last executing test programs: 5.051632245s ago: executing program 0 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x4, 0x2, 0x200}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc050}, 0x4080) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1bc, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x120}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffff2a2, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xad}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa672}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8024}, 0x40000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x40002, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="a7", 0x1}], 0x1, 0x0, 0x0, 0x10) syz_clone(0x800000, &(0x7f00000001c0)="f28d439820a07b591692a78ca866ed2a12bd5b86efee3af36955ac7dd69beaf8a2a5f49dfeab4c4e5f6f1e28ab7380dcb7ff08b01c274a81c13bd68791bd280faf001fe6821725b170fcb933f945c0191f09eff62d2bee772e1882ace433ae0283ffd99370b23ddea2ffd4eba4307f7d639cbc8d683559f078601eeab9a8cdf293c8e00a34ad088b7d371f05d33035e8997436f45501b540d0967cee684b979b70f1c1", 0xa3, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="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") 4.961538764s ago: executing program 0 (id=6): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x160) creat(&(0x7f0000000200)='./file0\x00', 0xdafbe5d6891b6fc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f00000000c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000180)=0x0) r3 = openat$kvm(0x0, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000006c0)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x60}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) lstat(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000600)) syz_ublk_setup_queues(r7, r2, &(0x7f0000000280)={0x0, 0x3a98, 0x1000, 0xffffffff, 0x2f6}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x0, 0xffffff, 0x8000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb66c, 0x20000, 0x3, 0x20c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1087a0, 0x2, 0x2, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x5, 0xffffbff7, 0x0, r7}}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) 4.0201617s ago: executing program 0 (id=7): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000600)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000640)={@remote, 0x6, 0x0, 0xfd, 0xe}, 0x20) close(0x3) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syncfs(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/asound/timers\x00', 0x41, 0x0) write$uinput_user_dev(r6, 0x0, 0x0) bind$packet(r4, &(0x7f0000000480)={0x11, 0x0, r5, 0x1, 0x10}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000004c0)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0500002f00"], 0x52c}], 0x1, 0x0, 0x0, 0x14008092}, 0x44040) syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5001000010000104000000000000000000000000000000000000000000000001000000000000000000000000000000011234ffff000000000a0080801100f06da42b6c26c153f28af07a7463164648f6e81f8298a481800b406a8c37ecb8c374a0b965ff86e5339ea346033ba781bbefb253f983f022c93b98634ee98aabb43c4ace1b7762e0e25d31ef81b9a652dce5e76d962e0fa02d55915cb4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23200000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000800000003132333435363738393031323334353664636261"], 0x150}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0xf7, 0x6, 0x6, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d4, 0x40, 0x1, 0x43, 0x0, 0xc0000000}, @sadb_ident={0x2, 0xa, 0x7, 0x0, 0x5}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000130001040000000000000000000000000000000010d6c2e635fc6a2791c20000000000000001000000000000000000000000000000011234ffff0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000001000004d2320000000a0000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b00000000140000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc09dfb747001dbb1}, 0x0) sendto$inet6(r8, &(0x7f0000000400), 0x97ff, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 3.565489396s ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='io\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002540)='./proc\x00', &(0x7f0000002580)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000002600)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000002640)={0x1, &(0x7f0000002680)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000026c0)=0x8, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000002400)={'bridge0\x00', @broadcast}) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0}, 0x160e) r4 = fsmount(r0, 0x0, 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(r4, &(0x7f0000000140)='./proc\x00', 0x4002, 0xa0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000002300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000022c0)={&(0x7f0000000200)={0x40, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x80, 0x0, 0x1}}}}}]}}]}}, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000002440)={0xffffffffffffffff}) quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000201, r3, &(0x7f00000024c0)='./file0\x00') write(r5, &(0x7f0000000000)='27', 0x2) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) 3.448227928s ago: executing program 0 (id=10): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000140)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000001480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESHEX=r4, @ANYRES32=r5, @ANYRES16=r3], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000440)={0x20, 0x15, 0x3, "d3786d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.382097527s ago: executing program 3 (id=13): mount$incfs(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x80, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300120018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) lsetxattr(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)=@random={'user.', 'incremental-fs\x00'}, &(0x7f0000000080)='incremental-fs\x00', 0xf, 0x0) 2.277568868s ago: executing program 3 (id=14): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x4, 0x2, 0x200}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc050}, 0x4080) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1bc, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x120}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffff2a2, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xad}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa672}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8024}, 0x40000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x40002, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="a7", 0x1}], 0x1, 0x0, 0x0, 0x10) syz_clone(0x800000, &(0x7f00000001c0)="f28d439820a07b591692a78ca866ed2a12bd5b86efee3af36955ac7dd69beaf8a2a5f49dfeab4c4e5f6f1e28ab7380dcb7ff08b01c274a81c13bd68791bd280faf001fe6821725b170fcb933f945c0191f09eff62d2bee772e1882ace433ae0283ffd99370b23ddea2ffd4eba4307f7d639cbc8d683559f078601eeab9a8cdf293c8e00a34ad088b7d371f05d33035e8997436f45501b540d0967cee684b979b70f1c1", 0xa3, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="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") 2.272315748s ago: executing program 3 (id=15): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) epoll_pwait(r0, 0xfffffffffffffffc, 0x1afb072, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x4000000) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100100000010c016e1750000000000010902240001000010010904000cfe0300000009210004038100db11b3eea8aa6d6675de26524e9e58eda8da43c5dca46e79d583d26fce5c1c917736077b8f66d9daffbbd1597298da8dec5fde10435491bdcf0703f6ff6dc9ec792efcd3bcd65e4f952714fc1fe6d50533cf9afa087e9875fedc82d204dfb881e999af44def1de9d71ef038646ffd446cada794baef17c1c8b6ca1a31d7720a8d47384"], 0x0) write(r2, &(0x7f0000000400)='0', 0x1) 1.335234924s ago: executing program 2 (id=17): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000380)={0x810003, 0x0, 0x8, 0xff7ffff4}, 0x10) write(r2, &(0x7f0000000500)="240000001e005f0214fffffffffffff8070000000b0000000000000008000b000d000000", 0x24) listen(r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x20024885) close(r3) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="79ed6c6c9920a5ff8492604de6fd5e37bb8fe7d9a4806f77d0066a8857a8ce8f693369d73c34da55b07256f09d6d406aa685df8679cfc7e7905e5bce3f01060de7fb00725de457d60ecb6ca118b6fc5227d2f36ef4fc6d47", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r1], 0xfc}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f00000003c0)="40c118070f79475366ba2000b00eee660f38824600c4a17850fc65470f01c20f01ca0f01cf8f2978c11c85d5886ff6b9f4090000b84c8320b2ba000000000f30", 0x40}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.222267846s ago: executing program 2 (id=18): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x7f, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe, 0x2000000000000000}], 0x9}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000180)) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x34, 0x3, 0x4, 0x4, 0x4]}}) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.201116978s ago: executing program 2 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b00000000140000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc09dfb747001dbb1}, 0x0) 1.200130598s ago: executing program 2 (id=20): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) mkdir(&(0x7f0000000000)='./dev\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x2000800, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7) (async) connect$pppl2tp(r0, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 1.121677836s ago: executing program 2 (id=21): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x101b01) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f00000000c0)={0x2003, 0x7}) r2 = socket(0x10, 0x803, 0x0) recvmsg$inet_nvme(r2, &(0x7f0000001e80)={&(0x7f0000000800)=@xdp, 0x80, 0x0}, 0x40012340) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000001f00)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x3f, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @loopback}}}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.052116133s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='io\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002540)='./proc\x00', &(0x7f0000002580)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000002600)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000002640)={0x1, &(0x7f0000002680)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000026c0)=0x8, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000002400)={'bridge0\x00', @broadcast}) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0}, 0x160e) r4 = fsmount(r0, 0x0, 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(r4, &(0x7f0000000140)='./proc\x00', 0x4002, 0xa0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000002300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000022c0)={&(0x7f0000000200)={0x40, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x80, 0x0, 0x1}}}}}]}}]}}, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000002440)={0xffffffffffffffff}) quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000201, r3, &(0x7f00000024c0)='./file0\x00') write(r5, &(0x7f0000000000)='27', 0x2) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) 800.050579ms ago: executing program 1 (id=23): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/events/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='2', 0x1) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000002c0)={0x2, 0xffffffff, 0x4, r1, 0x4}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20a40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r4, 0x8010aebb, &(0x7f0000000340)={0x2}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000380)={[{0x4, 0x1, 0x8, 0x40, 0x3, 0xe0, 0x7f, 0xe, 0xe8, 0x4, 0xd, 0xb4, 0x7}, {0x3, 0xc, 0x5, 0xcd, 0xf7, 0x10, 0x5, 0x7, 0x8, 0x2, 0x2, 0xca, 0x7fffffffffffffff}, {0x7, 0xd7, 0x5, 0xd, 0x9, 0x64, 0x80, 0x1, 0x4, 0x9, 0x4, 0x7, 0x4}], 0x51}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ftruncate(r5, 0x4) sendfile(r2, r5, 0x0, 0x10) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000000140)={{0xd, 0x1, 0x9, 0xffff}, [{0x2, 0x3, 0x9, 0x8c}, {0xfffffffffffffffd, 0x2, 0x2, 0xf9}, {0x7, 0x8, 0x0, 0x5}, {0x8000, 0xe, 0xff, 0x7}, {0x1, 0x560d, 0xf9, 0x7}, {0x0, 0x4, 0xd5, 0x7}, {0xfffffffffffffff8, 0x5, 0x5, 0x5}, {0x10000, 0xf9, 0x9, 0x5}]}) syz_open_dev$usbfs(&(0x7f0000000000), 0x50000, 0x22002) 715.742487ms ago: executing program 3 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x20002, 0x0) ioctl(r1, 0xc0184d03, 0x0) fspick(r1, &(0x7f00000003c0)='./proc\x00', 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306}, 0x4, {0x2, 0x4e22, @multicast1}, 'syzkaller0\x00'}) r3 = open(&(0x7f00000021c0)='./bus\x00', 0x400341042, 0x0) r4 = fcntl$dupfd(r3, 0x406, r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x3000005, 0x30, r4, 0x2cf76000) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x5, 0x0, 0x0) timer_create(0x3, &(0x7f0000000340)={0x0, 0x4, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) r6 = open(&(0x7f0000000040)='./bus\x00', 0x1a1043, 0xc5) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)={0x24, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1e}]}, 0x24}], 0x1}, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0x3, 0x0, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f0000000300)=0x1, 0x4) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0xd8, 0x0, 0x200}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r6, 0x4018f514, &(0x7f00000002c0)={0xffffffff, 0x800000000003, 0x3}) ioctl$BINDER_SET_MAX_THREADS(r10, 0x40046205, 0x0) 565.660802ms ago: executing program 1 (id=25): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x298}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000200)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00007fc000/0x3000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000004a00010000000000000000000a0080"], 0x30}}, 0x0) pwrite64(r2, &(0x7f0000000000)="ff", 0x33000, 0x100b000) 565.035253ms ago: executing program 3 (id=26): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x160) creat(&(0x7f0000000200)='./file0\x00', 0xdafbe5d6891b6fc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f00000000c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000180)=0x0) r3 = openat$kvm(0x0, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000006c0)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x60}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) lstat(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000600)) syz_ublk_setup_queues(r7, r2, &(0x7f0000000280)={0x0, 0x3a98, 0x1000, 0xffffffff, 0x2f6}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x0, 0xffffff, 0x8000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb66c, 0x20000, 0x3, 0x20c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1087a0, 0x2, 0x2, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x5, 0xffffbff7, 0x0, r7}}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) 418.075317ms ago: executing program 1 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f00000003c0)="40c118070f79475366ba2000b00eee660f38824600c4a17850fc65470f01c20f01ca0f01cf8f2978c11c85d5886ff6b9f4090000b84c8320b2ba000000000f30", 0x40}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 415.681958ms ago: executing program 0 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x39, 0x7, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x26, 0x4, 0xa, 0x0, 0xbd9], 0x4000, 0x43180}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xb, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004ca, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x39b7, 0x0, 0x6, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xd, 0xe6, 0x40, 0xfe, 0x0, 0x2, 0x80}, {0x2ffc, 0xd000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x8, 0x7}, {0x48ffc, 0x0, 0xd, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf, 0x8}, {0xeeee0000, 0x3ff8, 0xf, 0x3, 0x17, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7}, {0xeeefa000, 0xffff1000, 0x3, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x1000, 0xf, 0x5, 0x7, 0x5, 0x40, 0x3, 0x8, 0x1, 0x44, 0x72}, {0x9000, 0x4000, 0xa, 0x9, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0x4000, 0x30}, {0xffe, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x4, 0x2000, 0x3000, [0x8, 0x5, 0xffffffff, 0x20008]}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f00000000c0)={0xb}, 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4f20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000140)={0x6, 'gre0\x00', {0x80}, 0x3}) write(r3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x39, 0x7, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x26, 0x4, 0xa, 0x0, 0xbd9], 0x4000, 0x43180}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xb, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004ca, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x39b7, 0x0, 0x6, 0x9], 0xeeee8000, 0x202}) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xd, 0xe6, 0x40, 0xfe, 0x0, 0x2, 0x80}, {0x2ffc, 0xd000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x8, 0x7}, {0x48ffc, 0x0, 0xd, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf, 0x8}, {0xeeee0000, 0x3ff8, 0xf, 0x3, 0x17, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7}, {0xeeefa000, 0xffff1000, 0x3, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x1000, 0xf, 0x5, 0x7, 0x5, 0x40, 0x3, 0x8, 0x1, 0x44, 0x72}, {0x9000, 0x4000, 0xa, 0x9, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0x4000, 0x30}, {0xffe, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x4, 0x2000, 0x3000, [0x8, 0x5, 0xffffffff, 0x20008]}) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f00000000c0)={0xb}, 0x8) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4f20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000140)={0x6, 'gre0\x00', {0x80}, 0x3}) (async) write(r3, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 185.203001ms ago: executing program 1 (id=29): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f0000000440)="fc0000001c000704ab5b2509b86803000aab02000000000000001193210001c0f0030584050060100000000081039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548deff", 0xfd) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x34, 0x3, 0x4, 0x4, 0x4]}}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 29.504007ms ago: executing program 1 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f80), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000fc0)={0x1, 0x0, 0x54000, 0x2000, &(0x7f0000fa4000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f0000001040)={0x1}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x9, 0x0, 0x75, @loopback, @local, 0x4025a19fb75863b, 0x700, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x19cc4ec8798d41b0, 0x700, 0x4f, 0xf98, {{0x7, 0x4, 0x0, 0x1c, 0x1c, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, {[@rr={0x7, 0x7, 0x9b, [@loopback]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) r7 = socket(0x11, 0x3, 0x0) setsockopt(r7, 0x107, 0xf, &(0x7f0000000640)="00008634", 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x3a0, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x38c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa0, 0x3, "0471060d083131c0ee4910de8621c8370b5a31d49f9b94431c5c7bfcd508b2e1909e41d3157e0a803fc503c01eda203a9987a0d31d1d357f4be59e1425f524e70c44329cc68faa42c6af5fda5a7ccf632c2132a31f30b6a7eb64e7e14e206e7f30451389c7b6aa61c6a5686aef94b83498261b09ea6a3eca10db860d2768d56176f54557ac016f30e8d200816c03d0a760767efb1c284b1419f5118e"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "b252ce88d73171e213e704a3d9e43f3b2ed8e9be5c8c92aebb41ffbe746db7939bad64"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "e78f666568675cab9a56fbd97b77b731644b9e3bc6d1ee2ad4a58b"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "d46bb9a5c9cf2515f5e408f8e9bb0ece162c05db6fef21f72e15d6c2094577430ddd286afc96466d52e4abddf3203159b3bcf3b80a10f8295ae7d4583cab5702a19bd1080c05ff798e3e5b1b1c6d2c11921974b7e9c062b5cfb13d2070c3036e6e22e5b5f8dbcfcb165d671f1c00afa2c9fd0509044ac9197ccb3501a477e931c269488e289153ff132e77822efb70133fa0395092561fd7337d0dbd6d46b993abadb1abd1f72d14549b1068e53bf185ff2f2caa3937c9e48ae6208c06e10024b0bf58bd4a89a296e1f853d3e7a0502536c9d7e9e8ab35388f72d8c89a2df0cbbb"}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "06d9b179b629e91cfefed6675b61b99cf9915862874c02aa3118f38001d7f31070cf3aba9e7e536deaebcec5fd199684977d73d2bdff8d96cb56ffc6e0478eaf49a8f52ab46328dc37a3e68ca34e07849de10970f39c34448339fb213a7d956089613af45768e827ec28c6d55ac52cad35f40918bf9e9f8edd1aa7030ae6c57afeba41b74a28a2f5c35db733c33b1aa307d7718f3bbeb894f3bf267801df0dfdaaa91a0c091622816971886c09ad03b28e999ace4a9f4b30f05f243e4e75887b06e477b0a984fdf1fc5a5b0d8c054dc7904075cdb38716f2997164170ef85aa64815"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x33, 0x3, "07135dbd52df1b36114fe411508196ae85b82f749b9c20b38eeeddb3cc518a67502f74d351343017f3e8f68ac1a1da"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "094a656215bff8b34ab47af6cc563c2b47776074b8"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000090) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg(r7, &(0x7f00000006c0)={&(0x7f0000000700)=@ll={0x11, 0x3, r10, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000800)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0xc, 0x4, 0x20, @loopback, @mcast1, 0x7, 0x7800, 0x80000001, 0x2}}) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000940)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000980)={'sit0\x00', 0x0}) sendto$packet(r12, &(0x7f00000009c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000a00)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000a40)={'dummy0\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r16, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01002dbd7000faffffff220000000c00018008000100", @ANYRES32=r15], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0}, &(0x7f0000000bc0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c00)={0x0, @broadcast, @private}, &(0x7f0000000c40)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000e40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="70010000", @ANYRES16=r3, @ANYBLOB="21022dbd7000fbdbdf250900000090000180080003000200000008000100", @ANYRES32=r4, @ANYBLOB="140072ebc0e0cb83854864000100", @ANYRES32=r5, @ANYBLOB="08000300020000001400020076657468305f746f5f626174616476001400020076657468315f766c616e0000000000001400020070696d3672656731000000000000000008000300030000001400020073797a6b616c6c65723100000000000070000180140002006970766c616e30000000000000000000140002006272696467655f736c6176655f30000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="080003000200000014000200776c616e31000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="5c000180080003000100000008000300020000000800030000000000080003000000000008000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="14000200697036677265300000000000000000001400020069703667726530000000000000000000"], 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x44001) 21.810598ms ago: executing program 0 (id=31): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@migrate={0x50, 0x26, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0xff}, 0x3}}, 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bae000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000005c0)={0x0, &(0x7f0000000600)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0xa5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01000000000000000000170000005400068014000300706565725f6e6f64655f3030303031003c00040067636d2861657329000000000000000000000000000000000000000000000000140000003031323334353637383930313233343536373839"], 0x68}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000300)='100', 0x3) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DM_DEV_CREATE(r7, 0xc138fd03, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f0000000b80)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snapshot={0x0, 0xc88, 0x0, 0x78, 'snapshot-merge\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'p', 0x20, '256', ' 1 discard_zeroes_cow'}}]}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000006c0)={[0x8, 0x4, 0x4000000000003723, 0x6, 0x3, 0x12, 0x1, 0xffffffffffffffff, 0x400000000009, 0x10000002, 0x8003, 0x7ffffffd, 0x200000000, 0x4, 0x3], 0x1, 0x3d4210}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./dev\x00', &(0x7f0000000a80)='devtmpfs\x00', 0x0, 0x0) r8 = openat(r6, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x4e801, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000004c0)=0x80000000) ioctl$int_in(r8, 0x5452, &(0x7f0000000b00)=0x2) fcntl$getown(r8, 0x9) r10 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000780)={0x0, &(0x7f00000007c0)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 1 (id=32): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x7}}) syz_usb_connect$midi(0x3, 0xfffffe76, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xd8, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6}}}}}]}}, 0x0) syz_usb_connect(0x3, 0x9fa, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x310, 0xed, 0x4, 0xd, 0x8, 0x9}, 0x37, &(0x7f0000000a80)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "cff128cee417d4af18ef4ff9dd384279"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xf8, 0x2, 0xbb5}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "a58a0aee7a20b6764c2412ce1ad7161e"}]}, 0x2, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x437}}, {0x58, &(0x7f0000000b00)=ANY=[@ANYBLOB="5803c00ade430c66e8f905e5ee4ccb594480a65f33b3bd7c9b6c70a11d1539deeb870f5bd6e773d2d210aede26416986c0b1307fff1ad140cbaef6e224aa6cecc78b884af9c90119b1493e1f4eb38e70c665978928422963"]}]}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 21.680268][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 21.680287][ T36] audit: type=1400 audit(1793629656.650:59): avc: denied { transition } for pid=275 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.684820][ T36] audit: type=1400 audit(1793629656.650:60): avc: denied { noatsecure } for pid=275 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.689262][ T36] audit: type=1400 audit(1793629656.660:61): avc: denied { write } for pid=275 comm="sh" path="pipe:[2873]" dev="pipefs" ino=2873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.692794][ T36] audit: type=1400 audit(1793629656.660:62): avc: denied { rlimitinh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.695737][ T36] audit: type=1400 audit(1793629656.660:63): avc: denied { siginh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 29.423171][ T36] audit: type=1400 audit(1793629664.390:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.426804][ T287] cgroup: Unknown subsys name 'net' [ 29.445882][ T36] audit: type=1400 audit(1793629664.390:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.473197][ T36] audit: type=1400 audit(1793629664.420:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.473633][ T287] cgroup: Unknown subsys name 'devices' [ 29.596281][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.602006][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.717968][ T36] audit: type=1400 audit(1793629664.690:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.741159][ T36] audit: type=1400 audit(1793629664.690:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.765921][ T36] audit: type=1400 audit(1793629664.690:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.796373][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.805349][ T36] audit: type=1400 audit(1793629664.780:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.829006][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.831831][ T36] audit: type=1400 audit(1793629664.780:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.865559][ T36] audit: type=1400 audit(1793629664.780:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.891155][ T36] audit: type=1400 audit(1793629664.780:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.778152][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.785305][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.792411][ T294] bridge_slave_0: entered allmulticast mode [ 30.799032][ T294] bridge_slave_0: entered promiscuous mode [ 30.805756][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.812818][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.820029][ T294] bridge_slave_1: entered allmulticast mode [ 30.826375][ T294] bridge_slave_1: entered promiscuous mode [ 30.873115][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.880397][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.887539][ T297] bridge_slave_0: entered allmulticast mode [ 30.893806][ T297] bridge_slave_0: entered promiscuous mode [ 30.902080][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.909185][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.916397][ T297] bridge_slave_1: entered allmulticast mode [ 30.922634][ T297] bridge_slave_1: entered promiscuous mode [ 30.974305][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.981377][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.988672][ T296] bridge_slave_0: entered allmulticast mode [ 30.995117][ T296] bridge_slave_0: entered promiscuous mode [ 31.014803][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.021876][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.029028][ T296] bridge_slave_1: entered allmulticast mode [ 31.035597][ T296] bridge_slave_1: entered promiscuous mode [ 31.087880][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.095074][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.102178][ T295] bridge_slave_0: entered allmulticast mode [ 31.108632][ T295] bridge_slave_0: entered promiscuous mode [ 31.121500][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.128643][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.135848][ T295] bridge_slave_1: entered allmulticast mode [ 31.142170][ T295] bridge_slave_1: entered promiscuous mode [ 31.223062][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.230174][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.237521][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.244645][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.265320][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.272400][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.279766][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.286852][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.317345][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.324446][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.331749][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.338855][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.355609][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.362712][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.370040][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.377122][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.409321][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.417314][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.424759][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.432158][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.439932][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.447454][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.476420][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.483478][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.491722][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.498813][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.509405][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.516499][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.528878][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.535985][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.562455][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.569564][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.577483][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.584572][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.607799][ T294] veth0_vlan: entered promiscuous mode [ 31.626519][ T297] veth0_vlan: entered promiscuous mode [ 31.648224][ T294] veth1_macvtap: entered promiscuous mode [ 31.667782][ T295] veth0_vlan: entered promiscuous mode [ 31.675070][ T297] veth1_macvtap: entered promiscuous mode [ 31.707871][ T296] veth0_vlan: entered promiscuous mode [ 31.722647][ T295] veth1_macvtap: entered promiscuous mode [ 31.733605][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.758095][ T296] veth1_macvtap: entered promiscuous mode [ 31.833291][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.852419][ T325] netlink: 'syz.0.5': attribute type 2 has an invalid length. [ 31.925271][ T323] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 32.014115][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.050001][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.164314][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 32.173003][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.189881][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.201654][ T66] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 32.211081][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.215707][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.224982][ T45] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 32.239869][ T66] usb 2-1: config 0 descriptor?? [ 32.240582][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.264477][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 32.283829][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.294925][ T9] usb 3-1: config 0 descriptor?? [ 32.385378][ T45] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 32.404056][ T45] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 32.424686][ T45] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 32.433888][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.444104][ T45] usb 4-1: Product: syz [ 32.448436][ T45] usb 4-1: Manufacturer: syz [ 32.453136][ T45] usb 4-1: SerialNumber: syz [ 32.674366][ T45] usb 4-1: USB disconnect, device number 2 [ 32.689049][ T66] savu 0003:1E7D:2D5A.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 32.911513][ T342] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7'. [ 33.006618][ T319] usb 2-1: USB disconnect, device number 2 [ 33.013538][ T9] arvo 0003:1E7D:30D4.0002: collection stack underflow [ 33.020991][ T9] arvo 0003:1E7D:30D4.0002: item 0 4 0 12 parsing failed [ 33.029034][ T9] arvo 0003:1E7D:30D4.0002: parse failed [ 33.035796][ T9] arvo 0003:1E7D:30D4.0002: probe with driver arvo failed with error -22 [ 33.259676][ T345] process 'syz.3.8' launched './file0' with NULL argv: empty string added [ 33.275493][ T66] usb 3-1: USB disconnect, device number 2 [ 33.524115][ T319] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 33.548208][ T351] Zero length message leads to an empty skb [ 33.674159][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.676294][ T319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 33.692618][ T319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 33.703490][ T319] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 33.717614][ T319] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.726719][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 33.734905][ T319] usb 4-1: SerialNumber: syz [ 33.740710][ T347] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.748131][ T347] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.814268][ T45] usb 1-1: device descriptor read/64, error -71 [ 33.861181][ T354] SELinux: Context system_u:object_r:crypt_device_t:s0 is not valid (left unmapped). [ 33.961641][ T319] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 33.971674][ T319] usb 4-1: USB disconnect, device number 3 [ 34.054157][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.304127][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.434354][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.473539][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 34.473579][ T36] audit: type=1400 audit(1793629669.440:140): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.506077][ T36] audit: type=1400 audit(1793629669.480:141): avc: denied { mounton } for pid=355 comm="syz.3.13" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 34.507288][ T356] incfs: Can't find or create .index dir in ./cgroup [ 34.536420][ T356] incfs: mount failed -22 [ 34.542817][ T356] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.13'. [ 34.563490][ T358] netlink: 'syz.3.14': attribute type 2 has an invalid length. [ 34.625380][ T36] audit: type=1400 audit(1793629669.600:142): avc: denied { create } for pid=360 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.651535][ T36] audit: type=1400 audit(1793629669.620:143): avc: denied { write } for pid=360 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.675541][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.784194][ T45] usb usb1-port1: attempt power cycle [ 34.924093][ T66] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 35.105127][ T66] usb 4-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 35.115983][ T66] usb 4-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30 [ 35.127807][ T66] usb 4-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 35.141399][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.150582][ T66] usb 4-1: config 0 interface 0 has no altsetting 0 [ 35.158377][ T66] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 35.168892][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.177487][ T45] usb 1-1: device descriptor read/8, error -71 [ 35.196919][ T66] usb 4-1: config 0 descriptor?? [ 35.203452][ T66] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 35.315562][ T45] usb 1-1: device descriptor read/8, error -71 [ 35.564161][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.579215][ T370] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 35.597907][ T45] usb 1-1: device descriptor read/8, error -71 [ 35.688508][ T36] audit: type=1400 audit(1793629670.660:144): avc: denied { create } for pid=378 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.707845][ T36] audit: type=1400 audit(1793629670.660:145): avc: denied { connect } for pid=378 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.728830][ T36] audit: type=1400 audit(1793629670.700:146): avc: denied { write } for pid=382 comm="syz.2.21" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.752477][ T45] usb 1-1: device descriptor read/8, error -71 [ 35.839447][ T386] FAULT_INJECTION: forcing a failure. [ 35.839447][ T386] name failslab, interval 1, probability 0, space 0, times 0 [ 35.852223][ T386] CPU: 0 UID: 0 PID: 386 Comm: syz.2.22 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 35.852262][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.852279][ T386] Call Trace: [ 35.852285][ T386] [ 35.852292][ T386] __dump_stack+0x21/0x30 [ 35.852310][ T386] dump_stack_lvl+0x140/0x1c0 [ 35.852325][ T386] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.852340][ T386] ? bpf_convert_filter+0x5582/0x57d0 [ 35.852362][ T386] dump_stack+0x19/0x20 [ 35.852376][ T386] should_fail_ex+0x3c2/0x510 [ 35.852402][ T386] should_failslab+0xac/0x100 [ 35.852419][ T386] __kmalloc_cache_noprof+0x41/0x470 [ 35.852443][ T386] ? bpf_int_jit_compile+0x1ed/0x1450 [ 35.852463][ T386] bpf_int_jit_compile+0x1ed/0x1450 [ 35.852481][ T386] ? sk_filter_release_rcu+0x130/0x130 [ 35.852498][ T386] ? __cfi_bpf_int_jit_compile+0x10/0x10 [ 35.852518][ T386] ? bpf_prog_alloc_jited_linfo+0xbc/0x310 [ 35.852538][ T386] bpf_prog_select_runtime+0x373/0x690 [ 35.852560][ T386] ? kmemdup_array+0x79/0x160 [ 35.852581][ T386] bpf_prepare_filter+0xf42/0x1350 [ 35.852601][ T386] ? __cfi_seccomp_check_filter+0x10/0x10 [ 35.852618][ T386] ? bpf_prog_create+0x210/0x210 [ 35.852636][ T386] ? bpf_prog_store_orig_filter+0x14b/0x320 [ 35.852661][ T386] bpf_prog_create_from_user+0x1fc/0x2b0 [ 35.852681][ T386] ? __cfi_seccomp_check_filter+0x10/0x10 [ 35.852697][ T386] do_seccomp+0x79e/0xf20 [ 35.852714][ T386] ? __se_sys_futex+0x13c/0x320 [ 35.852734][ T386] ? prctl_set_seccomp+0x80/0x80 [ 35.852751][ T386] ? __kasan_check_write+0x18/0x20 [ 35.852774][ T386] ? fpregs_restore_userregs+0x11c/0x260 [ 35.852797][ T386] __x64_sys_seccomp+0x7f/0x90 [ 35.852812][ T386] x64_sys_call+0x249b/0x2ee0 [ 35.852829][ T386] do_syscall_64+0x57/0xf0 [ 35.852844][ T386] ? clear_bhb_loop+0x50/0xa0 [ 35.852866][ T386] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.852886][ T386] RIP: 0033:0x7f12fb19fb19 [ 35.852904][ T386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.852917][ T386] RSP: 002b:00007f12fbf90028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 35.852937][ T386] RAX: ffffffffffffffda RBX: 00007f12fb425fa0 RCX: 00007f12fb19fb19 [ 35.852950][ T386] RDX: 0000200000002640 RSI: 0000000000000007 RDI: 0000000000000001 [ 35.852960][ T386] RBP: 00007f12fb237af8 R08: 0000000000000000 R09: 0000000000000000 [ 35.852970][ T386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.852980][ T386] R13: 00007f12fb426038 R14: 00007f12fb425fa0 R15: 00007ffc3842fcb8 [ 35.852994][ T386] [ 35.864510][ T45] usb usb1-port1: unable to enumerate USB device [ 36.029193][ T10] usb 4-1: USB disconnect, device number 4 [ 36.177047][ T36] audit: type=1400 audit(1793629671.150:147): avc: denied { read write } for pid=389 comm="syz.3.24" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 36.184315][ T319] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 36.200262][ T36] audit: type=1400 audit(1793629671.150:148): avc: denied { open } for pid=389 comm="syz.3.24" path="/6/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 36.211228][ T390] netlink: 'syz.3.24': attribute type 30 has an invalid length. [ 36.233297][ T36] audit: type=1400 audit(1793629671.150:149): avc: denied { ioctl } for pid=389 comm="syz.3.24" path="/6/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 36.385748][ T396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25'. [ 36.405175][ T319] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 36.424100][ T319] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 36.444072][ T319] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 36.466901][ T319] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.476167][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.484258][ T319] usb 3-1: SerialNumber: syz [ 36.494766][ T386] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.504106][ T386] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.549490][ T403] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 36.560052][ T403] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 36.570518][ T403] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 36.571293][ T404] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 36.607310][ T403] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 36.625132][ T403] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 36.634615][ T403] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 36.648118][ T403] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 36.656746][ T403] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 36.666955][ T403] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 36.675708][ T403] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 36.712586][ T419] netlink: 'syz.1.29': attribute type 12 has an invalid length. [ 36.745137][ T319] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 36.762115][ T319] usb 3-1: USB disconnect, device number 3 [ 36.890815][ T428] netlink: 328 bytes leftover after parsing attributes in process `syz.1.32'. [ 36.936053][ T429] ================================================================== [ 36.944195][ T429] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 36.951798][ T429] Read of size 8 at addr ffff88811510f418 by task syz.0.31/429 [ 36.959375][ T429] [ 36.961738][ T429] CPU: 0 UID: 0 PID: 429 Comm: syz.0.31 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 36.961769][ T429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.961784][ T429] Call Trace: [ 36.961792][ T429] [ 36.961800][ T429] __dump_stack+0x21/0x30 [ 36.961826][ T429] dump_stack_lvl+0x140/0x1c0 [ 36.961847][ T429] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.961867][ T429] ? __cfi__printk+0x10/0x10 [ 36.961899][ T429] print_address_description+0x71/0x210 [ 36.961920][ T429] print_report+0x4a/0x70 [ 36.961939][ T429] kasan_report+0x162/0x1a0 [ 36.961961][ T429] ? snapshot_ctr+0x586/0x1350 [ 36.961985][ T429] ? snapshot_ctr+0x586/0x1350 [ 36.962008][ T429] __asan_report_load8_noabort+0x18/0x20 [ 36.962036][ T429] snapshot_ctr+0x586/0x1350 [ 36.962058][ T429] ? dm_split_args+0xa1/0x740 [ 36.962089][ T429] ? __cfi_snapshot_ctr+0x10/0x10 [ 36.962110][ T429] ? dm_split_args+0x5d0/0x740 [ 36.962142][ T429] dm_table_add_target+0x59c/0xcb0 [ 36.962175][ T429] table_load+0x2eb/0x7d0 [ 36.962201][ T429] ? __check_object_size+0x99/0x870 [ 36.962233][ T429] ? __cfi_table_load+0x10/0x10 [ 36.962260][ T429] ? __kasan_check_write+0x18/0x20 [ 36.962288][ T429] ? __cfi_table_load+0x10/0x10 [ 36.962314][ T429] dm_ctl_ioctl+0x8f3/0xde0 [ 36.962342][ T429] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 36.962373][ T429] ? __fget_files+0x2bc/0x330 [ 36.962394][ T429] ? bpf_lsm_file_ioctl+0xd/0x20 [ 36.962416][ T429] ? security_file_ioctl+0x3e/0x110 [ 36.962445][ T429] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 36.962470][ T429] __se_sys_ioctl+0x126/0x1b0 [ 36.962500][ T429] __x64_sys_ioctl+0x7f/0xa0 [ 36.962521][ T429] x64_sys_call+0x1878/0x2ee0 [ 36.962543][ T429] do_syscall_64+0x57/0xf0 [ 36.962563][ T429] ? clear_bhb_loop+0x50/0xa0 [ 36.962592][ T429] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.962621][ T429] RIP: 0033:0x7fceadb9fb19 [ 36.962640][ T429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.962659][ T429] RSP: 002b:00007fceae98f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.962683][ T429] RAX: ffffffffffffffda RBX: 00007fceade26090 RCX: 00007fceadb9fb19 [ 36.962701][ T429] RDX: 0000200000000b80 RSI: 00000000c138fd09 RDI: 000000000000000a [ 36.962716][ T429] RBP: 00007fceadc37af8 R08: 0000000000000000 R09: 0000000000000000 [ 36.962730][ T429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.962743][ T429] R13: 00007fceade26128 R14: 00007fceade26090 R15: 00007fffee0acc18 [ 36.962763][ T429] [ 36.962772][ T429] [ 37.223769][ T429] Allocated by task 429: [ 37.228045][ T429] kasan_save_track+0x3e/0x80 [ 37.232764][ T429] kasan_save_alloc_info+0x3a/0x50 [ 37.238019][ T429] __kasan_kmalloc+0x96/0xb0 [ 37.242652][ T429] __kmalloc_cache_node_noprof+0x225/0x430 [ 37.245782][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.248501][ T429] dm_get_table_device+0x1e3/0x6c0 [ 37.248533][ T429] dm_get_device+0x32b/0x7f0 [ 37.265734][ T429] snapshot_ctr+0x292/0x1350 [ 37.270368][ T429] dm_table_add_target+0x59c/0xcb0 [ 37.275528][ T429] table_load+0x2eb/0x7d0 [ 37.279907][ T429] dm_ctl_ioctl+0x8f3/0xde0 [ 37.284466][ T429] __se_sys_ioctl+0x126/0x1b0 [ 37.289190][ T429] __x64_sys_ioctl+0x7f/0xa0 [ 37.293829][ T429] x64_sys_call+0x1878/0x2ee0 [ 37.298554][ T429] do_syscall_64+0x57/0xf0 [ 37.303098][ T429] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.309046][ T429] [ 37.311408][ T429] Freed by task 429: [ 37.315340][ T429] kasan_save_track+0x3e/0x80 [ 37.320058][ T429] kasan_save_free_info+0x44/0x50 [ 37.325137][ T429] __kasan_slab_free+0x5f/0x80 [ 37.329943][ T429] kfree+0x158/0x440 [ 37.333897][ T429] dm_put_table_device+0x298/0x2e0 [ 37.339053][ T429] dm_get_device+0x571/0x7f0 [ 37.343698][ T429] snapshot_ctr+0x435/0x1350 [ 37.348327][ T429] dm_table_add_target+0x59c/0xcb0 [ 37.353497][ T429] table_load+0x2eb/0x7d0 [ 37.357883][ T429] dm_ctl_ioctl+0x8f3/0xde0 [ 37.362439][ T429] __se_sys_ioctl+0x126/0x1b0 [ 37.367166][ T429] __x64_sys_ioctl+0x7f/0xa0 [ 37.371890][ T429] x64_sys_call+0x1878/0x2ee0 [ 37.376612][ T429] do_syscall_64+0x57/0xf0 [ 37.381072][ T429] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.387024][ T429] [ 37.389386][ T429] The buggy address belongs to the object at ffff88811510f400 [ 37.389386][ T429] which belongs to the cache kmalloc-96 of size 96 [ 37.403302][ T429] The buggy address is located 24 bytes inside of [ 37.403302][ T429] freed 96-byte region [ffff88811510f400, ffff88811510f460) [ 37.416974][ T429] [ 37.419337][ T429] The buggy address belongs to the physical page: [ 37.425824][ T429] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11510f [ 37.434713][ T429] flags: 0x4000000000000000(zone=1) [ 37.439949][ T429] page_type: f5(slab) [ 37.444014][ T429] raw: 4000000000000000 ffff888100041280 dead000000000122 0000000000000000 [ 37.452731][ T429] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 37.461342][ T429] page dumped because: kasan: bad access detected [ 37.467808][ T429] page_owner tracks the page as allocated [ 37.473564][ T429] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 429, tgid 425 (syz.0.31), ts 36935938171, free_ts 35789715248 [ 37.492277][ T429] post_alloc_hook+0x37d/0x3b0 [ 37.497105][ T45] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 37.497106][ T429] prep_new_page+0x2d/0x180 [ 37.497138][ T429] get_page_from_freelist+0x4aea/0x4ba0 [ 37.515105][ T429] __alloc_pages_noprof+0x35a/0x7e0 [ 37.515177][ T45] usb 2-1: can't read configurations, error -22 [ 37.520344][ T429] alloc_slab_page+0x6b/0x1e0 [ 37.531294][ T429] allocate_slab+0x69/0x430 [ 37.535840][ T429] ___slab_alloc+0x591/0x8c0 [ 37.540471][ T429] __kmalloc_cache_node_noprof+0x2ae/0x430 [ 37.546331][ T429] dm_get_table_device+0x1e3/0x6c0 [ 37.551485][ T429] dm_get_device+0x32b/0x7f0 [ 37.556132][ T429] snapshot_ctr+0x292/0x1350 [ 37.560763][ T429] dm_table_add_target+0x59c/0xcb0 [ 37.565928][ T429] table_load+0x2eb/0x7d0 [ 37.570311][ T429] dm_ctl_ioctl+0x8f3/0xde0 [ 37.574863][ T429] __se_sys_ioctl+0x126/0x1b0 [ 37.579589][ T429] __x64_sys_ioctl+0x7f/0xa0 [ 37.584249][ T429] page last free pid 339 tgid 339 stack trace: [ 37.590434][ T429] free_unref_page+0xb99/0xf50 [ 37.595257][ T429] __free_pages+0x6b/0x3b0 [ 37.599726][ T429] __free_slab+0xb2/0x110 [ 37.604094][ T429] free_slab+0x18/0xe0 [ 37.608203][ T429] __put_partials+0x115/0x150 [ 37.612919][ T429] put_cpu_partial+0x91/0xc0 [ 37.617549][ T429] __slab_free+0x1cf/0x2a0 [ 37.622006][ T429] ___cache_free+0xc9/0xe0 [ 37.626471][ T429] qlist_free_all+0xb5/0x130 [ 37.631106][ T429] kasan_quarantine_reduce+0x14f/0x180 [ 37.636618][ T429] __kasan_slab_alloc+0x28/0x90 [ 37.641507][ T429] kmem_cache_alloc_noprof+0x1bf/0x410 [ 37.647017][ T429] getname_flags+0xcc/0x6b0 [ 37.651560][ T429] getname+0x1b/0x30 [ 37.655576][ T429] do_sys_openat2+0xda/0x1d0 [ 37.660293][ T429] __x64_sys_openat+0x13a/0x170 [ 37.665188][ T429] [ 37.667541][ T429] Memory state around the buggy address: [ 37.673228][ T429] ffff88811510f300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.681321][ T429] ffff88811510f380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.689428][ T429] >ffff88811510f400: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 37.697523][ T429] ^ [ 37.702408][ T429] ffff88811510f480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.710513][ T429] ffff88811510f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.718635][ T429] ================================================================== [ 37.732702][ T429] Disabling lock debugging due to kernel taint [ 37.734497][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.744179][ T429] device-mapper: table: 252:0: device 1:0 not in table devices list [ 37.755135][ T429] device-mapper: table: 252:0: snapshot-merge: COW device cannot be the same as origin device (-EINVAL) [ 37.774700][ T429] device-mapper: ioctl: error adding target to table [ 37.781515][ T429] device-mapper: table: 252:0: dm_table_destroy: dm_put_device call missing for 1:0 [ 37.915619][ T45] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 37.923596][ T45] usb 2-1: can't read configurations, error -22 [ 37.930065][ T45] usb usb2-port1: attempt power cycle [ 38.274122][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.295811][ T45] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 38.303747][ T45] usb 2-1: can't read configurations, error -22 [ 38.434132][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.456039][ T45] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 38.464071][ T45] usb 2-1: can't read configurations, error -22 [ 38.470469][ T45] usb usb2-port1: unable to enumerate USB device