last executing test programs: 27.618525721s ago: executing program 1 (id=27): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ef17476000000000000109022400010000a00209040005020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x49627e0e9a2bded4, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r4, &(0x7f0000000280)=@abs={0x27}, 0x6e) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0xa, 0x62080) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="4001000000007cff3ca99e933e89e5b3ce303ce86b32cdf73523172befaa0daeebd758215a0be88066433d3b8ac52ca723cf593455cb56769c128d9d9dbd9f87de8fc6523851145405521938a22e2e49b6d997370dc43ea2c4aa9261bb29b9fc0cd5cae8de529e1951ec031c4a7b6827e1361f2a063ac1790ad652fc25f85083fb9769af5f3fc31251de66407d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000100)={0x2, 0x200, 0x30cd, 0x5, 0x3fdc, 0x2}) ioctl$HIDIOCSUSAGES(r5, 0x501c4814, 0x0) 25.435060903s ago: executing program 1 (id=38): socket(0x11, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) (async) write$tun(r1, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) (async) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 24.259910423s ago: executing program 1 (id=44): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)='i', 0x1}], 0x1}}], 0x2, 0x40) sendto$inet(r0, &(0x7f0000000300)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a66b5142374cc8a67a16845b745bff74683c9d915c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0001005375abddf56331be396eaa2398ea66b92a74fd4147e826abed1ccc1cdd936d2571c3510b00000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e7480000001ebdec6811981ce6be92aea7ffb20c6fdcc97291c9af9634c31b03f18cf2d2f5be7a6a", 0xffffffffffffffc6, 0x88c1, 0x0, 0xfffffce8) io_setup(0xe4, &(0x7f0000000000)) io_setup(0x7, &(0x7f0000000040)) syz_open_dev$hidraw(&(0x7f0000000080), 0x1004, 0x2c2) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000003c0)={0x2001, 0x4, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4080) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 24.134482796s ago: executing program 1 (id=45): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$binder_nlctrl_getfamily(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x10, 0x1, 0x0, 0x0, {}, {0xb}}, 0x20}}, 0x0) recvfrom$binder_nlctrl_getfamily(r0, &(0x7f0000000200)={""/76, 0x0}, 0x80, 0x40, 0x0, 0x0) setsockopt$binder_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000280)=r1, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000480)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) recvfrom$binder_report(r0, &(0x7f00000009c0)={""/44, 0x0}, 0x80, 0x40, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000a80)={r3, 0x1, 0x64}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000ac0)={0x44, 0x0, &(0x7f0000000b00)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x100, 0x0, &(0x7f0000000b80)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c80)={0x44, 0x0, &(0x7f0000000cc0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x100, 0x0, &(0x7f0000000d40)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000e40)={0x44, 0x0, &(0x7f0000000e80)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) mkdir(&(0x7f0000000500)='./dev\x00', 0x1fc) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000006c0)='./mnt\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/sda\x00', 0x1c5e42, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000003c0)='./mnt\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r6, &(0x7f0000000440)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000780)=@ethtool_per_queue_op={0x2d, 0xe, [0x8, 0x7, 0x9, 0x70, 0x1, 0xffff7fff, 0x5, 0xa, 0x5, 0x9, 0x5, 0x2, 0x3, 0xeac5, 0xea9f, 0xfff, 0x1, 0x70, 0xb58f41d, 0x7ff, 0x7, 0x7fffffff, 0x14, 0x1000024e, 0x10001, 0xf, 0x200009, 0x6, 0xc4, 0x9, 0x61cb, 0x1f34d744, 0x7, 0x9, 0xc6, 0xfffffffe, 0x4, 0x1, 0x3, 0x270, 0xb5fd, 0x8001, 0xa0, 0x1, 0x8, 0x2008000, 0xfff, 0x27, 0x0, 0x3, 0x7fffffff, 0x2, 0xfffffffe, 0x3, 0xfffffffe, 0x2, 0x800, 0x8, 0x3ff, 0x4, 0x8, 0x100, 0xd, 0x8000, 0x3, 0x2, 0x1, 0x800, 0x3, 0x5, 0xfffffffe, 0x7a, 0xc, 0x0, 0x1000, 0xffff, 0x200004, 0x10000, 0x100, 0x2002, 0x5, 0x2, 0xb86, 0x8, 0x5fb0, 0x4, 0x40, 0x0, 0xe, 0x3, 0x5, 0xffffe8bb, 0x1, 0x7fff, 0x7, 0x8c81, 0x6, 0x1, 0x8, 0x2, 0x4, 0x10001, 0xff, 0x80000000, 0xfffffc00, 0x9, 0x10000, 0x40, 0x9, 0x9, 0xa3c, 0x8b4c, 0x10, 0xa, 0x10, 0xec, 0x4, 0x8fe7, 0x0, 0xe, 0xfffffffc, 0x5, 0x3, 0x81, 0x36, 0x6, 0xae5, 0xe]}}) write$P9_RUNLINKAT(r5, &(0x7f0000000740)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 24.0914296s ago: executing program 1 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000280)={0x0, [{0x0, 0x0, 0x80000005, 0x0}, {0x7, 0x0, 0x90, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x400, 0x0}, {0x2, 0x0, 0x7f, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x2e1, 0x0}, {0x1, 0x0, 0x40004, 0x0}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x40800) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000440)={0xdb, 0x0, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x5) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)=r3) 23.516953929s ago: executing program 1 (id=47): r0 = syz_open_dev$loop(0x0, 0xa0, 0x48002) fadvise64(r0, 0xe03, 0x1, 0x2) 23.463881824s ago: executing program 32 (id=47): r0 = syz_open_dev$loop(0x0, 0xa0, 0x48002) fadvise64(r0, 0xe03, 0x1, 0x2) 9.803651363s ago: executing program 2 (id=92): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000008000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='cmdline\x00') preadv(r0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/4115, 0x1013}], 0x1, 0x16, 0xfffffff9) 9.762236727s ago: executing program 2 (id=93): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f00000002c0)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r2}) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000440)="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", 0x559, r1) keyctl$reject(0x13, r1, 0x0, 0x6, r0) keyctl$invalidate(0x15, r0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 9.705091093s ago: executing program 4 (id=48): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)=""/106, &(0x7f0000000080)=0x6a) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x5a1, 0x3}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0x761f, 0x4) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0x0}) sendmsg$AUDIT_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xf41fd388be300e35}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbff, {0x41, 0x1, 0x2, r3, 0x3, 0x80000000, 0x4, 0x9, 0x0, 0x5a}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x40040c1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x702, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r5 = socket$inet(0x2, 0x2, 0x981) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000004c0)={@loopback, @local, 0x0, 0x4, [@rand_addr=0x64010100, @empty, @loopback, @empty]}, 0x20) eventfd(0x1ff) r6 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r6, &(0x7f0000000500)=@icresp={{0x1, 0x1, 0x80, 0xf, 0x2263}, 0x0, 0x0, 0x3, 0x8}, 0x80, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000580)={'veth0_vlan\x00', {0x2, 0x0, @broadcast}}) r7 = signalfd4(r5, &(0x7f00000005c0)={[0x8]}, 0x8, 0x80800) r8 = open$dir(&(0x7f0000000600)='.\x00', 0x290880, 0x121) r9 = openat(r8, &(0x7f0000000640)='./file0\x00', 0x20100, 0x183) epoll_wait(r9, &(0x7f0000000680)=[{}], 0x1, 0x100) socket$netlink(0x10, 0x3, 0x1) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f00000006c0)=0x3) ioctl$UBLK_U_CMD_GET_PARAMS(r9, 0x80207509, &(0x7f0000000780)={0x0, 0xffff, 0x70, &(0x7f0000000700)={0x70}}) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000800)={r11}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r10, 0x942e, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000940)={&(0x7f0000000840), 0x10, &(0x7f0000000900)={&(0x7f0000000880)={0x1, 0x801, 0x0, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x11, 0x2, 0x0, 0x0, "c3c9b463e200dc77315cf7d305cc436b0947b0069d9b896825af2aac7c3eb81144f35c53e2ba4baae2f04ca4d977716b2ca3cef08424455ad5eafdb2447d5e78"}}, 0x80}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 9.662363147s ago: executing program 2 (id=94): mkdirat(0xffffffffffffff9c, 0x0, 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) write(r0, &(0x7f00000003c0)="686973743a6b6579733d63ead6f77e0d373e66017f4758cd4af72eee6f241f90a813633b8e7295a59da65d06dc9ca1d0f3054aa18494b327c939f970b6e273ceb695736c3f87db80d311e488b8029c2d24", 0x51) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000007c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e22, 0x3, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000ac0), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000b00)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb29d453e94df581d7575dd5b7ff0f58e200", '\x00\t\x00', "1f00000000000080"}, 0x38) writev(r1, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="81454920f4355b30bdcac3903eea1ab1c967", 0x12}, {&(0x7f0000000c40)="f19b4cfeaddd0a9327aac595a43dcc7a8529acc1318575", 0x17}, {&(0x7f00000015c0)="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", 0x818}], 0x3) mkdir(&(0x7f0000000500)='./dev\x00', 0x1fc) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x8410, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) chdir(&(0x7f00000006c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000740)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=ANY=[@ANYBLOB="58030000", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="040046000400670008000c000000000008000d00070000000a003400020202020202000040005a803c00008007000200474a090014000300090000048000080081000004000005001400030000010400ff03000006000b0003004000050007000200000058025a8018000280140003000600030009000002ff7f01000900020060000380140003000010d700ff03090001005900150a080005000400010000001400050006000600070005000080020005003a0b050004000000000005000400020000001b00010005056c1b60240416123630126c244800060136126c0b0300a80003801400030004000d000e000f000b0009000100050005000600010000002800020040314908061731064c504c1d2353062119503640193e48182f2c0c47392f53452a28121a14000500ff7f000009000700060004000900000205000600010000001600010060d9120060093003160609360260360b30090000150002001a541a093720302e4e41263c520e493121000000140005000c000c00f1fff8ff0700000005000100bc00008021000100160c00033601066012051b045124050205040203030905040906040918000000350002002812150436210620162a0b0224201c22104f383f3833170e4e450e2735215715162311520035184d2704244139002b5309000000050004000000000014000500c6010008050009000800090007001b00010036026c09091b046c0648066030483003161b1b09240602000500070001000000140003000100b9dd05000004ff0f090094a900085c00018007000e00113941004e000200401f21351d512120510b4e2600131637381e0f532734310641034746064421192d04570242495152244b103f114c0f54172b20381e004921280a3d570a2e1c3a011205520705572f101e00001c00028016000100010b18241606013024031b16180c6c02184800002800a6800a00060008021100000100000a00060008021100000000000a00060008021100000100002800a6800a00060008021100000100000a00060008021100000100000a00060008021100000000002800a6800a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000500d50001000000"], 0x358}}, 0x0) r5 = syz_ublk_setup_io_uring(0x382f, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x8000003, 0x1e8}, &(0x7f0000000780)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r9, 0x694c1b4c1475e2e, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x20000080) syz_usb_connect(0x5, 0x8ac, &(0x7f0000000440)=ANY=[@ANYBLOB="120110019f1a1010d1121e1400000102030109029a08044c04400c09047d700d4b01"], 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0x879, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x160}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r2, r10, &(0x7f0000000200)={0x0, 0x40, 0x800, 0x7, 0x264}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4483, 0x2006, 0x2, 0xe5, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2009209, 0x0, 0x3, 0x2080008, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x803, 0x40, 0x0, 0x1000000, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x1, 0x20000, 0x38e, 0x0, r5}}], 0x4, &(0x7f0000000b40)={0x2e, 0x58, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0xfffd, 0xc8b, 0x0, 0x0}}, 0x0) 8.039259482s ago: executing program 2 (id=96): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x4ce, 0x0) memfd_create(&(0x7f0000000040)='key_or_keyring:', 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009a, 0x0, 0x6}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000140)={0x10000000000000cf, 0x0, [{}]}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1c1) mkdir(&(0x7f00000002c0)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file2\x00', 0x1000) mount$fuse(0x0, &(0x7f0000000480)='./file0/file2\x00', 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 7.921342244s ago: executing program 4 (id=48): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)=""/106, &(0x7f0000000080)=0x6a) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x5a1, 0x3}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0x761f, 0x4) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0x0}) sendmsg$AUDIT_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xf41fd388be300e35}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbff, {0x41, 0x1, 0x2, r3, 0x3, 0x80000000, 0x4, 0x9, 0x0, 0x5a}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x40040c1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x702, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r5 = socket$inet(0x2, 0x2, 0x981) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000004c0)={@loopback, @local, 0x0, 0x4, [@rand_addr=0x64010100, @empty, @loopback, @empty]}, 0x20) eventfd(0x1ff) r6 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r6, &(0x7f0000000500)=@icresp={{0x1, 0x1, 0x80, 0xf, 0x2263}, 0x0, 0x0, 0x3, 0x8}, 0x80, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000580)={'veth0_vlan\x00', {0x2, 0x0, @broadcast}}) r7 = signalfd4(r5, &(0x7f00000005c0)={[0x8]}, 0x8, 0x80800) r8 = open$dir(&(0x7f0000000600)='.\x00', 0x290880, 0x121) r9 = openat(r8, &(0x7f0000000640)='./file0\x00', 0x20100, 0x183) epoll_wait(r9, &(0x7f0000000680)=[{}], 0x1, 0x100) socket$netlink(0x10, 0x3, 0x1) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f00000006c0)=0x3) ioctl$UBLK_U_CMD_GET_PARAMS(r9, 0x80207509, &(0x7f0000000780)={0x0, 0xffff, 0x70, &(0x7f0000000700)={0x70}}) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000800)={r11}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r10, 0x942e, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000940)={&(0x7f0000000840), 0x10, &(0x7f0000000900)={&(0x7f0000000880)={0x1, 0x801, 0x0, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x11, 0x2, 0x0, 0x0, "c3c9b463e200dc77315cf7d305cc436b0947b0069d9b896825af2aac7c3eb81144f35c53e2ba4baae2f04ca4d977716b2ca3cef08424455ad5eafdb2447d5e78"}}, 0x80}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 6.178816241s ago: executing program 2 (id=99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x8003}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r2, &(0x7f0000000180)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) close(0x3) close_range(r0, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, 0x0) chdir(0x0) r8 = open(0x0, 0x80000, 0x103) getdents(r8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x814}}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.166530922s ago: executing program 3 (id=101): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000315eb9340000000000fbdb0d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000a40)={[0x60000000004, 0x1000000003, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004ce, 0xec63, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x1, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000b80)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0xf8, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xb000, 0xc, 0x0, 0xfc, 0x5, 0x0, 0x0, 0x3, 0x7}, {0x41000, 0x5000, 0x1f, 0xfd, 0xf, 0x4, 0x4, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0xfec43000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0xfc, 0x7, 0x10}, {0xeeee8000, 0xe6ee9ffc, 0x8, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x3, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13}, {0x0, 0x3000, 0xf, 0x0, 0x0, 0xaf, 0x0, 0xca, 0x4, 0x3, 0x0, 0x3}, {0x80a0000}, {0xdddd1000}, 0xddf8fff3, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x80000000, 0x0, 0x1]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000500)=0x5) (async) r5 = syz_clone(0x33cc7180, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$setregs(0x1a, r5, 0xfffffffffffffffe, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f00000007c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000800)={0x0, &(0x7f0000000840)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x400c, 0x200000}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0xe0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f00000004c0)) (async) ptrace$cont(0xe30b53a2e7160710, r5, 0x1, 0x5) (async) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x15555370, [{0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00036114f9ce180e66a5fffa79d2d99a217d03da7d8eb46f8ca08da2bfed68c73356eb5ee16316dfd2f1c029f3762b2b280bd4842dd6af9293365b684636b78c02f401ff669eec701d333d"]}, {0x102, &(0x7f0000000b40)=@lang_id={0x0, 0x3, 0x81d}}]}) (async) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000540)=""/226, &(0x7f0000000640)=0xe2) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYRES16=r11, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000001fe8000000000000000000000000000bb000000000d0001007564703a73797a3000000000", @ANYBLOB="0200000064643c63057b7eca360db5cac91b31733f959d024c9f321b2545e918b4ecb908cdfc9bfc"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.082719741s ago: executing program 4 (id=48): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)=""/106, &(0x7f0000000080)=0x6a) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x5a1, 0x3}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0x761f, 0x4) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0x0}) sendmsg$AUDIT_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xf41fd388be300e35}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbff, {0x41, 0x1, 0x2, r3, 0x3, 0x80000000, 0x4, 0x9, 0x0, 0x5a}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x40040c1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x702, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r5 = socket$inet(0x2, 0x2, 0x981) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000004c0)={@loopback, @local, 0x0, 0x4, [@rand_addr=0x64010100, @empty, @loopback, @empty]}, 0x20) eventfd(0x1ff) r6 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r6, &(0x7f0000000500)=@icresp={{0x1, 0x1, 0x80, 0xf, 0x2263}, 0x0, 0x0, 0x3, 0x8}, 0x80, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000580)={'veth0_vlan\x00', {0x2, 0x0, @broadcast}}) r7 = signalfd4(r5, &(0x7f00000005c0)={[0x8]}, 0x8, 0x80800) r8 = open$dir(&(0x7f0000000600)='.\x00', 0x290880, 0x121) r9 = openat(r8, &(0x7f0000000640)='./file0\x00', 0x20100, 0x183) epoll_wait(r9, &(0x7f0000000680)=[{}], 0x1, 0x100) socket$netlink(0x10, 0x3, 0x1) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f00000006c0)=0x3) ioctl$UBLK_U_CMD_GET_PARAMS(r9, 0x80207509, &(0x7f0000000780)={0x0, 0xffff, 0x70, &(0x7f0000000700)={0x70}}) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000800)={r11}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r10, 0x942e, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000940)={&(0x7f0000000840), 0x10, &(0x7f0000000900)={&(0x7f0000000880)={0x1, 0x801, 0x0, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x11, 0x2, 0x0, 0x0, "c3c9b463e200dc77315cf7d305cc436b0947b0069d9b896825af2aac7c3eb81144f35c53e2ba4baae2f04ca4d977716b2ca3cef08424455ad5eafdb2447d5e78"}}, 0x80}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 4.22603932s ago: executing program 0 (id=102): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x14b040, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @remote, 0xc}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000280)=""/200, 0xfffffffffffffd95}], 0x1, 0x3, 0x0) 4.170605896s ago: executing program 0 (id=103): gettid() timer_settime(0x0, 0x0, &(0x7f0000000580)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.136206979s ago: executing program 0 (id=104): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xb1, 0x6f, 0xd9, 0x20, 0x7ab, 0xfc01, 0x7e46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x6, 0x80, 0x7, "", [{{0x9, 0x4, 0x5a, 0x80, 0x0, 0x1d, 0xc1, 0xba, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x0, 0xe, 0x8a, {0x8a, 0x31, "f92fa6c66f94d1465031165ca9d29d0f87ff7893d1a4251cc7b5e856e1c4e8bb236877cf14b16cb712ebfd953d038a4aee876feeff5ada8ed6f69c821d860d1b9ba7cd09fa50790e9760a335d3a3d9d6d50283d03f9cc1b8445ad3d86d62944d143d7f93fa7d6222977655d915519e2b07d083e6aadda41ffc68f466b46c476d2ac7bb676e6de30b"}}, &(0x7f0000000100)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "712d8d22793dbaaf6943183de2d06397bcba33ebb990cfb57a3554e1d7d2d28d095064a983d04284e11539f74772a14c2103d1599bbde1a46e175c227cd6d04464f38c63f543e98c5c49a7e7189ef56f753811e6f3b86459ebcb0ad29c4fc60cfc9029defcb54dc3eaf2d1e4ca9fd189e97c5114078da99e6a89acc51e787a5b97615d3d068ec2b35107db3b9a8c0d607cf31c923e71dff290c2d3be1ff48e83b016b586c5816caa08ba31fd880a78ca90b64bd77cd0f97541c25adbeb7254b18a00b2721270e61e225f83086d72a7e6a02330756995ee73d84bcc5b6a"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x17, 0xa4, "e6a2e4d57b4df74be409fbe28bf127a4f1d80bbac5ced27c76670b2b100701e4a3efb821d27e898dcce1728fe43a67ff76096bb52d525674aa903931f8e8a7cdd1c9fa06afa7061ba69870392388d953adce2365648228d75bfe83da2a84bac34d7816598e2c85e76cddaac20e5e042a37a0815ad25bd0a3aef99a4dc2c5b669b5fb44120bb7838ca81d9babf54a8946c115c8eb3a823d84cf8a0f0dd2d22ea7170ee701"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x81, 0x3, "86ad03"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, '<)'}, &(0x7f0000000400)={0x20, 0x83, 0x3, "409a92"}, &(0x7f0000000440)={0x20, 0x84, 0x3, "5ece84"}, &(0x7f0000000480)={0x20, 0x85, 0x3, '_<$'}}) 4.112702142s ago: executing program 4 (id=48): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)=""/106, &(0x7f0000000080)=0x6a) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x5a1, 0x3}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0x761f, 0x4) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0x0}) sendmsg$AUDIT_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xf41fd388be300e35}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbff, {0x41, 0x1, 0x2, r3, 0x3, 0x80000000, 0x4, 0x9, 0x0, 0x5a}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x40040c1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x702, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r5 = socket$inet(0x2, 0x2, 0x981) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000004c0)={@loopback, @local, 0x0, 0x4, [@rand_addr=0x64010100, @empty, @loopback, @empty]}, 0x20) eventfd(0x1ff) r6 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r6, &(0x7f0000000500)=@icresp={{0x1, 0x1, 0x80, 0xf, 0x2263}, 0x0, 0x0, 0x3, 0x8}, 0x80, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000580)={'veth0_vlan\x00', {0x2, 0x0, @broadcast}}) r7 = signalfd4(r5, &(0x7f00000005c0)={[0x8]}, 0x8, 0x80800) r8 = open$dir(&(0x7f0000000600)='.\x00', 0x290880, 0x121) r9 = openat(r8, &(0x7f0000000640)='./file0\x00', 0x20100, 0x183) epoll_wait(r9, &(0x7f0000000680)=[{}], 0x1, 0x100) socket$netlink(0x10, 0x3, 0x1) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f00000006c0)=0x3) ioctl$UBLK_U_CMD_GET_PARAMS(r9, 0x80207509, &(0x7f0000000780)={0x0, 0xffff, 0x70, &(0x7f0000000700)={0x70}}) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000800)={r11}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r10, 0x942e, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000940)={&(0x7f0000000840), 0x10, &(0x7f0000000900)={&(0x7f0000000880)={0x1, 0x801, 0x0, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x11, 0x2, 0x0, 0x0, "c3c9b463e200dc77315cf7d305cc436b0947b0069d9b896825af2aac7c3eb81144f35c53e2ba4baae2f04ca4d977716b2ca3cef08424455ad5eafdb2447d5e78"}}, 0x80}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 2.185309807s ago: executing program 0 (id=105): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000000c0)='batadv_slave_1\x00') mount(&(0x7f0000000100)=@md={'/dev/md', @num=0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nsfs\x00', 0x10, &(0x7f00000001c0)='\x00') mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x28) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x402, 0x40) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000280)=""/10) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000002c0)={0x2, 0x5, 0x966, 0xb60000, 0x3, 0x98}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200400c1}, 0x20000004) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xdc, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_ORIG={0x98, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) readv(r0, &(0x7f0000001940)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/131, 0x83}, {&(0x7f00000016c0)=""/102, 0x66}, {&(0x7f0000001740)=""/198, 0xc6}, {&(0x7f0000001840)=""/217, 0xd9}], 0x5) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000019c0)={0x79, 0x0, 0x24f}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x14, r2, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x48000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001b40)={0x2, {0x2, 0x7ca, 0x7, 0x5ca, 0x7, 0xf}}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x20004000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000001c80)={0x9, 0xfff8}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001cc0), 0x200, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000001d00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount(&(0x7f0000001f40)=@sg0, &(0x7f0000001f80)='./file1\x00', &(0x7f0000001fc0)='ext3\x00', 0x1000, &(0x7f0000002000)='IPVS\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000002040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) recvmsg$inet_nvme(r1, &(0x7f00000021c0)={&(0x7f0000002080)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002100)=""/37, 0x25}, {&(0x7f0000002140)=""/23, 0x17}], 0x2}, 0x104) r4 = accept4$packet(r0, &(0x7f0000002200), &(0x7f0000002240)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000022c0)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002300)) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000002340)=""/141) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x7c4751b990e0d5a2}, 0x24004004) 2.183962238s ago: executing program 2 (id=106): socket$netlink(0x10, 0x3, 0x32) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2, @in=@rand_addr=0x64010102, 0x4e23, 0xe204, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x43}, {0x0, 0x38b2, 0x800, 0x45, 0x7, 0x0, 0x8, 0x100}, {0xd96, 0x3, 0xffff, 0x8}, 0x8, 0x6e6bb6, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x1, 0x1, 0x0, 0xff, 0xcc23, 0x4}}, 0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)={0x20, 0x18, 0x15, 0x70bd24, 0xfefffc00, "", [@typed={0xb, 0x0, 0x0, 0x0, @str='\x02\x02\x96\x00\x00\x00\x10'}, @typed={0x4, 0x12, 0x0, 0x0, @binary}]}, 0x20}], 0x1, 0x0, 0x0, 0x40800}, 0x88004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x5f, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x26e9affff64e7ce6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x3261e) mkdir(&(0x7f00000005c0)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000640), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000680), 0x9) sendfile(r4, r4, 0x0, 0x55c6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000440)=""/225, &(0x7f0000000540)=0xe1) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x5, 0x3, 0xfea291d}}) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) 2.183058398s ago: executing program 3 (id=107): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x3, 0x11, @multicast}, 0x10) close(0x3) 2.139738132s ago: executing program 3 (id=108): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@wr_crn={0x67, 0x20, {0x0, 0xfffffffffffffffd}}], 0x20}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x4e22, @multicast2}}}, 0x88) 2.139343672s ago: executing program 0 (id=109): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x100000d) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000002000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, 0x1000, 0x2}) 2.137998252s ago: executing program 3 (id=110): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mlockall(0x2) brk(0x689d80000000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x1, 0x3, 0x4, 0x14, 0x2, 0x40, 0x7, 0x1, 0xd6, 0x1, 0x4, 0x8, 0x9}, {0x4, 0x6, 0x3, 0xff, 0xfc, 0x8, 0x77, 0x67, 0x0, 0xd0, 0x9, 0x1, 0x40}, {0x5, 0x4, 0x3, 0x2, 0x3, 0x24, 0x81, 0x81, 0x5, 0x1, 0x4, 0x6, 0x2}], 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2.137008062s ago: executing program 0 (id=111): timer_create(0x5, &(0x7f0000000480)={0x0, 0x30, 0x2, @thr={&(0x7f0000000200)="5343ed2c52d82b929fa9", &(0x7f00000003c0)="bb939de42850d00dfe1e921eed3caaa23b2e546ca8ed529e3e0dc5a5a35334fb8e41cafe7a05152423e9640391af3de1036c270edb545f7bcc2536c5068926d72f637dce93a7fd62a462f91a30333596bfb1cdfe945f7b74a418180ed96f0eef86b2104e25e09b47c4378120b284ada20397ea92bf1bd00a44ed67354e2f18fa3a7f5fa5c9fb27bace16968c4ed9"}}, &(0x7f00000004c0)) clock_gettime(0x0, &(0x7f0000000500)) r0 = socket$nl_route(0x10, 0x3, 0x0) fchown(r0, 0x0, 0xee01) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000ac0)={'bridge0\x00', &(0x7f0000000b00)=@ethtool_drvinfo={0x3, "c4e7a2b0688d956ca4973edfb6234a4ef2cb764ca35900", "a91c516f5c5509e94ca0f77e60ac38ae8b4afa046a67524a96f3ef7429a33b49", "1bdd94afdd9d487ed828d539b9638000f11190325c74a4e8affd08a4706ecc4a", "7ff081638ae92d00dfddfe9601e30000000000000000000000e4ffffff00", "2df8e8df570862122594e77bb75c9145ea96546a2ea524ebcb1577ab27f76c31", "01d7ea9e461e0704b6d26ea4", 0x3, 0xc, 0xa, 0x6, 0xc06}}) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$nbd(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="67446698010000000300040002000000629d016c7ffbce5626e5be4babb864d0deb25dee65df5e0361f619afd609ddff94e9765a5f6bf3958d55b5f3d1aeeadbb0adb6f04abe95c5c72c473a53f9c17f75fd0cfa72efd4df7fcfc0478b1ea775b34d7f041306e433162f0b5007cfb30afb53a75ace6cfa8bf317af812cc3faad2aae8b12791fc106b8b0dfbf9ee87f68a7c3755622d1f318c34da6fece7b813bfffcdaae5f54cc3b3365baaf77f351ed5bd4b89c25a5af30d9c02b6f1d2a79937bb850e5d1d3d92e410bf33c403aa3e972ba2b351b5735b18de5ee5b"], 0xce) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)="76657468303a30c0000000000000000002") r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000980)={'syzkaller0\x00', 0x4801}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0xa0800, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000a40)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000a80)={'syzkaller0\x00', @random="111100000002"}) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x401) timer_create(0x1, &(0x7f0000000540)={0x0, 0x3c, 0x4}, &(0x7f0000000580)=0x0) timer_getoverrun(r9) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000140)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x40010) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) timer_create(0x2, &(0x7f00000006c0)={0x0, 0x23, 0x4, @thr={&(0x7f0000000c00)="8141af5e9f09fa837d8831fbae3438c4f718462dbce4fdd724ed98d4babea41b196d3ab9fc7b88c12922be434a8c59608e5e397e8e52b149b1448ef642f47617e39688429e4ad8f3a2c7ca61b48a", &(0x7f0000000680)="b10ca4ced7a138e6f25ffaab4a3534034475a6aec7757a1e0adacc1ef6a4"}}, &(0x7f0000000900)) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x2, 0x0) 2.082590028s ago: executing program 3 (id=112): gettid() timer_settime(0x0, 0x0, &(0x7f0000000580)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.081804918s ago: executing program 4 (id=48): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)=""/106, &(0x7f0000000080)=0x6a) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x5a1, 0x3}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0x761f, 0x4) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0x0}) sendmsg$AUDIT_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xf41fd388be300e35}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbff, {0x41, 0x1, 0x2, r3, 0x3, 0x80000000, 0x4, 0x9, 0x0, 0x5a}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x40040c1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x702, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r5 = socket$inet(0x2, 0x2, 0x981) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000004c0)={@loopback, @local, 0x0, 0x4, [@rand_addr=0x64010100, @empty, @loopback, @empty]}, 0x20) eventfd(0x1ff) r6 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r6, &(0x7f0000000500)=@icresp={{0x1, 0x1, 0x80, 0xf, 0x2263}, 0x0, 0x0, 0x3, 0x8}, 0x80, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000580)={'veth0_vlan\x00', {0x2, 0x0, @broadcast}}) r7 = signalfd4(r5, &(0x7f00000005c0)={[0x8]}, 0x8, 0x80800) r8 = open$dir(&(0x7f0000000600)='.\x00', 0x290880, 0x121) r9 = openat(r8, &(0x7f0000000640)='./file0\x00', 0x20100, 0x183) epoll_wait(r9, &(0x7f0000000680)=[{}], 0x1, 0x100) socket$netlink(0x10, 0x3, 0x1) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f00000006c0)=0x3) ioctl$UBLK_U_CMD_GET_PARAMS(r9, 0x80207509, &(0x7f0000000780)={0x0, 0xffff, 0x70, &(0x7f0000000700)={0x70}}) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000800)={r11}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r10, 0x942e, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000940)={&(0x7f0000000840), 0x10, &(0x7f0000000900)={&(0x7f0000000880)={0x1, 0x801, 0x0, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x11, 0x2, 0x0, 0x0, "c3c9b463e200dc77315cf7d305cc436b0947b0069d9b896825af2aac7c3eb81144f35c53e2ba4baae2f04ca4d977716b2ca3cef08424455ad5eafdb2447d5e78"}}, 0x80}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 46.996165ms ago: executing program 3 (id=113): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x4f6e, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000007c0)={[0x5, 0x4, 0x4, 0x6, 0xe7, 0x4, 0x1, 0x1, 0xfff, 0x0, 0x4, 0x2, 0x3, 0xffffffffffffff7f, 0x7, 0x7], 0xc000, 0x41005}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, 0x0) ioctl$DM_TABLE_DEPS(0xffffffffffffffff, 0xc138fd0b, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0x60811, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '2\x00'}}, "0a6d35ab9a3aaa3639e01d32b3a7a30a192935fe00ac97905bb28a6b08ad224325402c8e5c351770bb0054ecd39cb8bf7543af"}) 0s ago: executing program 4 (id=48): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)=""/106, &(0x7f0000000080)=0x6a) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x5a1, 0x3}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0x761f, 0x4) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0x0}) sendmsg$AUDIT_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xf41fd388be300e35}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbff, {0x41, 0x1, 0x2, r3, 0x3, 0x80000000, 0x4, 0x9, 0x0, 0x5a}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x40040c1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x702, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r5 = socket$inet(0x2, 0x2, 0x981) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000004c0)={@loopback, @local, 0x0, 0x4, [@rand_addr=0x64010100, @empty, @loopback, @empty]}, 0x20) eventfd(0x1ff) r6 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r6, &(0x7f0000000500)=@icresp={{0x1, 0x1, 0x80, 0xf, 0x2263}, 0x0, 0x0, 0x3, 0x8}, 0x80, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000580)={'veth0_vlan\x00', {0x2, 0x0, @broadcast}}) r7 = signalfd4(r5, &(0x7f00000005c0)={[0x8]}, 0x8, 0x80800) r8 = open$dir(&(0x7f0000000600)='.\x00', 0x290880, 0x121) r9 = openat(r8, &(0x7f0000000640)='./file0\x00', 0x20100, 0x183) epoll_wait(r9, &(0x7f0000000680)=[{}], 0x1, 0x100) socket$netlink(0x10, 0x3, 0x1) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f00000006c0)=0x3) ioctl$UBLK_U_CMD_GET_PARAMS(r9, 0x80207509, &(0x7f0000000780)={0x0, 0xffff, 0x70, &(0x7f0000000700)={0x70}}) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000800)={r11}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r10, 0x942e, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000940)={&(0x7f0000000840), 0x10, &(0x7f0000000900)={&(0x7f0000000880)={0x1, 0x801, 0x0, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x11, 0x2, 0x0, 0x0, "c3c9b463e200dc77315cf7d305cc436b0947b0069d9b896825af2aac7c3eb81144f35c53e2ba4baae2f04ca4d977716b2ca3cef08424455ad5eafdb2447d5e78"}}, 0x80}, 0x1, 0x0, 0x0, 0xc4}, 0x0) kernel console output (not intermixed with test programs): ss permissive=1 [ 14.858940][ T36] audit: type=1400 audit(1793777524.320:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. [ 21.833625][ T36] audit: type=1400 audit(1793777531.310:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.856746][ T36] audit: type=1400 audit(1793777531.330:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.857663][ T286] cgroup: Unknown subsys name 'net' [ 21.884498][ T36] audit: type=1400 audit(1793777531.360:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.884608][ T286] cgroup: Unknown subsys name 'devices' [ 21.983011][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.988630][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.130347][ T36] audit: type=1400 audit(1793777531.600:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.153804][ T36] audit: type=1400 audit(1793777531.600:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.161964][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.178763][ T36] audit: type=1400 audit(1793777531.600:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.210523][ T36] audit: type=1400 audit(1793777531.660:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.236025][ T36] audit: type=1400 audit(1793777531.660:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.236696][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.261719][ T36] audit: type=1400 audit(1793777531.710:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.295921][ T36] audit: type=1400 audit(1793777531.710:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.082579][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.089636][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.096882][ T295] bridge_slave_0: entered allmulticast mode [ 23.103619][ T295] bridge_slave_0: entered promiscuous mode [ 23.118155][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.125244][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.132383][ T295] bridge_slave_1: entered allmulticast mode [ 23.138516][ T295] bridge_slave_1: entered promiscuous mode [ 23.188904][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.195984][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.203368][ T296] bridge_slave_0: entered allmulticast mode [ 23.209496][ T296] bridge_slave_0: entered promiscuous mode [ 23.215688][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.222760][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.229798][ T293] bridge_slave_0: entered allmulticast mode [ 23.236817][ T293] bridge_slave_0: entered promiscuous mode [ 23.244388][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.251473][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.258529][ T293] bridge_slave_1: entered allmulticast mode [ 23.264708][ T293] bridge_slave_1: entered promiscuous mode [ 23.272654][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.279677][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.286744][ T296] bridge_slave_1: entered allmulticast mode [ 23.292966][ T296] bridge_slave_1: entered promiscuous mode [ 23.324136][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.331268][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.338311][ T294] bridge_slave_0: entered allmulticast mode [ 23.344536][ T294] bridge_slave_0: entered promiscuous mode [ 23.353256][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.360308][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.367366][ T294] bridge_slave_1: entered allmulticast mode [ 23.373559][ T294] bridge_slave_1: entered promiscuous mode [ 23.488260][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.495329][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.502608][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.509621][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.523405][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.530446][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.548350][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.555391][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.562664][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.569678][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.586260][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.593320][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.600574][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.607607][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.638563][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.646139][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.653472][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.660708][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.668155][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.675390][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.682763][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.701326][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.708370][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.723617][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.730654][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.738228][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.745252][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.753310][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.760324][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.767867][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.774894][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.791930][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.798948][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.837023][ T293] veth0_vlan: entered promiscuous mode [ 23.848703][ T296] veth0_vlan: entered promiscuous mode [ 23.857090][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.864157][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.880354][ T295] veth0_vlan: entered promiscuous mode [ 23.890630][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.897662][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.905205][ T296] veth1_macvtap: entered promiscuous mode [ 23.922149][ T293] veth1_macvtap: entered promiscuous mode [ 23.940610][ T295] veth1_macvtap: entered promiscuous mode [ 23.985306][ T294] veth0_vlan: entered promiscuous mode [ 23.992739][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.998293][ T294] veth1_macvtap: entered promiscuous mode [ 24.039339][ T316] ======================================================= [ 24.039339][ T316] WARNING: The mand mount option has been deprecated and [ 24.039339][ T316] and is ignored by this kernel. Remove the mand [ 24.039339][ T316] option from the mount to silence this warning. [ 24.039339][ T316] ======================================================= [ 24.077451][ T316] No source specified [ 24.108516][ T323] netlink: 'syz.2.6': attribute type 4 has an invalid length. [ 24.122321][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.148354][ T323] FAULT_INJECTION: forcing a failure. [ 24.148354][ T323] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 24.162214][ T323] CPU: 1 UID: 0 PID: 323 Comm: syz.2.6 Not tainted syzkaller #0 c140e0e572a2730307a15c4db8c6234da3c6df21 [ 24.162245][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.162266][ T323] Call Trace: [ 24.162273][ T323] [ 24.162281][ T323] __dump_stack+0x21/0x30 [ 24.162303][ T323] dump_stack_lvl+0x140/0x1c0 [ 24.162321][ T323] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.162346][ T323] dump_stack+0x19/0x20 [ 24.162360][ T323] should_fail_ex+0x3c2/0x510 [ 24.162387][ T323] should_fail_alloc_page+0xec/0x110 [ 24.162408][ T323] __alloc_pages_noprof+0x1c0/0x7e0 [ 24.162431][ T323] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 24.162455][ T323] ? filemap_get_entry+0x41b/0x490 [ 24.162486][ T323] __folio_alloc_noprof+0x14/0x80 [ 24.162510][ T323] __filemap_get_folio+0x798/0xe80 [ 24.162529][ T323] ? __kasan_check_write+0x18/0x20 [ 24.162555][ T323] ? __cfi___filemap_get_folio+0x10/0x10 [ 24.162574][ T323] ? __cfi_folio_end_read+0x10/0x10 [ 24.162592][ T323] ? aio_setup_ring+0x2f4/0xc60 [ 24.162615][ T323] aio_setup_ring+0x38e/0xc60 [ 24.162637][ T323] ? free_ioctx_reqs+0x170/0x170 [ 24.162659][ T323] ioctx_alloc+0x337/0x840 [ 24.162680][ T323] __se_sys_io_setup+0x6f/0x230 [ 24.162700][ T323] __x64_sys_io_setup+0x5f/0x80 [ 24.162719][ T323] x64_sys_call+0x26a4/0x2ee0 [ 24.162740][ T323] do_syscall_64+0x57/0xf0 [ 24.162759][ T323] ? clear_bhb_loop+0x50/0xa0 [ 24.162785][ T323] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.162810][ T323] RIP: 0033:0x7fa0a139fb19 [ 24.162833][ T323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.162849][ T323] RSP: 002b:00007fa0a220b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 24.162875][ T323] RAX: ffffffffffffffda RBX: 00007fa0a1625fa0 RCX: 00007fa0a139fb19 [ 24.162890][ T323] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000002080 [ 24.162904][ T323] RBP: 00007fa0a1437b70 R08: 0000000000000000 R09: 0000000000000000 [ 24.162917][ T323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.162929][ T323] R13: 00007fa0a1626038 R14: 00007fa0a1625fa0 R15: 00007ffef7273bf8 [ 24.162946][ T323] [ 24.419079][ T331] FAULT_INJECTION: forcing a failure. [ 24.419079][ T331] name fail_futex, interval 1, probability 0, space 0, times 1 [ 24.432537][ T331] CPU: 0 UID: 0 PID: 331 Comm: syz.0.8 Not tainted syzkaller #0 c140e0e572a2730307a15c4db8c6234da3c6df21 [ 24.432569][ T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.432581][ T331] Call Trace: [ 24.432587][ T331] [ 24.432595][ T331] __dump_stack+0x21/0x30 [ 24.432628][ T331] dump_stack_lvl+0x140/0x1c0 [ 24.432647][ T331] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.432665][ T331] ? unwind_get_return_address+0x51/0x90 [ 24.432693][ T331] dump_stack+0x19/0x20 [ 24.432710][ T331] should_fail_ex+0x3c2/0x510 [ 24.432737][ T331] should_fail+0xf/0x20 [ 24.432752][ T331] get_futex_key+0x178/0x940 [ 24.432772][ T331] ? __cfi_get_futex_key+0x10/0x10 [ 24.432790][ T331] ? kasan_save_track+0x4f/0x80 [ 24.432807][ T331] ? kasan_save_track+0x3e/0x80 [ 24.432825][ T331] ? kasan_save_free_info+0x44/0x50 [ 24.432848][ T331] futex_wake+0x150/0x950 [ 24.432873][ T331] ? __cfi_futex_wake+0x10/0x10 [ 24.432897][ T331] do_futex+0x37d/0x510 [ 24.432917][ T331] ? __cfi_do_futex+0x10/0x10 [ 24.432936][ T331] ? __kasan_slab_free+0x6a/0x80 [ 24.432955][ T331] ? kmem_cache_free+0x1bd/0x4f0 [ 24.432982][ T331] __se_sys_futex+0x13c/0x320 [ 24.433001][ T331] ? putname+0x113/0x150 [ 24.433020][ T331] ? __x64_sys_futex+0x110/0x110 [ 24.433041][ T331] ? __cfi_do_mkdirat+0x10/0x10 [ 24.433063][ T331] ? __kasan_check_write+0x18/0x20 [ 24.433089][ T331] __x64_sys_futex+0xe9/0x110 [ 24.433109][ T331] x64_sys_call+0x227f/0x2ee0 [ 24.433128][ T331] do_syscall_64+0x57/0xf0 [ 24.433148][ T331] ? clear_bhb_loop+0x50/0xa0 [ 24.433173][ T331] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.433197][ T331] RIP: 0033:0x7f24eaf9fb19 [ 24.433213][ T331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.433227][ T331] RSP: 002b:00007f24ebdbf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 24.433247][ T331] RAX: ffffffffffffffda RBX: 00007f24eb225fa8 RCX: 00007f24eaf9fb19 [ 24.433261][ T331] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f24eb225fac [ 24.433274][ T331] RBP: 00007f24eb225fa0 R08: 4000000000000000 R09: 0000000000000000 [ 24.433286][ T331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.433298][ T331] R13: 00007f24eb226038 R14: 00007fffc882be70 R15: 00007fffc882bf58 [ 24.433314][ T331] [ 24.720845][ T344] netlink: 328 bytes leftover after parsing attributes in process `syz.1.11'. [ 24.737202][ T346] Line length is too long: Should be less than 4094 [ 24.751951][ T351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 24.951090][ T312] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.991744][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.111539][ T312] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 25.121070][ T45] usb 3-1: device descriptor read/64, error -71 [ 25.127806][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.141748][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.161642][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.169485][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.177200][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.185862][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.201782][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.209159][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.218043][ T312] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 25.227130][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 25.236825][ T312] usb 1-1: Product: syz [ 25.241178][ T312] usb 1-1: Manufacturer: syz [ 25.245928][ T312] usb 1-1: SerialNumber: syz [ 25.255431][ T312] usb 1-1: config 0 descriptor?? [ 25.281912][ T377] No source specified [ 25.361095][ T45] usb 3-1: device descriptor read/64, error -71 [ 25.492369][ T381] 9pnet_fd: Insufficient options for proto=fd [ 25.611077][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.635899][ T387] binder: Binderfs stats mode cannot be changed during a remount [ 25.741091][ T45] usb 3-1: device descriptor read/64, error -71 [ 25.766480][ T392] rust_binder: 390:392 BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not pending [ 25.775798][ T392] rust_binder: Write failure EINVAL in pid:14 [ 25.991134][ T45] usb 3-1: device descriptor read/64, error -71 [ 26.111302][ T45] usb usb3-port1: attempt power cycle [ 26.461103][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 26.482029][ T45] usb 3-1: device descriptor read/8, error -71 [ 26.542971][ T371] rust_binder: 390: undelivered freeze notification, 0000000000000001 [ 26.551252][ T371] rust_binder: 390: undelivered freeze notification, 0000000000000001 [ 26.559460][ T371] rust_binder: 390: undelivered freeze notification, 0000000000000001 [ 26.622088][ T45] usb 3-1: device descriptor read/8, error -71 [ 26.821091][ T312] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.871074][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 26.892054][ T45] usb 3-1: device descriptor read/8, error -71 [ 26.972093][ T312] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.983182][ T312] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.992989][ T312] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.006046][ T312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 27.012694][ T312] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 27.021736][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.030198][ T312] usb 2-1: config 0 descriptor?? [ 27.036202][ T45] usb 3-1: device descriptor read/8, error -71 [ 27.161303][ T45] usb usb3-port1: unable to enumerate USB device [ 27.204927][ T36] kauditd_printk_skb: 107 callbacks suppressed [ 27.204942][ T36] audit: type=1400 audit(1793777536.680:181): avc: denied { mount } for pid=399 comm="syz.3.28" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.265297][ T36] audit: type=1400 audit(1793777536.740:182): avc: denied { mounton } for pid=399 comm="syz.3.28" path="/13/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 27.443764][ T36] audit: type=1400 audit(1793777536.920:183): avc: denied { read } for pid=396 comm="syz.1.27" dev="nsfs" ino=4026532466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.466597][ T312] input: HID 17ef:6047 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:17EF:6047.0001/input/input4 [ 27.478071][ T36] audit: type=1400 audit(1793777536.920:184): avc: denied { open } for pid=396 comm="syz.1.27" path="net:[4026532466]" dev="nsfs" ino=4026532466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.502448][ T36] audit: type=1400 audit(1793777536.920:185): avc: denied { create } for pid=396 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 27.522281][ T36] audit: type=1400 audit(1793777536.930:186): avc: denied { connect } for pid=396 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 27.541628][ T312] lenovo 0003:17EF:6047.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 27.551074][ T36] audit: type=1400 audit(1793777536.980:187): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=440 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.579582][ T36] audit: type=1400 audit(1793777536.980:188): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=440 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.603061][ T36] audit: type=1400 audit(1793777537.040:189): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=440 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.687468][ T312] usb 1-1: USB disconnect, device number 2 [ 27.771060][ T36] audit: type=1400 audit(1793777537.240:190): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.806206][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 28.099867][ T430] netlink: 'syz.0.34': attribute type 32 has an invalid length. [ 28.242500][ T9] usb 2-1: USB disconnect, device number 2 [ 28.341142][ T312] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 28.492395][ T312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.500409][ T312] usb 1-1: not running at top speed; connect to a high speed hub [ 28.508232][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.517576][ T312] usb 1-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 28.526639][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.534637][ T312] usb 1-1: Product: syz [ 28.538778][ T312] usb 1-1: Manufacturer: syz [ 28.543368][ T312] usb 1-1: SerialNumber: syz [ 28.662055][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.672821][ T65] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 28.687006][ T65] usb 4-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 28.696097][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.704160][ T65] usb 4-1: Product: syz [ 28.708323][ T65] usb 4-1: Manufacturer: syz [ 28.712953][ T65] usb 4-1: SerialNumber: syz [ 28.719811][ T65] r8152-cfgselector 4-1: Unknown version 0x0000 [ 28.726992][ T65] r8152 4-1:1.0: Expected endpoints are not found [ 28.751417][ T444] netlink: 'syz.0.34': attribute type 32 has an invalid length. [ 28.758740][ T430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.769926][ T430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.778826][ T448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.790368][ T448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.800588][ T312] usb 1-1: USB disconnect, device number 3 [ 28.812599][ T414] udevd[414]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.929823][ T438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.938399][ T438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.946848][ T438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.955375][ T438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.021066][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.171089][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 29.177292][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.187410][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.197618][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.206709][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.214723][ T45] usb 2-1: Product: syz [ 29.218890][ T45] usb 2-1: Manufacturer: syz [ 29.223484][ T45] usb 2-1: SerialNumber: syz [ 29.431339][ T45] usb 2-1: 0:2 : does not exist [ 29.438025][ T45] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 29.448523][ T45] usb 2-1: USB disconnect, device number 3 [ 29.871286][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.871307][ T418] Bluetooth: hci0: command 0x1003 tx timeout [ 29.903596][ T461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 29.960181][ T466] tmpfs: Unknown parameter 'nr_bl [ 46.287642][ T749] __dump_stack+0x21/0x30 [ 46.287665][ T749] dump_stack_lvl+0x140/0x1c0 [ 46.287684][ T749] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.287703][ T749] dump_stack+0x19/0x20 [ 46.287721][ T749] should_fail_ex+0x3c2/0x510 [ 46.287750][ T749] should_failslab+0xac/0x100 [ 46.287770][ T749] kmem_cache_alloc_noprof+0x42/0x410 [ 46.287796][ T749] ? security_inode_alloc+0x51/0x230 [ 46.287819][ T749] ? __cfi_make_kgid+0x10/0x10 [ 46.287838][ T749] security_inode_alloc+0x51/0x230 [ 46.287860][ T749] inode_init_always_gfp+0x756/0x9e0 [ 46.287880][ T749] ? __cfi_sock_alloc_inode+0x10/0x10 [ 46.287895][ T749] alloc_inode+0xc5/0x270 [ 46.287913][ T749] ? bpf_lsm_socket_create+0xd/0x20 [ 46.287936][ T749] new_inode_pseudo+0x19/0x40 [ 46.287956][ T749] __sock_create+0x130/0x810 [ 46.287976][ T749] __sys_socketpair+0x221/0x5c0 [ 46.287997][ T749] __x64_sys_socketpair+0x9f/0xc0 [ 46.288018][ T749] x64_sys_call+0x2081/0x2ee0 [ 46.288039][ T749] do_syscall_64+0x57/0xf0 [ 46.288060][ T749] ? clear_bhb_loop+0x50/0xa0 [ 46.288084][ T749] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.288108][ T749] RIP: 0033:0x7f93ad19fb19 [ 46.288124][ T749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.288140][ T749] RSP: 002b:00007f93ae145028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 46.288160][ T749] RAX: ffffffffffffffda RBX: 00007f93ad425fa0 RCX: 00007f93ad19fb19 [ 46.288174][ T749] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 46.288186][ T749] RBP: 00007f93ad237b70 R08: 0000000000000000 R09: 0000000000000000 [ 46.288198][ T749] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000000 [ 46.288211][ T749] R13: 00007f93ad426038 R14: 00007f93ad425fa0 R15: 00007ffc4eb50328 [ 46.288227][ T749] [ 46.288241][ T749] socket: no more sockets [ 46.383202][ T751] rust_binder: 748:751 got reply transaction with no transaction stack [ 46.384272][ T36] audit: type=1400 audit(1793777555.730:269): avc: denied { accept } for pid=748 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.392652][ T751] rust_binder: 748:751 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1560 [ 46.393723][ T36] audit: type=1400 audit(1793777555.730:270): avc: denied { unlink } for pid=746 comm="syz.2.96" name="#1" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.402839][ T65] rust_binder: 748: undelivered TRANSACTION_ERROR: 29201 [ 46.403356][ T36] audit: type=1400 audit(1793777555.730:271): avc: denied { mounton } for pid=746 comm="syz.2.96" path="/21/file0/file2" dev="overlay" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.481053][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 46.742076][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.752185][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 46.761087][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 46.770110][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.780232][ T9] usb 1-1: 0:1 : does not exist [ 46.980132][ T745] vlan0: entered promiscuous mode [ 47.220517][ T745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.231492][ T745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.562522][ T65] usb 1-1: USB disconnect, device number 6 [ 48.091252][ T767] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 48.391097][ T398] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 48.521071][ T398] usb 4-1: device descriptor read/64, error -71 [ 48.761088][ T398] usb 4-1: device descriptor read/64, error -71 [ 49.001071][ T398] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 49.131058][ T398] usb 4-1: device descriptor read/64, error -71 [ 49.371086][ T398] usb 4-1: device descriptor read/64, error -71 [ 49.481136][ T398] usb usb4-port1: attempt power cycle [ 49.821069][ T398] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 49.842078][ T398] usb 4-1: device descriptor read/8, error -71 [ 49.973835][ T398] usb 4-1: device descriptor read/8, error -71 [ 50.017466][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 50.017483][ T36] audit: type=1400 audit(1793777559.490:273): avc: denied { setopt } for pid=776 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.071050][ T36] audit: type=1400 audit(1793777559.490:274): avc: denied { write } for pid=776 comm="syz.0.102" name="icmp6" dev="proc" ino=4026532533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 50.231062][ T398] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 50.252068][ T398] usb 4-1: device descriptor read/8, error -71 [ 50.351060][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 50.382146][ T398] usb 4-1: device descriptor read/8, error -71 [ 50.491164][ T398] usb usb4-port1: unable to enumerate USB device [ 50.501060][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 50.507313][ T9] usb 1-1: config 0 has an invalid interface number: 90 but max is 0 [ 50.515556][ T9] usb 1-1: config 0 has no interface number 0 [ 50.521666][ T9] usb 1-1: config 0 interface 90 has no altsetting 0 [ 50.529693][ T9] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=7e.46 [ 50.538796][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.546825][ T9] usb 1-1: Product: syz [ 50.551045][ T9] usb 1-1: Manufacturer: syz [ 50.555629][ T9] usb 1-1: SerialNumber: syz [ 50.561161][ T9] usb 1-1: config 0 descriptor?? [ 50.967958][ T9] ums-freecom 1-1:0.90: USB Mass Storage device detected [ 51.012742][ T9] usb 1-1: USB disconnect, device number 7 [ 52.311085][ T398] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 52.441096][ T398] usb 3-1: device descriptor read/64, error -71 [ 52.681122][ T398] usb 3-1: device descriptor read/64, error -71 [ 52.921080][ T398] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 53.051113][ T398] usb 3-1: device descriptor read/64, error -71 [ 53.291103][ T398] usb 3-1: device descriptor read/64, error -71 [ 53.401178][ T398] usb usb3-port1: attempt power cycle [ 53.741084][ T398] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 53.762126][ T398] usb 3-1: device descriptor read/8, error -71 [ 53.892084][ T398] usb 3-1: device descriptor read/8, error -71 [ 54.131106][ T398] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 54.152078][ T398] usb 3-1: device descriptor read/8, error -71 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=48 state=3 status=67 (errno 9: Bad file descriptor) [ 54.263749][ T36] audit: type=1400 audit(1793777563.740:275): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2565]" dev="pipefs" ino=2565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 54.308533][ T398] usb 3-1: device descriptor read/8, error -71 [ 54.421145][ T398] usb usb3-port1: unable to enumerate USB device [ 54.454673][ T689] bridge_slave_1: left allmulticast mode [ 54.460431][ T689] bridge_slave_1: left promiscuous mode [ 54.468509][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.475939][ T689] bridge_slave_0: left allmulticast mode [ 54.481726][ T689] bridge_slave_0: left promiscuous mode [ 54.487335][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.592461][ T689] veth1_macvtap: left promiscuous mode [ 54.792782][ T689] bridge_slave_1: left allmulticast mode [ 54.798433][ T689] bridge_slave_1: left promiscuous mode [ 54.804060][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.811425][ T689] bridge_slave_0: left allmulticast mode [ 54.817044][ T689] bridge_slave_0: left promiscuous mode [ 54.822747][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.830222][ T689] bridge_slave_1: left allmulticast mode [ 54.835902][ T689] bridge_slave_1: left promiscuous mode [ 54.841615][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.848936][ T689] bridge_slave_0: left allmulticast mode [ 54.854646][ T689] bridge_slave_0: left promiscuous mode [ 54.860235][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.004547][ T689] veth1_macvtap: left promiscuous mode [ 55.010045][ T689] veth0_vlan: left promiscuous mode [ 55.015510][ T689] veth1_macvtap: left promiscuous mode [ 55.020967][ T689] veth0_vlan: left promiscuous mode