last executing test programs: 1.946236739s ago: executing program 0 (id=1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000035000/0x2000)=nil, 0x2000, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000285000/0x2000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0xd, 0x6, @multicast}, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) setns(r6, 0x24020000) syz_clone(0xb10e7180, 0x0, 0x0, 0x0, 0x0, 0x0) 1.94558319s ago: executing program 2 (id=3): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010020000904000000010120000a2401003d00000000000c240b03030000000000000014240201010200030000000000000000000000001324030201030001"], 0x0) 1.792933619s ago: executing program 1 (id=5): socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x34, &(0x7f0000000000)={0x35, 0x9, 0x8}) close(0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) close(0x3) socket(0x2, 0xa, 0x300) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x3, 0x78e, 0x0, 0x0, 0x1000, 0x1, r0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x0, {0x4}}, 0x18) r6 = dup(r4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000140)={0x2, 0x3, 0x7fff, 0x1, 0x2, 0xfffffffb, 0xd, 0x2, 0xabc, 0x7, 0x5, 0x1, 0x8000, 0x5}) syz_ublk_setup_queues(r6, r3, &(0x7f0000000180)={0x0, 0x2, 0x200, 0xfffffffe, 0x3cb, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4707, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa3f4, 0x10, 0x2, 0x17d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x840a, 0x2000, 0x1, 0x77, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000, 0x1, 0x19f}}], 0x1, 0x0, 0x0) 1.698792803s ago: executing program 1 (id=6): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x2, 0x1, 0x6, 0x80}, {0xbe, 0x5, 0xfd, 0x5}, {0x101, 0x6, 0x7, 0x9}, {0x7, 0x5, 0x4, 0x2}]}, 0x10) open(&(0x7f0000000180)='.\x00', 0x0, 0xd0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', &(0x7f0000000280)={0x234080, 0x40, 0x2}, 0x18) openat(r4, &(0x7f00000002c0)='./file2\x00', 0x8000, 0x10) r5 = open(&(0x7f0000000140)='./file2\x00', 0xc0000, 0xa) ioctl$BTRFS_IOC_DEFRAG(r5, 0x4c06, 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x4000007, 0x10, r5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) 1.698284503s ago: executing program 1 (id=7): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff000000070581020002"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1300}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x701, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)={0x35c, r4, 0x120, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b86600}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x714d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd526}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5877}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x118, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd78}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f8e}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3fd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb75}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8832}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40080) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000080)='devlink\x00', &(0x7f00000002c0)='./file0\x00', r1) 1.028618035s ago: executing program 0 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xe3280a0b9488a6ae, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0203ff03300000002abd7000fbdbdf2505000900c8000000c19b3c4c497b4056a509e035b7e065060d90dd67e2aad7d2e100000000000000030006003c00000002004e22ac1414bb000000000000000002000100000004d4000007fd00000000030005000000000002004e21ac1e01010000000000000000210008000008"], 0x180}, 0x1, 0x7}, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000380)=[@uexit={0x0, 0x18, 0x5}, @nested_load_syzos={0x136, 0x78, {0x2, 0x10000, [@enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @rdmsr={0x66, 0x18, {0xc0011022}}, @nested_amd_vmload={0x182, 0x18, 0x2}]}}, @out_dx={0x6a, 0x28, {0xe7d, 0x6, 0xfffffffffffffffe}}, @out_dx={0x6a, 0x28, {0x1441, 0x0, 0x8}}, @code={0xa, 0x5a, {"b9800000c00f3235008000000f300fc75992d9fc660f38824200450f233948b870330000000000000f23c00f21f835020004000f23f8895204c4a27d465b7865410f08c441fa7e1c92"}}, @wr_crn={0x67, 0x20, {0x3, 0x3}}], 0x15a}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000540)={0x7, 0x0, [{0x4, 0x85af, 0x0, 0x1, 0x200, 0x7, 0x7}, {0x2, 0x4, 0x2, 0x4982, 0xffff, 0x7, 0x9}, {0x7, 0x0, 0x6, 0x6cc5, 0x8000, 0x60000000, 0x9}, {0x2, 0xfff, 0x3, 0x2, 0x2, 0x1998, 0x8}, {0x40000000, 0x8, 0x6, 0x8, 0x6, 0x6, 0x1}, {0xa, 0x63f, 0x4, 0xbc0, 0x0, 0x7}, {0xb, 0xff, 0x4, 0x3, 0x3, 0x400, 0xe}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x4b, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000100)=0xbffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000180)={@desc={0x1, 0x0, @desc3}, 0x1, 0x0, '\x00', @auto=[0x2d]}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x34, 0x1, '\x00', 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_PMU_CAPABILITY(r5, 0x4068aea3, &(0x7f0000000080)={0xd4, 0x0, 0x1}) 712.034527ms ago: executing program 2 (id=9): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001e00010000000000000000eb0100000008000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001e00010000000000000000eb0100000008000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) open(0x0, 0x64842, 0x1a7) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300010009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 514.978327ms ago: executing program 1 (id=10): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000040)={0x0, 0x2, 0x7, 0xb0, 0x1, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000200)=[@acquire_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/47, 0x2f, 0x1, 0x1}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x2}], 0x94, 0x0, &(0x7f0000000280)="b92fc6d768297bd8043df90b4cd6fe49e9d1f7ddc96153d50aeb286e97d42d64617112b10886167d114f79a58ceae4b962d1670e28ffb59c2e93644e02208149528698d518eaabe7a20b9b12e964aac45e12d0cc79fc712e17a92c093508fecaeaedc6360e1236b43942e03a473b26f5ed17bbe310318d770ea068b9c3910af671a51d57b1ac3d2fa233dcea40f2cb795fa664a2"}) r3 = openat$cgroup_type(r2, &(0x7f0000000380), 0x2, 0x0) write$cgroup_type(r3, &(0x7f00000003c0), 0x9) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=@newae={0x110, 0x1e, 0x10, 0x70bd29, 0x25dfdbfb, {{@in6=@remote, 0x4d3, 0xa, 0xcc}, @in=@rand_addr=0x64010102, 0xf6, 0x3504}, [@algo_comp={0xb2, 0x3, {{'lzjh\x00'}, 0x350, "be624a468e3e5e03ea4e6fb2840398dfab9011bbc0448a1c277184dd6d3082db29eab1a0e4261b7e27b788fb55246479b01bf81390da4ffb019c0574c62b01b6853eb4cfe59726364fec9ed85338e3a17d3a26070be4c9f472c58e978fac33f81fb4bfaeeefd1d5384f3"}}, @encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e23, @in6=@private2}}]}, 0x110}, 0x1, 0x0, 0x0, 0xd5}, 0x40) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x80100, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f0000000640)) r6 = fsopen(&(0x7f0000000680)='ocfs2_dlmfs\x00', 0x0) r7 = fsmount(r6, 0x1, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xd8, 0x26}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x80}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfb}, @NL80211_STA_WME_MAX_SP={0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000880)={{0xa, 0x4e21, 0x80000000, @mcast1, 0x5}, {0xa, 0x4e22, 0xc8d, @ipv4={'\x00', '\xff\xff', @local}, 0x400}, 0x1, {[0x6, 0x5, 0xb41, 0x6, 0x6, 0x5, 0x3ff, 0x2328703b]}}, 0x5c) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r7) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x220, r10, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33e3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xca18}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xab, 0x3, "bde4610e8e63e401cc0cb63448b4d5d60520fa705fb68a14420510aeae4db225988ba0d24e3704a75f3560866553a40b51b465740038829ed86a1b9c88a8f2c9ca1323462335d5248dbd1d4dfcbeaa7dde72f0e82c94a0404e779b731ca792cdb2f477c2db82b8aff8e34544e12946ce8d66e78efa7344eebfb210fd50762df1c75c48588d1fb82270ff61273ade5e3bc19cd199871317c2ee2cd5b23f48d57e3deafd5715304c"}]}, @TIPC_NLA_SOCK={0xf0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8e64}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf89}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcce}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x27}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000805}, 0x804) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = open(&(0x7f0000000c40)='./file0\x00', 0x200000, 0x80) write$selinux_attr(r11, &(0x7f0000000c80)='system_u:object_r:var_t:s0\x00', 0x1b) r12 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2) write(r12, &(0x7f0000000d00)="728d1322550d5686011243a15753e5fd203c9065cf1c298a7a7a3bf3d20902306909d406f786286a40c3ad98ce76092b6ab902dac87bce3f877b5f59e99584dc4b211bb2085ff967a253ff88152cc4d03440a9cf25995b34dafacd8fbf0bbab8873c9c4d1ee9db7b6ab1ce64f320cb9d2a1fbda304d2ce0aa47a36736b5563c2277c533190080945ebb9241e22e04d4653701e0b8d879b685a8624d4b79ed6da", 0xa0) sendmsg$AUDIT_TTY_GET(r11, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x10, 0x3f8, 0x0, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}}, 0x20000000) r13 = memfd_secret(0x80000) r14 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000ec0)=[{r13, 0xea8514da8183e09f}, {r3, 0x4}, {r3, 0x4022}, {r2, 0x8000}, {r14, 0x100}], 0x5, 0x3ff) getsockopt$inet_buf(r7, 0x0, 0x2e, &(0x7f0000000f00)=""/28, &(0x7f0000000f40)=0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000f80), 0x40000, 0x0) 514.267538ms ago: executing program 1 (id=11): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000000f000/0x3000)=nil, 0x3000}, 0x5}) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) 510.210529ms ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x1) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3a7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x80002, 0x1, 0x6}}, 0x30) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async, rerun: 32) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000000)='esdfs\x00', 0x8410, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x20000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0203ff03300000002abd7000fbdbdf2505000900c8000000c1"], 0x180}, 0x1, 0x7}, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000340)=ANY=[]) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (rerun: 64) pread64(r9, &(0x7f0000002140)=""/17, 0x11, 0x0) 442.787796ms ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x81, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb2a416, 0x4) openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r1, 0x2, &(0x7f00000000c0)="723039f0a0ccd48e9f5646ff972bacf4c91afd9ec5e1305d013fab") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0xf, 0x9, 0xfffe}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42480, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xd, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x2}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f00000001c0)={&(0x7f0000000340)="c945", 0x2}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0801000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x7fffffffffffffff, 0x10013, 0x9, 0x800000000003, 0x4, 0x39c4f771, 0x10, 0x8, 0x7ffffffffffffffd, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0xc, 0x7, 0x8000000000000001], 0x0, 0x110900}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x9}) ioctl(r2, 0x8b32, &(0x7f0000000040)) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') pread64(r8, &(0x7f0000001b80)=""/4084, 0xff4, 0x10000000000007f) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x220000, 0x20, 0x4}, 0x18) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r8, 0x80186e83, &(0x7f0000000100)) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0) r10 = openat(r9, &(0x7f0000000340)='unbind\x00', 0x1, 0x0) write(r10, &(0x7f0000000380)='serial8250', 0xa) 402.464196ms ago: executing program 3 (id=15): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0xe, 0x943f41) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r5, 0x0, 0x190ec) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10004, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000100)="660f6fd23e0f97779f6635000000200f22c0d3e80f01cb0f0091988e660ff48ac1f7f2ffa7d319260ffc3e0000baf80c66b816fd318366efbafc0ca1a107", 0x3e}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000817000/0x3000)=nil, 0xfffffffffffffd51, &(0x7f0000000400)='{\x00') (async) ioctl$FIBMAP(r7, 0x5385, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x14, 0x1, 0x81, 0x0, 0x9, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) (async) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r8}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 171.704116ms ago: executing program 3 (id=16): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x112) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f00000007c0)=""/217, 0xd9}, {&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f00000011c0)=""/4099, 0x1003}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000380)=""/282, 0x11a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/231, 0xe7}, {&(0x7f0000000500)=""/145, 0x91}], 0x9}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x3}], 0x8, 0x0, 0x0) (async) write(r0, &(0x7f0000000000)='3', 0x4e) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) (async) eventfd2(0x800, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000008c0)={'bridge_slave_1\x00', &(0x7f00000005c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x4, 0x1, 0x40000000, 0x2, 0x7fffffff, 0x2, 0x6, 0x7, 0xaad, 0x8, 0x7, 0x4, 0xc29, 0x0, 0x6, 0x1, 0x6, 0x18, 0x2, 0xfffffffd, 0x5, 0x8, 0x6, 0xeaa3, 0x305, 0x4, 0x9, 0x6, 0x7fffffff, 0x8, 0x8, 0xabd, 0x7, 0x4, 0x7ac, 0x7f, 0x6, 0x8001, 0xaa, 0x1, 0x5, 0x2a8b, 0x26d, 0x918, 0x8, 0x1ff, 0x9, 0x8, 0x2, 0x200, 0x5, 0x9, 0x5, 0x9e, 0xff, 0xfffff801, 0x9, 0x978, 0x9, 0xfffffffe, 0x8, 0xfffffffe, 0x5b, 0x10, 0x80, 0x87b, 0x4, 0x80000000, 0x10000, 0x5, 0x8, 0x1, 0x1, 0x400, 0x8b2, 0x80, 0xc, 0x6, 0x5, 0x3, 0x0, 0xffffffab, 0x10000, 0x4, 0x7, 0xd0a1, 0x101, 0x5531, 0x5, 0x0, 0x6, 0x4, 0xfffffff8, 0x1, 0xfd66, 0x10000, 0x3, 0x2fba, 0x5fb4, 0x7, 0xfffffbff, 0x9, 0x0, 0x10001, 0x6, 0x7, 0x6, 0x389, 0x31c0, 0xfffffff7, 0xe40, 0x4, 0xfffffff7, 0x0, 0x5, 0xffff, 0x0, 0x80000001, 0x7a2, 0x0, 0x8, 0x7, 0xfffffffb, 0x1, 0x7, 0x67, 0xf8000000, 0x6], "334366fa08c85918dfb2c685a9e6b8c7d65b7cae655e5f19a63da3a2e30c515bd4e3ffc47ba781a07316526fef228ec8d6a5e12e22ac9f3b6d64e250ab0cc6d89feeb84f23cac25d1dd162871f8def00666b6e929d7490fdb81795ecfdfe4143e8d2fe2c96e7a31d1646a9074e16ae7425280c10900d930034e658e986b421b0c1deb4740d6348e11471ecfceb0d9cca995d40e3122663ea79b1c51e11f9c40cd0bd89827c7a90b491a03b495d52b25c5fbe93e00d83f405f27190eea389c3d556797d263b1faf42a4efa217f248c9d9b13d"}}) (async) io_setup(0x2, 0x0) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="700088caffffffffffffaaaaaaaaaaaa0800451c002000004000002f9078ac1e0001e000000120008100004890780300000001000000d54ea11c8feb0966b00ce7d7e82e663e9aa08703cb5dccf0e2a24387f72473180b20d4a05ad6cbb5aa4ec6dcf45450b53920f98222000000"], 0x6e) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x61, 0x62, 0x5a, 0x33, 0x33, 0x64, 0x30, 0x62, 0x63, 0x35, 0x30, 0x33, 0x63, 0x37, 0x35, 0x64]}, &(0x7f0000000080)={0x0, "017640fc2fd5fc8dbf80cf1d122d66d5d57e5fccf6497be8fb72a66c8875d62fb02c32ddadfb8ac5fa73527341e21ff44724765ddb482aa47125959ea5515f04", 0x20}, 0x48, 0xfffffffffffffffe) 72.795112ms ago: executing program 3 (id=17): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x6ab, @dev={0xfe, 0x80, '\x00', 0x34}, 0xb4c}, 0x1c, 0x0}}], 0x2, 0x4404c880) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f00000004c0)=@ethtool_cmd={0x4e, 0xa1, 0x9, 0x7, 0x2, 0x8, 0xff, 0xdb, 0x7c, 0xc5, 0x7, 0x8, 0x5, 0x1, 0x4, 0x7, [0x5, 0x9]}}) 72.205132ms ago: executing program 3 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x103000, 0xa0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', 0x88) openat(r0, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) r1 = inotify_init() ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0xfffffffffffffc8f) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x25000, 0x9000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000002780)={0x7000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000040)={0xd000, 0x17000}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x14, 0x0, &(0x7f0000000040)) 0s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) (async) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234", 0x82, 0xfffffffffffffffd) (async) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRES32=0x0], 0xffffff9d) r1 = socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r3 = dup(0xffffffffffffffff) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2], 0x128}, 0xa5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="36bf08a3d0ed0ed925caf092e42bbe9a84a764977adb61169bc24db19e9318f7176d918b279ee570187ef3c0e1b8c96253128cc098b11df95afdf6944dc60686c9613f426682459005a6abb23b3c0ae2cc544cd9e67ce3dcea5bc54c2d140459af1353c6bf09775c97addaf16a0832aa0dd79cf18f6606f89e4fe85b23df92403e24a55117392a2d01d18cfa097ef4984e9ef8e946be294ce2", @ANYRESOCT, @ANYRES16=r1, @ANYBLOB="aba7d6ff136056d859a4c2cb5bf2371b9e880acc6d01a5d8eae4a571cd1fb8252df7890c0e9e4dcdbfa9ac160f4cb85b438ed780f1868e0531aec0e2b4f472413b132243c5dd7a1549632cf3b012f72d8e844e3cbbe1c68ceb6df1a11fe5b089a345d2938a8d3ec60e52aaad349c1650c26c083dfcd9fa8d1d89d339b5b8ded5", @ANYBLOB="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", @ANYRESDEC=r3, @ANYBLOB="520c1bde9a48df4f94ba2441429ed6e42bf01d8d9babb75e27314cf761ee31ecb2e60db554a5793ce5d018df1de948232498abe83af94bd32e62e09fdbec3ce199a1658d37d8a006550f86ea7192146a85289c503c133297650654146d8b", @ANYRESDEC=r4, @ANYBLOB="0adbff7427d82a2250694b18f44da98b2c84e5d63f7f1201b4dc9b1b04bea304c37e49f6fc9a98a875878fa6005b8ff217aff0659aeecdfb05db76479206dee9f2439b08334cb89ce933234a6efbfb711b7af5b17c8ff7873d68e92f8eb00536a72978eefcafaab4b66f74ed2a23d0d4fdcfca114ea7b92f29322169e7834436a25bcd2336e37a476129cc038e21ae0cbf359016fc5d777a0afd", @ANYRESOCT=r4], 0x128}, 0x20004080) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r7 = memfd_create(0x0, 0x0) ftruncate(r7, 0xffff) (async) fcntl$addseals(r7, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x4000, 0x8000}) (async) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.impure\x00') (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_setup_io_uring(0x2ce6, &(0x7f0000000540)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000480), &(0x7f0000000500)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r8, 0x0, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f0000000280)=0xe6e8, 0x4) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, &(0x7f0000000040)=0x401, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 21.254005][ T36] audit: type=1400 audit(1790725964.809:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.255172][ T286] cgroup: Unknown subsys name 'net' [ 21.276692][ T36] audit: type=1400 audit(1790725964.809:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.303946][ T36] audit: type=1400 audit(1790725964.829:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.304125][ T286] cgroup: Unknown subsys name 'devices' [ 21.425569][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.431210][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.544292][ T36] audit: type=1400 audit(1790725965.099:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.567479][ T36] audit: type=1400 audit(1790725965.099:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.592435][ T36] audit: type=1400 audit(1790725965.099:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.599510][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.624367][ T36] audit: type=1400 audit(1790725965.179:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.638788][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.649754][ T36] audit: type=1400 audit(1790725965.179:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.684081][ T36] audit: type=1400 audit(1790725965.189:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.709625][ T36] audit: type=1400 audit(1790725965.189:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.016614][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.023682][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.031047][ T296] bridge_slave_0: entered allmulticast mode [ 23.037460][ T296] bridge_slave_0: entered promiscuous mode [ 23.051975][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.059046][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.066167][ T296] bridge_slave_1: entered allmulticast mode [ 23.072321][ T296] bridge_slave_1: entered promiscuous mode [ 23.114174][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.121218][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.128314][ T294] bridge_slave_0: entered allmulticast mode [ 23.134574][ T294] bridge_slave_0: entered promiscuous mode [ 23.142234][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.149434][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.156614][ T294] bridge_slave_1: entered allmulticast mode [ 23.163038][ T294] bridge_slave_1: entered promiscuous mode [ 23.169205][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.176357][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.183429][ T293] bridge_slave_0: entered allmulticast mode [ 23.189771][ T293] bridge_slave_0: entered promiscuous mode [ 23.199037][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.206159][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.213230][ T293] bridge_slave_1: entered allmulticast mode [ 23.219608][ T293] bridge_slave_1: entered promiscuous mode [ 23.258179][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.265253][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.272307][ T295] bridge_slave_0: entered allmulticast mode [ 23.278639][ T295] bridge_slave_0: entered promiscuous mode [ 23.287472][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.294591][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.301651][ T295] bridge_slave_1: entered allmulticast mode [ 23.308138][ T295] bridge_slave_1: entered promiscuous mode [ 23.424988][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.432048][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.439375][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.446420][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.456134][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.463176][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.470497][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.477530][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.500450][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.507547][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.514842][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.521867][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.546312][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.553364][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.560668][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.567715][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.595303][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.602608][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.610305][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.618690][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.626071][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.633331][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.640846][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.648195][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.675180][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.682226][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.691001][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.698071][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.705751][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.712792][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.720773][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.727838][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.745242][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.752283][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.760330][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.767377][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.774966][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.781984][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.789827][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.796893][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.832886][ T295] veth0_vlan: entered promiscuous mode [ 23.858567][ T293] veth0_vlan: entered promiscuous mode [ 23.870031][ T294] veth0_vlan: entered promiscuous mode [ 23.880880][ T295] veth1_macvtap: entered promiscuous mode [ 23.899188][ T296] veth0_vlan: entered promiscuous mode [ 23.910516][ T294] veth1_macvtap: entered promiscuous mode [ 23.920428][ T293] veth1_macvtap: entered promiscuous mode [ 23.938347][ T296] veth1_macvtap: entered promiscuous mode [ 23.987882][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.036174][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.169609][ T327] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 24.263846][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.273801][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.415084][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.425311][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.434237][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 24.440821][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.452873][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.462770][ T45] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 24.472394][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.479995][ T312] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 24.489178][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.498086][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.506615][ T45] usb 3-1: Product: syz [ 24.510803][ T45] usb 3-1: Manufacturer: syz [ 24.516920][ T312] usb 4-1: config 0 descriptor?? [ 24.522027][ T45] usb 3-1: SerialNumber: syz [ 24.527589][ T312] hub 4-1:0.0: USB hub found [ 24.644829][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.655060][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.668087][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 24.677187][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.687009][ T31] net1080 2-1:1.0: probe with driver net1080 failed with error -22 [ 24.728716][ T312] hub 4-1:0.0: 4 ports detected [ 24.736318][ T45] usb 3-1: 0:1 : does not exist [ 24.741360][ T45] usb 3-1: 0:2 : does not exist [ 24.746550][ T45] usb 3-1: unit 0 not found! [ 24.752915][ T45] usb 3-1: USB disconnect, device number 2 [ 24.767162][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.894545][ T31] usb 2-1: USB disconnect, device number 2 [ 24.930177][ T312] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 24.936658][ T312] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 24.945412][ T312] usbhid 4-1:0.0: can't add hid device: -71 [ 24.951408][ T312] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 24.974268][ T312] usb 4-1: USB disconnect, device number 2 [ 25.193932][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 25.345253][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 25.353502][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 25.362235][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 25.375334][ T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 25.384577][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.392588][ T9] usb 1-1: Product: syz [ 25.396765][ T9] usb 1-1: Manufacturer: syz [ 25.401604][ T9] usb 1-1: SerialNumber: syz [ 25.446122][ T357] fuse: Unknown parameter 'root' [ 25.454613][ T355] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.484079][ T312] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.614113][ T337] kvm: pic: non byte write [ 25.621767][ T9] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 25.635341][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.646341][ T9] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 25.646419][ T9] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 25.654675][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.665481][ T9] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 25.674786][ T312] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 25.691646][ T9] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 25.692841][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.711178][ T9] usb 1-1: USB disconnect, device number 2 [ 25.722095][ T312] usb 3-1: config 0 descriptor?? [ 25.845619][ T380] ======================================================= [ 25.845619][ T380] WARNING: The mand mount option has been deprecated and [ 25.845619][ T380] and is ignored by this kernel. Remove the mand [ 25.845619][ T380] option from the mount to silence this warning. [ 25.845619][ T380] ======================================================= [ 25.880988][ T380] overlayfs: failed to resolve './file1': -2 [ 25.889461][ T380] Bluetooth: ISO socket layer initialized [ 25.931852][ T312] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 25.939366][ T312] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 25.946603][ T312] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 25.953478][ T312] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 25.960589][ T312] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 25.960595][ T382] ------------[ cut here ]------------ [ 25.960620][ T312] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 25.967657][ T382] WARNING: CPU: 0 PID: 382 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0 [ 25.973577][ T312] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 25.979952][ T382] Modules linked in: [ 25.990662][ T312] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 25.996173][ T382] CPU: 0 UID: 0 PID: 382 Comm: syz.3.19 Not tainted syzkaller #0 90688e1ceab05e74867d9ba7556f72450a710f26 [ 25.996199][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.996212][ T382] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 25.996246][ T382] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f5 d6 0b 06 00 0f 85 c2 00 00 00 c6 05 e8 d6 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 26.058431][ T382] RSP: 0018:ffffc9000d10f8c0 EFLAGS: 00010246 [ 26.064533][ T382] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000000000000 [ 26.072548][ T382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d10f978 [ 26.080597][ T382] RBP: ffffc9000d10f9f0 R08: ffffc9000d10f977 R09: 0000000000000000 [ 26.088768][ T382] R10: ffffc9000d10f960 R11: fffff52001a21f2f R12: ffffc9000d10f900 [ 26.097112][ T382] R13: dffffc0000000000 R14: 1ffff92001a21f1c R15: 0000000000000000 [ 26.105389][ T382] FS: 00007f017c7b26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.114673][ T382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.121466][ T382] CR2: 00007f017b870050 CR3: 000000013276c000 CR4: 00000000003526b0 [ 26.129680][ T382] Call Trace: [ 26.132982][ T382] [ 26.133338][ T312] usb 3-1: USB disconnect, device number 3 [ 26.135991][ T382] ? __kasan_check_read+0x15/0x20 [ 26.136020][ T382] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 26.152610][ T382] ? preempt_schedule_common+0x2d/0x60 [ 26.158144][ T382] ? preempt_schedule+0xc5/0xe0 [ 26.163012][ T382] ? __cfi_preempt_schedule+0x10/0x10 [ 26.168421][ T382] ___kmalloc_large_node+0x81/0x220 [ 26.173627][ T382] __kmalloc_large_node_noprof+0x1e/0xd0 [ 26.179310][ T382] __kmalloc_node_track_caller_noprof+0x30d/0x4f0 [ 26.186054][ T382] ? __cfi_try_to_wake_up+0x10/0x10 [ 26.191258][ T382] ? bitmap_parse_user+0x29/0x80 [ 26.196251][ T382] ? plist_del+0x3f0/0x410 [ 26.200688][ T382] memdup_user_nul+0x40/0x1a0 [ 26.205754][ T382] ? bitmap_parse_user+0x1f/0x80 [ 26.210921][ T382] bitmap_parse_user+0x29/0x80 [ 26.215880][ T382] irq_affinity_proc_write+0x139/0x230 [ 26.221358][ T382] ? __cfi_irq_affinity_proc_write+0x10/0x10 [ 26.227447][ T382] ? __cfi_futex_wake+0x10/0x10 [ 26.232342][ T382] ? __cfi_irq_affinity_proc_write+0x10/0x10 [ 26.238567][ T382] proc_reg_write+0x1fa/0x2f0 [ 26.243388][ T382] ? __cfi_proc_reg_write+0x10/0x10 [ 26.249443][ T382] vfs_write+0x3c1/0xfd0 [ 26.253729][ T382] ? __cfi_vfs_write+0x10/0x10 [ 26.258712][ T382] ? __kasan_check_write+0x18/0x20 [ 26.264085][ T382] ? mutex_lock+0x97/0x1d0 [ 26.268578][ T382] ? __cfi_mutex_lock+0x10/0x10 [ 26.273614][ T382] ksys_write+0x145/0x260 [ 26.278094][ T382] ? xfd_validate_state+0x68/0x140 [ 26.283374][ T382] ? __cfi_ksys_write+0x10/0x10 [ 26.283659][ T36] kauditd_printk_skb: 99 callbacks suppressed [ 26.283670][ T36] audit: type=1400 audit(1790725969.829:173): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 26.288624][ T382] ? __kasan_check_write+0x18/0x20 [ 26.288645][ T382] ? fpregs_restore_userregs+0x11c/0x260 [ 26.325712][ T382] __x64_sys_write+0x7f/0x90 [ 26.330321][ T382] x64_sys_call+0x271c/0x2ee0 [ 26.335136][ T382] do_syscall_64+0x57/0xf0 [ 26.339678][ T382] ? clear_bhb_loop+0x50/0xa0 [ 26.345555][ T382] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.351499][ T382] RIP: 0033:0x7f017b99e159 [ 26.356138][ T382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.375815][ T382] RSP: 002b:00007f017c7b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 26.384551][ T382] RAX: ffffffffffffffda RBX: 00007f017bc25fa0 RCX: 00007f017b99e159 [ 26.392735][ T382] RDX: 00000000ffffff9d RSI: 00002000000004c0 RDI: 0000000000000003 [ 26.400759][ T382] RBP: 00007f017ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 26.408756][ T382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.416750][ T382] R13: 00007f017bc26038 R14: 00007f017bc25fa0 R15: 00007ffe42c59908 [ 26.424752][ T382] [ 26.427852][ T382] ---[ end trace 0000000000000000 ]---