last executing test programs: 6.779146602s ago: executing program 1 (id=2): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x401}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0x1, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x80000001, 0xa, 0x4, 0x12a3, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10001, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0xe56, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400001, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x1, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x6, 0x18, 0x491, 0x8d3, 0x200006, 0x800d, 0x400, 0x2, 0x400, 0x41, 0x6, 0x1000, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x7, 0x3437, 0x3, 0xd, 0x7, 0x600, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x5, 0x40, 0x100, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0xfc, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x30d, 0x4, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x9, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0], 0x294}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffdffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x40000000000035, 0xfff, 0xc, 0x40000000000181, 0xffffffffffffffff, 0x80000000, 0xf3, 0x9, 0xfffffffffffff801, 0x2000000000007, 0x8, 0x7, 0x0, 0x3, 0x4, 0x3], 0x25000, 0x1144}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x1, 0x1, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r10 = eventfd(0x280) write$eventfd(r10, &(0x7f0000000140)=0x1610, 0x8) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 6.380758637s ago: executing program 1 (id=7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmmsg$inet(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="01b6fb8f71c41506544e01272ead2a5de686002dd2bbba3f78122fbbf07b63061ea0a2e7", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)="478e18d1e1a3351cbd48e345a84e705cc01bdeacd1e76b8fc5c9afe00b13414134eddef24578c82059dff7926b0c84c03da6a9d113aa921bca07453e8527413b50d97e8c7decd97f562027a6eda6d06784f6446f8c8fb8379e9790a449a4fbc9f15bdf79b00eb58ba82a0fed2ade4100ed", 0x71}, {&(0x7f0000000600)="a6e19b3d9f0a3040bae7664a747c5e02c5058ec2643170d91ef26bdf9f183f9deb7cf82552660019086bf41b35d3f39a297f30dcb167ed38884d8d7618306fde3a5ae22d6647c9be1f51b8362255de32b08c121684ae755f64ef246a7010821b5a69702282f38053cea90d575552708c1ea9d7d3fe23987f7cc9ea23b2cac7740a10a830ad1b57d2d91da88948232cf84ff94e29260622d2654db1054e74b6b7f798bd9694b52cb16a60a722eb5ee443097735573b41bea8bca7613d501a5fd58bf43120a04eba07c6e5a0168eb7ee9b672435fc3bfc6d93dbf6464ce7c77dc1196a9b018df3328c040a1fcbd6b5e4ee0233dadf2a9327", 0xf7}, {&(0x7f0000000240)="f84079d4d1afb7ba732b8b70a8e0e03a68b17b3f993704ab2df8ae", 0x1b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="e9fc268253698143627ee9abcaf8b53e19194a2bf7132dd291ddb7549fb8006be52514048110579f65379eb7aaf847e2ee7a3cba3626cd1f9d09e6a9f08eb761e0d9c43f63a0c70dd2a9ca212777dab0b920c882ab325811cd39e6fb20c9733cf14c70678ddbff995e644f86584a7038db", 0x71}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a00)="47cc6fd13bf55a8a3c60100a8f31e7f9664b6fb0aedc8ecc89", 0x19}, {&(0x7f0000000a40)="ce8fb6ac9cfbf16b0aaa8b18131da95a22d2831ebcb1357ee0cc921784f47a75e6d98c9f71b5a2f35354bb8645afed648a2d30d35dcd6617d9a0550e9a0d473d53fca0e9175cebca8f1f404001b69184e3ed6e6febde0c1134032c17507271cabb018e1cf38481e7c6d401c065f8a2ef2e171c28c82292d06cb5427f860da1f7ee2eafcdde63f0659c", 0x89}, {&(0x7f0000000b00)="bc205d680252d6fc55b542475cf419d272755560d61d2d811755cb7dab917b39ace26f13fa5ecd375c76315ed4e70a42c0cef2fba0904dc8514af16f87f4b85564994e78e256d237d92935c50b620edf39f05a7340f06347cb3b314a0d0ba04dbded99f667ec0ea41a3c671b3fd4ddeba8b7876ddf957dad5a87c7b6075fe9c5aaa6780b461fb4e418a1768523d4c94aa37bd77862b8fe42adfb78a0bc941adbc7d34416f40872fce9fc99ec0d989480b7671352dd449aa6", 0xb8}, {&(0x7f0000000bc0)="9cf2be5074eaf644e9632c24c48f6e983f8879a91dcc62f7c3f29d7a4664094d8c48bea0c79b29d3ef871c19a02eb5f9df5297554f0d5658250d1ee4f575f78262a5b634b71219809bc597eeea6b57fea1fd24730640537b9ab0e40c7e107dec20f120dc0a00d9b26d442717fcc3e603545473e447080b33cfda836eef5e48bdd29dd25dc143528682f2c37768d6c76c95ab098a0b932f91b9", 0x99}, {&(0x7f0000000c80)="1841ac659f7a35bc27c61ead7f9a91de6290c6fb439c852aab02ad11c77e7f109887c5debef4", 0x26}], 0x5}}], 0x4, 0x48803) sendmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)='T', 0x1}], 0x1}}], 0x1, 0x4000005) 6.370123874s ago: executing program 1 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xa) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x60000, 0x25000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x2, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_pwait(r8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, 0xfffffffe, &(0x7f0000000000)={[0x3c]}, 0x8) close(r6) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000000c0)={0x0, 0x76da59d}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000240)=ANY=[@ANYRES8=r10], &(0x7f0000000280)={0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="4619da085c268647", @ANYRES8=r6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) write$cgroup_pid(r12, &(0x7f00000004c0), 0x12) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.809093111s ago: executing program 0 (id=14): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYRESDEC], 0x0) syz_usb_control_io(r1, 0x0, 0x0) 3.246715827s ago: executing program 1 (id=18): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000000c00)=""/217, &(0x7f0000003080)=0xd9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x88582, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES8=r1], 0x0) 1.787697918s ago: executing program 0 (id=29): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x8, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, &(0x7f0000000040)) shutdown(r0, 0x1) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x11}, 0xa) shutdown(r0, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0xeee3, @mcast1, 0xfffd}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 1.732420314s ago: executing program 0 (id=31): r0 = socket$netlink(0x10, 0x3, 0x1) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00400001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) 1.721509692s ago: executing program 2 (id=33): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x1069413, 0x0) 1.710869999s ago: executing program 0 (id=34): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffffff) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0xa}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\n\x00\x00', @ANYRES16=r3, @ANYBLOB="b11a27bd7000fedbdf250a0000000c0006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x7, 0x12000000, 0x6, 0x7, 0xd, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x29) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x0, 0x70bd29, 0x34, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44880}, 0x54) syslog(0x2, &(0x7f0000000000)=""/17, 0x11) r9 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000001c00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="e83884cb28bd", 0x6}]) ioctl$sock_SIOCSIFBR(r9, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) syslog(0x3, &(0x7f0000000040)=""/49, 0x31) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_connect$uac3(0x3, 0xbe, &(0x7f0000000200)=ANY=[@ANYBLOB="12010102000000ff8c0d14004000010203010902ac000301fcf0100904000000010130000a2401062d00010000000b240d0407a3d5000000000b240d03e20002000094000d24090603000000000300000009040100000102300009040101010102300009240201000d062f070905010900000a00060a25257f000000070900090402000001023000090407000101023000092402010306ae0902092402010403f708060905820910000303060a25250500000007f9ff"], &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x5, 0x3, 0x9, 0x40, 0x3}, 0x4f, &(0x7f00000000c0)=ANY=[@ANYBLOB="050300000007100206906f020506000424100a0806000100000003003fff000000c0ff0000000000ff000000300000003000ff0014100453c711becd2f6e73aa05f570d6de4fa43d00000000000000"]}) syz_usb_control_io(r10, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r11) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r12, @ANYBLOB='\a'], 0x0) 1.664818038s ago: executing program 2 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) setreuid(r2, 0xee00) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x802) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f00000003c0)={0x10000, 0xe4, 0x3, 0x101, 0x6, "0200000000002000000000000000fcffffff00", 0x0, 0x3}) r6 = syz_open_procfs(0x0, &(0x7f0000002040)='pagemap\x00') lseek(r6, 0xffffffffffff0000, 0x0) (async, rerun: 32) readv(r6, &(0x7f0000000840)=[{&(0x7f0000000480)=""/14, 0xe}], 0x1) (rerun: 32) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x2) (async, rerun: 64) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000440)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x8}]}) (rerun: 64) 1.664166188s ago: executing program 3 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x14, r1, 0x333, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 1.649839434s ago: executing program 3 (id=37): unshare(0x60000600) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_link_settings={0x4d, 0x5, 0x8b, 0xc, 0x5, 0xc6, 0x4, 0x81, 0x5, 0x40, [0xfffffffc, 0x8, 0xffffff5b, 0x7fffffff, 0x60c, 0xf, 0x8b68, 0x38]}}) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 1.619362597s ago: executing program 2 (id=38): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x85, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x51, 0x3, 0x0, {0x3}, {0x52b3, 0xb5}, @period={0x58, 0x0, 0x41c, 0x1, 0x401, {0x82, 0x8, 0x9, 0x1}, 0x0, 0x0}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x100000000040008}}}}}}}, 0x3e) 1.532166116s ago: executing program 3 (id=39): io_setup(0x5, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x9a67106, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={[0xfffffffffffffff8]}, 0x8}) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) clock_gettime(0x0, &(0x7f0000002cc0)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/107, 0x6b}, {&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000400)=""/34, 0x22}], 0x6, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000002900)=[{&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/142, 0x8e}, {&(0x7f0000001740)=""/212, 0xd4}, {&(0x7f0000001840)=""/184, 0xb8}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x6, &(0x7f0000002980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002a80)=""/56, 0x38}, {&(0x7f0000002ac0)=""/243, 0xf3}], 0x2}}], 0x3, 0x10000, &(0x7f0000002d00)={r2, r3+10000000}) write(r7, &(0x7f0000002d40)="8f7d8c8501017dd8ac774e865f3d00651b46bbf7be7bd2fbcb2bd2b65735c1b2996b447e4c20b5715f6c1907d4f5300378b00b4e842a6b7bd753c777407372302d03100b1cf13a0e32c5cb6f901f7c5575c4fa085f930dacbe052b78135d4d3c73", 0x61) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r17, 0x40189429, &(0x7f0000002dc0)={0x1, 0x9, 0x7}) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000002e00), &(0x7f0000002e40)=0xc) recvmmsg(r18, &(0x7f0000004200)=[{{&(0x7f0000002e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004100)=[{&(0x7f0000002f00)=""/16, 0x10}, {&(0x7f0000002f40)=""/40, 0x28}, {&(0x7f0000002f80)=""/101, 0x65}, {&(0x7f0000003000)=""/82, 0x52}, {&(0x7f0000003080)=""/105, 0x69}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x6, &(0x7f0000004180)=""/71, 0x47}, 0x6}], 0x1, 0x40000020, &(0x7f0000004240)={0x77359400}) r19 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r19, &(0x7f00000045c0)=[{{&(0x7f0000004280)=@abs, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004300)=""/89, 0x59}, {&(0x7f0000004380)=""/200, 0xc8}, {&(0x7f0000004480)=""/106, 0x6a}], 0x3, &(0x7f0000004540)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x1, 0x302, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004600)={0xffffffffffffffff, 0xffffffffffffffff}) r32 = fcntl$dupfd(r30, 0x0, r9) write(r32, &(0x7f0000004640)="2b7284ea0efebacc120623968215abec8e77d0cfebdbc4245ca6b34453a95fee71a6657b365e20cdcec85ca7aa858df9e07d9e73bd5cb04b144bd674a89ad18c2c5ee467f37c7832ee013d342cfdee563db07d8709db8421e23f0ff1e6af7e3da9b3d74e4d4cae8e6465197c2fa909f15c4f53038f376d3f036efbe138e3889f6b1ee72698d868ecf7b98c4b4250bf388ed335f8da87415d014e9613399629e988478ab74927911e42eb0c518c55512a98b654fb974db06fa19b53638e14aa97f30a8c1b55d86990c36efebf41a5263724383cba4792c0a186f5fa693878ee83e260bae5874f1099fa65f398633b34f1f69eed627ff8bc5293d812f3f41f0dd7d2934556a7ff4db913275f697452f5059e20c13c0e20a8a4729e3f3fbc76247e5678ed23843fb2122628df088dc53f1fb8f94778a438dac82e5e46e82dac860bd18df5ecfa1c99b1b02f92926c6615a488f789b61e4bb23ae5886d81b2781ea3c79d1d968fddd1b4245af01a3f6bdaeab880079ec68ebf20bf926929874b9a44008f141f721f56e9957832f5ea9877954c2923139eac36b5286b296daa4d273d33543ca2a97ef1861445462692f224966958bd66ab48cebb6a4b16b52145f697b7b747e10b98d675768d088ec3ee9c055c4f970ca4ec6d689165db66da52bd525f1b50a2e4a4e5ce07f0c5410c307091cb998f4a31bf40b3217ec58d0c67f4d8b7a6b1ff3c38001bbfd5e227541b71a724048b560b83bd66064181b7b13c6fb16f1de4f617706afd0f46a06b20e7d9558dee1dd19a8f2d4db550703f1ac1f91985620655c2d3a25dff6ae3fb2199f0bc5653d71e813fdaf58b8a198f13d80440160ce198b5d817c440091eef975e64ad1a986c087154012e5ad79e43c39f594b911efc3efde65b8ee91b3a14ae15457bc29e03d27b226b6a356becda8fbc25a3f33091179017df24b766a0566a98a364eeb0dc467e2d9fd4c624362dd6112fce4940a70ab35ad6332083c8455e2a3753e60abbd61878d8d9e4716e41724b8e0724437530e50cd964221eb11db79a8a4c2594132a2a2602e61d9d03ffd73619f8d85651d972c3dd829e2dd052e35d918d8f0ca2484deca7a1b71338713bffb365b1b01fe02f751380d50400c25dd77494eaacd72b89d711f1f30ab0d8e30e6abcb648d3a520ab2927b3a8e8d47a4fb3f0b873c4864e7f263635115ed71b2f71c34f9ca97f1ecff8ee1debf48ee209dda261d848f0b85d7d8a628049db66bbdcbb2608bcf148246628563adf2c0803bf1244d896a176d8af8aec2f0367c035201709b78bfdef15d41b9ac7fd5941a560ad9b7de7b0624251c5ad24e752cf883c6b020b476c2450e2c42eb63e7698b0fbe74f51de6e99727a96c68aad4f91f96f37e2fb292df66f626d51166758d9e9e1da31475713dc1bc201d04b8b5b6aded7bea16237bda91bad162b63c395f1fccc825196bcfc21417e48ceb4e2f198daf54945d6edaee124621e2ec0a2fc5fd7040fb449bdc3cc9cdda5e6b06bdb141a2ad4af3a4ebcd06ea518e1b94bbc0854a0365545930564615e4aa67936f43b6f276b976a7201be4e9be60b1838b3f38cd695c7daf2b502db36fe309ea2a5ca52bb4dc045ce5f60225b8cd103eb69c240106aaa43d9568175721c78c67afaee021d45744b2e59741935aef5cf2b2401b1f1776ae1d60d3dca0b5fa6b457113145e577b97d159c88790792cecb147eb1343557036f14b9c0267e3d9ccdf90215f2fb8c064b8fdc54f40064b1009e5c65d77531d6e6cea55061da98d93ef1f614fe8dd50bc35fe72bbc40796770a1f5f40e43c56f7ea8b5eb49f0733b629099a620ca16c3f9a07056f8749fcc96fa401ccf2ddc5300ac0527b9fd478f9d011447eedf28532979a2d0a501ffc397ce22759f674f69c36578e3d255c3b6e4b822f3224d798ca71e06c842e4fc7777cc1952cdfcb67739b2c0ee66f053f9448974b2a6f18846e7bb212a155c0c023061ff7d3fe6a5f99871573672144f9681dbcf772dfcc6b37ee8fa02aa9d26c5619bf549a1f2d5b839d17dd99b4f6ac054a64653737541141360f4dc35b8284b9a423a1a0fe8464f026dcef905046a1217a77a398ef05b5fbf605cde274ed4787cfa0206d50440659cec06b4037fec94b5685e9186ee7ee961e4bdba247d7560d797339c75ab2852f373c12a7c81ed9d4fc3717e317945d1b7eacd05cd0d1e2a79d8294aa2081a67a2673ae2d18e3b2979e68c3a8c0710d77d2da3758a274f5ef6f6dafe29c91170aa3d56bd92a7d14b4ef339014d5e09b2a0800e9491e98026797aaa1ebfa59e0f49a34047468ab3b1596964f34716418c64e894e451841f139c40e94cb7b6a6d103ab87be08ba43bd6e0c761aa81396e0485541c6dc8bf508e13ee4241763520c47834d5c60f443a0fb56d764700c8a3f2b3b90cc74815a82f90799d32a093c1c06c963d01334e9c7ed400d8cd65ca98c1e62cef15592d56dfe8069ba4af89a9f3916e1d15044c79af276e805231b798c93f6611fe9b275bcbfd96a1082fd5860c06e2187c6842329b7e8c87981ed65a6688ffc3b310e50b9b2cd74a5b4887cb5e570abf3830ba9ec247cee1b462e0f66f77ebc2fe336403bc7d54b64afbeddf6a5237e044f22008e4fed0ad98bfed4d4cf926912fd0c0f42ed44e8474413cd875b566c58840424e3b71321cbe9d56897b0b9fa39bce6564aac9a853420236a42396a104ee29814bc15b188d72ce00ad04ba67b2dbf087ddb8b91811682f87d5a45c138131b9f41dac10431077190eff92a4d4c8f405c6bbb6c15a8a4612684c3f2eb29f7bcc77a9f0c6db940c5b24f24d728f3782d20371928ecbe4d737b5541fd76984005a4285749cef897b711ac188734188b6f770a2936e7c08af8f8d4b35e10cffc6f5472c962062ddd85c4126cc0b54b5640eecfbd6cf103d762c83d67143789013f9b2168602c07029510e83c15414ed341578326e62682c41f8794ab53fd32c0aed0caf5a42666d1522da83eda62dea281c482d82583898084b451c74891bce594eaa95e055ec319c08ae48472285b3965a32f9ebbe05ec3d4033c0affea9bccc8f70fd03038d4123c31fbe86fdcdf9a7531f60ab3f0afb1a03d50b50ea2630dd59153cccec492cf748baa1dda5455cafd9bc6bb546b23f1ac109f399d6b959219f40ec524d108f0bba3b3e9ac87cf7a7bdcdb16dff5ba71f66b8453cf5fe6fb3270dda5269f076660095b9d963f3c75cbfaac0a962ef210fb0a1df39cd490797fb217057f0d4c30978238ffeeefdd437ec9d66cd0fcd958e6c2e1183523865f8a29b5bdfe7a7ed9340b555bc9e228de9415081fe9cae751fb30af2153f7139f1709f2759cce2ba5df991327a1b51c1c72248c8acf0f36e9cfab8d68adfbeaa427a5ee3ac0eefd0b6dea5bba5744ccedf4e4a35b2c7a0477a23d3fc9f51d1bdf450f8f531aaafba4f2e36a3389bb197f030833d6a57c9c83d01927a10beee12ebc76c046f8bdc93bb07512204777b46119e5d34110b70cd7e24212067346acdacf217f7dce75370cc615a850f298a45279703eba5fa906291426e5ec53bcd5b1128f99f1c768cde651003bd0fa4a8da503b04b6936a8b5895edd64a15ecf5357150cd46e0fc73564a0eb044841e864d1d6eb6d831b28b2ad571b462bea18e6990bf869e3da8a3c9f0a36e6b840299cb37fc143deaabcc7f155894c52d162232d82bd6c52ede1619e63a84937566c8282162132295d5c59239eb34c723870b28c70e5edef91fdedbcaee1184e1ef8522a92f7625b2cc4c65fd4aa516ff1e0460b89154c0388337d9a888a7a550b44f15d37c83575799c6e1b2b868fbd31bb7bc84fcdfed8fc0c4eefb178580203ea9162f33f4ee5c9823e4eef013d5ab1035c494bc343d9a0d4d0cc61c6c7842ecf80127efec03b5d2d390b100320a73a8e656c4988406ef334bb425a100e55c933574be3099a4ce1771a6d24a1b549725d586337577d1a2dc8772a1408fb3ef5b49950f3dcc729da32b8e2744024a1b3d67b7dc5e4b0925423196d510b04f2b2ba936276e70f48d894fb330a8f8ab6182725cf245c67697db12228fbb127e3910dd8ee282fc70280e0f15da9809be50ce7e502352d27b136a98df0a5d7b23b6115b430554751beeb6b55d47e8ffa4e72a457dd5348b460d5aa9efa6a29061b5219beda20913435ce6f8579ca37accd4c1ee308672a3ed244a5424eb43fae30724ed7edecdb58cee733f61e9b3fe106fdee8eb808e1790fd4c68dac394bbb949e7df1502def1f7054a44b720aa190bda24aaec5220d51dae558d12bef7b37a962530d68757d5fe6eb8fb78c5c82b11a43aa6214c2a34f930aabb2cae336c2fdc027bf72480b988dd1399f596c270f6f85a28f68727259969f113f7ff71c90163a5828f4ee039e103b5b4c2d9336f858af886ba6f10fd8d7b1a67b4c34465f8400a5cc297f70c59d11333b80055f5286b2e465edfbfd9ed6cab5449248adc8dcce70b8bbeea3b142dae856e50ceb029d5447afc028bf2a2c49280a600b65473b780e58d79e97275f1d9c9cf384b77bd87d764741978de322172f0ee821136f0239cfa1fa2a99539b2f9dc8e00200b1e7a124da48d3dacae9cbd5efa400b48efffe501821b06a3ca6d49a2661568abaad75e5897a657af3a7a3d13ed4fd84f79b0193a8e58e5783cb775473fdb27e386864dd1c5c3673555cf2397f6905b584b504d40d55531089191548faa2cc209173011d700a358ce43862a206012034ab3d3e06b40d6632adb7c3d81d508217c3cba49fc5727d2e729144f79da73da28bc18b06d34faf8c5bba4ecb139feee98fd1e259080480fc8af366895d4f89019e483a4c3558cac32678098397b8d36c4f7cb34aee7e9f9f350666f355a8f010deb557e7a925a7380703c1445b14f0951b60629ddd7c330600a5103fc498a4ab9a0de655656f715f8f6402098cb769bcf97be91fd2d628524b8944bd8e6eb8b53c13fd5654308f2598b65421a96e33fa0200a4562d6c6965cb12507295908a5da50dc633bfaa0c9ab0c117294b080ba95244b9e59c1010cc2ac770b9a3283d60afabb63cca08378f413d8fe9581ba8e6bb82a3938d1537cd205ddfa2f433ed87b52ff1f26e9efa55fc39ddae1410a3b0f14d88edccd61bb80c931095030ccbbac0261fb2083af0dc155d21fc84f929eebdcf6ced1a95f2ff1f65650195f7d6b1e750f9a1cb500f198a5c2d06e3ca76987024eacab4a7ca235ac58a48028fd5648389d4dc3edc813eaf7161b321e9dee9688d3dc38e9b34800fb9a93c918f5a4f1a1c052fc65dedf9a312d84cbfcaf7f7314cf24b43606c0f365919469bd5653299c7eba2dac079d99525729ba39a5abb52905bac167defba51e1de5e82b4d37b367a0ffc2dcc0391c4e8aeed661947063522830e755737f0bcc7f126116c1c7bab8c135adfc6a963675a65399aa529ef4850d091859ee202790d127f8d58cf36e6bad2bbb43d807473f4f806044bbea8352a157b6dd418eefda00b1c8211959a4bf3e131d35a2e9e8384e88493b58b042225033b0e3eae45380797a16589afada3c2a37a436ea67b1834ad60a362176724e86e69ac01ddf452ecfe340703ff22d6af2b9fd81bd978db1e9da79985a6992f28299a4ebb0af4cff368fe5a5e8c6aaaf49411123e28903a5e84bddc8079ea21fc750e33475a78ed0a9c369b48cb963f6c9927a30d2493883fdcb1ff6e41b4ae4c11da207a5fafdffb19c84393aa3870", 0x1000) timer_create(0x1, &(0x7f0000005640)={0x0, 0xf, 0x0, @tid=r13}, &(0x7f0000005680)=0x0) timer_settime(r33, 0x1, &(0x7f00000056c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000005700)) r34 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005780), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r29, &(0x7f0000005840)={&(0x7f0000005740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005800)={&(0x7f00000057c0)={0x20, r34, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x3a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r35 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_SWAPEXT(r16, 0xc0c0586d, &(0x7f0000005880)={0x0, r1, r35, 0x8, 0xffffffffffffffff, '\x00', {0x1, 0x7ff, 0x2f80, 0x3, 0x8, 0x1, 0x8, 0x3, {0xfff, 0x1}, {0x10, 0xc4}, {0x800, 0x10}, 0x0, 0x7, 0x1ff, 0x200, 0x7537, 0x8, 0x8001, 0x1, 0x5fd, 0x0, '\x00', 0x0, 0x5, 0xfff5, 0xfff6}}) ioctl$BTRFS_IOC_DEFRAG(r21, 0x50009402, 0x0) io_setup(0x4, &(0x7f0000005940)=0x0) r37 = openat$cgroup_ro(r28, &(0x7f0000005c40)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r38 = eventfd(0xfffffffd) io_submit(r36, 0x9, &(0x7f0000006280)=[&(0x7f0000005a00)={0x0, 0x0, 0x0, 0x8, 0x50, r24, &(0x7f0000005980)="e76c264947fd96477e478b44562502020a6f10efafbad1fedbed52391ff7ac9148b021955479384c1d25da45ffe450907052a592576af46f46573f69618dc389e8708384d127e9925476a732f10cdd91251c4d80557ca300027ccc1a5649a9844a423c36b3d2d34e1883", 0x6a, 0x4, 0x0, 0x3, r9}, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x1, 0xffff, r27, &(0x7f0000005a40)="6181effb26a5df487fb346bc3009144263c82d0ac96e7e7e2dfe1f04da95f85b0fefbd58010659c1aa34278a4f383b7e576e62c47c58a78c2682d0a023bbb11722653301a09d30e63c5da837d86cc0a8faff2287bae325bfea611f1956ec5700fc20d890bf5de0343accbfd42c8b3ac2a332a52cfc2fa001152c52353f9b5e7be137022b29115c7573215e946996b5ee1a5581b7c31fea4469428e71abe0c22404bdced2537afef84ba97f1b176e7a193bef91cd2f3f73089918d84e62e6126238620f219f5814594d544695936699b16d24868cf1991564e36de693c336f2a41689de", 0xe3, 0x9, 0x0, 0x1}, &(0x7f0000005c00)={0x0, 0x0, 0x0, 0x7, 0x459c, r26, &(0x7f0000005b80)="903248cf1146cf6d9916fd79fbedd791b6dd60d8ad5a36df394073fbba157a025a6ed9accc4c012cc57502ccba1e57f2753a996ee41fbdf9ea447d68fc1346f65d44e5b4da62efae62bb6c72b1d1462defcd725d03af35e334a67f3ba10cfb9481874c", 0x63, 0x800000, 0x0, 0x3, r7}, &(0x7f0000005d40)={0x0, 0x0, 0x0, 0x3, 0x7, r37, &(0x7f0000005c80)="c47782b0f0d7cc0599a6d7fdf37886719fe19720daa73d38653b6d7e318f07cf2a4c2f33e7cc85905dff6d37ae86ee8f9c2f8a0b6e0936d7f5a7f931e69495fae66797efaeef05dcf0dbb10a753b7608d20c47ece0c1d995a3d00f26b406d78d311a86cba4f8c0ec9d824a058b753a5d86b1a8b54903c932b637a980a65f078acd4bd8414846b0489dfdb04c34914318034264071838f3545cec45bacb6333418c16a073dc27c7813ee8e66a22474493fa3c", 0xb2, 0x7fffffff, 0x0, 0x1, r38}, &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x1, 0x2, r17, &(0x7f0000005d80)="4711f56b176b86c0b5ef535cc77233a66f3b4bace4913aec35dd05be743d0ab54457eff4356f9ecf437e834cae3c2b9a70383ed2d32d947a9b9df217d7bb39231f6f676696908e047bf189e099ca9dbb9fe5dfb6305698cb57d22ba035ec312d3a94c3794dabe58de0a36582af5d290941cc81a8e049e8430f21aa5ba9d3f32311f7b2f2af7ec85f25e178af19313da92d1023", 0x93, 0x3, 0x0, 0x0, r23}, &(0x7f0000005f40)={0x0, 0x0, 0x0, 0x1, 0x8000, r8, &(0x7f0000005e80)="fe323e6652cb3cdbf14cc5dbee7edd801bc581013825f1adfba7232c84e98735978a5fcdd9e680c9c7c1b422aecc56628c3ff8641388629b0f65119e95b7a2d013e55514852627bedc4adfba0351e59f658c325572d4137ecdb613333810a2d52355d2f7b81e9562811a24aa771c78ed3f9879fd6e2fd67b9a63c405d022e9755cba062986af9e719113dd7bb60e53e0e4e589e534bd700920afa0df8f54973f", 0xa0, 0x100000001, 0x0, 0x3, r25}, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x7, r20, &(0x7f0000005f80)="96e6b6cd072c7e5abdc28e31764d5479b37422139c86b4c65f40532f37667355684eea7463dcc24264a3671e4ccb51665bb4c735a1034d8c07d1146823664ba692769d6cb847cb07c49a2b0a8159cbe2cded50674ec2084d7f458753950c8c64f61206ab2a3ca9b1481aa6b412a775a6adf0962570d29bcf518a5a006960802de078ad20a47518c0951b5712c7f22ea928d9bf9adb323f7c940fc660c66718537f72d8ac633906a6f4c539", 0xab, 0x5, 0x0, 0x1, r6}, &(0x7f0000006180)={0x0, 0x0, 0x0, 0x5, 0x4, r31, &(0x7f0000006080)="1e074ad6f1b6bb65ba5d9f78bf33923f44d6b7f716d5a5d4539f219b67e0ba76ad31d36af7d50890876f75309bf0b4fbc0b24302881452aa7633a156b3e6e3aeb1568ee603a1ee8a65e4a25ca85f00027244ce34d39de922b391572b41e585a38b4de77740f726fb3a4fd8d92d54f5fd0bcf30394a9c1665d7d020cb7ddc5707a7657449d4ef9e37ce0a942f23e33bb40bb597872ffbc6eb4a8e8607bc612c11a35d9464be8c2269954eeec863d625660b2c7ca6c5444ffe0a609372a2a6ad3eb14216ff35f47718305d714afaa90b25fc5dd68715e915e4a9e2fe17a4c84d8e0990d49e4369b4877e2547885c11c388bde411", 0xf3, 0xffffffff00000001, 0x0, 0x1, r6}, &(0x7f0000006240)={0x0, 0x0, 0x0, 0x1, 0x69, r7, &(0x7f00000061c0)="141ec3e747738b17e468545ab98024726bc9d3f3a268a3a642b50d861bc273af0c536a3fe2f41d4174994de6fab23538ea26dc1f8df9b45da9ddc0f913e46521fc5ba7ca69f9c25d4d4b7a61279285193b9267bbaa5a48ac4b8e9d28f8fb3714ca3597ea97296852abf1", 0x6a, 0xd, 0x0, 0x7, r7}]) getsockopt$inet_pktinfo(r35, 0x0, 0x8, &(0x7f0000006300)={0x0, @local, @multicast1}, &(0x7f0000006340)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r28, 0x89f0, &(0x7f0000006440)={'erspan0\x00', &(0x7f0000006380)={'syztnl1\x00', r39, 0x7, 0x1, 0x680c242a, 0xa, {{0x1c, 0x4, 0x3, 0x32, 0x70, 0x64, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x40}, {[@timestamp={0x44, 0x14, 0x19, 0x0, 0xb, [0x2, 0x3a, 0x3, 0x6]}, @generic={0x94, 0x5, "9e5ad8"}, @lsrr={0x83, 0xb, 0x76, [@dev={0xac, 0x14, 0x14, 0x43}, @remote]}, @timestamp_addr={0x44, 0x34, 0x9b, 0x1, 0x7, [{@broadcast, 0x6}, {@multicast2}, {@multicast2, 0x7fff}, {@multicast1, 0x3ff}, {@local, 0x10001}, {@empty, 0x7}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r40 = syz_open_pts(r22, 0x0) ioctl$VT_GETMODE(r40, 0x5601, &(0x7f0000006480)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006500)="d74e272288f638a54f9aafe8a247b80340020be0685b8d989a7eb84a8a805f1ef33d1403746822a5b066ddae8d7f5eeb418fbeaabfef3a04c11c82976697b1be25fa6767ce4f191dc158526c30d2e684d975d7f638e2f89a9149cdf8c9bf866c285bed37a5f013762043e82b09dc8be472b049b5a1e5175194ea40ea9782778ee4c9825b2731ad597cda15e62e9e1a3f123fbc25f82477387f3b4d02c9bd4f083a7fbed90f99fa8cd0f8a61ab94138703016b70e122a896fb2221c3596764ef910a072375973a34673ed73ff14828bb63cd498fe8fa9c6296784344978c6eec442bae221b221336de1828b7429358a1e8b8665ecb69bb4597948585e426adcea016324033a84d0c15050be6b456026408b6f38be4cf049e4976ccc66c04ce2ad6226d1f982b98bc7cd9e689cc92e111329701e441468e7410234f6a95ff0ab960bd62fccbbabd2b0ac8d693c0514098a9c7393bf68a5951f9e86185f70275d51088ae16c9886eeef4a1f71214644542f1b6c4333f0b5528b8a6bfa4323e9f19efc572ce9f09a46a0608aaa2a5da3655bf616a35b5c14959462ed61dba6b71bb88ef38f8839e8d2c1eed33bbefa2c54d6572dbbf9650793f6ec9ff1bf1de0cfd77a2aeb1c1502eb573a426d52e3143b0595998467d66918d2c7d8102a8bca14420d66308e9de981653d79904ed66a40fc6760add754802930385aab65428547ddef5126055e41e5811cf55ea93bd0b0a8699553f3013f42b0af35a2cd47ef489099a70ac44400bf8031e5335d1c9b68c070f7de3ed047bd4c582de33805ec5defafac2cf79b2096b53739e5db6c0e5fa7ff64b66cf0316d844620d7924e7a69e1d9c3951bb6a14be4b94e6ebaa6282a9e53146b49c7261e896d026afba1a662486d3070b79c135a03f1681988c381d5322dba01ebd82b9e07bde22110c20e628b565d7d72ab763256edb45a91ad8c3cf52e66eac86b3182640abbcb057d80987c32456461e9787eb439d5cbfa9ca8c44188c3df8c022d5380427a2c04d55aa220cf17f4ab9983c295addcbe3fc8a60a2782ca8c29b3142101a08a7c590b25727b7c253abd714e0cf929de7464a77af678f4a760382fe8b098a4392af52089c9c049dbccad67a586b69e2335b650d3a5856531a6996e0a292705662eab240a60aa7b5318905f04b59fcfe3a20d6d900ae9761499e3924f7a0ffe9098284548f8600b2368f1f0c0f3bed5058c1df275baf5501182e10c0085e35185b42f0788d58dc4250dee0253edeb27d69e3429b2ba8bb88b74851f84545d38e71179786e18e0095d87bd96abdb4b95261f2625cc99fefee91de6184095d0dc0513cab90bde45800fd2834e5921cc837cdc1249d2b0b3e9767955163c03091f3319eee48d47c099b4add02749ceb30aeca489a83ab59936737251c02e1824820eb865f6e35e981a1253c61186d60fd4dc49768660fccaa9381fa0c50544f9991a9d9245775170a3dfc4753b1a40ebda118b0d095c8f5f59cd43a31680784d8faf4dc0816416b3eb96c04483f07067a095b505166407c70b292a6c118834edf97a49e493b56efa3b9c1af82578d196055c3ad3f9f5f061f65f1769303371a3f478d2d30d3b06539c5ad6c6e1cb80b7c884e3d0ca6f494584a364dd35c09f45190b0ea42087a26938e5830fa5b63a8c961dc27e87d8161845bfc977ef0430226b6db96ea18ead72c29305d48864244f1e4bc0baf2e4a93259eb599aaa6de38fcfed787eb9ab1a1de45a2d16687140f47138bcdc70b9bf747b9ba085fbc5518b962bfd67980ac60cf7b4e61dc7f38505d9dda065f232d98cff05dabef794eae1cba0e2c7f71edc2f100d9a091843b97dcf65153a3b09b8d934826bc6a38e9a826607166067ac7c5e774e79dc27d915252a4dee16668b8b997d78c07358a4f111f21defc02b88df84ed45e69cbb1e825dcb6edef05e892d62a19bd549e1d61075d02f515a5dc3b63a3cc20c7f0eb6ea10c6292e22a7b2c06c8543f445d10bf2851ef72f07db2b19c5989d34c3e1ea5f6e29bb197c342b70187ed2c8155f20c5381c2f4608c67f38213badb0ba37e2c30527f78babe35c84fe84457511d40d4775d5d37bc743c8726e5766d95ced97590b656e22a1307337d3a959df4d9bbdce78dc83b2354b899ac8d103583731d711e7b2b55122333109c5f5149afe5e5cc4610aeda75a70d077599cd189291719616d5da7b32b9aa7d2c6a58963b0451c4dd8b1e953f9c782ca528de153930f7142a56f0b90be9b1d45b3d2e99f3a0b3ffd9834e3b3e5fac524a6abd03ed2f92fb4c6ed3c937521285388bd0ce5aca1ff181c7869002367aff9d0416511106421c1eb875b3d5bb7ed221007806523ff870479bf14eab087be66ac02458778364173931bd3fd456be3f224eec30a454c15d858e872a0ac31a225abb498caee8e30b7cb9456033ffeb6e12f815316e1eea986b77df9cb98e6e9af21595b0b57dd55c510f9b8a346368c0ef611bb440f1c8ddd731674124229d2dc70b82c688503d54a65959f01390d62a1df889b7a473b61f97c546b23f3b1e0a4cc58fbe9226382abe3adcba79a3e1a02d144f66c3396fba9305bd5266cd7b5c5b620d3a0cc218511bf116dc5c4b387f646ed2d674f5960fdd8d06c7228c962293d67b807662d9044d775d548a518d35223ac858e3666e3107f67cf038b93fe5763965716fef05a7de7818da33c2d20882e53ad2bb49fffa427f29ebca507334c995e815c8cfc14ac2fc6ae2a513c1257e424c3b8e01d285265b10a9428ce4b67e06ad55fc564cf73a3c6c763fe355e04c6478ae2abc49fa687fae6b16102b5f11df18dd22597d8b94de1ac1c724ba75535644ea1dd62d0dae30829bf7f715052a794467f25f97cfb072f2ff0466e99eb5a428142c8a5c90d6695dba8c8b94684dc8d3955b22aff662073e017064f35df2811ce0dbd30abf880b62992eb62b0895a381e5359cbf0060e9f7d7756df0e886e0fff203b89f0fdee43c3a3114d4e50c849456498266a47af8d228ea55ad3271f5202b766c2f1f24fc41d2fb975902ceff535afa64fc7516e271afb9d3365c4fcedfa085b1b3d332fd0d5866bbef872160fa6403b25e2a51333835c57c24de71e83fdbb68ccfaace0127994251760b902b46395b20fd1ee40a14480b55121d425ed508101c57cebeb0dc7ebcbad2f2e462c589a47cc858a2ee33741684e24c5f89d57b1d1ac9c517861cc5da330b153587bebc6d71ed564f6b6056f2b626474406a9e8ccc3bd2d4e479cfdb21e99345a0f20c6fd0f95d94a2bd981ba67f9a750530a41a435bb1b6e4193e78fdefff5638841d25eb12f5bbf238596fc87770a79b157c2d70e7a8641c83b1c0a029bc7f409a78852411d455938d45fdb073ee2dd864c48da0f91fe69c1bb1153f86ff9f801b3b241ae86ed49f1a6cb76ed4776271e6626945a1f9f8ad444d87d253f81ce5d08ec62ae12dfd449d969939f2b53f604476f5999c22bb757fa5ac26baec8b4ed68b63e8f811d121b65b1fadf86a8465884399fb961f515510a5d013b3a8856b7c034f715c43646c78b00319ec365d82f3580c3a4670ad7dcc9fdc499c9bbe2379fae4ade659cb18278c1d99b68895781b34cbe3ff713b15004a2e3e77ca44df16ca64f09baf759bacddcd117fed5a8c2ad4b8336fa0e48e886ffa1d5b70b7679302c9b11c15fe989136b1c4a44534ba8625fa87bbedd9c41bf8d9e118c9173ce195a227ece2af934c73f82e3a1416c1c1dd402aed1e3aea6f360db6f7f7cbba12ba77b89f603f597d32b764756527b14e28f855c5e0ee8ac9ad571a1f5dd19a8f39bc3436a808982abca466e1db662be5f0c9501adf1b400840a7e688437e89a6a80e1c03e4d248980e4b07fae10cdd518df125daea61963fe615943d25597a9b37eae9c3e78e79700b43037978a57365845e6aaf8f733441ff1bc2115f4d6c283493321ceb84e00029f79f9783b941203462b0a8923ade92bbb134fa6f8b4adbb0e6dab4edb2dc5a81007f5f4cef312f98cb2a6c869b826397a97b40ae3386e5c51c84b9facec7c6cad74942216855be44d4764e6d8d6064eed9e275f89eafa64dfc195d20e390ca8b243b458d0a82da6e61ddf9c1c729632895e1c280b409cd31ae3a8882c1f8838adc8c506cfdfb5e2cfed36956455998f530a764cb9eaccf73130b4b81d327e43975cf8bc7f8e716bca9a3dd9ac58b49eb5ccd23601c01a46a14da246f72a98605f11bd4b51ce24d3349083bea81edfaae4dd1069a61271876a7da94af8a7c03f654e90c9f963fdc047d8ce2bc94d2c7f7de96fb965e75012cae4097acd410cbdb390e7851bf91e31ece3054d7610386ac50b18b23d28fcd831d5bc279b4f039b168aa9e7ed5148d75ac7cfa0643c2812a95b328e5b86c357e09276dd0f3143367b095b29e3027def1ff62f566779a66a21474e40044e250a3f2bad01a85b4ec81878f6a0b70b9e37230fb8b9835e4daf8c99b068a6d214c3f5efc8d6f5d7307303a15cf1c0ddede85641eda6c114a677da838fc08d390fe28de1ae867eed68f4abad5ed988625d1c9facff82445ee20be1a8e99a303da7cb8e496868d2e11ff421a97e23921dedfe59502f95f5ae2df93bbe813a0702e9dc5ebe8687b44fe20b113c3372e4baf4f11cb6dbb823a53295a107447dd3a25799938b434ea54bf8f6b5ebf7162c24366cb7cc91fb2eddd5173c1c151f6da6539f23ad2142720fa11d2b34a929700231cbea9f8452310f3d74e45a6cff8f9704b785f70638980b3cec52e0e2ccd581df194e9b9b7e10535134f2ac2f5ff0a595c72231c4e794777c45e42acf89d426417b3549a4c0af817709eb681fff5564c6aca4de5e93d749065da7829e8f6bc9db91869cb8228f1c00bb1ac7bc303a3f2a4fa0a1e18a834d7143fc6ea59655e92d5d29f2c8776c752c4692c30cd8b482d72cee358efdbb40f7a44fa601ba425de48de96dd574db6913a9423dc189643ef0f8d1f1d84ba57dd6dbc200b55109bcf5a9b98543eaed5ddf45059778ed6da1a22631c16ee8eaa1f8d9f2a9c3c40c550e2233c154ff9769eaaec3981208d6366ae7ba6a139925c73e2438e96776dd9289983fa76bc95151aa85fa4b9e4f3bf189ac4993da7d09f13ea2b3851456538d674c904412cf85c47aaac5b29a58a435a4aa0d480668cf2d1104c5da213b590ee772aa278f3b07dce24140fcdcfcb2c0fe8350e161401fb31c8d8495500d409e4c1174647eb2dfff6bbfa8ea00ea063f11bc340d79c753c2528bc475e19f42a82e4a35d008590439b7a29b3aaea9e48ae36c78c70460d2bb4d44cf9963b3e452c9fa2ca6ef025bf8f0843e000ea89c5721ea7da234cb4c1bec274a9f3f82575217574abfa8a9504be5b15f51c1428a09af839b580bc2d846427ae26461015fbace41d32143b347dcadda72dc43f3f1a4209c7b9c2a37d0b75e0c4831bba416c424c437d9f0093753b079e2ba136e89c76ed856b63f1009335ccbb22dbe830a30e29653154c0e224c86efba07f2f808bb16fad7e382c80b7ebb3086ccd8b67cda925c769f43353694344d10eaf99ed1bcae0b2fcb6a014aa8ea0d85ea165cfef49ce922d543924f5d2800e7e184df944555c2087aad16be0cebbe909ba6e67be5485057cf8b8a2ab4f74527e3c5e244d86f408bfac7acc0808f9bcd6ab482c035f618a61d97b3e249b538acef98c928aaff6ec87b3ab65b6246a816cc8f7a6267f8a87735d4c3e75cd6f6eef6df69c18191c8092c4a3be6d19fe21ff4f8272bb766c98653df6847f49ce53def3d158426e7ac77522eff044f70fd7074968641e6320a0a41010590e450904a19bb2fd317bd06c61025a5870e2f827aa80b1d2b8f61285daaa11c6de88862632b0b2c24ac572457c20e26a01b1679897dcbff5d16ed5abc3cd32a31f62d7ec8a8c5befce7c24cb68a28690c74c87d368861d7316b44ddb28b84cb52f53ee4592439524e8890e67d0d525d938dffeb85fc47e86d0b91f6162b4a22db38b7a1713ae44b2c208f45a86e384aa73bb9cd2f592f1ee12c5b19681b35df89b2c1c088aa576753cec9470a075da7670ed739ce0cecd96764bc73d3473e1ab5c711ef9227b685a974242cb5f10d388639d89b6cd0861211efcbc79811754e75ae743b1cceaedca21f13df908ac4a21385395c8ea1a321684e11144356648af804d3befd8f1d22ed73c0afac4f1c4d218d1bab3f79ac1271fa6ef7b66eb985f17ccf7ed44bea9526cb12fc70696d7962b0536ac6c43c6ae6e2fe3a55ab7555f35de59955dd61cd937da358e6e664a3d18ff275a0744cdc7321ac0a26b6936fbcbcfebb2749f6eb9ea0339b93f19b9e0eafb0e10217a73383312ee3fbb91b849a1a6da9f378f440a383f669d998f345a186694e6e49f16125be7cf5e4eba37eeeeb88cab818f800cb9f377ad4d21c708863c057baaef7565be0a7fc2c4da9ad049f1fbf2b52ec812ebd36c4ee705dfc179175a28b391e327ae1d47bfc317b27ed8d8f007f32b2daea812047c26fbe45cef53a4195c1517f12a827b9fd284eb6ebd8cde63c176acbcc67bce99f8e1cbfed3eacea7b8cf98f8ad62c47d571030399f883fa920ee36d9413b26814009aa057815edf73cc63165c8d9499505fd1a57dff95814a03e9b081ce9f759c849a89a5744b660dfc53b3b3d577bda9e7fc059832204c8f6b942ff42028621a4c5c2a6dec4f69533267126b0fc89136350e09768702141c1d33dbefea6586a609efcb9fb093f717cf78415780deb296acc3254bdef521e733f8ee48e80b33801d44afe3b758bf5319f0296c107cea0669ad6f65b748198be3f145eeecd714f98e9b3d3af48aa5bb633b499cb0a34ce028a32924df42f6dd6f843a52fa377cda248c2263974aae599e51a3f7459a9852f83f37f890c5c2ebfd38a53ddbff31c15adfa5c5c3028be328e0c23088db8020cd98c2770f2e3f1232029303aef2d238d2a9893d7283f0db2810f55d5feb5a79895f104edbcc6bae22a91525706d252414f1e53aa74c2432ed25520ea2e2d2cc010f928e792348e52b1f4127747513fcc6351d82a3dd5fc63b7e162a5317eed0d3c24d972d6b13a54dd79ded8dfc48faa3be60b9d9e1c8e848781abede24bb222b6fe3198549f9c4898d1bbf0ae9b5a8fb4094a53e44a5a634107c0fe4e231ea237d016cd262800949f58ed99fbc00db9207ac0f26a85a21232784870dd0c2de15033557989e7e1ebfb3eecd831a7ce5d37e44bf8e2db130dec0a9f8dff02c587d936b0dfc6202c7419f1d433eb06f7a6f78b7abc8f88071e3439495d5c81b8f6af7d444d5723deecfaa1f8f675dca008ec9b063fca1b97820747d84d82aff13a40a8706bc7303238e030b868da7adba37cf1e05891d523d0f91bbbd5d3a5a4d62cbedbdf88d883badb8e1c9cb8c7260e8b0fcd13b63aec5deaaaa1743bc5a94ffc9df0616ae7f6ea9991229dccb3bef7b7419def60cdee01854341b72175c98cc592c605f6b3bccd20909e95e43b13fccb5055764eb57e6283d30e136c893ad94f0e8c6d57ad4114a64049c28570c7e464deaedac4bb5c2606c608ea220e245e9ab8e23113ac467650f076eec8486dcbdd0a2e5fb9fb63d96f11b7fac45b119a8f8ba13a4b014e539bd199204038039ad1d871266abb51cb77b0b3db018b6d917dede6ef3d27464732932716ceac1aa2aa822c8cf7b3d912a0946c022a43de2a3b7ee9fa6e38f18fc5ac777bc54f5139fd67e2e515adca175320a411115faa5e97fc7bedb5bf95f75a4df97ac8efba52d1891a0c08470b12c6fe97aa54bbd4009ab37fbff7a85e0c861be591a25e53d4e88f7419a0779a77faee662053744c53e8bc2f59b61bb01892d79a488974b618ab183d3bc739e28f22417accc211fb24f5f438e7aadd073056964b5564ab559d2a2838c9435410f9f508e57b41737d04093e51848bfe10399fe49ee8aeb2b95f45a555814ea231cdf8fbdd59397b6b24c90fa283fe5544fcaa2b0265961febc6a3dadf8684a6648f5b5cd0e7435fdb3a6be8a6974e6a4ff1236449ae9b0f458d0c3edf5074e03a78bf7a030523fb8d6bd5fffcb673d99ed5508d6c9eaaf8a1160f8677cbd58245de9a653a777e8ad72b6fad46a8054221e409275390180906a1e912b80a75bdddca30a4aa55fc80e66acf16d6722fe63306b3bff40c86f5c4c09ba0f34adb8f2a65545e6867409399937d58fb3c49d2b07aa8b256419b2e18c845c915c02fd9ebaa344dac6ded2e4be3d787f8c6134bf3bd1e3fdd3394e91f8733c207ef22963af2daf70a871b0efb513b1b89a2b1393eaa8a18a6b22fff6a3546a72db1527a00957ce19cc05d783e7ef20bab4b340b6f515e9691c1944d7736751e86f1387db8c7d0b83e6eefd0f83bd430483733c6ba0bcfa41f55570a44401919c26a53aa9155b82c4e6cbdbf6edf45ee70f3fcbb568a683669cc4d91c76b75045fb5b2d7b20de6078831fabc9231a2b1c1c3cd23d6e1af33857baf8125a803e1d3b064570d9994bc02551c859b848fd002f632bc04105d58ba7902162290edfca2ce2509f8d49a20c21f50651fff3f849b6283cc1ef012ccda2eb692cc96fb5f3e11e913ea039a4dc468a1458cb0c5c0b6cb80c4d146f72dc8755da8801d6df194000d1e5dbabcb5e932ef68e9ba3bb382ff9780a3c10dbf89ade56ee2e3e1af34291a4bb13998f139f9267b5352f17500e3cd0392926d172926351490e9972f467384179a9292d86354d290726c2aad0630cf3fad0e5d1b0ea319446e23630dfa8b8b44bfb013b52060c8d50e4d7e6a9e4e6963e4303a5614fd1e761fb3859a6fbe962d894e86468fa247b8b5907b18875e0bf6d35c39e86d1e50e583360c8138456932b3313d7f1bc8da8abc9091a979221bb34931fedd6a9d646212a7c26e2077d76c34c38b615dde759082f890e9b316a7c3df496107bf6c18f17b2f85b65070e4c8abb9554c4358b98dbd3c44410844530af7f32beddddc72a8e676c27ecb2b885e8f02eaa183c4f5431350334363c4e740241179b1c26f27b328855b2efd5d8ec1e5f8207626ca417f025f3cddec7dfccac559ecef32d4283e44981b073530bdb9adc7e01a84175481f868718ff55abe78d5b8d1700cf73df218a52e329c28c70a32880668a229b11496a93eedb0abc4caee49c9ba685060320a54f4ac1cf1c869f96112d61772755cf511bf30e6a4ca057fe7e5170724f0bfef2aaf010ac0dbc4bea41577575cee4920586654b86c0c243d83d65dd573d21ecad5aa5313ccccac09015d4d4a275dd342589632621d322df79dfaf42dab6f3cfcf7fcf09f66ed5ad1c551e938b929aa231de1477a1e94bbaa5beddac7f3dade36c11d18f26c9c60a48baf2d42fa620d2c7546c574fde78c6fec5aa51b85db18d4004dd61189cddf14be323cd012d447b3670af690802aadb2f8c4fba4dd5c0d16fdbf7aefd590e6cd60a6b058d319b4ee0959d1d3b6f58fffa4f4a98fe2c0d59e6559058f02791c32916ebba2fb6027ac5359b13134a96bcb40488f16889793f878597217caf67603873a02b48ecbb385fcc9f590e9f45bfc66783cfc4c8706468c4105a36bbc649812c0496bdab5622b1ad8b632d90089d21cbf231a70a15d6c846560df44b0cbd55139f7bd9e49e16c493f48a17c30b1dd4357724a689e7c86c7f306f1f84bbb7c7de48a97756425cd7710844eab5cc1b60aaebe07899face12f9f198de35047ece8db09a3a27e966fc76a963a0d20e592a2691acba75d75b5efe4673c4b6a1c50fa4db88390155d1065ea00ecb94dad2976c5f2a9e9045076381e5b667549d566074408535e6b1a4a5a3ec7bf42e088daf84d848dca7b002bb18825fd5b158491ea46776d8525d326d2a9bdc977439e2eac42312ac9af88ac0782570ebff68e63ecb66f5a57089af3345545ef1394bccfef766cd6dccd104ca104ff264ea3a122dd80fd5351cd7f6eb81b366062e3911d6a82cc40a9cdcd085a4c75dff9e33212d984624ccb853706aa71160ca40e9f149e0ba1471dd1533660f55b396ae62912ef1a6fe4c0c5938d45f8d9aabbfecba36195ecae883453507d791a442a6f1b65cc81051bf6d3bf044783588699078dcbc345b07d76c0496c191b7e6307b929e6efefb441287a9fce4b2247856f7961ba4bee7b64f3cd11550c558a67da131e737a5ffeacd294286e58809979fb30f43054e20cfb2d3ca2db687230345ba384148a26907ef0d8a7757176fc22e4e88471ec8f61fd499dfad373a8bb479757575c60e81344ff1062f0b6fe12d8386da88628e75b4db7651e97b2ae451a80fa621c76a0cf40ef91bc1aa672d7b61cdda24617860fdf14266ce5c8bdab39d97e16228c2525c8a0d07921620b7ea98865af725b699bebe45f7db0601d89e0021a12264ea0bf2f13d1564f005686452ec5e3908a2b16bc6cc60c1fcf4b9c45662097de63aa00c663ea606d2833abf444b3423725ef9c76bc533f446aa8639c3664dddf04ba034ec6572d92ac62bcfb93b8976d3e613a1ce0a50167c151133fd02bf5de9ed586f1c8189a896591a435c49cca28213967884b7f75570d720d7cc9431ddc0c5d86ae7ac4ab6a46fead3e544035277ea4f138db658e975ad9b3488d01397ebfa413f213a7ad60be749574944480ce225391fc494f879b0f116488220ed3b0cb313bb9b8d1af79d67a6e87fa09d45b6afa2e99bbf0bc6da2cb7032cba06e8d8c8ff49505e74c3e8e8687227d77adc265bd50ee77297c81a3b91a3e9f17c89b29cac3f2f37e53b106a50d9c75bfea019dbb779bfd231ef753007cd4e8d0e8c010877f688aec35c43b05abfe28f73e016130eba99431f3bbba9d13a5d777c61bbc883b68fcf45aeab680b408aad5787beaa502211f198e8e88089c27e1bdca8688ad46fbe27333475f9bfccf3e9cce57748a830e261b68180280d5cea5df0196aa27545e5b0b84bddb65f8a684570ee021bcdafc6fc330c585c462b4f87e27251632e61ab37b33d9b9a15e22c1eebc846d3b0807bf25fdbab648db6f87b2b7fa2d21ff649071bedf1ba88b60b8163f2893d72d68f65aad17ec06aec92b7f1d5e81fb791e7263662ee49eee551b4f125a1dee8c3d32ffbbc0e749cd1e79d5d40dab78014fffd91a337fb69153ab479ef18385177a57111506604bc08e97d8dc60a26cfb672cb93dc46a2bb698b28b16ff472066938ef6d1fe81e63f847d3e1aca2686f88c790d5355c738469c0a87e9218457731fc879a4ba073f61b723bcfbc71caad515f276698ee40e4dcaecc44d54b19e69b3c2ee920292fce063efd57a32027451e7f98689914cae741a82e8162785479e10b29b4fee653f012e0a6136139b240ba1549c55dd2742bff56c8feb6587514fc6bfb5e2f52bcce12f4db7cd5a59f42cd1205aae624b5a7e9f0b51dbd93395aa4ae305c9cb51282554a3d6f24b851986a72da2c4f3169944020a61a69c037334558400fac00797e77b5654ced1ff30e09fe5e06079347cbe6162faa3f7613c754a9f86", 0x2000, &(0x7f0000009240)={&(0x7f0000008500)={0x50, 0xffffffffffffffda, 0x6, {0x7, 0x2d, 0x10001, 0x804200, 0xb, 0x0, 0x4, 0x5, 0x0, 0x0, 0x8, 0x3}}, &(0x7f0000008580)={0x18, 0x0, 0x2, {0x80000001}}, &(0x7f00000085c0)={0x18, 0x0, 0x10001, {0x6}}, &(0x7f0000008600)={0x18, 0x0, 0xfffffffffffffffe, {0x8}}, &(0x7f0000008640)={0x18, 0x0, 0xff, {0x4}}, &(0x7f0000008680)={0x28, 0xffffffffffffffda, 0x3, {{0x1, 0x2, 0x2, 0xffffffffffffffff}}}, &(0x7f00000086c0)={0x60, 0xfffffffffffffff5, 0x10001, {{0xc8, 0x9, 0x1, 0xd, 0x1, 0x400, 0x65f, 0xbab0}}}, &(0x7f0000008740)={0x18, 0x0, 0x7, {0xfffffe01}}, &(0x7f0000008780)={0x20, 0xffffffffffffffda, 0x7, {'!(%+&{@^!(+&&-\'\x00'}}, &(0x7f00000087c0)={0x20, 0x0, 0x8, {0x0, 0x1a}}, &(0x7f0000008940)={0x78, 0xfffffffffffffffe, 0x7, {0x4, 0x40, 0x0, {0x3, 0x100000000, 0xfffffffffffffff7, 0x8000000000000001, 0x8, 0x9, 0xbd3, 0x81, 0x8, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x56d}}}, &(0x7f0000008b00)={0x90, 0xfffffffffffffff5, 0xd7b, {0x4, 0x2, 0x5a6c, 0x8001, 0x7f, 0x5, {0x6, 0x9, 0x1, 0x100, 0x6, 0x10001, 0x5, 0x2, 0x5, 0xa000, 0xd, 0x0, r4, 0x4, 0x1ff}}}, &(0x7f0000008bc0)={0x30, 0x0, 0x4, [{0x5, 0x8, 0x5, 0x3, '@[\'%#'}]}, &(0x7f0000008d40)={0x1f0, 0x0, 0x2, [{{0x6, 0x1, 0x2, 0x37, 0x6, 0x1, {0x1, 0x9e, 0xa, 0x8, 0x3, 0xffffffffffffffff, 0xec000000, 0x9, 0x8, 0x1000, 0xc6c, r14, r15, 0x2, 0xa4}}, {0x3, 0x0, 0x1, 0xfffffff9, '\x00'}}, {{0x6, 0x9, 0x3e, 0x2, 0x5, 0xffff, {0x0, 0x8, 0x8, 0x5, 0x8000000000000001, 0x6074, 0x6, 0x2, 0x7, 0x6000, 0xffff0000, 0x0, r12, 0x5, 0xc}}, {0x6, 0x9, 0x3, 0x80000001, '%}('}}, {{0x5, 0x2, 0x3, 0x0, 0xffff, 0x7, {0x5, 0x2, 0xe, 0x6, 0x9, 0xfffc000000000000, 0x8000, 0x28, 0x8001, 0x2000, 0x2, r5, r12, 0x5, 0x9}}, {0x5, 0x2, 0x1, 0x0, '@'}}]}, &(0x7f0000009000)={0xa0, 0x0, 0x1, {{0x1, 0x2, 0x8, 0x6, 0x6, 0xf6, {0x5, 0x7fff, 0x1, 0x6, 0xffffffffffffffff, 0x9, 0x5, 0x9, 0x3, 0xe000, 0x3, r10, 0x0, 0x5, 0x2}}, {0x0, 0x10}}}, &(0x7f00000090c0)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x4, 0x2, 0x10001}}, &(0x7f0000009100)={0x130, 0x0, 0xa8, {0x7fffffffffffffff, 0x3, 0x0, '\x00', {0x20, 0xffff, 0x10001, 0x2, 0xffffffffffffffff, r11, 0x4000, '\x00', 0xffffffffffffffff, 0x7ff, 0x4, 0x6, {0x0, 0x7}, {0x3, 0x1ffc0000}, {0x1, 0x401}, {0x8f0, 0x4}, 0x1, 0xa, 0x2, 0x4}}}}) 1.436684134s ago: executing program 3 (id=40): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f00000001c0), 0x71, 0x2000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000500)={@val={0xa, 0x10}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x8, 0x2c, 0x0, @private2, @mcast2, {[@hopopts={0x2c}]}}}}}}, 0x42) socket$inet(0x2, 0x6000000000000001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r5, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003300)="43e52d905cadf0ac87cea0cc6afa", 0xe}], 0x1}}], 0x1, 0x20000081) r6 = getpgid(0x0) r7 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1, 0x100) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r6, r6, r6], 0x3, {r7}}, 0x58) 1.409248327s ago: executing program 3 (id=41): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0206000815000000fe0e000000000000070019000000000002004e21ac1414bb00000000000000000a004e22fffffff9ff02000000000000000000000000000100010000000000000500050032ef00000a"], 0xa8}, 0x1, 0x7}, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)=""/241, 0xf1}], 0x1, &(0x7f0000001d00)=""/4067, 0xfe3}, 0x10000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(r2) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 1.300705901s ago: executing program 3 (id=42): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000400)="1a3c27c2f8c8bb9f9182c0f0bc4f85e1956c905b69f5150c853809b35d1e5af508dc63571002912ada7b231fbe7cc62b48b8d23096c561187e2ed1202d93ac6dd27a3705435c91dde145f9c1ad48929acaa18f48e2884d67dea379981718822ed9343717aefd1b6ebae6ae1c2ae40c853d7e13eb3d1cc3c51d405f16b7eec44a2b42ce7f7818905ac125f579bdaf86f72922c99ae7cdf263045df73ea5eb8e7b8785dd0fead84344d39b43fd4e85c49faa234ce138ffdeab8a217cdd6dd0bf7385ebcdf53d0cb828d7c5b2095e64ae86439e495a70d89dd3a68b2b29d897b6e72f", 0xe1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000280)='rxrpc_s\x00', &(0x7f0000000500)=@chain={'key_or_keyring:', r2}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000001a00)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="80", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="ba", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="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", 0x3bc}], 0x1}}], 0x5, 0x2400c0a2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x118, 0x4) ptrace$pokeuser(0x6, r3, 0x105, 0x67000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/31, 0x1f}, {0x0}, {&(0x7f0000000240)=""/95, 0x5f}], 0x3, 0x2, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000081, 0x0, 0x6}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect$uac1(0x3, 0x79, &(0x7f00000008c0)=ANY=[@ANYBLOB="12011001000000100700000000000000030109ee6600030104100d0904000000010100000a240107600a00020102090401000001020000090401010101020000072401f70000000905010900048140020725010c000000090402000001020000090402010101020000090582f62cd3a1090707250100010600"], 0x0) r8 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$RTC_UIE_ON(r8, 0x7003) inotify_init1(0x0) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) shutdown(r9, 0x2) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x54}}, 0x4000004) close_range(0xffffffffffffffff, r9, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e00210000000000000000000a00d10005000000000000000a00040077a9e20000000000"], 0x28}}, 0x0) 275.196236ms ago: executing program 1 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000440)={'binder0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d05, 0xec000000, 0xcd}]}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x18, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x1, 0x0, 0x101}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30054009}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r8, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24040000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x7f, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8940}, 0x40880) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 204.916639ms ago: executing program 1 (id=44): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x10, {[@local=@item_012={0x1, 0x2, 0x1, "c3"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_012={0x2, 0x1, 0x5, "1264"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040061}, 0x10) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000095174103d1b960104000000030109021b0001000000000904"], 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) (async) syz_usb_connect$uac3(0x1, 0xfb, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1016, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0xf, 0x40, 0x7, {0x8, 0xb, 0x2, 0x0, 0x1, 0x20, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x3e, 0xfffffffd}, [@power_domain={0xc, 0x24, 0x10, 0x8, 0x5, 0x1, 0x8, "d5727a"}, @multiply_unit={0xb, 0x24, 0xd, 0xb, 0x31, 0x3, 0x7ff}, @processing_unit={0x1d, 0x24, 0x9, 0x3, 0x5, [0x1, 0x3, 0x0, 0x3, 0x1, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x1, 0x3, 0x6, 0x1001, 0x3, 0x6, 0x3, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x40, 0x9, {0xa, 0x25, 0x25, 0x0, 0xfa, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffb, 0x1, 0x5, "1f9414baab"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x7}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x3, 0xf, 0x9, "82fafdd3"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x32, 0x4, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3a, 0x81, 0x5, {0xa, 0x25, 0x25, 0x200, 0x7, 0xa}}}}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x29, 0x0, 0x10, 0xff, 0xc}, 0x123, &(0x7f0000000140)={0x5, 0xf, 0x123, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0xf, 0x34, 0xffff, 0x5}, @generic={0x70, 0x10, 0x2, "3121bafdbe805db11445912cfed01b34f8b180669c0bbe2212738de7334da6d4c0d6d1253539d28236295dc7b1ec92d55ef69769b66bac98887ef1c2a66c81e56235aea80dd63a3fe7428210c02f6c91e4e51f412a97002776b61258a5229c0f4cf81796254712d45a307ac2ea"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x4d, 0x6, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x8, 0x8}, @generic={0x8f, 0x10, 0xa, "95dc7bad5abc0266c601ac175cec0f8599b6fd1e0cfff3bce810d706c58ac0331befb741747cbb5c5e0ce11354f4fe19a42c2f5f87c95ea9dfc888cfd7e2bc97623b006df9e28ee1fdcbadadc4323435b6547ecbf9bbec5bb9d15e5ffb5a3650029f4b5c2ae86c1dfbf336827cb351dbe7720f492591b256e702c3fc9a5f28750ac868718f2d699b55e359b5"}]}, 0x8, [{0x85, &(0x7f0000000280)=@string={0x85, 0x3, "87b92ebfe162b5f150d38aafc033ffa1fd3e8277606776ab891a7178cb2260a0b9276f0f31c714cab92be4cd090bbbde96da0bddf37a7ea1810c819d3c7436c8044d56f79f87abb94a37411d5d930b090ffc8450f409ba0d5d3f2edb2afc70904b0d03102bed26b6f4470b6b1b80b3062b1aa631ddf2b5fb45899c4524253dd87cd6fc"}}, {0xf9, &(0x7f0000001400)=@string={0xf9, 0x3, "b4a7dbc148421f8538f81bdff0a833b6f892c94b66473886e05a4aaa92a2ff790573e28d987a69eecc22ad0d097aafa41f1e162cf7e499b8c3a3831f47b1fb5ace205f132c9c35b8fc4877d3c1ca5aec063bb5f01acaa2950767f8792a052c3691fcac58b0a78a516418e60912450fb98dc50140ebf1fbd34178110ab5ca1388a182801f56d8c91fb70558d334f8fde51a6d8382a8f155ba9ebcbedf2874ad08d788ea8cacc3d4e10755322e31443aa2b1ec788aa1cae18d04cc14dd5f2aa3db6932f914729a6ace31bbb8038f27069d7cf0a3c203bfc8bab11dd2bf90db4b3d1e1e6f9b6d0ee28fd275a40338a2a4390f9a6aa87b6879"}}, {0xa5, &(0x7f0000001500)=@string={0xa5, 0x3, "06372230bd2fcdda57885a693ec11d65f2de1130068dfed7a77fae48e035269048126ef4cd986a14fbd3a9be271c0783b1b5818dda87eb9e7fd1bfed4de0cc74e8b8a45969dd0eca2c8cc114651d6085850db3a7722a0c6f99c65233d708476a8fa9db32f2cbc6762336b959d77be4b3d688110d4ae5f1ab7254d4b9b1ece244b2f20d978864a7bdd84e2dfb413b5aa0ebb296c13666b5b5550d2d48eab1c1452feeca"}}, {0xda, &(0x7f00000015c0)=@string={0xda, 0x3, "d2aa90a016c8a42bfd2367e48a533c3c679435e32a2ce6e4841947fe9e4c4ba100ac9349fe93f97d79b50dfd907d6fbb577abff187607a9a664419567007a064f60361c5f9349433260686d5578f973abdcdaf9bb64284d6cb4d6c5d64f36774b336460fa5a92f563385d9a33d3fcd094e8e505eb694b8bdec9e975c6747ab5b6ab388be4564851a9a0320cc33fc7494116c64f4cc2b2d3370d86c76d4e5f3061f33d8eb08f312a9669eb3eae3052332f06a653deb613d8da29e71674f4eec54b1b84b8b2bf2e83813c360d3c4bc162dbd5cbc9ab4212677"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc1a}}, {0x41, &(0x7f00000016c0)=@string={0x41, 0x3, "a0dc5ef9ecbf62972db69e919ea27206f09ec45aa251e60d64e1967ae2518bc62990618482108adad098fa05e284754097080f42ce30295af8e137acece4f2"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000001780)=@lang_id={0x4}}]}) 34.637348ms ago: executing program 2 (id=45): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=@newsa={0x104, 0x10, 0x713, 0x2, 0x25dfdbff, {{@in6=@mcast1, @in=@private=0xa010100, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x3c}, @in=@remote, {0x6, 0x0, 0x0, 0x9, 0x2, 0x0, 0x80000001, 0x542}, {0x2, 0x7fffffffffffffff, 0x100, 0xc}, {0x40000000}, 0x70bd26, 0x3505, 0x2, 0x4, 0x0, 0x50}, [@coaddr={0x14, 0xe, @in6=@mcast2}]}, 0x104}, 0x1, 0x0, 0x0, 0x8c0}, 0x2014) lsetxattr$system_posix_acl(&(0x7f00000000c0)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRESHEX=r0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYBLOB="e10bf6a4eea5cf72bc57a0b07e0b8d0ee05cfe70baab1087871e4b915e7d07268300ae40f21031c2e41e36f7557dc76a1f4b034139c7ce3290bbdf6f012a02043b2e5c7846ffb57e6e3f57fa932ed8aa57a60a0c28ac6799068949058f8d91a9fd4ab54d409654d37a4bbde97efe3916afc7bddd9c451b06c5c0c924d235b94610f326d816c8b8dc7825a772136b6d0f8e7d687766f6c87f620fd1df761e76bc87e2eb8ba84d365d1f0267f7ae97970bb0074b79d2597f6a814c9aeb72ff62322082720676202603703cd3247ae586e8f98fa2e60da7", @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0xfe) 33.946918ms ago: executing program 2 (id=46): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @multicast2}, 0x4}}, 0x2e) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async) openat2(r0, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18) 33.022248ms ago: executing program 2 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="26f3470f214964420f00560366ba2100ec36a1a128000000000000660f38825f076567660f08f3460fc7fc430f01c53e64470f01c34611d5", 0x38}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="ba2100b8f5c2ef66b98f0800000f320f380b5e0065dbe47b093edfd8f3ab66b9c403000066b80000000066ba008000000f30666536660f38cf0a66b8001800000f23c00f21f86635010007000f23f8", 0x4f}], 0x1, 0x4, &(0x7f0000000140), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="26f3470f214964420f00560366ba2100ec36a1a128000000000000660f38825f076567660f08f3460fc7fc430f01c53e64470f01c34611d5", 0x38}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="ba2100b8f5c2ef66b98f0800000f320f380b5e0065dbe47b093edfd8f3ab66b9c403000066b80000000066ba008000000f30666536660f38cf0a66b8001800000f23c00f21f86635010007000f23f8", 0x4f}], 0x1, 0x4, &(0x7f0000000140), 0x0) (async) 17.754324ms ago: executing program 0 (id=48): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 0s ago: executing program 0 (id=49): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x6, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x34, 0xe, 0x0, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 20.596141][ T36] audit: type=1400 audit(1772339484.029:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.597280][ T282] cgroup: Unknown subsys name 'net' [ 20.618880][ T36] audit: type=1400 audit(1772339484.029:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.646089][ T36] audit: type=1400 audit(1772339484.059:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.646265][ T282] cgroup: Unknown subsys name 'devices' [ 20.832459][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.838076][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.990841][ T36] audit: type=1400 audit(1772339484.429:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.013993][ T36] audit: type=1400 audit(1772339484.429:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.038756][ T36] audit: type=1400 audit(1772339484.429:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.048678][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.070651][ T36] audit: type=1400 audit(1772339484.509:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.096054][ T36] audit: type=1400 audit(1772339484.509:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.136380][ T36] audit: type=1400 audit(1772339484.569:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.161933][ T36] audit: type=1400 audit(1772339484.569:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.162178][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.458567][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.465698][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.472800][ T289] bridge_slave_0: entered allmulticast mode [ 22.478974][ T289] bridge_slave_0: entered promiscuous mode [ 22.488070][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.495173][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.502338][ T289] bridge_slave_1: entered allmulticast mode [ 22.508471][ T289] bridge_slave_1: entered promiscuous mode [ 22.517295][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.524366][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.531607][ T290] bridge_slave_0: entered allmulticast mode [ 22.537729][ T290] bridge_slave_0: entered promiscuous mode [ 22.546710][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.553786][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.560981][ T290] bridge_slave_1: entered allmulticast mode [ 22.567103][ T290] bridge_slave_1: entered promiscuous mode [ 22.595189][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.602297][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.609359][ T291] bridge_slave_0: entered allmulticast mode [ 22.615635][ T291] bridge_slave_0: entered promiscuous mode [ 22.624545][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.631602][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.638641][ T291] bridge_slave_1: entered allmulticast mode [ 22.644875][ T291] bridge_slave_1: entered promiscuous mode [ 22.690638][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.697676][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.704845][ T292] bridge_slave_0: entered allmulticast mode [ 22.711225][ T292] bridge_slave_0: entered promiscuous mode [ 22.717602][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.724680][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.731799][ T292] bridge_slave_1: entered allmulticast mode [ 22.737942][ T292] bridge_slave_1: entered promiscuous mode [ 22.840131][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.847187][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.854504][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.861530][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.887934][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.894996][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.902301][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.909315][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.923957][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.931000][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.938242][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.945284][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.962090][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.969135][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.976439][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.983471][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.026239][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.033536][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.040884][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.048096][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.056030][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.063206][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.070334][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.083231][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.090267][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.112707][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.119745][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.127716][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.134758][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.146834][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.153882][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.164816][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.171872][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.179444][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.186513][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.195601][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.202670][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.253655][ T292] veth0_vlan: entered promiscuous mode [ 23.260327][ T290] veth0_vlan: entered promiscuous mode [ 23.274280][ T289] veth0_vlan: entered promiscuous mode [ 23.285049][ T291] veth0_vlan: entered promiscuous mode [ 23.295682][ T292] veth1_macvtap: entered promiscuous mode [ 23.309617][ T290] veth1_macvtap: entered promiscuous mode [ 23.323496][ T289] veth1_macvtap: entered promiscuous mode [ 23.346987][ T291] veth1_macvtap: entered promiscuous mode [ 23.357718][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.401747][ T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.453130][ T341] netlink: 580 bytes leftover after parsing attributes in process `syz.1.2'. [ 23.515538][ T344] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 23.515560][ T344] rust_binder: Read failure Err(EFAULT) in pid:2 [ 23.533666][ T347] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5'. [ 23.549223][ T347] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5'. [ 23.558065][ T347] netlink: 'syz.0.5': attribute type 6 has an invalid length. [ 23.565980][ T347] netlink: 'syz.0.5': attribute type 5 has an invalid length. [ 23.573563][ T347] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5'. [ 23.700712][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 23.830590][ T31] usb 3-1: device descriptor read/64, error -71 [ 23.946014][ T355] rust_binder: Error in use_page_slow: ESRCH [ 23.946034][ T355] rust_binder: use_range failure ESRCH [ 23.952121][ T355] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 23.957606][ T355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 23.965928][ T355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:7 [ 24.070479][ T31] usb 3-1: device descriptor read/64, error -71 [ 24.230471][ T64] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.320505][ T31] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 24.350465][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.360599][ T64] usb 2-1: device descriptor read/64, error -71 [ 24.450485][ T31] usb 3-1: device descriptor read/64, error -71 [ 24.501681][ T9] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 24.509800][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.520075][ T9] usb 1-1: config 0 has no interface number 0 [ 24.529765][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 24.538877][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.547055][ T9] usb 1-1: Product: syz [ 24.551537][ T9] usb 1-1: Manufacturer: syz [ 24.556122][ T9] usb 1-1: SerialNumber: syz [ 24.561931][ T9] usb 1-1: config 0 descriptor?? [ 24.610458][ T64] usb 2-1: device descriptor read/64, error -71 [ 24.652427][ T367] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 24.661255][ T367] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 24.669561][ T367] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 24.699544][ T369] process 'syz.3.11' launched '/dev/fd/12' with NULL argv: empty string added [ 24.700509][ T31] usb 3-1: device descriptor read/64, error -71 [ 24.771674][ T360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.780218][ T360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.788568][ T360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.797974][ T360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.820569][ T31] usb usb3-port1: attempt power cycle [ 24.850535][ T64] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.893613][ T9] usb 1-1: USB disconnect, device number 2 [ 24.980461][ T64] usb 2-1: device descriptor read/64, error -71 [ 25.050510][ T364] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.170494][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 25.191501][ T31] usb 3-1: device descriptor read/8, error -71 [ 25.210483][ T364] usb 4-1: Using ep0 maxpacket: 16 [ 25.216642][ T364] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.226959][ T64] usb 2-1: device descriptor read/64, error -71 [ 25.233253][ T364] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 25.242770][ T364] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 25.253577][ T364] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 25.264674][ T364] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.273938][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.281939][ T364] usb 4-1: Product: syz [ 25.286090][ T364] usb 4-1: Manufacturer: syz [ 25.290847][ T364] usb 4-1: SerialNumber: syz [ 25.322572][ T31] usb 3-1: device descriptor read/8, error -71 [ 25.350577][ T64] usb usb2-port1: attempt power cycle [ 25.561327][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 25.581581][ T31] usb 3-1: device descriptor read/8, error -71 [ 25.650493][ T365] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.690488][ T64] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 25.711463][ T64] usb 2-1: device descriptor read/8, error -71 [ 25.722059][ T31] usb 3-1: device descriptor read/8, error -71 [ 25.800495][ T365] usb 1-1: Using ep0 maxpacket: 16 [ 25.806704][ T365] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 25.814928][ T365] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 25.825159][ T365] usb 1-1: config 0 has no interface number 0 [ 25.831395][ T31] usb usb3-port1: unable to enumerate USB device [ 25.839637][ T365] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 25.848731][ T365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.851505][ T64] usb 2-1: device descriptor read/8, error -71 [ 25.856767][ T365] usb 1-1: Product: syz [ 25.867111][ T365] usb 1-1: Manufacturer: syz [ 25.871721][ T365] usb 1-1: SerialNumber: syz [ 25.876890][ T365] usb 1-1: config 0 descriptor?? [ 25.882813][ T365] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 25.889172][ T365] usb 1-1: No valid video chain found. [ 26.004359][ T364] usb 4-1: 0:2 : does not exist [ 26.015339][ T364] usb 4-1: USB disconnect, device number 2 [ 26.015953][ T383] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 26.066809][ T384] rust_binder: 383 RLIMIT_NICE not set [ 26.100554][ T64] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 26.131557][ T64] usb 2-1: device descriptor read/8, error -71 [ 26.261463][ T64] usb 2-1: device descriptor read/8, error -71 [ 26.370536][ T64] usb usb2-port1: unable to enumerate USB device [ 26.459113][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 26.459129][ T36] audit: type=1400 audit(1772339489.889:129): avc: denied { create } for pid=389 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.850489][ T365] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 26.942310][ T392] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.954948][ T36] audit: type=1400 audit(1772339490.389:130): avc: denied { getopt } for pid=391 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.021957][ T365] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 27.029974][ T365] usb 3-1: config 0 has no interface number 0 [ 27.036284][ T365] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 27.047720][ T365] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 27.058947][ T365] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.072821][ T365] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 27.074017][ T36] audit: type=1400 audit(1772339490.509:131): avc: denied { create } for pid=398 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.083187][ T365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.103725][ T399] netlink: 'syz.3.21': attribute type 4 has an invalid length. [ 27.111630][ T365] usb 3-1: config 0 descriptor?? [ 27.122253][ T36] audit: type=1400 audit(1772339490.539:132): avc: denied { ioctl } for pid=398 comm="syz.3.21" path="socket:[3867]" dev="sockfs" ino=3867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.151117][ T36] audit: type=1400 audit(1772339490.539:133): avc: denied { create } for pid=398 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.170957][ T36] audit: type=1400 audit(1772339490.539:134): avc: denied { bind } for pid=398 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.180626][ T399] netlink: 'syz.3.21': attribute type 4 has an invalid length. [ 27.250517][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 27.380483][ T31] usb 2-1: device descriptor read/64, error -71 [ 27.570452][ T330] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 27.620483][ T31] usb 2-1: device descriptor read/64, error -71 [ 27.722311][ T330] usb 4-1: not running at top speed; connect to a high speed hub [ 27.731212][ T365] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0001/input/input4 [ 27.743342][ T330] usb 4-1: config 1 interface 0 altsetting 73 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 27.755229][ T365] uclogic 0003:28BD:0042.0001: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 27.767002][ T330] usb 4-1: config 1 interface 0 altsetting 73 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 27.777999][ T330] usb 4-1: config 1 interface 0 altsetting 73 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 27.791588][ T330] usb 4-1: config 1 interface 0 has no altsetting 0 [ 27.800387][ T330] usb 4-1: string descriptor 0 read error: -22 [ 27.806634][ T330] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.815913][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.825178][ T401] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 27.832491][ T401] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 27.839642][ T401] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 27.870463][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 27.937149][ T365] usb 3-1: USB disconnect, device number 6 [ 28.000511][ T31] usb 2-1: device descriptor read/64, error -71 [ 28.051606][ T401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.060180][ T401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.091592][ T330] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 28.108221][ T330] usb 4-1: USB disconnect, device number 3 [ 28.124443][ T36] audit: type=1400 audit(1772339491.559:135): avc: denied { create } for pid=412 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.148521][ T36] audit: type=1400 audit(1772339491.559:136): avc: denied { setopt } for pid=412 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.168642][ T36] audit: type=1400 audit(1772339491.559:137): avc: denied { connect } for pid=412 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.192525][ T36] audit: type=1400 audit(1772339491.559:138): avc: denied { ioctl } for pid=412 comm="syz.3.24" path="socket:[3904]" dev="sockfs" ino=3904 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.250491][ T31] usb 2-1: device descriptor read/64, error -71 [ 28.360802][ T31] usb usb2-port1: attempt power cycle [ 28.424021][ T9] usb 1-1: USB disconnect, device number 3 [ 28.493430][ T433] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.710643][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 28.741520][ T31] usb 2-1: device descriptor read/8, error -71 [ 28.789237][ T456] capability: warning: `syz.3.40' uses deprecated v2 capabilities in a way that may be insecure [ 28.840636][ T365] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 28.860613][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.871556][ T31] usb 2-1: device descriptor read/8, error -71 [ 28.990514][ T365] usb 3-1: Using ep0 maxpacket: 8 [ 28.996714][ T365] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 29.005538][ T365] usb 3-1: config 179 has no interface number 0 [ 29.011934][ T365] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 29.020527][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 29.023200][ T365] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 29.029376][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 29.039381][ T365] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 29.047880][ T9] usb 1-1: config 0 has no interface number 0 [ 29.058910][ T365] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 29.065080][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 29.076217][ T365] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 29.086767][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 29.099376][ T365] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 29.111062][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 29.118402][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 29.127435][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.134851][ T365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.142795][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.158975][ T9] usb 1-1: Product: syz [ 29.160711][ T451] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 29.163903][ T9] usb 1-1: Manufacturer: syz [ 29.175057][ T9] usb 1-1: SerialNumber: syz [ 29.180302][ T9] usb 1-1: config 0 descriptor?? [ 29.185641][ T31] usb 2-1: device descriptor read/8, error -71 [ 29.185814][ T449] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 29.199145][ T449] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 29.300473][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 29.306949][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.314573][ T10] usb 4-1: can't read configurations, error -61 [ 29.331483][ T31] usb 2-1: device descriptor read/8, error -71 [ 29.386644][ T365] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 29.409383][ T441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.417974][ T441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.426386][ T441] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 29.433740][ T441] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 29.450496][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.450601][ T31] usb usb2-port1: unable to enumerate USB device [ 29.600470][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 29.607135][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.614920][ T10] usb 4-1: can't read configurations, error -61 [ 29.621492][ T10] usb usb4-port1: attempt power cycle [ 29.627463][ T64] usb 3-1: USB disconnect, device number 7 [ 29.627562][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 29.641911][ T64] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 29.643070][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 29.658844][ T441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.670128][ T441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.679203][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 29.690107][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 29.699830][ T9] asix 1-1:0.251: probe with driver asix failed with error -5 [ 29.710074][ T9] usb 1-1: USB disconnect, device number 4 [ 29.970526][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.990874][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 29.997368][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 30.005179][ T10] usb 4-1: can't read configurations, error -61 [ 30.140478][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 30.160922][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 30.170496][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 30.179920][ T10] usb 4-1: can't read configurations, error -61 [ 30.186687][ T10] usb usb4-port1: unable to enumerate USB device [ 30.220746][ T290] ------------[ cut here ]------------ [ 30.226255][ T290] WARNING: CPU: 1 PID: 290 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 30.234227][ T290] Modules linked in: [ 30.238157][ T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Not tainted syzkaller #0 c4f231820317ff22bb61fe038e0df9024df7047c [ 30.249825][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.259902][ T290] RIP: 0010:drop_nlink+0xce/0x110 [ 30.264999][ T290] Code: 04 00 00 be 08 00 00 00 e8 ff 21 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 7e af 03 cc e8 c2 3c 96 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 30.284718][ T290] RSP: 0018:ffffc9000b72fc60 EFLAGS: 00010293 [ 30.290818][ T290] RAX: ffffffff81f1629e RBX: ffff888117bc0070 RCX: ffff888121799300 [ 30.298793][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.306793][ T290] RBP: ffffc9000b72fc88 R08: 0000000000000003 R09: 0000000000000004 [ 30.314797][ T290] R10: dffffc0000000000 R11: fffff520016e5f7c R12: dffffc0000000000 [ 30.322795][ T290] R13: 1ffff11022f78017 R14: ffff888117bc00b8 R15: 0000000000000000 [ 30.330811][ T290] FS: 000055555e61b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.339748][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.346359][ T290] CR2: 00007ffcc9a7cff0 CR3: 0000000126170000 CR4: 00000000003526b0 [ 30.350464][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 30.354368][ T290] Call Trace: [ 30.365244][ T290] [ 30.368218][ T290] shmem_rmdir+0x5f/0x90 [ 30.372481][ T290] vfs_rmdir+0x3e0/0x560 [ 30.376729][ T290] incfs_kill_sb+0x109/0x230 [ 30.381333][ T290] deactivate_locked_super+0xd5/0x2a0 [ 30.386706][ T290] deactivate_super+0xb8/0xe0 [ 30.391398][ T290] cleanup_mnt+0x406/0x4a0 [ 30.395817][ T290] __cleanup_mnt+0x1d/0x40 [ 30.400229][ T290] task_work_run+0x1e5/0x260 [ 30.404838][ T290] ? __cfi_task_work_run+0x10/0x10 [ 30.409962][ T290] ? __x64_sys_umount+0x12e/0x180 [ 30.414996][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 30.420363][ T290] ? __kasan_check_read+0x15/0x20 [ 30.425405][ T290] resume_user_mode_work+0x35/0x50 [ 30.430540][ T290] syscall_exit_to_user_mode+0x63/0xb0 [ 30.436180][ T290] do_syscall_64+0x63/0xf0 [ 30.440623][ T290] ? clear_bhb_loop+0x50/0xa0 [ 30.445297][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.451206][ T290] RIP: 0033:0x7f779bf9d9d7 [ 30.455639][ T290] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 30.475320][ T290] RSP: 002b:00007ffcc9a7e238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.483792][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f779bf9d9d7 [ 30.491795][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc9a7e2f0 [ 30.499773][ T290] RBP: 00007ffcc9a7e2f0 R08: 00007ffcc9a7f2f0 R09: 00000000ffffffff [ 30.507766][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc9a7f380 [ 30.515763][ T290] R13: 00007f779c031f90 R14: 00000000000075f1 R15: 00007ffcc9a7f3c0 [ 30.523772][ T290] [ 30.526787][ T290] ---[ end trace 0000000000000000 ]--- [ 30.532362][ T290] ================================================================== [ 30.540427][ T290] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 30.546654][ T290] Write of size 4 at addr 0000000000000168 by task syz-executor/290 [ 30.554604][ T290] [ 30.556910][ T290] CPU: 0 UID: 0 PID: 290 Comm: syz-executor Tainted: G W syzkaller #0 c4f231820317ff22bb61fe038e0df9024df7047c [ 30.556929][ T290] Tainted: [W]=WARN [ 30.556933][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.556940][ T290] Call Trace: [ 30.556944][ T290] [ 30.556949][ T290] __dump_stack+0x21/0x30 [ 30.556966][ T290] dump_stack_lvl+0x140/0x1c0 [ 30.556978][ T290] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.556992][ T290] print_report+0x3d/0x70 [ 30.557004][ T290] kasan_report+0x162/0x1a0 [ 30.557020][ T290] ? ihold+0x24/0x70 [ 30.557033][ T290] ? _raw_spin_unlock+0x45/0x60 [ 30.557044][ T290] ? ihold+0x24/0x70 [ 30.557057][ T290] kasan_check_range+0x25a/0x2b0 [ 30.557072][ T290] __kasan_check_write+0x18/0x20 [ 30.557084][ T290] ihold+0x24/0x70 [ 30.557097][ T290] vfs_rmdir+0x26a/0x560 [ 30.557108][ T290] incfs_kill_sb+0x109/0x230 [ 30.557121][ T290] deactivate_locked_super+0xd5/0x2a0 [ 30.557132][ T290] deactivate_super+0xb8/0xe0 [ 30.557142][ T290] cleanup_mnt+0x406/0x4a0 [ 30.557156][ T290] __cleanup_mnt+0x1d/0x40 [ 30.557170][ T290] task_work_run+0x1e5/0x260 [ 30.557181][ T290] ? __cfi_task_work_run+0x10/0x10 [ 30.557192][ T290] ? __x64_sys_umount+0x12e/0x180 [ 30.557203][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 30.557214][ T290] ? __kasan_check_read+0x15/0x20 [ 30.557226][ T290] resume_user_mode_work+0x35/0x50 [ 30.557241][ T290] syscall_exit_to_user_mode+0x63/0xb0 [ 30.557255][ T290] do_syscall_64+0x63/0xf0 [ 30.557264][ T290] ? clear_bhb_loop+0x50/0xa0 [ 30.557275][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.557291][ T290] RIP: 0033:0x7f779bf9d9d7 [ 30.557302][ T290] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 30.557311][ T290] RSP: 002b:00007ffcc9a7e238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.557323][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f779bf9d9d7 [ 30.557331][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc9a7e2f0 [ 30.557338][ T290] RBP: 00007ffcc9a7e2f0 R08: 00007ffcc9a7f2f0 R09: 00000000ffffffff [ 30.557345][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc9a7f380 [ 30.557352][ T290] R13: 00007f779c031f90 R14: 00000000000075f1 R15: 00007ffcc9a7f3c0 [ 30.557361][ T290] [ 30.557365][ T290] ================================================================== [ 30.800886][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 30.803434][ T290] Disabling lock debugging due to kernel taint [ 30.807152][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.813101][ T290] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 30.823301][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.830825][ T290] #PF: supervisor write access in kernel mode [ 30.830840][ T290] #PF: error_code(0x0002) - not-present page [ 30.830850][ T290] PGD 800000010ef9e067 P4D 800000010ef9e067 PUD 0 [ 30.830874][ T290] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 30.830893][ T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Tainted: G B W syzkaller #0 c4f231820317ff22bb61fe038e0df9024df7047c [ 30.840806][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.846660][ T290] Tainted: [B]=BAD_PAGE, [W]=WARN [ 30.846670][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.846681][ T290] RIP: 0010:ihold+0x2a/0x70 [ 30.852827][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.859120][ T290] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 ad 33 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 18 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 bd [ 30.859142][ T290] RSP: 0018:ffffc9000b72fca0 EFLAGS: 00010246 [ 30.865381][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.878265][ T290] RAX: ffff888121799300 RBX: 0000000000000000 RCX: ffff888121799300 [ 30.878284][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.878293][ T290] RBP: ffffc9000b72fcb0 R08: ffffffff88b8c947 R09: 1ffffffff1171928 [ 30.878305][ T290] R10: dffffc0000000000 R11: fffffbfff1171929 R12: ffff888117bc007c [ 30.878318][ T290] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 30.878329][ T290] FS: 000055555e61b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.895760][ T9] usb 2-1: config 0 descriptor?? [ 30.896077][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.013403][ T290] CR2: 0000000000000168 CR3: 0000000126170000 CR4: 00000000003526b0 [ 31.021385][ T290] Call Trace: [ 31.024654][ T290] [ 31.027579][ T290] vfs_rmdir+0x26a/0x560 [ 31.031829][ T290] incfs_kill_sb+0x109/0x230 [ 31.036408][ T290] deactivate_locked_super+0xd5/0x2a0 [ 31.041773][ T290] deactivate_super+0xb8/0xe0 [ 31.046453][ T290] cleanup_mnt+0x406/0x4a0 [ 31.050891][ T290] __cleanup_mnt+0x1d/0x40 [ 31.055315][ T290] task_work_run+0x1e5/0x260 [ 31.059898][ T290] ? __cfi_task_work_run+0x10/0x10 [ 31.065004][ T290] ? __x64_sys_umount+0x12e/0x180 [ 31.070016][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.075380][ T290] ? __kasan_check_read+0x15/0x20 [ 31.080401][ T290] resume_user_mode_work+0x35/0x50 [ 31.085516][ T290] syscall_exit_to_user_mode+0x63/0xb0 [ 31.090986][ T290] do_syscall_64+0x63/0xf0 [ 31.095402][ T290] ? clear_bhb_loop+0x50/0xa0 [ 31.100079][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.105989][ T290] RIP: 0033:0x7f779bf9d9d7 [ 31.110407][ T290] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.130017][ T290] RSP: 002b:00007ffcc9a7e238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.138440][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f779bf9d9d7 [ 31.146419][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc9a7e2f0 [ 31.154383][ T290] RBP: 00007ffcc9a7e2f0 R08: 00007ffcc9a7f2f0 R09: 00000000ffffffff [ 31.162341][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc9a7f380 [ 31.170316][ T290] R13: 00007f779c031f90 R14: 00000000000075f1 R15: 00007ffcc9a7f3c0 [ 31.178286][ T290] [ 31.181293][ T290] Modules linked in: [ 31.185180][ T290] CR2: 0000000000000168 [ 31.189317][ T290] ---[ end trace 0000000000000000 ]--- [ 31.194764][ T290] RIP: 0010:ihold+0x2a/0x70 [ 31.199269][ T290] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 ad 33 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 18 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 bd [ 31.218877][ T290] RSP: 0018:ffffc9000b72fca0 EFLAGS: 00010246 [ 31.224957][ T290] RAX: ffff888121799300 RBX: 0000000000000000 RCX: ffff888121799300 [ 31.232935][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.240905][ T290] RBP: ffffc9000b72fcb0 R08: ffffffff88b8c947 R09: 1ffffffff1171928 [ 31.248893][ T290] R10: dffffc0000000000 R11: fffffbfff1171929 R12: ffff888117bc007c [ 31.256881][ T290] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.264945][ T290] FS: 000055555e61b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.273876][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.280471][ T290] CR2: 0000000000000168 CR3: 0000000126170000 CR4: 00000000003526b0 [ 31.288449][ T290] Kernel panic - not syncing: Fatal exception [ 31.294852][ T290] Kernel Offset: disabled [ 31.299166][ T290] Rebooting in 86400 seconds..