last executing test programs: 3.261995632s ago: executing program 0 (id=1): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x2b53, 0x24, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x3, 0x0, 0xf8, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x1, 0x9, 0xd3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x5, 0x6, 0x74, {0x8, 0x25, 0x1, 0x4, 0xc, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0xa, 0x10, {0x8, 0x25, 0x1, 0x1, 0x3, 0x7f, 0x4}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x16, 0x0, 0x101}}) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='gre0\x00', 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D \r'], 0x38}}], 0x1, 0x46000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05051600d3fc140006004788031e09b13170aac472f91a743300"/38, 0x26, 0x4, &(0x7f0000000140)={0x11, 0x11, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000380)="05051600d3fc140000004788031c09103c285e99cd38b13170aac452f91a7433541c162c8a2b", 0x26, 0x4, &(0x7f0000000140)={0x11, 0x11, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 3.191298644s ago: executing program 2 (id=3): madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x0, 0x3}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000900)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0x1}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e20, 0xfffc, 0x2, 0x20, 0x0, 0x89, 0x0, 0xffffffffffffffff}, {0x0, 0x7d, 0xad8, 0x7570e41c, 0x1, 0x80000000, 0x1, 0x3}, {0x6, 0x4, 0x5, 0x7}, 0x2, 0x6e6bb5}, {{@in=@loopback, 0x4d4, 0xff}, 0xa, @in6=@empty, 0x3503, 0x2, 0x3, 0xfd, 0xa398baf, 0x6, 0x5}}, 0xe8) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000080)="fa84ad628243b22fc3f4347c57cf32dcde9b37252ef55386c8bd05b355ff9105f280157029f46f43f6180ec53a81c7d43ae6a873136aab9d25632d25fe32956bb2b138582cb87561ccc73a02dc5b87fecc8020eebf11b3211c70352ff110de9558d22dbb047d9aac83b6a78aadbdf39c2af2bede28570b5b3b7f28c834b682398d48dd16358c0a191dcf56862b8689bae6917693479c3cbbce4f0762829dcc39933826a81607ffbfadf1e7f58bae878ba898488adb1ad064be3462899a2a9c435b6e5f", 0xc3}, {&(0x7f0000000180)="765538006f13873b183bbf258de785431695abf8ad8ebdc1aa4cf5f149d2e15743e1fdc175d402f6878d831c94dd7839148938fe7dae8a6e83cdc2cffe21664d128578b06cddeb5658c991b0b6ebddd4a78e7dc0d9e036ecb33a0038b54e96e1d6c2ab1362146f763f2418ea25", 0x6d}, {&(0x7f0000000280)="68dfac554555c3c51aa6fc50d1fcbbfdf98a830668b73ba8342f263a6fdbb6b8a537342bd697860bf2c077d585891e3166c2541b58e9a10732bbcb9bb8bf8a003677f51da4ee4900a6c671d3657b5156bfaf037ba358611758c3a897a95810eb8457ef23c4d1bc533d32fb5bd79321651fb59ab6381aabbad4cac196d25cb706798ef4a7e39f64440bf4a219a56a6d4a5d79565de7dcc25ae5cff37169f529be4d1ad96d8da6792be6cc1b15c4343c43d7b96570baa460d4af6095d08dc576bce1492674bf382200", 0xc8}, {&(0x7f0000000380)="d785d22ae54a14c027ada888a5fc6400dc78e4c1e1b1473472778f7494c04c563430c9caba318259ca8a803b57cb6f16498a758a0435c87dc54bbdf852f4b8a031f71bd5b9d50b8bbef51acd0d3e676a9e0e0bd2293323235fe22ac5a16b2fb4d39cf11e69e8682c69a82e67b9e7d15caffbb47f72b72e8059cfaee9320d253ce00be1b3fa442c8f03e2df6f10d4e0ac194779e6fdf4e41331a0a28af6830a75e0f0d510854c511f2a26a12c445209b21b4997a4d4873b25d0e5292b89502c9cee51d6da51b2fd459c31905c58e136e760f8cec279a699f87e261c9245937317d1889e8233d76be930f3b82d03e5cc5e92", 0xf1}, {&(0x7f0000000480)}], 0x5) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x91d840, 0x0) 3.121352775s ago: executing program 2 (id=6): syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x80d40) (async) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x80d40) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) (async) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) (async) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x4000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000002c0)=0x8, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000002c0)=0x8, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}}, 0x40000) close(0x3) r4 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000100001"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x4000054) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x4000054) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000d80)=""/212, 0xd4}], 0x1, 0x21, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000d80)=""/212, 0xd4}], 0x1, 0x21, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x24}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendto$unix(r4, &(0x7f0000000300)="286339815bd532abb87eec8d62236a6488285a8d61db02450a0c0ecfbf516f571dfdc3674971de4db11247d282c00faa67fc8f7e51315e9f53501dcb8d911520e704d5dc8c850cfcf4a3c6e2d272fd7b6176f6b6eff20c5a807b18b71c87db2bacd39932d4e745187d812a82135c3da07a2d462e7701583e91c6e0d3111d", 0x7e, 0x4, &(0x7f0000000880)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendto$unix(r4, &(0x7f0000000300)="286339815bd532abb87eec8d62236a6488285a8d61db02450a0c0ecfbf516f571dfdc3674971de4db11247d282c00faa67fc8f7e51315e9f53501dcb8d911520e704d5dc8c850cfcf4a3c6e2d272fd7b6176f6b6eff20c5a807b18b71c87db2bacd39932d4e745187d812a82135c3da07a2d462e7701583e91c6e0d3111d", 0x7e, 0x4, &(0x7f0000000880)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001400)=ANY=[@ANYBLOB="14000000520001f6"], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x40) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) socket$packet(0x11, 0x3, 0x300) 3.106762256s ago: executing program 2 (id=8): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002280)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="080001"], 0x34}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002280)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="080001"], 0x34}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff) r5 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', r6, 0x8, 0xf8e9, 0x10000, 0x5, {{0x6, 0x4, 0x3, 0x1b, 0x18, 0x67, 0x0, 0x3, 0x4, 0x0, @loopback, @local, {[@end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', r7, 0x29, 0x3, 0x8, 0x4, 0x62, @mcast1, @loopback, 0x8, 0x7800, 0x2, 0x400}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', r7, 0x29, 0x3, 0x8, 0x4, 0x62, @mcast1, @loopback, 0x8, 0x7800, 0x2, 0x400}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)={0xe8, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe8}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r9, 0x9000aecf, &(0x7f000000c000/0x2000)=nil) r10 = inotify_init() inotify_add_watch(r10, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_add_watch(r10, &(0x7f0000000300)='./file1\x00', 0xa0000006) syz_open_dev$usbfs(&(0x7f00000000c0), 0xf, 0x18600) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0xf, 0x18600) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080) (async) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080) syz_clone(0x0, &(0x7f0000000040)="b885fd3c75b730e821ff46931f1d29649e9f30b4e7576110dcd371da644797eb73dff8fd9b08ed8022b7b969a056a7846319f943f1f317c668f0fc24cc2307ed27481325ada587c67f9d81d2a86c71e1bcc30f16fbae6bb8855c9cab4f586b1c5e016cb7ad385968d8f3f4308ae032aa1fa0cc9e61a9d53b7a14b41895f28d46ff9a007a7d2fd903d275300173c6877aad74133d0ab9e85ae876cf6966c6e1b958fa178486a650a15056170738ea51ebf6ca292b5ee49a12df", 0xb9, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="f8889cb3458fbd15f5e301fa079883801b1145") 3.011122118s ago: executing program 2 (id=9): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000000c0)={0x3, 0x0, 0xfb, 0x5, 0x2b0b}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2020) fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=T,']) 2.891476761s ago: executing program 1 (id=10): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa90e, 0x200, 0x3, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x200019b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf9e9, 0x40000, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x2, 0x3, 0x231}, 0xffffffffffffffff}], 0x4, &(0x7f0000003900)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x1, 0xd55, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = accept4$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0x1c, 0xd4fc8bca8924db8b) setsockopt$inet6_opts(r9, 0x29, 0x3b, &(0x7f0000000400)=@hopopts={0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}]}, 0x10) r10 = dup(r8) syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r10}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x141, 0x1000000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.855898272s ago: executing program 2 (id=11): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8c03, &(0x7f0000000040)=ANY=[@ANYBLOB='n\x00_blocks=q,\x00']) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8c03, &(0x7f0000000040)=ANY=[@ANYBLOB='n\x00_blocks=q,\x00']) (async) 2.770561924s ago: executing program 2 (id=12): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a000000010902"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$dupfd(r0, 0x406, r0) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRESHEX=r2], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x81}, {0x6}]}) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2004402, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) syz_usb_connect(0x0, 0x5e, &(0x7f0000000140)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) 2.53559862s ago: executing program 1 (id=13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0xd0c}, {r0, 0xc22}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001900010000000000fbdbcf251d01090050000f804c00248045002c802cd00b29a0cf37843c11703c85210bfb54a5f579eeab7aa5c2a99f7fde2a0900000040000000220ffd5cd1d1a8c126e6aae344fb97b01addfd0e96fcc2c5078f2c"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 2.356182484s ago: executing program 1 (id=14): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x229, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000000)=0x6000000) 2.321705245s ago: executing program 1 (id=15): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) socket$inet(0x2, 0x3, 0x4) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth0_to_batadv\x00', 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x50, &(0x7f0000000000)=0x5, 0x4) write$tun(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffff816700e482dd1b43d83b3f01ac1414aa00"/31], 0x26) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r6, 0x6e1ef000) (async) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x19a) sendto$inet6(r0, 0x0, 0x0, 0x40008d0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty, 0x7}, 0x1c) 2.178944028s ago: executing program 1 (id=16): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000280)={0xbb8, 0x1, 0x5, 0x300, 0x0, 0x0, {0x7, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x400}, 0xc6, 0xc, 0x786, 0x6d, 0xfff8, 'syz0\x00', "1d7949c67882c3cba86e01bb928a11b45d58350b67280189e1d9d1d264cee0ef", "339e1ecd8ff4dcfbbbc8a15d1970e97bb06a046ee8902f147c2dbdd74b4cb004", [{0x6, 0x2, {0x2, 0x4}}, {0x1, 0x7, {0x2, 0x5}}, {0x1, 0x8001, {0x0, 0x6}}, {0x3, 0xfffc, {0x2, 0x1}}, {0xfffb, 0x8, {0x2, 0x3}}, {0x6, 0x5, {0x0, 0x7}}, {0x401, 0xf9, {0x0, 0x8a}}, {0x5a, 0x6, {0x1, 0xe}}, {0xfff7, 0x7, {0x3, 0xbb1}}, {0x2, 0x4, {0x0, 0xf7c}}, {0x9, 0x401, {0x2, 0x6}}, {0x9, 0xfff8, {0x2, 0xfffffffd}}, {0x9, 0x6, {0x2, 0x4}}, {0x1, 0x4, {0x2, 0x5}}, {0xe9, 0x5, {0x1, 0xf}}, {0x715, 0x258e, {0x0, 0x1b6}}, {0x6, 0x0, {0x2, 0xfffffff9}}, {0xa, 0x7db, {0x2, 0xffff0001}}, {0x401, 0x1998, {0x1, 0x3}}, {0x3, 0x9, {0x0, 0x9}}, {0x7, 0x3e, {0x0, 0x1ff}}, {0x100, 0x200, {0x3, 0x2}}, {0x5, 0x5, {0x3, 0x9}}, {0x100, 0xf71, {0x2, 0x3}}, {0x3, 0xe, {0x3, 0xf}}, {0x1, 0x8, {0x1, 0xffff}}, {0x1, 0x26d, {0x1, 0x8}}, {0x61ff, 0xb, {0x1, 0x1}}, {0x9, 0xffff, {0x1, 0x2}}, {0x7, 0x81, {0x3, 0x5586}}, {0xfffd, 0x5, {0x3, 0x5}}, {0x4, 0x9, {0x1, 0x4}}, {0x1, 0xa5, {0x1, 0x5}}, {0xcca, 0x5, {0x3, 0x29e3}}, {0xef1c, 0x8, {0x1, 0x3}}, {0x4faa, 0x3, {0x3, 0x10001}}, {0x200, 0xc7b, {0x1, 0x6}}, {0xf3, 0x3, {0x2, 0x1}}, {0x2, 0xf801, {0x3, 0x7}}, {0x5, 0x52, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x7, 0x7, 0x20ea, 0x4, 0xc, 'syz1\x00', "ad895c2eb4bee5fdb98cb82e184be375a1574736aef2c9dc547e3a1a0993deb9", "f6a4c5cdf2a1bc10bfff5065ded4a111ef2069d9acea77f35d7465908507ab48", [{0x55, 0x7, {0x2, 0x3}}, {0x12e0, 0x1ff, {0x3, 0x5}}, {0x4, 0x4, {0x0, 0xfffffffe}}, {0xfff8, 0x9, {0x1, 0x8}}, {0x8, 0x0, {0x0, 0x2}}, {0x8, 0x800, {0x0, 0x1}}, {0x6, 0x9, {0x2, 0x8}}, {0x2, 0x1, {0x1, 0x3ff}}, {0x0, 0x311, {0x2, 0x4}}, {0xa4, 0x27f8, {0x2, 0x8}}, {0x3000, 0x3, {0x2, 0x4}}, {0x1, 0x6, {0x1, 0x7}}, {0x4798, 0x7ff, {0x1, 0x286}}, {0x3, 0x7, {0x3, 0x4}}, {0x4, 0xb, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0x7, 0x0, {0x0, 0x80}}, {0x81, 0x3, {0x0, 0xc}}, {0x2, 0xc9c4, {0x2, 0x2dc}}, {0x7, 0x100, {0x1, 0x7f}}, {0xff, 0x9000, {0x1, 0x3}}, {0x80, 0xeb, {0x2, 0x1}}, {0x3, 0x1ff, {0x3, 0x685b}}, {0xa3, 0x8001, {0x2, 0x8}}, {0x3, 0xe, {0x1, 0x3}}, {0x1, 0xe35f, {0x0, 0x9}}, {0x7ff, 0x9, {0x0, 0x2}}, {0x40, 0x3, {0x0, 0xbd03}}, {0x0, 0x6, {0x2, 0xd}}, {0x7, 0x81, {0x3, 0x2}}, {0x5, 0x8001, {0x3, 0x5}}, {0x2, 0x6, {0x2, 0x6}}, {0x7ff, 0x4, {0x2, 0x6}}, {0x0, 0x2, {0x2, 0xe87}}, {0x1, 0x8000, {0x3, 0x8}}, {0x4, 0x1, {0x2, 0x7f}}, {0x3, 0x1b01, {0x1, 0x10000}}, {0x9, 0xcc, {0x1, 0x8}}, {0x0, 0x2, {0x2, 0x10b}}, {0x9, 0x7f, {0x1, 0x8001}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x9, 0xb, 0x1ff, 0x9, 0xb, 'syz1\x00', "0cefc3906fe56ce3d7864d1de0b68899af400a81a83288f13837bbd62195c141", "8bc60c294079b1120f975175a905c144f54117272872c09b06b93a0c47eb75d1", [{0x31, 0x8, {0x1, 0x6}}, {0x7, 0x400, {0x2, 0x80000001}}, {0x0, 0x6, {0x2, 0x401}}, {0x101, 0x6, {0x0, 0x8}}, {0x2, 0x2800, {0x0, 0x71e}}, {0x7, 0x1, {0x1, 0x10}}, {0x8, 0x7f, {0x1}}, {0x5, 0xfffd, {0x1, 0x8}}, {0x3, 0x401, {0x2, 0xe1c8}}, {0x8, 0x5, {0x3, 0x4}}, {0x0, 0x4, {0x2, 0x7ff}}, {0x101, 0x3}, {0x5, 0x7, {0x2, 0x8}}, {0x4, 0x81df, {0x2, 0x80000001}}, {0x401, 0xfff, {0x1, 0x2a00}}, {0x400, 0x4, {0x3, 0x9}}, {0xdd5, 0x8, {0x3, 0x80}}, {0xff28, 0x1, {0x1, 0x2}}, {0xff, 0xfffb, {0x0, 0xfffffffc}}, {0x6, 0x8000, {0x3, 0xbea}}, {0x100, 0x7ff, {0x0, 0xb}}, {0x923f, 0x8, {0x2, 0x3}}, {0x1000, 0x6, {0x2, 0xf33f}}, {0x8, 0x101, {0x1, 0xffffffff}}, {0x7, 0x7, {0x1, 0x6a}}, {0x8001, 0xa, {0x2, 0xfffffffb}}, {0xa, 0xffff, {0x7141a36b4265e5fc, 0x9}}, {0x7, 0xf637, {0x0, 0x9}}, {0x800, 0x7be6, {0x0, 0x6}}, {0x7e26, 0xff5f, {0x1, 0x2}}, {0x9, 0xeb, {0x1, 0xc}}, {0xac5e, 0xe1, {0x1, 0x9}}, {0xa6, 0x9, {0x3, 0x7}}, {0xffff, 0x712, {0x0, 0x10000}}, {0x6, 0xb8, {0x2, 0xb}}, {0x4, 0xfa, {0x3, 0x7}}, {0x9, 0x3, {0x3, 0xe3}}, {0x6, 0x4, {0x1}}, {0xe, 0x261, {0x3, 0x3}}, {0x9, 0x4, {0x1}}]}}}, {{0x254, 0x1, {{}, 0x8, 0x8, 0x5e76, 0x7, 0x11, 'syz0\x00', "2aadd835cdeb6e69e0fa89779e7952dfe37986acacbde9e8686772b039fbf018", "9753d638e349779c145ee8a3a0f93fae7041b7b07aae0c91892aa413ce633c45", [{0x2, 0xd2, {0x2}}, {0x4, 0xfff, {0x3, 0x91}}, {0x10, 0xe00, {0x0, 0x1c}}, {0x0, 0x7, {0x0, 0x7}}, {0x10, 0x7, {0x0, 0x1}}, {0x3, 0x2, {0x0, 0x7}}, {0x7fff, 0x1, {0x1, 0x7}}, {0x4, 0x6, {0x1, 0x3}}, {0x5, 0x8, {0x1, 0x2}}, {0x101, 0x5, {0x2, 0x1ff}}, {0x4c4b, 0x36, {0x3, 0x1}}, {0xe1, 0x8, {0x0, 0xc2a}}, {0x9, 0xbbe, {0x0, 0x9}}, {0xd3, 0x5, {0x1, 0x7fffffff}}, {0x0, 0x3ff, {0x1, 0x8}}, {0x8, 0x2, {0x1, 0x9}}, {0xd4, 0xfffa, {0x1, 0x3ff}}, {0x7aa3, 0x1, {0x3, 0x6}}, {0x62f, 0x1, {0x0, 0x4}}, {0x8, 0xdc, {0x3, 0x2}}, {0xf801, 0x6, {0x1, 0x4}}, {0x4, 0x3, {0x2, 0x9}}, {0x7, 0x8, {0x0, 0x9}}, {0x40, 0x7, {0x1, 0x60}}, {0xc7, 0x2, {0x3, 0x400}}, {0x5, 0x8, {0x1, 0x2}}, {0xf, 0x1, {0x3, 0x9}}, {0x6, 0x0, {0x1, 0x40}}, {0x1, 0xfffb, {0x3, 0x128}}, {0xdfb, 0xcfe, {0x0, 0xffffd89d}}, {0xe99, 0xff54, {0x0, 0xa7a}}, {0x3ff, 0x1, {0x0, 0x7f}}, {0x6, 0x6, {0x0, 0xcbe}}, {0x3579, 0x3, {0x3, 0x5}}, {0x8, 0x855e, {0x2, 0x1}}, {0x2, 0x81, {0x2, 0x6}}, {0x1, 0x3, {0x1, 0x8}}, {0x2, 0xe}, {0x0, 0xe9b, {0x2, 0xda}}, {0x1, 0xebd, {0x1, 0x80}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0xca, 0x3, 0x4, 0x38, 0x19, 'syz1\x00', "4ba01ded958b8ee16e9e474e13c6248f201290fb3aacab2721ee055133c1be18", "66acea59766184f19732d655f6f3602d08a812c25e8304b621305d63577bb9e9", [{0xfbff, 0x40, {0x1, 0x60}}, {0x5, 0xffff, {0x0, 0x4}}, {0xffff, 0x9, {0x1, 0x5c}}, {0x100, 0x1, {0x3, 0x4}}, {0x4, 0x0, {0x2, 0x2}}, {0x1, 0xb, {0x0, 0x2}}, {0xdca, 0x4, {0x3, 0x1}}, {0xfffa, 0x0, {0x2, 0xf}}, {0xc63e, 0x200, {0x3, 0x1a658357}}, {0x1641, 0x1, {0x1, 0x4}}, {0x9387, 0x40, {0x1, 0x2}}, {0x1, 0x2, {0x2, 0x3}}, {0x5, 0x5, {0x3, 0x3}}, {0x9, 0x8, {0x1, 0xe1}}, {0x9a, 0x9, {0x3, 0x3}}, {0x6, 0x101, {0x3, 0xfd9b}}, {0x1, 0xa, {0x2, 0x3}}, {0x1, 0x2, {0x0, 0x1}}, {0x7, 0x9, {0x3, 0x9}}, {0x0, 0xf46, {0x2}}, {0xf, 0x2, {0x6e5bfe82f9415a16, 0x8}}, {0x0, 0x3, {0x1, 0x8}}, {0xa0d1, 0x40, {0x2, 0x401}}, {0x2, 0x6, {0x0, 0xba7}}, {0x676e, 0x6, {0x0, 0x2}}, {0x1f9, 0xc, {0x1, 0x2}}, {0x9, 0xf, {0x3, 0x6}}, {0x0, 0x0, {0x0, 0x2}}, {0x3de, 0xf, {0x2, 0xff}}, {0x2, 0x2, {0x1, 0x3b}}, {0x6, 0x5, {0x2, 0x4}}, {0x1, 0x2, {0x3, 0x9}}, {0x2, 0x2, {0x2, 0x5}}, {0x3, 0xd3, {0x1}}, {0x3, 0x2, {0x1, 0x8}}, {0x7, 0x3, {0x3, 0x4}}, {0x5, 0x1, {0x2, 0x2}}, {0x1, 0x10, {0x1, 0x9}}, {0x101, 0x7, {0x0, 0x2}}, {0x4, 0x2, {0x1, 0x401}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x8850) (async) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f00000003c0)=""/18, 0x12) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80000) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x22, 0x0, 0x4, r3, 0x0}]) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x13, r2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r6) (async) socket(0xa, 0x3, 0xff) (async) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r6, @ANYRES32=r5]) (async) fsmount(0xffffffffffffffff, 0x0, 0x1) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x50040, &(0x7f00000000c0)={0x11, 0xf7, r8, 0x1, 0xd8, 0x6, @remote}, 0x14) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000080), 0x0, &(0x7f0000000240)={r10, r11+60000000}, 0x8) 2.166643118s ago: executing program 1 (id=17): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) write$tun(r1, &(0x7f0000000580)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x3, 0x6, 0x101c, 0x66, 0x0, 0x3e, 0x11, 0x0, @multicast1, @loopback}, {0x4e24, 0x4e22, 0x1008, 0x0, @opaque="3db19704ef1b2f3bf80abd3a81a07e15d1321a16ace7292802892e4fa8db35c586ac33501f2033b8a71385b52bb947ebc375e276563affea2c1e796d07baf73c953a11540247251e4f9cfa6ffe2f58717186d5577ad882369894a0ee33b0d80e767c4a93d5a3a5d0c894a87fa6bcc9ed4ebc0584d02ba6c27809e37fbd1881c18f5669f4dbd2529338f7cf0a31d2d4918cbb3ae3eb778d2cab29b13499dc959ece55143f402da7f461f9797ff8c37ea8ff7440ceba8e18a6f69519b4c72fff4950cab9d3e4c777bcc7fd8ba1241cc2427abf23cf77579ae4d8f83ed04ef31da1ba246ea73428126acded4bf535a7e7295f19b9c3b417cbb3a9a7e0e85d4668069938ec1afbd681d2f94212e09b14522667653f63a4b9ce4dd44bda644c32412b899909e4f4708ae4f96eaf7ce7b6813fec9243cce8001d929da0c245926c181d11a39eccf4f214c99307ee66717c2995745927c10db2a127b5feab738746ada91bfb313a33415c185c497c3f8dbe4dc44a3999b1525ff9ae9c3e05809f2be733a6dacd16395ff1a0222f49df226bbb9784bc68176718a3da0e38649aae6c9af46fa8b4cdcf18e0f7cf09181ba5b53adbf44bc91e69de0e41af8b4668880a829db33761548de2a493c656f094385956f28ac7461102786f5ceee291bc6103c34e1f26db89a4680a75f0398d976f649e1586fb2b7703393e28def6dbf262d27efcc7b5bc86680cd797e611eee7c3efcfd81e9298a7df8a1a360bf39229d6ce94c0a11153f5e70235d75e22a9c6c3d61258ee785e5e75130a94a9522c35487c60bf0657d9fd59a0bc2a37263a3c56b760361789d5f5960f45a6f0e396652390d467460b5e16dd3ded9a3173392d14055b7fdb3612de215d6a5ea18a99241ac383d3707d89b8d28517a1c122f33139e716aba88951235138491ebf9c9c519919a850d296116b5e8d37f37708a862ca07dd0c7a44ff2ea6514f798c6ff84ccc7ec3b0583edf9fc20faed6d5570aed2451f8d15ab9bc327f34a51c9daad5adacb91ae648f4bb21e3550ca854bdecc38f3694500a5a09c6003194b69fa16e277404026d6b9b3b6ba5aa2da0215875d4b5e07a7e700784761480b3ce2dffc6b617c33820a3d7657d6e5746e1349694b74598110e80c5e1cb4c82e70dd09cf2f7b9e178cc7c5c1f9386877ed782f54861dd30a5bfd8bf1b8d14245366d2180e9782bebefa6e03a3d1cb18e13ee803c3327a75b63bcc856e03d0ac8ac2e50cd8865f5531e419e51a064eac4163cc500780db9b026f65b44a72b9ef18b5418468869e5204284e465545166601dd26ae020ecdc2ae1caaf9581f1e00b4edf1227c2fa877b0f908ac7f336f026aabc208ae850a19420eeaf1f031febcbd4b15dbd8aa180c859eab27d0f59171d4c84be789f71967519fa2b10b233a872f1be0b8589b2f2a2a03f8be27d8dfe12864bfb7bd14ddaee0f7b835baa44ab3ebdc2b68c0fdde387d2db6d25c1259b8147a241d93fe0f6eb5c3e8eae868f5ddb335c4c553f6ba09e730355b4f853357f8d7475e34615b57f7fec8a7d423ccc5b05cce5ee8aa345b2d6c759445849aecbc3978c000d2875297dc8c06aa835be64fed327b2d9a000f36584d207b56050583e9e58fd29c5c71ae1f5d78438f1a5940ebb6f88650fc3b5a08c73eb1a412761a4fdc7cc0be3efe881cb1243cec555b0cf2c1bc14259ea12af527080f365c0c9be6602a4f903503f78b2f1a8ba090da600b365c2dc9488dedb38c73a9c2b7165d7e6e090c12912fb72d28fc4b212edb909464e8382211c1b82335b41c6ab0727aa724891a22a20d36a548f8ecce2a2e5ab5d4b7038992a15f383598d47cb4f88ac1343655e54fd709d8e67305dc46ffd4b224f9cb40b82a54feb7a30cccbd028608f2b089e32c4e5af18a3e224fb7c80d9778b685a8665ec46299041379cdf965d2b543329e8baeda9e74f90b5a054dbaea393e761795c0723bb4f18319daa2c88384c6327233121db71e2eebc7d9ec135485d7868b7dd43d2a7c7c0bca179830c3e1ff5a6380a2fb33c8e3ccc6c966dced68eb13437dfcf8f72055f60804379af5f585ef8e9b55ddf67b960be0e2e7ce81f239b1aee666e810714921d94cd23e2c5c3ddd08644bfd5367d6e563b2d0cb9f02d690aa64965706747d42628730b8b64367f606e5c0dd621c8ed43a6b65606bc9a0b8c39a52073e51c72b5cd094da1dbd833d0da3d4af492926c9d3397144a09c0ce16ef1d475b400b769964e1bc72099adf1e4a80acaf7afc3c74653ed1d66c14b4cb90e575253afb2170231e02ccc4e36ca635646557d9753a85d2db9d5913a754111d608dc9070d00b65121ac8de07cd3d86864a835a259d5a79f68ed78c49d8bced7c1a4252126db41e1fd1c35bb2ba39e2e275d306d2519fd78fc7f5ff22c9a98ebfad0e70c80e6867b2859f54ad68bd9b9514d984fdcad952ee5424cc70221ff09dd2ae2b17f6ec11e666d0b410c4d50d2094864589b4d93b328dbef425e38ed943bf54c592197bf8d9cc1fa81bc395cea8ecb2092bb06a98be94227a73578c95a80fb5056b2cc43046064bc0961931eec792de3659dc68bc3631a01179ea4c869b91873bbcd3e981e997f0b3a9a81e739da9029db14cd89771deb02b09d2d002a6602d00accc2d77b9ce9441efdb6deec644fc9b4b9b8042318b95008452c05c04b67e8b166cd05d56b77a0ac7905a91e8e0e1c30375ad5264e7ccecd8d30df5b1da493afe3169177c7d97ca3dd2bce93cd60ccd9135bd6ce62c683c1138629f40a7d76d0ae5ca6dd0f599aa435467353d994b8369d4686db56c6fd9932480535b08508d7681e3b4f4b6d7a993a3955302bb89cd5a02bec5fdfaba568b964f52e25dbe03c2947ef1d363519ff380470e7c3ef21ca85fdf445eb6b988932f0612cba0e3d25f21b86fcf598917ff62e528ea8606309b760da61815873efa47c81855afa34f807ab6b48e745efd4f56f2b0d199e4ef12a2369b51b537f38a39538209f4af761bf4ae60c72a94f392ffd8b5c384c24a8e800698dd19395ee2a89f0841cd834e6277f751d70ba85283c2606331b4ffa8b2df3f0ace9b581616a9fe4c665e94e17a6c0cfb6d2b086599cab8b5ff7bd2f8fdc678bd049ae35815898bca418e29bb7fa938ee4c12f9b772dc9bb9e696256fc0b342f726a687d41f85663e3d1a2abc5475397b877d4b77a6d0ab069edf63752bd0fbda42cc4320815091116e440e9c3b0e21dd96c1556c11c57832c8b5639154626b0eb8c86373689d0f06bc8aafbb2b10c692cafe0b67f051ca9c27a425e19d3873a7c3f426fa3a1f5283fa99b11d268887f30ce9c99703cf55e8acdbf52c045ab6e9424c6983e0dd303670265e77088d9b1067705d52b61f08fb6fbcfeda27858c6df4e9a4074a1f9580c478892e7752b04d9e29dad0771496669a2004dc2aca332e82771c213dd048fbf5b8efbc7c9b6028a2be4e02bf341c9cf568fc462d53047ed91d5711376acc5e152d7b7ec42b3e318b98dcd3338378510e3e29755700eb697ae2137e093338a06f65213bdc911098afa0b04f657a174f1e1fdd2d3201c89e625369244bb3c65ce0e71962a795e87857d99680f23d39cde87a11a0d2f87b0709fffd67a47365b8da9f226d761ed03c035272a6c8d0d24ca0080e188f937e7cff3ad79e8c70a526a577329c6381ec685e9a9db99ecf72543f84660b1fe44d85edc63f552e522237456bdfb8c0824b894c93eb5c0427ecac75624207d6e8d2f9c621f9f081bd32d39c528f5dfce0f55bc67e01a46a30477f06cba825a585f8c8632667d4183f2ceb163d6f8557e07fc2a2e0756c782f801a94daa8025eb236b1ddd9b1d83b12b72591a5df173adcb3cba86e10e911101f8fe3d87809fecbc41b4bc5f7be7cd38bb91f918c8ced4f51c374223597406a966a546e0ed31b1b9cde3308b7c7f864c67dadb301589a3efc35ca6bb903ee0369c6d8b3e017281f52ec123b31ab0a7d077b5b123691490ae7c81a03b67043402d4c4eff0fe321b916f6e38b27922b2e0f1066cac5628ec90e05fa4ab17d6f3876430509ed5e6c5f5c2f34a1bb1f092fe1e1994d20a11a41c1e4464332501ba685eaeda9fc331b2c900452b00654fa132ea837241e6d189d7b9cf7d188e9424c595a78c2342d967087b850ed783cc3bcb34218b8e8cfad2d7805b12dbe6aa46e27d8c70c6974df0dc9c10e0b645549a865f040f351b190f9c39d223b2b68f8430e26e28f80069dc74aa8b54d765b09a791e4086c06f05baf19634426966ed3133926d9246eb757207dd43a9144726789668b23442a8a6e7c443e9d820a76fc1400bce6a9fa2fac9fbdd653217df16dbb627ff45331a4436651dd85ee0f652e82cf16b985888e92357362aa2e81c0a37ce09cb1703beb753152c69794da8c0c427d2d3044f8f76356687159636ffd313694572a1f6b94f355d7b409ca22ae5d43fcca5babeef29a9548cbe344abd7c4805f5f8a10177352eb689456c456ce25cd60cfb1453dae01961a7ad6ce70155ae772ffd2ab5e97ae82d8e653eda6160c3611f3c67fc308b4fab266cbf182ecbdc7a66d44a7c42af62b961655fa68687d3554da5383fb289962f389bf1b2bad252b17aa7971ed7de793231126b7f1e08b512697afb191ab7554787c89acfaafadffff4f6449a9c597d7e21fb5affdbca1e8a3fb66cb46893da52d22184e5b4588b3399262c6c1350b5f6b6544640b8f018d4a45586c5c307007829da37cad8c39ba3cefa8461275dde4f8e884e0c5c22b3ae6340bbf445607110f86ce4e5bd2f0d3c02be1319d9336608c32dd13675d019bfc6d0b0b3694b44541eaf03b762c2b65be58dd923c38fc825d63ce9ab5ef17f1cdae5f9af4382c69e24c1f7d5782fd34dec79976a8cb77109c14c5884ce04dd02a7808bf09cbf70bb20c870e0db046ed17aa41e620dd4976dff9aafe429e9243b1931740dbe056872fe8c65c4f637cacde8cff72f113c614ffea5b47056ef97f858f6cad9e83ed6f4b73fe9ff3b59d3f933f5098803ed8ed592aa947179f1dd5d8c75ccebd89d26199f12b1a05476507d9e3eeb77cd7830042505d44b6538996d91c22e3cd5ffc560821b3bbbf1436937253b25e5cb8e0896ac7c339eb809f72e1161316fd6a965ab83379c9522c4b91c60978364ab3d24b50ac08d8c457e6f18fa7d5db604933f337e0545a05d518631af0c03cb07afb0623c7d900a1a5affb7b78de6520cf6e70e40791505b596bf88e7e1f9b866a6a7e307ae0f90963c57b620e0c926e0c22df81f67834857e17e22855977454fc20cfc0bbd7a9bd6af342b873552fd9ba729241c33d56d5071ff1a33ca42fb32eccbf1c86ad1d2b7431dc7b90d23c20f2aae08fd6b9cc5d5f556b7e583acb454d06c5559f60a4b6ffebae325abe13a135398b54251c2c33d566c3431c6e20f8b4b46878eeec9483837cbae22c67e9e0153a778a026c89f1dc7fa141538d0f60b4f21f672fd8a59b4b655d2b2204440ad10d5905f473bee8997f9fc2455fbddc9541787a6ee37786f414ee8c2cd4bfc08758006e69fb631e4d0a2083f26d97106ca99e597b455fea066363a9725d1d6d20817da3c644868cda60ebeb24bff0dafdb3675869e857128693522c9a3e63f28d7c7a04ffc93bcbfa3686a6443fa926a46caf125f0adf92871a134f3360ce09084262b9b0f64ed6e8cfb29b95069267d53ccff6105df345edf9eca003d79968e097af0b3c0304a028a90fa315067a0798"}}}, 0x101c) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b0"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.890769485s ago: executing program 0 (id=19): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x400000f4, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x6, 0x100000, 0x1000, &(0x7f0000278000/0x1000)=nil}) r5 = socket$inet(0x2, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x11, 0x66, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x22, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) (async) r7 = userfaultfd(0x80001) keyctl$update(0x2, 0x0, 0x0, 0x100000) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x40}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000688000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) (async) bind$802154_raw(r0, &(0x7f00000007c0)={0x24, @none={0x0, 0x3}}, 0x14) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000380)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0x2, 0x2}, 0x20) (async) connect$pppl2tp(r9, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x1, @remote}, 0xd}}, 0x26) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) (async) r11 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x20, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x8ed}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x89, 0x6, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x5, 0x6}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xd1, 0x4, 0x3, 0xef, 0x18}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x8, [{0x91, &(0x7f0000000580)=@string={0x91, 0x3, "4da1e21b6d16291fef189c1149d5d48c2f6469f14d5e1a19f66ff504033c7bc482eef26d0d11d0f89868f0d1abb0026c2cd750522808c2492b78fd04a9ee4575bc2085e646b2935d4e0816ff33a580cdf4677cfa85c0bba2f5ca49a6e14c4a50d3b96dd81a3b6a799744817db9fa0cf5aff1e996a574925f07f33725fd60cba7ec00"/143}}, {0xff, &(0x7f0000000480)=@string={0xff, 0x3, "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"}}, {0xf0, &(0x7f0000000640)=@string={0xf0, 0x3, "4c32724b4889490c8035a0b0a92ada2016db6eff69491a03bdb1b3e31b43fdec5989fdfb3621d1e63c85c969dcf61a4c2e4c80a7126558bbf5a8267f51049931390b6525ed2e91ce374fa0f5d75834399cc358bed37ff8995e01bfac3776c1dcb48a3b3d93f769aef939a702c4d1bfc919ba58acd538749bcb830943156f1110680bb66d72be602460ff89d66347b5f5e97989142518f72a65336f455b48f0fbda77a65e34de7af3a0158b2b45413f39d1ded7f8c1be1abeae658ac049d2ad3a5facba16d05ed61fb0157fe534160ec91d09e776ca12f8bec62fb139cdcae207a98497967d11f92d3b344e92fd00"}}, {0x31, &(0x7f0000000e00)=ANY=[@ANYBLOB="31038ba1fda6b6f89dd1d5758d551cae48adf3fddb8e5b7a285d6c4ee7975683461fc574118b8df487", @ANYBLOB="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", @ANYRESHEX=r10, @ANYRES16=r8, @ANYRESOCT=r9]}, {0x4e, &(0x7f00000003c0)=@string={0x4e, 0x3, "0a572eaa2df72be4fcec979345d71325698327f24ba68394dad64cf58f8e21019387866babd93b4f993107b2b73e60110c23492b04da32dce66642de11e487d430281271d8a973d6441ce746"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x444}}, {0x95, &(0x7f00000008c0)=@string={0x95, 0x3, "4a40753a969a779f09e098c7423574186fd2dbd6b2660320fee1b6d993b2c48f1ef49d80de839318e32903668a8c12b6ef4bfec7d4dfdcaeb7ad80745f9d44ad00b4eed19abfea01df6c842e7f26b5d7fd02b6b082d32c9013ae064e6ff7c3247b73a364a7041d506cf9da66f0fd98ab2249f956556d9127d98a9149a9bd3b926e98d2905ed16ef15e917a0c7d51b5ee4bf4e2"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x457}}]}) syz_usb_control_io$hid(r11, &(0x7f0000000b40)={0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="200b1f0000001f0e91e5f779b5fbffffff27e3750bb970f4ae0105e04497773def7f55e0d2"], &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000ac0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "f72368ed"}]}}, &(0x7f0000000b00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0xc58}}}}, &(0x7f0000000dc0)={0x2c, &(0x7f0000000b80)=ANY=[@ANYBLOB="0008b90000006fa7dacc162731070f8e896d61c8f11fd9dd5e20a3bcf08c84f1281d06b1bf6d9aa787b52d23c7ae417bc65d1694538652da1a4939dec0185571f0dceac280493b7741af95d0740e3e8968cd7ede4b7f4d5a2de6e905e063dcf3e9853696263eece58836cf81928a7cb128a92b17489c32f7720e70a4f57c00a7dc0ef6811ce99b698197d64f7303b63e1ad6657eddde136e02fdf34cb8bb3dbcec9d7912620097d4b4bf056d7c02b59f9a93ac765205a47c75386945b78320"], &(0x7f0000000c40)={0x0, 0xa, 0x1}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000cc0)={0x20, 0x1, 0xb2, "f85da8c4cb3667c1a86592ee58a113cc186f01947f42aa1cfcefbda2d3a7513373956a0913bc27f812da0797c001cebfbe5460ba1aa7a0456a710bc20ac23aec2c2cb5fe2ab484162d455587c6c063204adc68cc0449577953ccfe3f67b76f2be98696fa985e89562c97f85cad63350e986ffd6cb2c3d8b84af62e576ca496d9faa11dfe1567a41bc378f9cf8c77f7e13e78725e7a572953979aa320809f5703e6d4811d79cc9b565cb7640d82e796aa7b93"}, &(0x7f0000000d80)={0x20, 0x3, 0x1, 0x1}}) 1.821077447s ago: executing program 3 (id=20): statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x200, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r1, 0x2, 0x0, 0x0) 1.739011848s ago: executing program 3 (id=21): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000001c0)={0x1f}) r5 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 1.737942648s ago: executing program 3 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x40000038, 0xfff, 0x3fffc, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0x20bdb], 0xdddd0000, 0x1c4217}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x400009, 0x3, 0x2000, 0x4000], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x0, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x3, 0x2, 0x87}, {0x6000, 0xeeef0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x1}, {0x26000, 0xeeee0000, 0xd, 0x6, 0x0, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x5, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xd2616964a087e117, 0x2f, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x27}, {0x3000, 0x3000, 0x9, 0x5, 0x7, 0x5, 0x9, 0x3, 0x8, 0x81, 0x0, 0x70}, {0x5000, 0x4000, 0xd, 0x5, 0xcd, 0x7, 0x4, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0xdddd0000, 0x2034, 0x0, 0x1500, 0x3000, [0x6800000000000000, 0x204, 0xfdfffffffffffffd, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000080)="120000400100638500"/18, 0x12, 0x10, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @local, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000000000011000000"], 0x22}}], 0x1, 0x800) recvmmsg(r4, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d80)=""/4072, 0xfe8}, {&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000003d40)=""/4106, 0x100a}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000600)=""/72, 0x48}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f0000000140)=""/123, 0x7b}], 0xa}, 0x5e}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x99c5}, {{0x0, 0x0, 0x0}, 0x2090cf}, {{0x0, 0x0, 0x0}, 0xe52}, {{0x0, 0x0, 0x0}, 0x7a}], 0x8, 0x40000040, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RRENAMEAT(r7, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904002001020d"], 0x0) 417.45968ms ago: executing program 3 (id=23): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) dup(r1) (async) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x1, 0x7fff, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x1, 0x8, 0x28}}, 0x28) write$tun(r0, &(0x7f0000000100)={@void, @void, @eth={@empty, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "fcff00", 0x4c, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @loopback, 0x0, 0x1, 0x1, 0x2, 0x3, [@local, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}}}}}, 0x82) 314.143373ms ago: executing program 0 (id=24): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x10001, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000000), 0x2, 0x0) 235.674404ms ago: executing program 3 (id=25): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @multicast1}, {0x1, @remote}, 0x3e, {0x2, 0x4e22, @empty}, 'veth1_to_team\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x4283cafe) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00') 233.896295ms ago: executing program 0 (id=26): inotify_init1(0x800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8800000000000000000000000001017f00000100000000000000000000000000000000000000000000000064000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x4000010) ioctl$RNDADDENTROPY(r1, 0x40045201, 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000003c0)='.\x00', 0x5db) inotify_add_watch(0xffffffffffffffff, 0x0, 0x111000c00) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r13}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 233.651965ms ago: executing program 3 (id=27): syz_usb_connect$uac1(0x5, 0x9e, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x944, 0x200, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x2, 0x30, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf, 0x2, 0xc, 0xa, 0x7}, @as_header={0x7, 0x24, 0x1, 0x8, 0x3, 0x1005}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x6, 0x3, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0xff, 0x1a, {0x7, 0x25, 0x1, 0x0, 0xe, 0x58f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4d, 0x1, 0x7, 0x89, "", "c2"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0xf, 0x2, 0x7f, 0x1d}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0xbf, 0x8, {0x7, 0x25, 0x1, 0x4, 0x5, 0x86}}}}}}}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001e0021003bbd7000000000000a000000050000000000000014000c"], 0x30}}, 0x0) syz_usb_connect$uac1(0x3, 0x81, &(0x7f0000000180)=ANY=[@ANYBLOB="120110030000000844060e8040000102030109026f0003010500090904000000010100000a2401050019000201020924030302040105db0224"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xf4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x60c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x7, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xb, 0x20, 0xf}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x5, 0x9, 0x7, 0x10, 0x5}, 0x1d, &(0x7f0000000100)={0x5, 0xf, 0x1d, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8c, 0xa, 0xf5, 0x1, 0x6}, @ptm_cap={0x3}, @generic={0x7, 0x10, 0xa, "a336fc8b"}, @ptm_cap={0x3}]}, 0x5, [{0x34, &(0x7f0000000140)=@string={0x34, 0x3, "01761a9c861ab85e3d411ef05b0259acc27f3e768c6a743ff22ed293a1d5c40ca012ce805d6232ba4e208cb74b35331273df"}}, {0x2b, &(0x7f00000001c0)=@string={0x2b, 0x3, "664419ec508a0f66c089e7ac68b1b2d4422f223f38121c069d560d5d30570eee87e11f3d3301099f88"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2001}}]}) mknod(&(0x7f0000001980)='./file0\x00', 0x8, 0x10000) ioprio_set$pid(0x1, r1, 0x2000) 0s ago: executing program 0 (id=28): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000010c0)=@new_dev={0x2, 0x191}}}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001000)=@req3={0x3ff, 0x7, 0x6, 0x28, 0x5, 0x1ff, 0x8}, 0x1c) pipe(&(0x7f0000000000)) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000001180)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x32, 0x11, 0x1, {0xa, @udp_ip4_spec={@multicast1, @multicast1, 0x4e21, 0x4e22, 0x5d}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0xfb44, [0x5, 0x9]}, @esp_ip4_spec={@local, @private=0xa010100, 0x9}, {0x0, @broadcast, 0x46, 0x3ff, [0x2]}, 0x4, 0x2}}}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24044010) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x9, 0x2}]}, 0x10) listen(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r8 = openat$incfs(r7, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x40106726, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): cess permissive=1 [ 12.800489][ T36] audit: type=1400 audit(1783575889.650:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 21.109510][ T36] audit: type=1400 audit(1783575897.960:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.113944][ T287] cgroup: Unknown subsys name 'net' [ 21.132401][ T36] audit: type=1400 audit(1783575897.960:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.159778][ T36] audit: type=1400 audit(1783575897.990:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.160337][ T287] cgroup: Unknown subsys name 'devices' [ 21.304641][ T287] cgroup: Unknown subsys name 'hugetlb' [ 21.310339][ T287] cgroup: Unknown subsys name 'rlimit' [ 21.406492][ T36] audit: type=1400 audit(1783575898.260:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.429811][ T36] audit: type=1400 audit(1783575898.260:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.454883][ T36] audit: type=1400 audit(1783575898.260:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.480222][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.489087][ T36] audit: type=1400 audit(1783575898.340:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.514551][ T36] audit: type=1400 audit(1783575898.340:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.542374][ T36] audit: type=1400 audit(1783575898.400:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.568000][ T36] audit: type=1400 audit(1783575898.400:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.568699][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.353646][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.360745][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.368055][ T294] bridge_slave_0: entered allmulticast mode [ 22.374559][ T294] bridge_slave_0: entered promiscuous mode [ 22.382308][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.389379][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.396837][ T294] bridge_slave_1: entered allmulticast mode [ 22.403398][ T294] bridge_slave_1: entered promiscuous mode [ 22.515942][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.523170][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.530273][ T295] bridge_slave_0: entered allmulticast mode [ 22.536815][ T295] bridge_slave_0: entered promiscuous mode [ 22.544777][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.552515][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.560034][ T295] bridge_slave_1: entered allmulticast mode [ 22.566423][ T295] bridge_slave_1: entered promiscuous mode [ 22.602537][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.609643][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.617027][ T300] bridge_slave_0: entered allmulticast mode [ 22.623434][ T300] bridge_slave_0: entered promiscuous mode [ 22.653432][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.660554][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.668384][ T300] bridge_slave_1: entered allmulticast mode [ 22.674720][ T300] bridge_slave_1: entered promiscuous mode [ 22.725875][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.733052][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.740238][ T298] bridge_slave_0: entered allmulticast mode [ 22.746846][ T298] bridge_slave_0: entered promiscuous mode [ 22.760071][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.767498][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.775093][ T298] bridge_slave_1: entered allmulticast mode [ 22.781435][ T298] bridge_slave_1: entered promiscuous mode [ 22.825453][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.832573][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.839894][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.846997][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.887672][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.895306][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.902641][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.909697][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.953563][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.961040][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.969028][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.976095][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.993945][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.001681][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.009981][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.018559][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.026669][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.034485][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.046215][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.053582][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.064718][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.071821][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.120833][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.128222][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.136109][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.143292][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.169446][ T294] veth0_vlan: entered promiscuous mode [ 23.185311][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.192428][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.207890][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.215013][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.227367][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.234501][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.242353][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.249595][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.261519][ T294] veth1_macvtap: entered promiscuous mode [ 23.301547][ T295] veth0_vlan: entered promiscuous mode [ 23.327790][ T295] veth1_macvtap: entered promiscuous mode [ 23.340344][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.353707][ T298] veth0_vlan: entered promiscuous mode [ 23.363643][ T300] veth0_vlan: entered promiscuous mode [ 23.393977][ T298] veth1_macvtap: entered promiscuous mode [ 23.408184][ T300] veth1_macvtap: entered promiscuous mode [ 23.564303][ T328] mmap: syz.1.7 (328) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 23.606167][ T334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 23.615769][ T335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 23.625882][ T335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.721915][ T316] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 23.782507][ T45] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 23.849345][ T347] x_tables: unsorted entry at hook 2 [ 23.862184][ T347] tmpfs: Unknown parameter 'n' [ 23.872475][ T348] x_tables: unsorted entry at hook 2 [ 23.875537][ T349] tmpfs: Unknown parameter 'n' [ 23.884147][ T316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 23.895611][ T316] usb 1-1: not running at top speed; connect to a high speed hub [ 23.910732][ T316] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 23.932807][ T316] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 23.952069][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.954204][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 23.965495][ T316] usb 1-1: Product: syz [ 23.979509][ T316] usb 1-1: Manufacturer: syz [ 23.984814][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 23.985945][ T316] usb 1-1: SerialNumber: syz [ 23.998791][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 24.012742][ T45] usb 4-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 24.021969][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.030003][ T45] usb 4-1: Product: syz [ 24.041847][ T45] usb 4-1: Manufacturer: syz [ 24.052020][ T45] usb 4-1: SerialNumber: syz [ 24.222341][ T67] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.250235][ T316] usb 1-1: USB disconnect, device number 2 [ 24.267884][ T45] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 24.297806][ T45] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 24.312329][ T367] udevd[367]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.337457][ T45] usb 4-1: 2:1: All rates were zero [ 24.351664][ T45] usb 4-1: USB disconnect, device number 2 [ 24.365265][ T370] rust_binder: 369:370 transaction to 0 failed: ENOENT [ 24.402698][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.409268][ T67] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 24.440630][ T67] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 24.452242][ T67] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.468962][ T67] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 24.484229][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.493241][ T67] usb 3-1: Product: syz [ 24.497939][ T67] usb 3-1: Manufacturer: syz [ 24.502955][ T67] usb 3-1: SerialNumber: syz [ 24.514797][ T67] hub 3-1:1.0: bad descriptor, ignoring hub [ 24.524273][ T67] hub 3-1:1.0: probe with driver hub failed with error -5 [ 24.714355][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.723362][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.789321][ T341] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.846608][ T391] 9pnet_fd: Insufficient options for proto=fd [ 24.859895][ T391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.869992][ T391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.878666][ T389] Unsupported ieee802154 address type: 0 [ 24.941896][ T341] usb 2-1: device descriptor read/64, error -71 [ 25.123865][ T319] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.192192][ T341] usb 2-1: device descriptor read/64, error -71 [ 25.251902][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.282268][ T319] usb 1-1: Using ep0 maxpacket: 16 [ 25.288866][ T319] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 25.300411][ T319] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.309136][ T319] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 25.318437][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.326549][ T319] usb 1-1: Product: ㉌䭲襈౉㖀날⪩⃚ｮ䥩̚놽䌛襙ﯽℶ蔼槉䰚䰮Ꞁ攒뭘ꣵ缦ё㆙ହ╥⻭캑伷壗㤴쎜빘翓駸Ş겿瘷誴㴻깩㧹ʧ퇄즿먙걘㣕魴菋䌉漕ထ୨涶빲①｠횉䝣秩ᒉᠥ⫷㍥䕯䡛ﯰ矚度ᖠ⮋䅅㤿뻁븚斮삊퉉㪭걟ᚺ廐ῖᖰᘴ줎झ盧ዊ뻸⿆㦱쫍ߢ蒩隗ᅽⷹ㐻鉎ý [ 25.360381][ T319] usb 1-1: Manufacturer: 쭗䃻ᮐ휧婐ꤲ鼍抬ꎣᚆ裑ﻩ뺁䥌襹旅괋㌦䏡一稖焙驷
툈⡁ヲۂᤵᗯ彈좳箩毈튓⮾¼②緷籥轼枰੐圿蠆隃펇噑栨৥⶛굠헔龘佁⩺ܚ馵払榃냗睐簢꥙⪢↛唘Ṝᙂ쪠什Ƃ瞟跄寥冾⡹䙑뾉滿谀葷낰꩸羁㹂셅玤褝飮徎띔焼鹈讛䛓齟⸾蔞㊄⢬ࣨ턤㸷럄뜾ꐵㅒ养๥掵ڟ贰 [ 25.397635][ T319] usb 1-1: SerialNumber: ꆋ꛽톝痕喍긜굈ﷳ軛穛崨乬韧荖὆瓅謑ﶇ攰鵦韣 [ 25.422980][ T31] usb 4-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 25.433716][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 25.444265][ T31] usb 4-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.457327][ T341] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.464907][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 25.472987][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.482400][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.490510][ T31] usb 4-1: Product: syz [ 25.494730][ T31] usb 4-1: Manufacturer: syz [ 25.499371][ T31] usb 4-1: SerialNumber: syz [ 25.602063][ T341] usb 2-1: device descriptor read/64, error -71 [ 25.711330][ T31] usb 4-1: USB disconnect, device number 3 [ 25.816799][ T319] usbhid 1-1:1.0: can't add hid device: -71 [ 25.822908][ T319] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 25.834279][ T319] usb 1-1: USB disconnect, device number 3 [ 25.862100][ T341] usb 2-1: device descriptor read/64, error -71 [ 25.971975][ T341] usb usb2-port1: attempt power cycle [ 26.308376][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 26.308395][ T36] audit: type=1400 audit(1783575903.160:150): avc: denied { read write } for pid=403 comm="syz.3.23" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.337761][ T36] audit: type=1400 audit(1783575903.160:151): avc: denied { open } for pid=403 comm="syz.3.23" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.337952][ T341] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.390909][ T341] usb 2-1: device descriptor read/8, error -71 [ 26.421136][ T36] audit: type=1400 audit(1783575903.270:152): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 26.478722][ T36] audit: type=1400 audit(1783575903.330:153): avc: denied { write } for pid=412 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.499296][ T36] audit: type=1400 audit(1783575903.330:154): avc: denied { nlmsg_write } for pid=412 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.522861][ T341] usb 2-1: device descriptor read/8, error -71 [ 26.551975][ T36] audit: type=1400 audit(1783575903.400:155): avc: denied { read } for pid=412 comm="syz.0.26" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.631819][ T36] audit: type=1400 audit(1783575903.480:156): avc: denied { read } for pid=412 comm="syz.0.26" path="socket:[4690]" dev="sockfs" ino=4690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.704664][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.771851][ T341] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 26.792910][ T341] usb 2-1: device descriptor read/8, error -71 [ 26.815717][ T36] audit: type=1400 audit(1783575903.670:157): avc: denied { read } for pid=429 comm="syz.0.28" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.833271][ T430] ------------[ cut here ]------------ [ 26.839341][ T36] audit: type=1400 audit(1783575903.670:158): avc: denied { open } for pid=429 comm="syz.0.28" path="/4/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.844572][ T430] WARNING: CPU: 1 PID: 430 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 26.868762][ T36] audit: type=1400 audit(1783575903.690:159): avc: denied { ioctl } for pid=429 comm="syz.0.28" path="/4/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.878009][ T430] Modules linked in: [ 26.907594][ T430] CPU: 1 UID: 0 PID: 430 Comm: syz.0.28 Not tainted syzkaller #0 38ce34caa3eafecb4514ac9530ab896457f545a5 [ 26.919000][ T430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.929240][ T430] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 26.935335][ T430] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 43 db 0b 06 00 0f 85 c2 00 00 00 c6 05 36 db 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 26.955088][ T430] RSP: 0018:ffffc9000dae7980 EFLAGS: 00010246 [ 26.961268][ T430] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 26.969685][ T430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000dae7a38 [ 26.977770][ T430] RBP: ffffc9000dae7aa8 R08: ffffc9000dae7a37 R09: 0000000000000000 [ 26.985830][ T430] R10: ffffc9000dae7a20 R11: fffff52001b5cf47 R12: ffffc9000dae79c0 [ 26.993871][ T430] R13: dffffc0000000000 R14: 1ffff92001b5cf34 R15: 0000000000000000 [ 27.001923][ T430] FS: 00007ff80ce656c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 27.010903][ T430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.017589][ T430] CR2: 0000000000000000 CR3: 0000000117c5e000 CR4: 00000000003526b0 [ 27.025620][ T430] Call Trace: [ 27.028905][ T430] [ 27.031969][ T430] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 27.037734][ T430] ? schedule+0xc5/0x240 [ 27.042046][ T430] ? futex_unqueue+0x136/0x160 [ 27.046859][ T430] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 27.053092][ T430] ___kmalloc_large_node+0x81/0x220 [ 27.058334][ T430] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 27.064612][ T430] __kmalloc_large_node_noprof+0x1e/0xd0 [ 27.070385][ T430] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 27.076633][ T430] __kmalloc_noprof+0x326/0x510 [ 27.081521][ T430] pending_reads_dispatch_ioctl+0xc86/0x2080 [ 27.087570][ T430] ? futex_wait+0x2b8/0x7c0 [ 27.092143][ T430] ? __cfi_futex_wait+0x10/0x10 [ 27.097018][ T430] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 27.103533][ T430] ? selinux_file_ioctl+0x732/0x1480 [ 27.108885][ T430] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 27.114638][ T430] ? do_futex+0x32a/0x510 [ 27.119034][ T430] ? __cfi_do_futex+0x10/0x10 [ 27.124072][ T430] ? bpf_lsm_file_ioctl+0xd/0x20 [ 27.129271][ T430] ? security_file_ioctl+0x3e/0x110 [ 27.134566][ T430] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 27.141055][ T430] __se_sys_ioctl+0x135/0x1b0 [ 27.145798][ T430] __x64_sys_ioctl+0x7f/0xa0 [ 27.150461][ T430] x64_sys_call+0x1878/0x2ee0 [ 27.155200][ T430] do_syscall_64+0x57/0xf0 [ 27.159653][ T430] ? clear_bhb_loop+0x50/0xa0 [ 27.164398][ T430] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.170326][ T430] RIP: 0033:0x7ff80bf9de59 [ 27.174813][ T430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.194528][ T430] RSP: 002b:00007ff80ce65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.203020][ T430] RAX: ffffffffffffffda RBX: 00007ff80c225fa0 RCX: 00007ff80bf9de59 [ 27.211134][ T430] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 000000000000000b [ 27.219547][ T430] RBP: 00007ff80c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 27.227713][ T430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.235766][ T430] R13: 00007ff80c226038 R14: 00007ff80c225fa0 R15: 00007ffca74f36d8 [ 27.243819][ T430] [ 27.246868][ T430] ---[ end trace 0000000000000000 ]--- [ 27.253624][ T67] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 27.271849][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 27.279323][ T341] usb 2-1: device descriptor read/8, error -71 [ 27.281314][ T411] netlink: 'syz.3.27': attribute type 12 has an invalid length. [ 27.287333][ T67] usb 3-1: USB disconnect, device number 2 [ 27.300614][ T67] usblp0: removed [ 27.308214][ T411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.317730][ T411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.327191][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.335574][ T45] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 27.343330][ T45] usb 4-1: can't read configurations, error -71 [ 27.391991][ T341] usb usb2-port1: unable to enumerate USB device