind$inet(r7, &(0x7f0000002680)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000026c0)={0x400, 0x10, 0x4927f081, 0x2}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x1c, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000894}, 0x4040000) read$FUSE(r7, &(0x7f0000002800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r7, &(0x7f0000004840)={0x20, 0x0, r9, {0x0, 0x4, 0x101, 0x88b5}}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000004880)='./binderfs/custom0\x00', 0x802, 0x0) r10 = dup2(r3, r8) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000049c0)={r3, r10, 0x1, 0xe3, &(0x7f00000048c0)="eee0591c1f6bac990134b2cf14e69578b0187ac98f4031ce9bda5741f48f940b44546af79d011b8c5afd46ec7b070df6ecab4566052d5f1c34910fddbb43458e005527c018abf88d1ab7aa3c4b123c7a00f9ed7f1550e41b823ea3f19b41f47807dc9a172adb97a8c4f29ebc042a86a62e853b5c96e20a6fc9bb87eb346000ef026c984da35805663377f70f65ddda1bb9be7adecad854f4ac7c2e0093cc59cc4be41e793c7b88a5d2b3c427715b0d8703dd37af1db46b5b034e4ef40d9907be11878d3586725b05ee99d02eae014f94374df3a3598110c82bfbc53631a317490b2f0b", 0x7, 0x8, 0x7, 0x3, 0x939, 0x2, 0x2, 'syz0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000004b80)={&(0x7f0000004a80), 0xc, &(0x7f0000004b40)={&(0x7f0000004ac0)={0x54, 0x3, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x2}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x2, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, &(0x7f0000004c00)) 165.541551ms ago: executing program 1 (id=31): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$usbmon(&(0x7f0000000480), 0x8, 0x80801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/snmp\x00') (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/snmp\x00') readv(r1, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/178, 0xb2}], 0x1) pselect6(0x40, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x808, 0xfffffffffffffffd, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) pselect6(0x40, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x808, 0xfffffffffffffffd, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bind$inet(r0, &(0x7f0000000640)={0x2, 0x4e23, @multicast1}, 0x92b6eb41a041ebfd) (async) bind$inet(r0, &(0x7f0000000640)={0x2, 0x4e23, @multicast1}, 0x92b6eb41a041ebfd) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000680)={0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000680)={0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="4011870000004970305f8a5acaa7d55cd81866f0185481fc08c2cb2200545c42ae9763b0495d806dcdc3fc47b8a0a795619685a1c9ab7d526b1e4024897b5592bbe6a1ab13e2a76278c04dd6273cd7da9f7827f3d888fc704906a5cf59be38d4b2967a10afde15257d74982991e8358123110775e7d2204ff7da994e876034057ecf70ae858a12ef798d146e56c109a3c2c5c364ae4eb6a846595d21e8c62a7d07d1563c3efdb6916860e8eacd23770e94f8c6bb9e6e8a88eac719cb3340f338dc25a317f1a03c16f108578b6253c0d05f860c266fda4b24f12903cdf89a16f2a6b536ab901791ce1cd34d722f525f7323220c5f002b1153cd7b96c01fa88570b6102e630b8c31fffa238775e4eeabc1d2f0e502678791bf407bb5198bd03ef63f23b0c8154e387eb0806a4080c96dcb7d07cf20dc5acae955f7a83d3ec0b01de1b9175e10948361edfa43f76966bc7b18da626680c14c3dcd253248ee9a444930b2e24e0a35adf47cc2d9734c"], 0x0, 0x0}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x41401, 0x155) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x41401, 0x155) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x102) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80143, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140)={0x1d, r7}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="05000000a801000007000000000000007c55dcb4a0c46e261715bda659964c8f415ac95dd74446c9009d1f5cf24d8ea491e00f20a58d", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0300000001000000020000003a020000f02499f66e914cc03496693add5b6d5fbdf834e59b42950fb7cbc28d379ef43675c03012de2c62487958b907488e371c089076ee82df5ace04e5b9998fa69925"], 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000004c0)="2400000011005f0414f9f407c636929d6c68bc16c672e866aa6ea10009041f810000000e0000000000000008d8cc0000ffe40086eadd784c8d65cb6f485c66660c7cc2146875c7df21103bb6ca8816d2", 0x50) pread64(r4, &(0x7f00000000c0)=""/23, 0x17, 0x1) (async) pread64(r4, &(0x7f00000000c0)=""/23, 0x17, 0x1) 146.632882ms ago: executing program 3 (id=32): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1) (async) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000100)="83", 0x1) (async) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0x6, 0x101, {{0x5, 0x4, 0x0, 0x30, 0x14, 0x68, 0x0, 0xf0, 0x0, 0x0, @loopback, @broadcast}}}}) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$P9_RREAD(r5, &(0x7f0000000000)={0x32, 0x75, 0x2, {0x27, "6b7192411fc65c6bf4442aacad6713103505ce01f7a931f842446d64d459643a647d6768d82ef1"}}, 0x32) (async) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$igmp(0x2, 0x3, 0x2) (async) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000200)={0x0, 0x6a, 0xff}, &(0x7f00000003c0)={'enc=', 'pkcs1', ' hash=', {'sha256-asm\x00'}}, &(0x7f0000000440)="977c306c0a9855129be898f0f1e16acad8dc46e38799d2e7e8c3e2fa28ac8aa3332fc5461898d0368b1bed40c6afce4804132a7e8ada00f6f44958e08cb5e42bef5b33b419966874aca1b645854ff44d29d237d0a735ace2dfca4b609b3f80c254227449c9b554909cfa", &(0x7f00000004c0)=""/255) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES64=r7], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4180, 0x0) (async) sendto$packet(r2, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 111.274954ms ago: executing program 3 (id=33): r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102380, 0x18fec}, {0x0, 0x41}], 0x2, 0x0, 0x4) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 0s ago: executing program 3 (id=34): ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4008}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20, 0x4000}}], 0x1, 0x14040804) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="23e8"], 0x28}}, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x101) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_NMI(r4, 0xae9a) openat$cgroup(r3, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) (async) r6 = openat$cgroup(r3, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 22.223021][ T36] audit: type=1400 audit(1789937238.380:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.226488][ T287] cgroup: Unknown subsys name 'net' [ 22.246185][ T36] audit: type=1400 audit(1789937238.380:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.273554][ T36] audit: type=1400 audit(1789937238.410:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.274013][ T287] cgroup: Unknown subsys name 'devices' [ 22.407603][ T287] cgroup: Unknown subsys name 'hugetlb' [ 22.413267][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.529468][ T36] audit: type=1400 audit(1789937238.690:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.552676][ T36] audit: type=1400 audit(1789937238.690:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.577592][ T36] audit: type=1400 audit(1789937238.690:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.603273][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.612161][ T36] audit: type=1400 audit(1789937238.770:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.637651][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.637789][ T36] audit: type=1400 audit(1789937238.770:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.672008][ T36] audit: type=1400 audit(1789937238.790:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.697596][ T36] audit: type=1400 audit(1789937238.790:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.598094][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.605254][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.612455][ T296] bridge_slave_0: entered allmulticast mode [ 23.618892][ T296] bridge_slave_0: entered promiscuous mode [ 23.625235][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.632466][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.639666][ T294] bridge_slave_0: entered allmulticast mode [ 23.646028][ T294] bridge_slave_0: entered promiscuous mode [ 23.653800][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.660985][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.668116][ T294] bridge_slave_1: entered allmulticast mode [ 23.674435][ T294] bridge_slave_1: entered promiscuous mode [ 23.686739][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.693800][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.700943][ T296] bridge_slave_1: entered allmulticast mode [ 23.707326][ T296] bridge_slave_1: entered promiscuous mode [ 23.772596][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.779708][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.786847][ T297] bridge_slave_0: entered allmulticast mode [ 23.793200][ T297] bridge_slave_0: entered promiscuous mode [ 23.799723][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.807175][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.814269][ T295] bridge_slave_0: entered allmulticast mode [ 23.820610][ T295] bridge_slave_0: entered promiscuous mode [ 23.828957][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.836079][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.843152][ T297] bridge_slave_1: entered allmulticast mode [ 23.849501][ T297] bridge_slave_1: entered promiscuous mode [ 23.866746][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.873819][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.880906][ T295] bridge_slave_1: entered allmulticast mode [ 23.887255][ T295] bridge_slave_1: entered promiscuous mode [ 24.014837][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.021973][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.029563][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.036630][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.047778][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.054859][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.062199][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.069305][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.081426][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.088536][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.095863][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.102905][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.152374][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.159491][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.166807][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.173847][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.196104][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.203431][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.211345][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.218580][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.226320][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.233584][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.240944][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.248308][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.266122][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.273165][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.280864][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.287910][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.310983][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.318104][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.326085][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.333131][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.341664][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.348761][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.376087][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.383155][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.400071][ T296] veth0_vlan: entered promiscuous mode [ 24.409330][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.416422][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.427179][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.434255][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.459812][ T295] veth0_vlan: entered promiscuous mode [ 24.480938][ T294] veth0_vlan: entered promiscuous mode [ 24.487802][ T296] veth1_macvtap: entered promiscuous mode [ 24.502528][ T295] veth1_macvtap: entered promiscuous mode [ 24.534340][ T294] veth1_macvtap: entered promiscuous mode [ 24.544846][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.588765][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.613865][ T297] veth0_vlan: entered promiscuous mode [ 24.641693][ T297] veth1_macvtap: entered promiscuous mode [ 24.647576][ T313] kvm: emulating exchange as write [ 24.728529][ T323] kvm: Disabled LAPIC found during irq injection [ 24.736367][ T323] netlink: 'syz.1.2': attribute type 13 has an invalid length. [ 24.744227][ T323] fuse: Unknown parameter '' [ 24.925616][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.975269][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.005241][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.055291][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.065265][ T10] usb 1-1: device descriptor read/64, error -71 [ 25.126632][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.137871][ T310] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 25.146981][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.156350][ T310] usb 3-1: config 0 descriptor?? [ 25.166431][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.176751][ T45] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 25.189728][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 25.198799][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.206787][ T9] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 25.206823][ T9] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.206852][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 25.206878][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 25.206903][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.212943][ T9] usb 2-1: config 0 descriptor?? [ 25.264221][ T45] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 25.315381][ T10] usb 1-1: device descriptor read/64, error -71 [ 25.365011][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 25.371090][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 25.379983][ T310] usb 3-1: USB disconnect, device number 2 [ 25.464975][ T45] usb 4-1: USB disconnect, device number 2 [ 25.555508][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.666434][ T9] hid-multitouch 0003:18D1:5028.0001: No inputs registered, leaving [ 25.676730][ T9] hid-multitouch 0003:18D1:5028.0001: hidraw0: USB HID v0.04 Joystick [HID 18d1:5028] on usb-dummy_hcd.1-1/input0 [ 25.695237][ T10] usb 1-1: device descriptor read/64, error -71 [ 25.805302][ T324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.865803][ T331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.874377][ T331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.883349][ T9] usb 2-1: USB disconnect, device number 2 [ 25.935311][ T10] usb 1-1: device descriptor read/64, error -71 [ 25.956492][ T324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.967570][ T324] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 25.976680][ T324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.985797][ T324] usb 3-1: config 0 descriptor?? [ 26.006084][ T334] netlink: 'syz.3.7': attribute type 27 has an invalid length. [ 26.047891][ T10] usb usb1-port1: attempt power cycle [ 26.260850][ T347] FAULT_INJECTION: forcing a failure. [ 26.260850][ T347] name failslab, interval 1, probability 0, space 0, times 1 [ 26.273646][ T347] CPU: 1 UID: 0 PID: 347 Comm: syz.3.11 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 26.273682][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.273704][ T347] Call Trace: [ 26.273713][ T347] [ 26.273726][ T347] __dump_stack+0x21/0x30 [ 26.273776][ T347] dump_stack_lvl+0x140/0x1c0 [ 26.273810][ T347] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.273841][ T347] dump_stack+0x19/0x20 [ 26.273863][ T347] should_fail_ex+0x3c2/0x510 [ 26.273908][ T347] ? kobject_get_path+0xc3/0x2d0 [ 26.273944][ T347] should_failslab+0xac/0x100 [ 26.273978][ T347] __kmalloc_noprof+0x69/0x510 [ 26.273996][ T347] ? kasan_save_alloc_info+0x3a/0x50 [ 26.274010][ T347] ? kobject_get_path+0xc3/0x2d0 [ 26.274050][ T347] ? __kasan_kmalloc+0x96/0xb0 [ 26.274080][ T347] kobject_get_path+0xc3/0x2d0 [ 26.274113][ T347] kobject_uevent_env+0x2bc/0x7e0 [ 26.274139][ T347] kobject_uevent+0x21/0x40 [ 26.274156][ T347] driver_bound+0x449/0x480 [ 26.274171][ T347] really_probe+0x7ef/0x8b0 [ 26.274205][ T347] __driver_probe_device+0x193/0x280 [ 26.274227][ T347] driver_probe_device+0x54/0x3f0 [ 26.274249][ T347] __driver_attach+0x422/0x5e0 [ 26.274276][ T347] bus_for_each_dev+0x249/0x2d0 [ 26.274297][ T347] ? __cfi___driver_attach+0x10/0x10 [ 26.274311][ T347] ? __cfi_bus_for_each_dev+0x10/0x10 [ 26.274345][ T347] ? __kasan_kmalloc+0x96/0xb0 [ 26.274376][ T347] ? _raw_spin_unlock+0x45/0x60 [ 26.274396][ T347] ? klist_add_tail+0x1dd/0x220 [ 26.274433][ T347] driver_attach+0x46/0x50 [ 26.274447][ T347] bus_add_driver+0x393/0x730 [ 26.274469][ T347] driver_register+0x2b7/0x3c0 [ 26.274505][ T347] usb_gadget_register_driver_owner+0xfc/0x270 [ 26.274534][ T347] raw_ioctl+0x144c/0x37a0 [ 26.274556][ T347] ? __cfi_raw_ioctl+0x10/0x10 [ 26.274581][ T347] ? selinux_file_ioctl+0x732/0x1480 [ 26.274599][ T347] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 26.274620][ T347] ? __fget_files+0x2bc/0x330 [ 26.274659][ T347] ? bpf_lsm_file_ioctl+0xd/0x20 [ 26.274688][ T347] ? security_file_ioctl+0x3e/0x110 [ 26.274710][ T347] ? __cfi_raw_ioctl+0x10/0x10 [ 26.274733][ T347] __se_sys_ioctl+0x123/0x1b0 [ 26.274754][ T347] __x64_sys_ioctl+0x7f/0xa0 [ 26.274775][ T347] x64_sys_call+0x1878/0x2ee0 [ 26.274809][ T347] do_syscall_64+0x57/0xf0 [ 26.274829][ T347] ? clear_bhb_loop+0x50/0xa0 [ 26.274856][ T347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.274891][ T347] RIP: 0033:0x7f31d939ddeb [ 26.274911][ T347] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 26.274925][ T347] RSP: 002b:00007f31da1fcf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 26.274971][ T347] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f31d939ddeb [ 26.274987][ T347] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 26.275001][ T347] RBP: 00007f31da1fdfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 26.275018][ T347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.275033][ T347] R13: 0000200000000240 R14: 0000000000000005 R15: 0000000000000000 [ 26.275046][ T347] [ 26.395493][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 26.620263][ T10] usb 1-1: device descriptor read/8, error -71 [ 26.628648][ T324] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 26.642785][ T324] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input5 [ 26.656146][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.715923][ T324] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 26.756878][ T10] usb 1-1: device descriptor read/8, error -71 [ 26.815365][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 26.821705][ T64] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 26.829959][ T64] usb 4-1: config 0 has no interface number 0 [ 26.836327][ T327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.842761][ T64] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 26.846371][ T327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.858641][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.869869][ T64] usb 4-1: Product: syz [ 26.874084][ T64] usb 4-1: Manufacturer: syz [ 26.878909][ T64] usb 4-1: SerialNumber: syz [ 26.884629][ T64] usb 4-1: config 0 descriptor?? [ 26.890653][ T64] smsc95xx v2.0.0 [ 26.985247][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.005251][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 27.026399][ T10] usb 1-1: device descriptor read/8, error -71 [ 27.136217][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.146422][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 27.159806][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 27.169214][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.177814][ T10] usb 1-1: device descriptor read/8, error -71 [ 27.217128][ T363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.225789][ T363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.261174][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 27.261192][ T36] audit: type=1400 audit(1789937243.420:141): avc: denied { read } for pid=364 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 27.289341][ T10] usb usb1-port1: unable to enumerate USB device [ 27.297921][ T64] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 27.309363][ T64] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 27.319056][ T64] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 27.330021][ T64] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 27.339760][ T64] usb 4-1: USB disconnect, device number 3 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK Stopping crond: stopped /usr/sbin/crond (pid 195) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 149) [ 27.670751][ T36] audit: type=1400 audit(1789937243.830:142): avc: denied { search } for pid=375 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.721881][ T36] audit: type=1400 audit(1789937243.880:143): avc: denied { mmap_zero } for pid=379 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 Stopping network: [ 27.789924][ T36] audit: type=1400 audit(1789937243.950:144): avc: denied { setopt } for pid=358 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.835249][ T36] audit: type=1400 audit(1789937243.950:145): avc: denied { bind } for pid=358 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.871989][ T36] audit: type=1400 audit(1789937243.960:146): avc: denied { create } for pid=358 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 27.897206][ T391] FAULT_INJECTION: forcing a failure. [ 27.897206][ T391] name failslab, interval 1, probability 0, space 0, times 0 [ 27.912281][ T36] audit: type=1400 audit(1789937243.980:147): avc: denied { write } for pid=358 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 27.933209][ T391] CPU: 1 UID: 0 PID: 391 Comm: syz.3.16 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 27.933244][ T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.933259][ T391] Call Trace: [ 27.933266][ T391] [ 27.933275][ T391] __dump_stack+0x21/0x30 [ 27.933317][ T391] dump_stack_lvl+0x140/0x1c0 [ 27.933353][ T391] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.933389][ T391] dump_stack+0x19/0x20 [ 27.933422][ T391] should_fail_ex+0x3c2/0x510 [ 27.933452][ T391] should_failslab+0xac/0x100 [ 27.933484][ T391] kmem_cache_alloc_noprof+0x42/0x410 [ 27.933509][ T391] ? getname_flags+0xcc/0x6b0 [ 27.933536][ T391] getname_flags+0xcc/0x6b0 [ 27.933564][ T391] user_path_at+0x2b/0x60 [ 27.933595][ T391] __se_sys_mount+0x28a/0x480 [ 27.933623][ T391] ? __x64_sys_mount+0xf0/0xf0 [ 27.933648][ T391] ? __kasan_check_write+0x18/0x20 [ 27.933673][ T391] ? fpregs_restore_userregs+0x11c/0x260 [ 27.933705][ T391] __x64_sys_mount+0xc3/0xf0 [ 27.933732][ T391] x64_sys_call+0x2021/0x2ee0 [ 27.933755][ T391] do_syscall_64+0x57/0xf0 [ 27.933778][ T391] ? clear_bhb_loop+0x50/0xa0 [ 27.933809][ T391] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.933838][ T391] RIP: 0033:0x7f31d939e159 [ 27.933857][ T391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.933877][ T391] RSP: 002b:00007f31da1ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.933903][ T391] RAX: ffffffffffffffda RBX: 00007f31d9625fa0 RCX: 00007f31d939e159 [ 27.933921][ T391] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 27.933938][ T391] RBP: 00007f31d943506b R08: 0000200000000240 R09: 0000000000000000 [ 27.933955][ T391] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 27.933970][ T391] R13: 00007f31d9626038 R14: 00007f31d9625fa0 R15: 00007ffce92d2968 [ 27.933988][ T391] [ 28.002004][ T36] audit: type=1400 audit(1789937243.990:148): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.149851][ T36] audit: type=1400 audit(1789937244.030:149): avc: denied { write } for pid=150 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=420 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.184441][ T36] audit: type=1400 audit(1789937244.030:150): avc: denied { remove_name } for pid=150 comm="dhcpcd" name="sock" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.206900][ T311] usb 1-1: new high-speed USB device number 6 using dummy_hcd OK Stopping iptables: OK Stopping system message bus: done [ 28.355405][ T311] usb 1-1: device descriptor read/64, error -71 Stopping klogd: OK Stopping acpid: [ 28.539601][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 28.551460][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 28.595235][ T311] usb 1-1: device descriptor read/64, error -71 [ 28.610836][ T310] usb 3-1: USB disconnect, device number 3 [ 28.769462][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 28.781175][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 28.792504][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 28.803635][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 28.814728][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 28.825934][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 28.836745][ T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 28.845052][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 28.856125][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 28.867687][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 28.878637][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 28.889662][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 28.900749][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 28.911839][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 28.923140][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 28.934097][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 28.945306][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 28.956328][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 28.965292][ T311] usb 1-1: device descriptor read/64, error -71 [ 28.967515][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 28.984203][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 28.995730][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 29.007054][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 29.019835][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 29.032872][ T9] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 29.046138][ T9] ax88179_178a 2-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, e2:e0:5e:9f:de:06 [ 29.063248][ T9] usb 2-1: USB disconnect, device number 3 [ 29.069483][ T9] ax88179_178a 2-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 29.205246][ T311] usb 1-1: device descriptor read/64, error -71 [ 29.316808][ T311] usb usb1-port1: attempt power cycle [ 29.346763][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.435018][ T461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.32'. [ 29.495275][ T310] usb 3-1: device descriptor read/64, error -71 OK Stopping syslogd: stopped /sbin/syslogd (pid 93) OK [ 29.655253][ T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 29.689207][ T311] usb 1-1: device descriptor read/8, error -71 umount: can't remount debugfs re[ 29.705291][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd ad-only [ 29.745235][ T310] usb 3-1: device descriptor read/64, error -71 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.128 closed by remote host. [ 29.836952][ T311] usb 1-1: device descriptor read/8, error -71 [ 30.007417][ T12] bridge_slave_1: left allmulticast mode [ 30.013110][ T12] bridge_slave_1: left promiscuous mode [ 30.018759][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.026326][ T12] bridge_slave_0: left allmulticast mode [ 30.031984][ T12] bridge_slave_0: left promiscuous mode [ 30.038154][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.157621][ T12] veth1_macvtap: left promiscuous mode [ 30.163146][ T12] veth0_vlan: left promiscuous mode [ 30.265344][ T9] usb 2-1: device not accepting address 4, error -71 [ 30.408013][ T12] bridge_slave_1: left allmulticast mode [ 30.413680][ T12] bridge_slave_1: left promiscuous mode [ 30.419386][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.427109][ T12] bridge_slave_0: left allmulticast mode [ 30.432758][ T12] bridge_slave_0: left promiscuous mode [ 30.438779][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.446636][ T12] bridge_slave_1: left allmulticast mode [ 30.452290][ T12] bridge_slave_1: left promiscuous mode [ 30.458082][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.465684][ T12] bridge_slave_0: left allmulticast mode [ 30.471322][ T12] bridge_slave_0: left promiscuous mode [ 30.477110][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.484836][ T12] bridge_slave_1: left allmulticast mode [ 30.491141][ T12] bridge_slave_1: left promiscuous mode [ 30.496776][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.504364][ T12] bridge_slave_0: left allmulticast mode [ 30.510184][ T12] bridge_slave_0: left promiscuous mode [ 30.515984][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.730678][ T12] veth1_macvtap: left promiscuous mode [ 30.736254][ T12] veth0_vlan: left promiscuous mode [ 30.741881][ T12] veth1_macvtap: left promiscuous mode [ 30.747463][ T12] veth0_vlan: left promiscuous mode [ 30.753223][ T12] veth1_macvtap: left promiscuous mode [ 30.758822][ T12] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 31.896787][ T481] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 31.903593][ T481] ACPI: PM: Preparing to enter system sleep state S5 [ 31.910673][ T481] kvm: exiting hardware virtualization [ 31.916244][ T481] reboot: Power down serialport: VM disconnected.