last executing test programs: 2.589352485s ago: executing program 0 (id=1): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000008404c05cc090000000000010902240001000090080904000009030003000921fdff080122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {0x9}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="200110005ecf"], 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) mremap(&(0x7f00007ed000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000071c000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1b0b, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000440)="b9875771d51d5c5f87d6dc6a90163555383a5da0d444d84bc2a731fa13a1a41fd7d25c9c7ce5d0b7880f8da98225354941adc08ac2adabbb9ee6469717fb8b9804bffcacce90238c0b20b0de494e7fcc"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r5 = syz_io_uring_complete(0x0, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000), 0x4) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.541670627s ago: executing program 1 (id=2): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}]}}) 2.479183089s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r2, 0xfffffc01) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, r6}) (async) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(r8, r7, 0x0) (async) setregid(0x0, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r9, &(0x7f00000001c0)='.log\x00', 0x4000, 0x0) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000240)={0x6, 0xffaf, 0x2, 0x8001, 0x40, 0x100}) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="0206020002"], 0x10}}, 0x0) (async) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x540, 0x0) ioctl$HDIO_GETGEO(r11, 0x301, &(0x7f0000000080)) (async) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$IOC_PR_RELEASE(r12, 0x401070ca, &(0x7f0000000100)={0x1000, 0x5}) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000340)="ddb0c5c701666b2c0c4a0446cb520a9eb1088276d84c3c626fc93811f517317d325e1ff06598136b4499fa142ed0e058438af3ba4e2d143f13976aa99f62f12612a871c2316604f58bbcd0010eac02b76b0087d200e4d206cc01d92e4d4901e6996f3d07b613b117b84172a9b49d6e71884d18fd2abfe94080406ce25865e9361f2a3bcb127bd1b8f8a258b3d74a9efe826d8ecb559af84db0799ff07d56a600384530f72cf2302ba2bd922d5223bb7570d0add4ae00859df7a81886cd23be664c50b8e2e7b8af41437d309125302b1f9ccd154c66210a3d5f7da083a84b43c398fe64c7882414f5a801ee7be2822fbed26aa8038383a57b010dfe9117893409") (async) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000000)={@loopback, r6}, 0x14) 2.423315351s ago: executing program 3 (id=5): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) setreuid(0xee01, 0xee01) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000003680)={{r3, 0x0, 0x200000, &(0x7f0000000180)={@align=0x1, {0xfe, 0x80, 0xc, 0x2}}, 0x6, 0x0, 0x0}, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004007230"], 0x38}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004007230"], 0x38}}, 0x0) syz_clone(0xf21e8000, 0x0, 0xa, 0x0, 0x0, 0x0) (async) syz_clone(0xf21e8000, 0x0, 0xa, 0x0, 0x0, 0x0) 2.395881672s ago: executing program 3 (id=6): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) syz_usb_connect$uac2(0x3, 0xcd, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000408c0d1400400001020301090286000301003003080b00"], 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x2, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 2.376366082s ago: executing program 1 (id=7): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'gre0\x00', {0x3}, 0x40}) (async) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000005000000000004000a0007"], 0x28}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = accept(r1, &(0x7f0000000440)=@hci, &(0x7f00000004c0)=0x80) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000500)=[@timestamp, @mss={0x2, 0x5}, @window={0x3, 0xa3b, 0x8}, @mss={0x2, 0x71}], 0x4) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) r6 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000005c0)={[0x10009, 0x8, 0x2, 0x4000000080000e52, 0x1, 0x88, 0x1043, 0x200000000006, 0x4, 0x80, 0x1, 0x100000000, 0x800000000000001, 0xffff, 0x8000000000005, 0x8000000000000000], 0x30000, 0x40110}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_usb_connect$uac2(0x2, 0x98, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020392ad43f400001020301090286000301010008080b0001010c200609040000000101200009240107000426000411240905060300020003000200000002000c2403020104090305"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(r8, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x2, 0x0, &(0x7f0000000300)=0x0) timer_settime(r9, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f0000000100)="240000005a001f211007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', r7, 0x2f, 0x8, 0x81, 0x5, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8000, 0x7, 0x9, 0x3}}) bind$packet(r0, &(0x7f0000000340)={0x11, 0x17, r12, 0x1, 0x7f}, 0x14) (async) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001e00090006000000fcdbdd250200001e0800010004865d34fd66ea8ba370f3b1a8c5dfad8e3f4cd0348ebd5411775acbb5c750dfc6c1250d29efea261d041cdffeb7bb7c5ab50a08614ff2893c509773ad1ec501d6c954d9b8d9eb01dcebaf2ec4e463ccfa911cb2ba5aa2ca6c87", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) socket$inet_udp(0x2, 0x2, 0x0) 2.256072937s ago: executing program 2 (id=9): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000780)="120000001200e7ef007b462ea95ce8197900", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003980)=""/4098, 0x1002}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000005580)=""/4094, 0xffe}, {&(0x7f0000000680)=""/236, 0xec}, {&(0x7f00000009c0)=""/256, 0x100}, {&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f0000000080)=""/99, 0x63}], 0xa}, 0x5e}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0xc3ff, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x104}], 0x8, 0x20, 0x0) 2.242795746s ago: executing program 2 (id=10): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x20, 0x35, 0xe9, {0xe9, 0x3, "697b799bb76609ce2e99de4dc5e54336573c5f29edc5e9d9f3089378e1cc0b6976adfa4cddf86d16b6d7963357c267a513aa533075f46c3cf2e20e79073a57699ac933eb175799bee2c387359d92214da1d2e1d6df237a43c5843f5551bc645d586e06c437307162caeac5c781ce9126fee25d7959889190ddc8e75bf5fcf047c70b4e139e64847a75b340d3a6c484e5064fa991c038cd51993c4b097a67492d05a61abd586146736d9e6fae7b9c419a4f89b34effd8e85e5d476a0d3794f285433a1f2f8b7d441bc0251cf4e4290136adc2cdef2fcef818ce18c8625b8ee068724356f5dce3b6"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}}, &(0x7f0000000780)={0x34, &(0x7f00000004c0)={0x40, 0xe, 0xb2, "025a3ae4782c75974efa3c47b0ce4f6f58ff928a7eb29bdd5a3e319bb3a987bc0fdb86adb50658058fb04e17bbf5f0776258507632bb83ebf55aae23127b280a243e3c450d716be6d7cc3d525fa8598ed3840537b3c775d11687e576388ad276cc7d79b471373793782c89697c24bda0f48b752d9463b88e97026356778524418c13772dc19137cef2ed5267b83f2f69283ade14ac69e1cfe2a31fde1558dc0e4a4566672345ae7e1e5052960e0106878be1"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x0, 0xc0, {0xbe, "ded0b939f49ceb04bde08c7849388b2d64d07348fd4c37e4072e78710e9d2e79b20d2a55f5560ef4ba1817a2779919615c15515d851994dbd041364931b44a0e988a9c23b3191e6b8a2183245c71ff987085589c5abda50a0e087aee8d149fd050368bdc99c14ac50bf2172837d5dab12f2988a83185916cc2720cf245b278423a87475fd8139de52e1dc545ec08f65d55dcfca45eaead5a1cb8635c268ac4c76983d31d42ee6dceedee456723b1c39262bceac97396bd66f272426f2c50"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) r2 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000980)={0x14, &(0x7f0000000800)={0x20, 0x21, 0x91, {0x91, 0xf, "46dddd9e3bba76616a03a97e2bace1051f67778a6ff7b81c5115448d4f7169403094802a55183a534b5fd5488ca8ee254f70d43d36f230a49fe8ce2d8769b0dfc2a293c9a54357049fd6ec3c17b4a3e8a163c5abda25ebac66681d43727fe16cc67f372d630b9cd679ed308753233a14a90983f9526c389f67b07993040ae641003735401091faeb887b6d4f789f18"}}, &(0x7f00000008c0)={0x0, 0x3, 0x84, @string={0x84, 0x3, "ea39a5b9dd211a419f4dd0b4ef633142cd08723cada8eaa2cd87b2cb7e8a5752e7356efa9d2d9e6aa198cc23338d4a4017c242ce03470c7dad6733e78fa9694c8a3c1bf6060d89990d4d953881fab129e3513dba13573cba4066fd3af5c2e86728fdf318499ca17033426f6ee8e1bd9c49beec5990bbde67f1f197747bd1520b329e"}}}, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x40, 0x30, 0x8d, "a44b012e860e3f67ab468ea0d3686a7294d6bffa0a35ee7eb35de485fd6f94d63b617ca1afc3ef3a653b8870386aa479f0e898a89676ed8f3653330f43dd5d419664141987976b26fdcfebc819f7f4e407a0ab08e80e5ef55f00c532d84222bb9124a7628fae5b6a92aaa6817f5b62944b916d16137f634cae86c1d1cd533003bf470eedbfd749ab3bc5c3aa42"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b00)={0xc0, 0x5, 0x4, "14c66b4f"}, &(0x7f0000000b40)={0x40, 0x5, 0x4, "cf2f4563"}}) write$char_usb(r1, &(0x7f00000007c0)="0bcde5", 0x3) r3 = syz_open_dev$mouse(&(0x7f0000000280), 0x332, 0x109000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000bc0)={[0x4, 0x5, 0x4, 0x1, 0x6, 0x8, 0x1, 0xd, 0x249, 0x7ff, 0x40, 0x100000000, 0x80000001, 0x7fffffffffffffff, 0xfea1, 0x8715], 0x13bfe5052265a142, 0x200800}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x7bb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xc0, 0x7f, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x7f29e7076870e0b0, 0x10, {0x9, 0x21, 0xf66, 0x3, 0x1, {0x22, 0x4e1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9c, 0x4, 0xe}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0x28, 0xd, 0xcf, 0x6}, 0x40, &(0x7f0000000080)={0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0xd, 0xf, 0x2, [0xf0, 0xa00f, 0xff00, 0x3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x64, "a0b98e75fc39e7cfc321ad52512529f5"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x7, 0xb6, 0x5, 0x5}]}, 0x1, [{0xed, &(0x7f0000000100)=@string={0xed, 0x3, "5fe1f0149409f64316df15eaf2a64bb28a59a97adb704b1fdcd7ff5a3628fb9f1e4714c176a24dafabf30011cf0f8fd80e30ae9e8b5f52821eaf789908d7550c3fb1d46299960592c05fc1c878cfa6c0d6d534b5ee4e95cde2b6aa3739cb33fcf1b4d4e632564d2f551df8594c62516fe0b490eada44c35799de557708fcc5d8a2fb2cf3dd085cbd290153bea94b27cbe949a95fca0199f9bac27c1da65184db64539305a73333e0cf327200bac4657ca427b42c669096154a73232e470dbb14cb323ebec5307751a3015ee7266d6bccc17b748e4d1ea254a3daf32a2d8bdc1124f5364fc200dfe137d12d"}}]}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000003000e7ef8b000000a100c7b1ee57", 0x12, 0x2404c810, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r5, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x20, 0x35, 0xe9, {0xe9, 0x3, "697b799bb76609ce2e99de4dc5e54336573c5f29edc5e9d9f3089378e1cc0b6976adfa4cddf86d16b6d7963357c267a513aa533075f46c3cf2e20e79073a57699ac933eb175799bee2c387359d92214da1d2e1d6df237a43c5843f5551bc645d586e06c437307162caeac5c781ce9126fee25d7959889190ddc8e75bf5fcf047c70b4e139e64847a75b340d3a6c484e5064fa991c038cd51993c4b097a67492d05a61abd586146736d9e6fae7b9c419a4f89b34effd8e85e5d476a0d3794f285433a1f2f8b7d441bc0251cf4e4290136adc2cdef2fcef818ce18c8625b8ee068724356f5dce3b6"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}}, &(0x7f0000000780)={0x34, &(0x7f00000004c0)={0x40, 0xe, 0xb2, "025a3ae4782c75974efa3c47b0ce4f6f58ff928a7eb29bdd5a3e319bb3a987bc0fdb86adb50658058fb04e17bbf5f0776258507632bb83ebf55aae23127b280a243e3c450d716be6d7cc3d525fa8598ed3840537b3c775d11687e576388ad276cc7d79b471373793782c89697c24bda0f48b752d9463b88e97026356778524418c13772dc19137cef2ed5267b83f2f69283ade14ac69e1cfe2a31fde1558dc0e4a4566672345ae7e1e5052960e0106878be1"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x0, 0xc0, {0xbe, "ded0b939f49ceb04bde08c7849388b2d64d07348fd4c37e4072e78710e9d2e79b20d2a55f5560ef4ba1817a2779919615c15515d851994dbd041364931b44a0e988a9c23b3191e6b8a2183245c71ff987085589c5abda50a0e087aee8d149fd050368bdc99c14ac50bf2172837d5dab12f2988a83185916cc2720cf245b278423a87475fd8139de52e1dc545ec08f65d55dcfca45eaead5a1cb8635c268ac4c76983d31d42ee6dceedee456723b1c39262bceac97396bd66f272426f2c50"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x3}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x7) (async) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) syz_usb_control_io$rtl8150(r2, &(0x7f0000000980)={0x14, &(0x7f0000000800)={0x20, 0x21, 0x91, {0x91, 0xf, "46dddd9e3bba76616a03a97e2bace1051f67778a6ff7b81c5115448d4f7169403094802a55183a534b5fd5488ca8ee254f70d43d36f230a49fe8ce2d8769b0dfc2a293c9a54357049fd6ec3c17b4a3e8a163c5abda25ebac66681d43727fe16cc67f372d630b9cd679ed308753233a14a90983f9526c389f67b07993040ae641003735401091faeb887b6d4f789f18"}}, &(0x7f00000008c0)={0x0, 0x3, 0x84, @string={0x84, 0x3, "ea39a5b9dd211a419f4dd0b4ef633142cd08723cada8eaa2cd87b2cb7e8a5752e7356efa9d2d9e6aa198cc23338d4a4017c242ce03470c7dad6733e78fa9694c8a3c1bf6060d89990d4d953881fab129e3513dba13573cba4066fd3af5c2e86728fdf318499ca17033426f6ee8e1bd9c49beec5990bbde67f1f197747bd1520b329e"}}}, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x40, 0x30, 0x8d, "a44b012e860e3f67ab468ea0d3686a7294d6bffa0a35ee7eb35de485fd6f94d63b617ca1afc3ef3a653b8870386aa479f0e898a89676ed8f3653330f43dd5d419664141987976b26fdcfebc819f7f4e407a0ab08e80e5ef55f00c532d84222bb9124a7628fae5b6a92aaa6817f5b62944b916d16137f634cae86c1d1cd533003bf470eedbfd749ab3bc5c3aa42"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b00)={0xc0, 0x5, 0x4, "14c66b4f"}, &(0x7f0000000b40)={0x40, 0x5, 0x4, "cf2f4563"}}) (async) write$char_usb(r1, &(0x7f00000007c0)="0bcde5", 0x3) (async) syz_open_dev$mouse(&(0x7f0000000280), 0x332, 0x109000) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000bc0)={[0x4, 0x5, 0x4, 0x1, 0x6, 0x8, 0x1, 0xd, 0x249, 0x7ff, 0x40, 0x100000000, 0x80000001, 0x7fffffffffffffff, 0xfea1, 0x8715], 0x13bfe5052265a142, 0x200800}) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x7bb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xc0, 0x7f, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x7f29e7076870e0b0, 0x10, {0x9, 0x21, 0xf66, 0x3, 0x1, {0x22, 0x4e1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9c, 0x4, 0xe}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0x28, 0xd, 0xcf, 0x6}, 0x40, &(0x7f0000000080)={0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0xd, 0xf, 0x2, [0xf0, 0xa00f, 0xff00, 0x3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x64, "a0b98e75fc39e7cfc321ad52512529f5"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x7, 0xb6, 0x5, 0x5}]}, 0x1, [{0xed, &(0x7f0000000100)=@string={0xed, 0x3, "5fe1f0149409f64316df15eaf2a64bb28a59a97adb704b1fdcd7ff5a3628fb9f1e4714c176a24dafabf30011cf0f8fd80e30ae9e8b5f52821eaf789908d7550c3fb1d46299960592c05fc1c878cfa6c0d6d534b5ee4e95cde2b6aa3739cb33fcf1b4d4e632564d2f551df8594c62516fe0b490eada44c35799de557708fcc5d8a2fb2cf3dd085cbd290153bea94b27cbe949a95fca0199f9bac27c1da65184db64539305a73333e0cf327200bac4657ca427b42c669096154a73232e470dbb14cb323ebec5307751a3015ee7266d6bccc17b748e4d1ea254a3daf32a2d8bdc1124f5364fc200dfe137d12d"}}]}) (async) socket(0x10, 0x803, 0x0) (async) sendto(r4, &(0x7f0000000740)="120000003000e7ef8b000000a100c7b1ee57", 0x12, 0x2404c810, 0x0, 0x0) (async) write$char_usb(r1, 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) write$char_usb(r1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) kcmp(r5, r5, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) (async) 1.075246985s ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x20001, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c) listen(r0, 0xfffffff8) socket(0xa, 0x3, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000340)=0x1c, 0x80000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) ioctl$FIONCLEX(r1, 0x5450) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000013c0)=0x7f) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000001c0)={0x2000009, 0x255, 0x1000009, 0xfffffffb, 0xa, "972d595029c59b1506000000000000004c8672"}) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r5, 0xffffffffffffffff) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000300)=0x3) write$FUSE_IOCTL(r5, 0x0, 0x0) open_tree(r3, &(0x7f0000000140)='\x00', 0x9901) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 1.052649546s ago: executing program 3 (id=12): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a37c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f301dc505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a00000000743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb3119809f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35300900000045c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908df290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8e5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4549def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e2b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184cb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x130, 0x0, 0x9, {0x3, 0xfffffffd, 0x0, '\x00', {0x1, 0x80000000, 0x80ae1, 0x10, r4, r5, 0x4000, '\x00', 0x40006, 0x81, 0x1, 0xddf, {0x3, 0x4}, {0x400000000000c, 0x2}, {0x2000005, 0xa}, {0x101, 0x9fd}, 0x100, 0x6, 0x81, 0x4}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff80480400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x50, 0xffffffffffffffff, 0x2aea8000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r6, 0x1, 0x19, 0xfffffffffffffffd, &(0x7f0000003080)=0x7a) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000000)={@id={0x2, 0x0, @b}}) 977.464388ms ago: executing program 3 (id=13): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x129a00, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f00000000c0)={0x41000}) (async, rerun: 32) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xa4}}, 0x0) 934.359849ms ago: executing program 32 (id=13): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x129a00, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f00000000c0)={0x41000}) (async, rerun: 32) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xa4}}, 0x0) 891.216121ms ago: executing program 1 (id=15): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0xfff, @empty, 0x10000}}}, 0x32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(r3, 0x111, 0x4, 0x0, &(0x7f0000000540)) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000100}, 0x40) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000100)=@ethtool_rx_ntuple={0x35, {0xc, @esp_ip4_spec={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x7, 0x3}, @sctp_ip4_spec={@rand_addr=0x64010100, @private=0xa010101, 0x4e20, 0x4e22, 0x17}, 0x2, 0x3, 0x2, 0x4, 0xfffffffffffffffe}}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0xfff, @empty, 0x10000}}}, 0x32) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) getsockopt(r3, 0x111, 0x4, 0x0, &(0x7f0000000540)) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000100}, 0x40) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000100)=@ethtool_rx_ntuple={0x35, {0xc, @esp_ip4_spec={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x7, 0x3}, @sctp_ip4_spec={@rand_addr=0x64010100, @private=0xa010101, 0x4e20, 0x4e22, 0x17}, 0x2, 0x3, 0x2, 0x4, 0xfffffffffffffffe}}}) (async) 890.813201ms ago: executing program 1 (id=16): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) r3 = dup(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1, 0x88}}}}, 0x30}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x9004) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x5b1adefb, 0xc, 0xfffffffb, 0x9e}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 873.779652ms ago: executing program 1 (id=17): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x8000000000000000, 0x1, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2}, {{@in6=@empty, 0x4d5, 0x2a}, 0x39573c4e467c4e, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x4, 0x0, 0x41, 0x9, 0x30, 0x7}}, 0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x40, 0x22, 0x74, {0x74, 0x30, "ade6ea7be7cd4a915546f6f59c51d16c401d936597c1b1e57671c4280e99538559b6e35dc129262a0930222fbecfde6dede9c368f9f9bd9d032088e1defb0c2c9f5562d42bf55eb41d5e5d2ceffa854872d5e8f03c0bdcffb51b076a90723049f3b690a8b3a576ce5f881ae9489ef15efc90"}}, &(0x7f00000001c0)={0x0, 0x3, 0x5b, @string={0x5b, 0x3, "fdd71ae01a930c5cb97b413bf7d8d2a7b607587ef6fd6284e15fd45d63ce0d7d57636bb21925e8d2014453c3c9f2d8c12dbd7dc42da89acd6cac2a3c380d051f299484098a3d91786d0db98ac1b6f6101a5f08a79564dee0a1"}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0xf, 0xec, "d2f1abcfa564999768e0b3cb4ab1f689e263d3a0fd0d33da2e960f764cc26e35e6f73f45346be3b645efe83f82cd46e7fc5ec380e5562e3e3193980911542ca958b6ec4a82c42d4c2c227b87a0a3233e21de2b584698c1804c97c57d79fad3b6face3dd5a6700338d66a9d0a56d191a36bcc70595975f9eaba37b92b953ddc1880f7fffc162b65303d1da57dfc61cc2dd11e0dda3525cdae9696e62c7c11fe06fa4e2495d8f971be2eb56a9d3fa18808d0e56df5a730f290af891385c5a955e491ba2843b47aaa435f2c86ebdd9a9bdd441e7dc26feabe2a40379d04b6544ca1a5e7c1d5d7a727a08469ee00"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000600)={0xc0, 0x5, 0x2, "06c4"}, &(0x7f0000000640)={0x40, 0x5, 0x6, "a1d36960b796"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 710.858757ms ago: executing program 0 (id=18): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r1) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r3 = socket$inet_tcp(0x2, 0x1, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r4, 0x107, 0x1, 0x0, &(0x7f0000000240)) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000380), 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e23, @local}}) inotify_init() (async) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000003c0)='.\x00', 0x5db) lsm_get_self_attr(0x64, &(0x7f0000000500)={0x0, 0x0, 0xbe, 0x9e, ""/158}, &(0x7f0000000600)=0xbe, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="4d01", 0x2, 0x4000085, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r6, 0x0, 0x0) (async) ptrace$cont(0x20, r6, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f00000000c0)=0xffffffffffffffce) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa0100fe, 0x0, 0x0, 0x4e24, 0x9, 0xa}, {0xae, 0xfffffffffffffffa, 0x4, 0x0, 0x0, 0x0, 0xed0}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa0100fe, 0x0, 0x0, 0x4e24, 0x9, 0xa}, {0xae, 0xfffffffffffffffa, 0x4, 0x0, 0x0, 0x0, 0xed0}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) (async) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000002c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000300)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f0000000280)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f00000001c0)="6be26779ea40654f2ee290a4ee4d129a20b1ff7069f71cd163da43718490f8e41188674be26e53e29f8665bf023fb8d712f4fdf0654bfbcaebec3c332283888d74e672c73ad4808f102157b58eae4109e3a19c66cc163caf205054539c7b9788b1", 0x61}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000000080)='-', 0x1}, {&(0x7f0000000180)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) (async) sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000002c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000300)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f0000000280)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f00000001c0)="6be26779ea40654f2ee290a4ee4d129a20b1ff7069f71cd163da43718490f8e41188674be26e53e29f8665bf023fb8d712f4fdf0654bfbcaebec3c332283888d74e672c73ad4808f102157b58eae4109e3a19c66cc163caf205054539c7b9788b1", 0x61}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000000080)='-', 0x1}, {&(0x7f0000000180)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) 647.139029ms ago: executing program 0 (id=19): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x18, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', {0x2, 0x4e20, @multicast2}}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010001, 0x0, 0x200000000400}]}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000000)={0xe}) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async, rerun: 64) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xc, r4}, 0x10) 646.694649ms ago: executing program 0 (id=20): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x28, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)={0x20, 0xc, 0x28, {0x28, 0x23, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 476.694615ms ago: executing program 4 (id=14): r0 = epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a44a9, &(0x7f0000000100)=ANY=[@ANYBLOB="626c6f636b283b321369"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x3, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000340)={[0x8, 0x33d, 0x1, 0xc1c1, 0x2, 0x0, 0x4012004c4, 0x1008, 0x8000000000000000, 0x800c595, 0x8, 0x1, 0xffc0000000000000, 0x2000000000000000, 0x5fd, 0x8d], 0x7000, 0x2839d7}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0x337, 0x4) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r4, &(0x7f00000002c0)="50fbdf12a30d7a48b2c5c04948f3426077a9f0ca147518deb663bfb999e7387ef9af2a603a3e78adff59fbb22bae1b2443011fd80125b9de511d10a6ef69323aac58c35a6865d4e29f0bbd0e00002944ed606d969a1e51b61122694dae771e65f365c0a69aba18d15a188686123244f2a8fa83f2", 0x74, 0x84040, 0x0, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc408000400000000000000002967fc6f6ce9504b4efe94e6265175a969e5f9", 0x4c}], 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1}) epoll_create1(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000040)={0x8, 'team_slave_1\x00', {'wg1\x00'}, 0xc}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000001c0)) 344.983519ms ago: executing program 4 (id=21): modify_ldt$write2(0x11, &(0x7f0000000000)={0xcb3, 0x20001000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioprio_get$pid(0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x2070bd2d, 0x25dfdbfd}, 0x14}}, 0x40000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0xffffffc6}], 0x1) syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0xcb3, 0x20001000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) (async) ioprio_get$pid(0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x2070bd2d, 0x25dfdbfd}, 0x14}}, 0x40000) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) (async) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) (async) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0xffffffc6}], 0x1) (async) syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) (async) 272.562052ms ago: executing program 4 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x3b}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x486, 0x0, 0x3}]}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000040)=""/22, 0xa4000, 0x800, 0xff, 0x9f5538e402b70b37}, 0xfffffffffffffee0) 129.926386ms ago: executing program 4 (id=23): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xe210}) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000000c0)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRESOCT=r2, @ANYBLOB="83341f8f7b8eb6b7573e61c2876f2d904d98e692284d8d7b291df91d910b2c835e66cb673271ddf4432f32d7e39d85828f28f02c7fe9d1f131b5239f6dccc2"], 0xfdef) 119.687807ms ago: executing program 2 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 32) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) (async, rerun: 64) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000080)) (rerun: 64) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0xfe00, @any, 0x4, 0x1}, 0xe) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="1201000083ef0840e07d6e67db77000000480902120001000000000904000000ef01"], 0x0) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') pread64(r2, &(0x7f0000000340)=""/31, 0x1f, 0x6677) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0)=0x25a1, 0x4) write(r3, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000100)={0x2, 'veth0_to_bridge\x00', {0x7}, 0xf}) (async) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)=ANY=[@ANYBLOB="2800000022000100020000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a000080976b64086860000004000180"], 0x28}], 0x1}, 0x0) (async, rerun: 32) recvfrom(r3, &(0x7f0000000200)=""/145, 0x91, 0x2021, 0x0, 0x0) (rerun: 32) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x80000000) (async) syz_open_procfs(0x0, &(0x7f0000000300)='smaps_rollup\x00') (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) (async) r6 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x400000000000000) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x290) 61.628239ms ago: executing program 4 (id=25): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000009, 0x40010, 0xffffffffffffffff, 0x587c0000) r1 = socket$inet6(0xa, 0x80000, 0x5b1) shutdown(r1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x2f, 0x3, 0x9, 0x7, 0x40, @empty, @loopback, 0x7800, 0x40, 0x2c0, 0x5}}) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000280)=0xffffff36, 0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0x74) ioctl$KVM_HAS_DEVICE_ATTR_vm(r5, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x8, 0xf232, &(0x7f00000002c0)=0x1}) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f0000000340)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/27, 0x1b}, {&(0x7f0000000400)=""/198, 0xc6}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000680)=""/22, 0x16}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/12, 0xc}], 0x7, &(0x7f0000000800)=""/159, 0x9f}, 0x5}], 0x1, 0x3, &(0x7f0000000900)) mount_setattr(r5, &(0x7f0000000940)='./file0\x00', 0x1000, &(0x7f0000000980)={0x0, 0x200070, 0x20000}, 0x20) setsockopt$sock_int(r4, 0x1, 0x27, &(0x7f00000009c0), 0x4) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xb0, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x44}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000044) r8 = dup3(r1, r4, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @multicast1, @remote}, &(0x7f0000000c00)=0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000c80)={0x0, 0x6}) recvmmsg(r1, &(0x7f0000003840)=[{{&(0x7f0000000cc0)=@caif=@util, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d40)=""/220, 0xdc}, {&(0x7f0000000e40)=""/235, 0xeb}], 0x2, &(0x7f0000000f80)=""/8, 0x8}, 0x3}, {{&(0x7f0000000fc0)=@qipcrtr, 0x80, &(0x7f0000002340)=[{&(0x7f0000001040)=""/94, 0x5e}, {&(0x7f00000010c0)=""/49, 0x31}, {&(0x7f0000001100)=""/234, 0xea}, {&(0x7f0000001200)=""/47, 0x2f}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/147, 0x93}, {&(0x7f0000002300)=""/48, 0x30}], 0x7, &(0x7f00000023c0)=""/24, 0x18}, 0x4}, {{&(0x7f0000002400)=@nfc_llcp, 0x80, &(0x7f0000003580)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/52, 0x34}, {&(0x7f00000034c0)=""/158, 0x9e}], 0x3, &(0x7f00000035c0)=""/242, 0xf2}, 0x100}, {{&(0x7f00000036c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003800)=[{&(0x7f0000003740)=""/133, 0x85}], 0x1}, 0x7e4ba580}], 0x4, 0x1, &(0x7f0000003940)) shutdown(r8, 0x1) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000003980), &(0x7f00000039c0)=0x40) pipe2(&(0x7f0000003a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) openat$cgroup_ro(r9, &(0x7f0000003a40)='devices.list\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000003ac0), r10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000003b00)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000003c00)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b40)={0x5c, r11, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x10000) 60.990739ms ago: executing program 4 (id=26): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x63, 0x50, 0x2, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0xff, 0x6, {0xa, 0x25, 0x25, 0x10000, 0x80, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x8, 0x5, {0xa, 0x25, 0x25, 0x7c, 0x2, 0x8}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ncm(0x4, 0x1a2, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x190, 0x2, 0x1, 0x1, 0xc0, 0xfd, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x8000, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0xe7, 0x1, 0x8, 0x0, 0x0, 0xd4}, @obex={0x5, 0x24, 0x15, 0x4}, @mdlm_detail={0xf3, 0x24, 0x13, 0x61, "c817dc74fb0a55b1dac0064351051285cb54ea7be3d70a3cafa657409a0e1e43519df8b3545704b5c974bc82de2df62e71fef3e13ae6f8876d9ddf88af9166fcbda3d00d22e483bb4f3d796e4b993efae3e7847b0e69e6292f4d2cf2920780c6a780f69927f17a3e4591d0ff84f1b878c20ba51fd6185de8025d991ce4046540f3612aa3848f0508f4420049f96d015441967227e47e069d759087bd4ff173b74dea60516fa9997243c36f2626415a51306435c187a05e088723ba8afb99ada0b6f7e2ba0851bb9b5a36c3e3c5b4835174a6d92de6cf493997361a46bd2e51bc11a727c3585eb91413c092d91c9a0c"}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm_detail={0x16, 0x24, 0x13, 0x0, "e33f28c3ac29d428a9e8be8876b084fe397f"}, @obex={0x5, 0x24, 0x15, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xa, 0x7, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xf, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x12, 0x41}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x389, 0x8, 0x40, 0x9, 0x8, 0x6}, 0x42, &(0x7f0000000340)={0x5, 0xf, 0x42, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x4, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "4fa7f802093e2ba40fb6ff5fd65178c9"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "aeb4d86995c5075848646e04b63f8589"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x1, 0x2, 0xc2, 0x81, 0x7}]}, 0x2, [{0xf0, &(0x7f00000003c0)=@string={0xf0, 0x3, "9498f661e5766022b27d991d182088b8e47521763ca0a06c722818a7defcd9f51cf640e1b49598712adaaa2cf641eabd2f08c0d8a28d648fcac5ba012c487ed926615b021262d52dff3e0355c8dfdeb0027e1a86704e7f44e2f0f0ad6d95e410cafe6429693eb5f1e1f5f6cd98603e078c5eb5d854d1b7918f4e204dc9dedef6cbd83a31fc1a3f0be529e9fd1a2dbaf40874e5f063f1cf54dcbfba2bbe0462a27e78e949a1badf08aefe163c3b3fe811cb7c40e8a9dbd7853ecf7ccbb562e8326e78d0014806e09cf8f9c0c9b226ce3f252d7f5b2758662d9a753be4dd71a54d7161505b6a8e3d507da0b3a26d17"}}, {0xe5, &(0x7f00000004c0)=@string={0xe5, 0x3, "2e41180f93e106f26ec63496361eea966189963598b2c848851f994909fd57071c8727d0b25317b35ba5b87e913f0730ac71d54d40236a0ad3b02fb7744f53b924a66818e9e6d1b4d813c68b245566230796d0df20a071ec7e598a0292ede7f3351fad6ffbcc90133c145a6849c9d1304f69af7642f00bc4185656536d877b836362e9d4fdd98f58fdb6f7f43575dd2ee6c17fea5b80a68bc58cc1e96f098b923d66fe142368367f1a75e8de1bfdabdb07fc8ded74503fdba7f55716e84380fb6f333ad2bd23089b6d2591f186c061800d8db59fd1bb10b4829f6f7e1b155edadc2210"}}]}) 60.687289ms ago: executing program 2 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x480980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x821e, 0x3a, '\'-*\')!-', 0x3a, '\x00', 0x3a, './file0'}, 0x2f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 217.18µs ago: executing program 2 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) 0s ago: executing program 2 (id=29): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) modify_ldt$write2(0x11, &(0x7f0000000640)={0x7ec935bf, 0x0, 0x400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="4d1400430000002035121280400001020301090269000301e9ff02170b00010109200909040000000ed3b81c09240120000509000904010000010220000904010101010220000905010920001004050825018000018f0009040200000102200009040201010102200009058209100006ea040825018000fa020000"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="4d1400430000002035121280400001020301090269000301e9ff02170b00010109200909040000000ed3b81c09240120000509000904010000010220000904010101010220000905010920001004050825018000018f0009040200000102200009040201010102200009058209100006ea040825018000fa020000"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 13.567629][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 13.567647][ T36] audit: type=1400 audit(1780508821.100:59): avc: denied { transition } for pid=233 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.571769][ T36] audit: type=1400 audit(1780508821.100:60): avc: denied { noatsecure } for pid=233 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.574436][ T36] audit: type=1400 audit(1780508821.110:61): avc: denied { write } for pid=233 comm="sh" path="pipe:[2729]" dev="pipefs" ino=2729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.577358][ T36] audit: type=1400 audit(1780508821.110:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.579977][ T36] audit: type=1400 audit(1780508821.110:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 20.470805][ T36] audit: type=1400 audit(1780508828.010:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.472054][ T287] cgroup: Unknown subsys name 'net' [ 20.493504][ T36] audit: type=1400 audit(1780508828.010:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.521043][ T287] cgroup: Unknown subsys name 'devices' [ 20.521202][ T36] audit: type=1400 audit(1780508828.040:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.672161][ T287] cgroup: Unknown subsys name 'hugetlb' [ 20.677769][ T287] cgroup: Unknown subsys name 'rlimit' [ 20.790505][ T36] audit: type=1400 audit(1780508828.330:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.813683][ T36] audit: type=1400 audit(1780508828.330:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.838569][ T36] audit: type=1400 audit(1780508828.330:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.847106][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.870890][ T36] audit: type=1400 audit(1780508828.410:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.896359][ T36] audit: type=1400 audit(1780508828.410:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.929861][ T36] audit: type=1400 audit(1780508828.460:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.930329][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.955530][ T36] audit: type=1400 audit(1780508828.460:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.753781][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.760885][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.767945][ T294] bridge_slave_0: entered allmulticast mode [ 21.774278][ T294] bridge_slave_0: entered promiscuous mode [ 21.782120][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.789149][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.796239][ T294] bridge_slave_1: entered allmulticast mode [ 21.802495][ T294] bridge_slave_1: entered promiscuous mode [ 21.875817][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.883011][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.890066][ T296] bridge_slave_0: entered allmulticast mode [ 21.896439][ T296] bridge_slave_0: entered promiscuous mode [ 21.904104][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.911217][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.918265][ T296] bridge_slave_1: entered allmulticast mode [ 21.924568][ T296] bridge_slave_1: entered promiscuous mode [ 21.968416][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.975495][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.982621][ T295] bridge_slave_0: entered allmulticast mode [ 21.988766][ T295] bridge_slave_0: entered promiscuous mode [ 21.997842][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.004936][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.012081][ T295] bridge_slave_1: entered allmulticast mode [ 22.018239][ T295] bridge_slave_1: entered promiscuous mode [ 22.032949][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.039992][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.047095][ T297] bridge_slave_0: entered allmulticast mode [ 22.053283][ T297] bridge_slave_0: entered promiscuous mode [ 22.059644][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.066734][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.073906][ T297] bridge_slave_1: entered allmulticast mode [ 22.080032][ T297] bridge_slave_1: entered promiscuous mode [ 22.109008][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.116090][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.123379][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.130404][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.221732][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.229083][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.239519][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.246591][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.262025][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.269086][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.332288][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.339351][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.346947][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.353990][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.365339][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.372408][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.385053][ T294] veth0_vlan: entered promiscuous mode [ 22.397398][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.404473][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.425266][ T294] veth1_macvtap: entered promiscuous mode [ 22.433310][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.440368][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.455104][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.462176][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.494720][ T296] veth0_vlan: entered promiscuous mode [ 22.504444][ T295] veth0_vlan: entered promiscuous mode [ 22.525080][ T296] veth1_macvtap: entered promiscuous mode [ 22.532361][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.551803][ T295] veth1_macvtap: entered promiscuous mode [ 22.569000][ T297] veth0_vlan: entered promiscuous mode [ 22.598161][ T297] veth1_macvtap: entered promiscuous mode [ 22.637335][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.830589][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.981675][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.992709][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.000391][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.002466][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 23.030740][ T45] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 23.039987][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.049378][ T315] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 23.058177][ T45] usb 1-1: config 0 descriptor?? [ 23.161532][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.171867][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 23.182919][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 23.192087][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.200390][ T314] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 23.200790][ T10] usb 4-1: Product: syz [ 23.212493][ T10] usb 4-1: Manufacturer: syz [ 23.217082][ T10] usb 4-1: SerialNumber: syz [ 23.231787][ T315] usb 2-1: unable to get BOS descriptor or descriptor too short [ 23.241336][ T315] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.251635][ T315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.264163][ T315] usb 2-1: string descriptor 0 read error: -22 [ 23.270627][ T315] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 23.279669][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.290148][ T315] usb 2-1: unit 3 not found! [ 23.352762][ T314] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 23.361950][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.369971][ T314] usb 3-1: Product: syz [ 23.374165][ T314] usb 3-1: Manufacturer: syz [ 23.378772][ T314] usb 3-1: SerialNumber: syz [ 23.431045][ T333] netlink: 'syz.3.6': attribute type 4 has an invalid length. [ 23.438599][ T333] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6'. [ 23.471633][ T45] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 23.479190][ T45] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 23.486647][ T45] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 23.494417][ T45] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 23.509474][ T45] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 23.509808][ T10] usb 4-1: USB disconnect, device number 2 [ 23.517012][ T45] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 23.535709][ T45] playstation 0003:054C:09CC.0001: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 23.671011][ T45] playstation 0003:054C:09CC.0001: Invalid byte count transferred, expected 16 got 0 [ 23.680667][ T45] playstation 0003:054C:09CC.0001: Failed to retrieve DualShock4 pairing info: -22 [ 23.686042][ T65] usb 2-1: USB disconnect, device number 2 [ 23.690043][ T45] playstation 0003:054C:09CC.0001: Failed to get MAC address from DualShock4 [ 23.708203][ T45] playstation 0003:054C:09CC.0001: Failed to create dualshock4. [ 23.721716][ T45] playstation 0003:054C:09CC.0001: probe with driver playstation failed with error -22 [ 23.786591][ T314] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 23.920673][ T65] usb 1-1: USB disconnect, device number 2 [ 24.172203][ T128] bridge_slave_1: left allmulticast mode [ 24.177943][ T128] bridge_slave_1: left promiscuous mode [ 24.184041][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.201404][ T128] bridge_slave_0: left allmulticast mode [ 24.210804][ T128] bridge_slave_0: left promiscuous mode [ 24.216461][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.231477][ T359] Zero length message leads to an empty skb [ 24.342200][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.349259][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.356629][ T365] bridge_slave_0: entered allmulticast mode [ 24.363327][ T365] bridge_slave_0: entered promiscuous mode [ 24.369692][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.376750][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.384035][ T365] bridge_slave_1: entered allmulticast mode [ 24.390166][ T365] bridge_slave_1: entered promiscuous mode [ 24.411936][ T128] veth1_macvtap: left promiscuous mode [ 24.417528][ T128] veth0_vlan: left promiscuous mode [ 24.489017][ T382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.499106][ T382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.508248][ T382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.518176][ T382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.524044][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.526110][ T65] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.532945][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.533040][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.554639][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.578129][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.585951][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.595245][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.602360][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.614561][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.621611][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.643251][ T365] veth0_vlan: entered promiscuous mode [ 24.653636][ T365] veth1_macvtap: entered promiscuous mode [ 24.684925][ T384] tmpfs: Unknown parameter 'block(;2i' [ 24.696568][ T384] netlink: 'syz.4.14': attribute type 4 has an invalid length. [ 24.710365][ T314] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.711604][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.729519][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.739385][ T65] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 24.749299][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.760811][ T65] usb 2-1: config 0 descriptor?? [ 24.860420][ T314] usb 1-1: Using ep0 maxpacket: 8 [ 24.867537][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.878886][ T314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 24.893094][ T314] usb 1-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 24.902333][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.911236][ T314] usb 1-1: config 0 descriptor?? [ 24.983025][ T382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.992967][ T382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.007464][ T352] usb 3-1: USB disconnect, device number 2 [ 25.026383][ T352] usblp0: removed [ 25.119166][ T314] wacom 0003:056A:0028.0002: unknown main item tag 0x2 [ 25.135560][ T314] wacom 0003:056A:0028.0002: unknown main item tag 0x0 [ 25.143871][ T314] wacom 0003:056A:0028.0002: unknown main item tag 0x0 [ 25.151410][ T295] ------------[ cut here ]------------ [ 25.157080][ T295] WARNING: CPU: 1 PID: 295 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 25.166490][ T295] Modules linked in: [ 25.168850][ T65] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 25.170429][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 0407fd87b9b5389fc2df16610a17caff68e0c4f0 [ 25.178338][ T65] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 25.189051][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 25.198677][ T65] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 25.205960][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 25.213248][ T65] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 25.218307][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fe 50 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 7a 61 03 cc e8 d6 ae 3e ff <0f> 0b e9 3e ff ff ff e8 ca ae 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 25.218325][ T295] RSP: 0018:ffffc9000b75fb48 EFLAGS: 00010293 [ 25.225528][ T65] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 25.244791][ T295] [ 25.244804][ T295] RAX: ffffffff8249195a RBX: 0000000000000000 RCX: ffff88812041df00 [ 25.244821][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.244831][ T295] RBP: ffffc9000b75fb70 R08: ffff8881211f967f R09: 1ffff1102423f2cf [ 25.244843][ T295] R10: dffffc0000000000 R11: ffffed102423f2d0 R12: 0000000000000000 [ 25.244855][ T295] R13: dffffc0000000000 R14: ffff8881211f95e0 R15: ffff88812d693110 [ 25.244869][ T295] FS: 000055555ca01500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 25.251733][ T65] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 25.257712][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.257728][ T295] CR2: 000055555ca2c998 CR3: 0000000103764000 CR4: 00000000003526b0 [ 25.257745][ T295] Call Trace: [ 25.260119][ T65] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 25.268081][ T295] [ 25.268091][ T295] ovl_do_remove+0x81b/0xda0 [ 25.287543][ T65] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 25.292064][ T295] ? ovl_set_redirect+0x780/0x780 [ 25.330380][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.333622][ T295] ? down_write+0xee/0x2b0 [ 25.333660][ T295] ? __cfi_down_write+0x10/0x10 [ 25.380688][ T295] ovl_rmdir+0x1e/0x30 [ 25.384789][ T295] vfs_rmdir+0x3e0/0x560 [ 25.389056][ T295] incfs_kill_sb+0x109/0x230 [ 25.393705][ T295] deactivate_locked_super+0xd8/0x2a0 [ 25.399130][ T295] deactivate_super+0xb8/0xe0 [ 25.403876][ T295] cleanup_mnt+0x406/0x4a0 [ 25.408312][ T295] __cleanup_mnt+0x1d/0x40 [ 25.412789][ T295] task_work_run+0x1e5/0x260 [ 25.417405][ T295] ? __cfi_task_work_run+0x10/0x10 [ 25.422627][ T295] ? __x64_sys_umount+0x12e/0x180 [ 25.427704][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 25.433132][ T295] ? __kasan_check_read+0x15/0x20 [ 25.438169][ T295] resume_user_mode_work+0x35/0x50 [ 25.443336][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 25.448897][ T295] do_syscall_64+0x63/0xf0 [ 25.453387][ T295] ? clear_bhb_loop+0x50/0xa0 [ 25.458118][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.464081][ T295] RIP: 0033:0x7f22d599e097 [ 25.468531][ T295] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 25.488188][ T295] RSP: 002b:00007fff31e16e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 25.490339][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 25.496636][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f22d599e097 [ 25.496656][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff31e16f00 [ 25.496669][ T295] RBP: 00007fff31e16f00 R08: 00007fff31e17f00 R09: 00000000ffffffff [ 25.505159][ T10] usb 5-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 25.509791][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff31e17f90 [ 25.509811][ T295] R13: 00007f22d5a321ca R14: 0000000000006214 R15: 00007fff31e17fd0 [ 25.509827][ T295] [ 25.518302][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.525810][ T295] ---[ end trace 0000000000000000 ]--- [ 25.525913][ T314] wacom 0003:056A:0028.0002: unknown main item tag 0x0 [ 25.538362][ T10] usb 5-1: Product: syz [ 25.543646][ T314] wacom 0003:056A:0028.0002: unknown main item tag 0x0 [ 25.552735][ T295] ------------[ cut here ]------------ [ 25.554094][ T314] wacom 0003:056A:0028.0002: unknown main item tag 0x0 [ 25.562112][ T295] WARNING: CPU: 0 PID: 295 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 25.567961][ T314] wacom 0003:056A:0028.0002: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 25.574480][ T295] Modules linked in: [ 25.580685][ T314] wacom 0003:056A:0028.0002: hidraw1: USB HID v0.04 Device [HID 056a:0028] on usb-dummy_hcd.0-1/input0 [ 25.585528][ T295] [ 25.591965][ T314] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0028.0002/input/input4 [ 25.597797][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 0407fd87b9b5389fc2df16610a17caff68e0c4f0 [ 25.617469][ T314] usb 1-1: USB disconnect, device number 3 [ 25.620466][ T295] Tainted: [W]=WARN [ 25.669055][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 25.679172][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 25.684861][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fe 50 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 7a 61 03 cc e8 d6 ae 3e ff <0f> 0b e9 3e ff ff ff e8 ca ae 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 25.704537][ T295] RSP: 0018:ffffc9000b75fb48 EFLAGS: 00010293 [ 25.710646][ T295] RAX: ffffffff8249195a RBX: 0000000000000000 RCX: ffff88812041df00 [ 25.718655][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.723416][ T364] netlink: 'syz.1.17': attribute type 16 has an invalid length. [ 25.726686][ T295] RBP: ffffc9000b75fb70 R08: ffff8881211f967f R09: 1ffff1102423f2cf [ 25.735003][ T364] netlink: 'syz.1.17': attribute type 3 has an invalid length. [ 25.742382][ T295] R10: dffffc0000000000 R11: ffffed102423f2d0 R12: 0000000000000000 [ 25.751004][ T364] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.17'. [ 25.757921][ T295] R13: dffffc0000000000 R14: ffff8881211f95e0 R15: ffff88812d693110 [ 25.775054][ T295] FS: 000055555ca01500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 25.784029][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.784350][ T416] fido_id[416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 25.790651][ T295] CR2: 00007fff0a86dff8 CR3: 0000000103764000 CR4: 00000000003526b0 [ 25.813393][ T295] DR0: 0000000000000000 DR1: 0000000000010000 DR2: 0000000000000000 [ 25.821555][ T295] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 25.829575][ T295] Call Trace: [ 25.832906][ T295] [ 25.835847][ T295] ovl_do_remove+0x81b/0xda0 [ 25.840495][ T295] ? ovl_set_redirect+0x780/0x780 [ 25.845630][ T295] ? down_write+0xee/0x2b0 [ 25.850068][ T295] ? __cfi_down_write+0x10/0x10 [ 25.855011][ T295] ovl_rmdir+0x1e/0x30 [ 25.859116][ T295] vfs_rmdir+0x3e0/0x560 [ 25.863521][ T295] incfs_kill_sb+0x1a0/0x230 [ 25.868125][ T295] deactivate_locked_super+0xd8/0x2a0 [ 25.873560][ T295] deactivate_super+0xb8/0xe0 [ 25.878252][ T295] cleanup_mnt+0x406/0x4a0 [ 25.882725][ T295] __cleanup_mnt+0x1d/0x40 [ 25.887146][ T295] task_work_run+0x1e5/0x260 [ 25.891784][ T295] ? __cfi_task_work_run+0x10/0x10 [ 25.896907][ T295] ? __x64_sys_umount+0x12e/0x180 [ 25.902268][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 25.907668][ T295] ? __kasan_check_read+0x15/0x20 [ 25.912754][ T295] resume_user_mode_work+0x35/0x50 [ 25.917870][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 25.923385][ T295] do_syscall_64+0x63/0xf0 [ 25.927820][ T295] ? clear_bhb_loop+0x50/0xa0 [ 25.932553][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.938452][ T295] RIP: 0033:0x7f22d599e097 [ 25.942916][ T295] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 25.962577][ T295] RSP: 002b:00007fff31e16e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 25.971044][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f22d599e097 [ 25.979017][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff31e16f00 [ 25.987063][ T295] RBP: 00007fff31e16f00 R08: 00007fff31e17f00 R09: 00000000ffffffff [ 25.995091][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff31e17f90 [ 26.003113][ T295] R13: 00007f22d5a321ca R14: 0000000000006214 R15: 00007fff31e17fd0 [ 26.011111][ T295] [ 26.014136][ T295] ---[ end trace 0000000000000000 ]--- [ 26.020612][ T10] usb 5-1: Manufacturer: syz [ 26.025248][ T10] usb 5-1: SerialNumber: syz [ 26.052435][ T418] /dev/nullb0: Can't lookup blockdev [ 26.058194][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 26.058208][ T36] audit: type=1400 audit(1780508833.590:150): avc: denied { mounton } for pid=417 comm="syz.2.29" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 26.062522][ T419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.087991][ T65] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 26.097159][ T419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.111444][ T65] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 26.118560][ T65] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -32 [ 26.129784][ T65] usb 2-1: USB disconnect, device number 3 [ 26.242682][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 26.264971][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 26.276939][ T10] usb 5-1: USB disconnect, device number 2 [ 26.290353][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.316630][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.420361][ T31] usb 3-1: device descriptor read/64, error -71 [ 26.660380][ T31] usb 3-1: device descriptor read/64, error -71 [ 26.900360][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.030380][ T31] usb 3-1: device descriptor read/64, error -71 [ 27.270462][ T31] usb 3-1: device descriptor read/64, error -71 [ 27.380442][ T31] usb usb3-port1: attempt power cycle [ 27.720362][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 27.741652][ T31] usb 3-1: device descriptor read/8, error -71 [ 27.871398][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.110378][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 28.131404][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.261436][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.370453][ T31] usb usb3-port1: unable to enumerate USB device