last executing test programs: 3.966079824s ago: executing program 0 (id=58): syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401ae03b70fc7377f77bffc852bf61394c9fbd8112184d63e7e146da3354f563f003098589dec7ec86cb531757796d59f1158fa4a8c2760695573d6e7ff30c2ac5889"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xf1}}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x80, 0x0, 0x7}, @generic={0x3}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 2.798131353s ago: executing program 0 (id=64): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x6, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4d5, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.757497784s ago: executing program 0 (id=65): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @local, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r0], 0x18}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) r2 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) write$vga_arbiter(r1, &(0x7f0000000380)=@other={'decodes', ' ', 'none'}, 0xd) 2.698484035s ago: executing program 0 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9100, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x81, 0x6, @remote}, 0x14) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x7}, 0x4) (async) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)={0x8000, 0xffffffffffff8001}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) (async) munlockall() (async) mlock2(&(0x7f0000783000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb9) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f00000003c0)=0x1, 0x4) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000440)=[{0x8, 0x1, 0x11, 0xfffffffc}]}) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x18) 2.698128665s ago: executing program 0 (id=67): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x100000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3e456, 0x80) r5 = openat$incfs(r4, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x80106725, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000480)={'bond0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xb266, 0x1, 0x2, 0x150, 0x0, r2}, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3, 0x42, 0x0, 0x0}}, 0x0) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) 2.178464627s ago: executing program 0 (id=74): r0 = socket$inet6(0x10, 0x2, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_ABS_SETUP(r1, 0x4008556c, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r4, 0x29, 0x6, &(0x7f0000000380)='\a', 0x1) listen(r3, 0xffffdc47) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f00000004c0)=0x79, 0x4) syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3048, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x7, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1a}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x1, 0x5, 0xdb}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x0, 'i,'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x0, 0x1, {0x7, 0x25, 0x1, 0xc, 0xff, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x10, 0x5, 0x8, {0x7, 0x25, 0x1, 0xc, 0x3, 0xfffd}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r2, 0x0, 0x0, 0x2000877d, &(0x7f0000e68000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) sendto$inet6(r0, &(0x7f0000000680)="4c00000012008fe11d15b9409b849ac00a00a57000000000030038c88cc055c5ac27a6c5b068d0bf46d3234525dbfee9bdb94235235ba351d1ec0cffc8792cd80063a5c3aa7b8b7d2778b097", 0x4c, 0x0, 0x0, 0x0) 1.812882656s ago: executing program 2 (id=79): unshare(0x60040000) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="1c00000018000718ab092500090007000a0700000004000600003693", 0x1c) 1.693236249s ago: executing program 2 (id=80): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000080)=0x253, 0x4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r2], 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r3, 0x8, 0x4) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1, 0x1, 0x800, 0x80000000005, r3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$ARCH_MAP_VDSO_32(0x1e, r3, 0x790, 0x2002) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) writev(r4, &(0x7f0000000c00)=[{&(0x7f0000000200)="66cee50b47ccc32ff304b3a399e76bfae78f5abc66a01dc0", 0x18}], 0x1) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 1.325559128s ago: executing program 3 (id=92): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000000c0)={0x7, 'caif0\x00', {0x6}, 0x1}) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bond_slave_0\x00', &(0x7f0000000140)=@ethtool_rx_ntuple={0x35, {0x10, @usr_ip4_spec={@dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102, 0x0, 0xfd, 0x1, 0xc0}, @hdata="3916002299d8671f85b5b3fa9e50f7995b52b927fedb4ffa61ebcad300e9c26ce0aedae77ab35ddfbb0f1a25c9ca887d313de395aca5760f5bf23a5900c762b4b63a5b707971f5af", 0x4, 0x7, 0x5, 0x7, 0xffffffffffffffff}}}) 1.314015648s ago: executing program 3 (id=93): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x880) recvmmsg(r0, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/99, 0x63}, {&(0x7f0000001340)=""/38, 0x26}], 0x3, &(0x7f00000013c0)=""/4096, 0x1000}, 0x400}, {{&(0x7f00000023c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002440)=""/17, 0x11}], 0x1, &(0x7f0000000140)=""/196, 0xc4}, 0x4}], 0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, 0x0) fsopen(&(0x7f0000000000)='vfat\x00', 0x1) 1.041248675s ago: executing program 2 (id=94): r0 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x110) socket(0xf, 0x3, 0x9) vmsplice(r1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 950.592757ms ago: executing program 1 (id=103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0xe, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000003c0)={0x140002, 0x0, {[0x100d6, 0x5, 0x5, 0x0, 0x6, 0x9, 0x197, 0xa]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 948.780497ms ago: executing program 1 (id=104): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) clock_settime(0xfffffff0, &(0x7f0000000340)={0x0, 0x3938700}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x1000000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r4) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB='$ \x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fadbdf250a000000100004800900010073797a3000000000"], 0x24}}, 0x48044) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x7, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x1c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x2, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f09, 0x642, 0x3, 0xa, 0x0, 0x71, 0xe2, 0x7, 0x103, 0x0, 0x7, 0x3c, 0x91, 0x6, 0xfffffffd, 0xfffffff8, 0x5, 0x4, 0x8, 0x0, 0x82, 0x0, 0x5, 0x6, 0x8, 0xfffffff9, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0x8000, 0x0, 0x8, 0x12b432e2, 0x40000cb, 0x5a, 0xb, 0xbf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x1, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x40, 0x3, 0x4000, 0x108000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x100009, 0x6, 0x9, 0x40000006, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7c, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x8, 0x9, 0x48c93690, 0x3, 0x102], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x5, 0x82, 0x3, 0x10000009, 0x3e7, 0xfff, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x37, 0x3, 0x1fd, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0xfffffffd, 0x5, 0x1, 0x1ff, 0x6, 0x8af, 0x5, 0x3, 0x101, 0x10a0000, 0x6, 0x7fff, 0x7, 0xa620, 0x2, 0x8001, 0x6, 0x9, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x4f, 0x8, 0x0, 0x3, 0x3, 0xffff, 0x3, 0xb, 0xfe, 0x9602, 0x6, 0x97f, 0x2000001, 0x7ff, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x7, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x1ff, 0xb1c, 0x1, 0x203, 0x3, 0xfff]}, 0x45c) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0xfebc) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x10001, 0xc}, 0x8) openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000180)=""/165, 0xa5, 0x7) 900.808509ms ago: executing program 2 (id=96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0xffffffff, 0x1, 0x8000000000000000, 0x8, 0x2, 0x8001, 0xafdc, 0x8, 0x200, 0xa2, 0x2, 0x80000001, 0x8001, 0x7899, 0xfffffffffffffffb, 0x3276], 0x41000, 0x100080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}]}}, {{&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="e1760ca3a3889e296642de2b758e06c269d87d80afe18a247ff9c100829f36522de13972da29bcbb3bdbec125464343c0d4f2cb0abcc4deeefe8b24e98ddc6e1e178e8a7663402941e9b82bb824413542c841459a8aa8af528cd37d65e19f52f59b5d765039163762e64bb7e22cf89bf84f5d9716a83255a3f431120076884f76ce8e7aa44bd65c3d4e74b373cdfaacb432490378b5d61afe30098d9bc7c8b594cefb49142b7171c1493294ad81c946a571c72681926fc3f2dfcdeeae6"}, {&(0x7f0000000480)="d8e02abaf80880460e84b57fbf7cf8e93c50ecfa0b0580f72f418855e6864b9732c0200ff4e4647fd6ff430e63e4776c6ed0b54b0092235b020a42b59272d122894e5e669362e5087df44463ef2894f0a6dfc60297023f7a83b162929293467e563cde9a9cb798c193148c0c9d339c86a846105ed73370290fefe26a316cd9c386c3614c721c7fd26865d64d092ce8e77009b3a9334c6e812d3ad91a1c6d56bfe95f5c065a20f76d33edbd1cdb"}, {&(0x7f0000000540)="5742bed383ea69dffa85"}, {&(0x7f0000000580)="4009ea292dc3c54286ae8799307560e1afd09860d05b6feb6169abcbf0281fd3f31357745b7378040079f259d8812cc7adb4163b94d0e7bf7dd8b9ee05f17fa4f530f8f1432ddaeb7607ddd6c5c8faa31d2319383cb5f5333cc3e763bc46401d2a6f3b8059"}], 0x0, &(0x7f0000000640)=[{0x0, 0x117, 0x6, "247e30f5cbd37219c984aa32856c233995352d41c2a86b1a3e2aa682c9d0896cf91d6ee3b04d69625a3bd95f6cfe79d57f3ee9fc87790cc24296b3afc68c6400e01b4dad980cb1c79db1a607167bd357bdfa8dce43771c4f5714e3d41855f2a72c5e15a4d1692be2440661c2e9c95e7dad5632d275d5c40b664fa82330bf9866df0be7e4447766f5ee40bb12ed9ceb90b598fd40a6a4bae69791"}, {0x0, 0x10f, 0x3, "759e704b7f0d3ea891b1104977c2a4edf687474eacaa64e6473fdc89b41b238ff6a1bf91aee045bcdd0dcc13f9d47823f3071daa84144f2db4b4edcab4985d11d14720e7e5d06327158f0120e6fab3980097cfaef3831fc8f6b26011908c805601ec0f0e07cd3a388800a75f2c66364811df679b64a1a13f9cdc8896a2af5c2a81f0a4490424a4e730a1b1b326f125"}]}}], 0x1, 0x9200000000000810) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000040)) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf25010000009ae8000007981c3d410000004c0018000000407564700200000000000000000000000000000000000000009ea04b55000000000000000000000000000000009c0000000000000000000005000000000000000000000000f35fb6dc5a4b1fb4661db8fd505618"], 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000ec0)={0x0, [{0x0, 0x0, 0xf047, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x3, 0x0, 0xb66, 0x0}, {0x3, 0x0, 0xfff, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x79, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}]}) 898.982199ms ago: executing program 1 (id=106): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) clock_settime(0xfffffff0, &(0x7f0000000340)={0x0, 0x3938700}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x1000000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r4) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB='$ \x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fadbdf250a000000100004800900010073797a3000000000"], 0x24}}, 0x48044) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x7, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x1c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x2, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f09, 0x642, 0x3, 0xa, 0x0, 0x71, 0xe2, 0x7, 0x103, 0x0, 0x7, 0x3c, 0x91, 0x6, 0xfffffffd, 0xfffffff8, 0x5, 0x4, 0x8, 0x0, 0x82, 0x0, 0x5, 0x6, 0x8, 0xfffffff9, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0x8000, 0x0, 0x8, 0x12b432e2, 0x40000cb, 0x5a, 0xb, 0xbf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x1, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x40, 0x3, 0x4000, 0x108000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x100009, 0x6, 0x9, 0x40000006, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7c, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x8, 0x9, 0x48c93690, 0x3, 0x102], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x5, 0x82, 0x3, 0x10000009, 0x3e7, 0xfff, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x37, 0x3, 0x1fd, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0xfffffffd, 0x5, 0x1, 0x1ff, 0x6, 0x8af, 0x5, 0x3, 0x101, 0x10a0000, 0x6, 0x7fff, 0x7, 0xa620, 0x2, 0x8001, 0x6, 0x9, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x4f, 0x8, 0x0, 0x3, 0x3, 0xffff, 0x3, 0xb, 0xfe, 0x9602, 0x6, 0x97f, 0x2000001, 0x7ff, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x7, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x1ff, 0xb1c, 0x1, 0x203, 0x3, 0xfff]}, 0x45c) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0xfebc) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x10001, 0xc}, 0x8) pread64(r1, &(0x7f0000000180)=""/165, 0xa5, 0x7) 883.009419ms ago: executing program 2 (id=97): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002c40)={0x5, 0x0, [{0x0, 0x52, &(0x7f00000003c0)=""/82}, {0x2, 0xa5, &(0x7f0000000280)=""/165}, {0x8000000, 0x8, &(0x7f0000001880)=""/8}, {0xc000, 0x102, &(0x7f0000000140)=""/258}, {0x5000, 0x1000, &(0x7f0000001b40)=""/4096}]}) close_range(r3, r3, 0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_setup(0xf6e9, &(0x7f0000000040)) io_setup(0x3, &(0x7f0000000080)=0x0) io_cancel(r4, 0x0, 0x0) io_cancel(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x5, r2, &(0x7f00000000c0)="800f66cde97e7952de50c953155f308ce2c3750bd40ee403aa8503f294fa1da866f39c91dc2bca8d6ee935a00ca416b42901be2ebcd857", 0x37, 0xffff, 0x0, 0x1, r2}, &(0x7f0000000380)) dup(r2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x4008001) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000080)) 882.834139ms ago: executing program 1 (id=98): unshare(0x60040000) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="1c00000018000718ab092500090007000a070000000a000600003693", 0x1c) 790.556461ms ago: executing program 1 (id=99): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x154, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x2, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x5, @in=@broadcast}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x10) syz_usb_connect(0x0, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a0102092c0603040001a530112406060405080063b6050006000100050924030500030501f909240702020005cbad092403060101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x154, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x2, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x5, @in=@broadcast}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) syz_usb_connect(0x0, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a0102092c0603040001a530112406060405080063b6050006000100050924030500030501f909240702020005cbad092403060101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) (async) 465.911409ms ago: executing program 3 (id=100): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000180)=0x59d4, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000100"], 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r0, 0x0, 0x48, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 452.465539ms ago: executing program 3 (id=101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c010000100033062abd700000000000fc020000000000000000000000000006e000000200000000000000000000000000000000000000000200002004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000aa62a9ab993c3e1000000000000032000000ac1414bb000000000000000000000000fdffffffffffffff00000000000400000200000000000000cd2d000000000000000000000000000000000000200000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000010000000000002dbd7000000000000a00040000000000000000004a0002"], 0x13c}, 0x1, 0x0, 0x0, 0x24000884}, 0x0) 394.300201ms ago: executing program 3 (id=102): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') (async) r1 = socket(0x10, 0x2, 0x87) r2 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x0, 0x4158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1000004, 0x319}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6c71, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0xffffffde}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e78, 0x8000, 0x1, 0x310}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x6, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) (async) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f00000006c0)={0x2, 0x0, 0x5, 0xff81, 0x2000, 0x7c, 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x32) (async) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) getdents64(r11, &(0x7f0000000480)=""/128, 0x80) getdents(r0, &(0x7f0000000000)=""/163, 0xa3) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r12, 0x400448dc, 0x0) 393.556561ms ago: executing program 3 (id=105): socket(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$tipc(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)="e47f", 0x2}], 0x1, &(0x7f0000001680)="a8c229d1", 0x4, 0x20000000}, 0x44) syz_clone(0x401000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0x10, [@dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010102, @private=0xa010100, @private=0xa010100]}]}}}], 0x28}}], 0x1, 0x0) r2 = memfd_secret(0x80000) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e21, 0x1, @mcast2, 0xec}, {0xa, 0x4e22, 0xfe6c, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1, {[0x4, 0x4, 0x2, 0x80000000, 0x0, 0x8, 0x2, 0x8]}}, 0x5c) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r4, &(0x7f0000002e40)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1, 0x4, 0x5) fchmod(r2, 0x53) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r3], 0x1c}}, 0x40000000) syz_usb_connect(0x1, 0x5e, &(0x7f0000001600)=ANY=[@ANYBLOB="12011003cff3a04086051834f65f0102030109024c0001031c10000904cf01000206000f05240600010524d2c041f184f98a7b0000000e0000801406241a000804052406000105240006000d240f01050000000000eb060806241a020006"], &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0}) 319.631852ms ago: executing program 1 (id=107): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x4}], 0xffffffffffffffff}, 0x18, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000086a055700000000000001090224000100008008090400fe010300030009218100030122280009058103400002c101fd5677cd3f5292"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a40000005400010000000000000080000700fd0020"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x41, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x80, 0x9, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0xffff, 0x3, 0x1, {0x22, 0xced}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x1, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x10, 0x70, 0x5}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xfd, 0x17, 0x9, 0x8, 0x1}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x96, &(0x7f0000000180)=@string={0x96, 0x3, "0901c70f3b97cf687014136c5eefb22554e2c2e3420fd692049bd3afff86064062e043b6198473854627a8bf1afe31202c6b3825cd2cfbd3844e2a212a5771129f6261989399457be5dd3b6bab9de360d733c2df17de43b283fd67bee19a5b1de49eb54a45775be0bf23d5c8cc3b570a1c99e15b289fef6e69094857ca75be2f358620cd429541a2cd4cdb1dcb73307e7cb8c344"}}, {0x5c, &(0x7f0000000240)=@string={0x5c, 0x3, "ad87a7c4dc4c231c962b5c257d4bf82bf8d8375155392f8625b62c7d88433cc78dcb6eb823fa559a9ba19bf2f220ef44c4e218fc9379284a1451093c95aec1d86680db0ba1993733dc149658458041d510d7c91899b81cf724f7"}}, {0x75, &(0x7f00000002c0)=@string={0x75, 0x3, "f912f8a4781ef444de64b630bcb3373b80ace98b5cd9d7247a056a8d824dbb5115e3e27901d2aa0a9f2f7276dcd99078926d0c9502f1a70d69977bf68e4516da610a41a0ad3a9478bafb5ba79a7b9deb7a4beb904ce1bf75ffce00547d232bc100a7b3c4ea9dae6bd1f2ccbbaf8b607832c21b"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2809}}]}) iopl(0x2) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000540)={0x20, 0x31, 0x28, {0x28, 0x6, "c26313852642792c3cbdeace918d0fb74237cc4b44b72fb0688881ce2a52973661d67a0c5544"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x410080, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 0s ago: executing program 2 (id=108): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4c, 0x1000008, 0xffffeffffffffffb, 0x5, 0x10000, 0x8, 0x4002004c1, 0xa, 0x200005, 0x0, 0x3, 0x0, 0x401, 0x0, 0x9, 0x10000008d], 0xddcd0000, 0x100000}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20602, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000440)={0x3ffffffffffffe11, [0x0, 0x0, 0x0]}) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) wait4(r1, 0x0, 0x40000000, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r1, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r1, 0x80000001, 0x4) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 21.264976][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 21.264994][ T36] audit: type=1400 audit(1785458387.930:59): avc: denied { transition } for pid=260 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.269789][ T36] audit: type=1400 audit(1785458387.930:60): avc: denied { noatsecure } for pid=260 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.274639][ T36] audit: type=1400 audit(1785458387.940:61): avc: denied { write } for pid=260 comm="sh" path="pipe:[1825]" dev="pipefs" ino=1825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.278476][ T36] audit: type=1400 audit(1785458387.940:62): avc: denied { rlimitinh } for pid=260 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.282178][ T36] audit: type=1400 audit(1785458387.940:63): avc: denied { siginh } for pid=260 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 29.634724][ T36] audit: type=1400 audit(1785458396.300:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.638542][ T286] cgroup: Unknown subsys name 'net' [ 29.657440][ T36] audit: type=1400 audit(1785458396.300:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.684819][ T36] audit: type=1400 audit(1785458396.320:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.685456][ T286] cgroup: Unknown subsys name 'devices' [ 29.805697][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.811438][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.927283][ T36] audit: type=1400 audit(1785458396.590:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.950658][ T36] audit: type=1400 audit(1785458396.590:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.975518][ T36] audit: type=1400 audit(1785458396.590:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.005892][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.014851][ T36] audit: type=1400 audit(1785458396.680:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.040491][ T36] audit: type=1400 audit(1785458396.680:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.084916][ T36] audit: type=1400 audit(1785458396.750:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.110693][ T36] audit: type=1400 audit(1785458396.750:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.111397][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.934296][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.941859][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.957842][ T293] bridge_slave_0: entered allmulticast mode [ 30.964803][ T293] bridge_slave_0: entered promiscuous mode [ 30.971992][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.979823][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.987049][ T293] bridge_slave_1: entered allmulticast mode [ 30.993956][ T293] bridge_slave_1: entered promiscuous mode [ 31.138760][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.145972][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.153083][ T297] bridge_slave_0: entered allmulticast mode [ 31.159643][ T297] bridge_slave_0: entered promiscuous mode [ 31.166424][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.173569][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.180664][ T297] bridge_slave_1: entered allmulticast mode [ 31.187145][ T297] bridge_slave_1: entered promiscuous mode [ 31.211055][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.218284][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.225595][ T298] bridge_slave_0: entered allmulticast mode [ 31.231866][ T298] bridge_slave_0: entered promiscuous mode [ 31.239916][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.247072][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.254241][ T298] bridge_slave_1: entered allmulticast mode [ 31.260655][ T298] bridge_slave_1: entered promiscuous mode [ 31.301385][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.308516][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.315961][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.323014][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.376796][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.383936][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.391173][ T299] bridge_slave_0: entered allmulticast mode [ 31.397583][ T299] bridge_slave_0: entered promiscuous mode [ 31.406167][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.413458][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.420635][ T299] bridge_slave_1: entered allmulticast mode [ 31.427375][ T299] bridge_slave_1: entered promiscuous mode [ 31.483823][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.490924][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.498262][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.505352][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.521101][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.528234][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.535750][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.542803][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.604428][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.612003][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.619965][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.627906][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.635265][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.642555][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.653071][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.660193][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.675218][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.682309][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.692868][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.699973][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.709006][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.716113][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.731966][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.739196][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.765934][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.773116][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.818788][ T293] veth0_vlan: entered promiscuous mode [ 31.829113][ T297] veth0_vlan: entered promiscuous mode [ 31.837416][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.844567][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.861359][ T297] veth1_macvtap: entered promiscuous mode [ 31.869266][ T293] veth1_macvtap: entered promiscuous mode [ 31.890690][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.897825][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.907662][ T298] veth0_vlan: entered promiscuous mode [ 31.956110][ T298] veth1_macvtap: entered promiscuous mode [ 31.968409][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.006772][ T299] veth0_vlan: entered promiscuous mode [ 32.060493][ T299] veth1_macvtap: entered promiscuous mode [ 32.069624][ T321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.152107][ T328] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.423369][ T312] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.463330][ T313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.533247][ T10] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 32.573299][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 32.579665][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.590207][ T312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.601031][ T312] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 32.610286][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.613356][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 32.618544][ T312] usb 2-1: Product: syz [ 32.627912][ T312] usb 2-1: Manufacturer: syz [ 32.627929][ T313] usb 4-1: config 0 has no interfaces? [ 32.632616][ T312] usb 2-1: SerialNumber: syz [ 32.646621][ T313] usb 4-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 32.656236][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.665236][ T313] usb 4-1: Product: syz [ 32.669701][ T313] usb 4-1: Manufacturer: syz [ 32.674469][ T313] usb 4-1: SerialNumber: syz [ 32.680842][ T313] usb 4-1: config 0 descriptor?? [ 32.687284][ T10] usb 1-1: No LPM exit latency info found, disabling LPM. [ 32.695922][ T10] usb 1-1: config 24 has no interfaces? [ 32.704047][ T10] usb 1-1: string descriptor 0 read error: -22 [ 32.710393][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 32.720143][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.888538][ T46] usb 4-1: USB disconnect, device number 2 [ 32.909247][ T312] usb 2-1: USB disconnect, device number 2 [ 32.933093][ T10] usb 1-1: USB disconnect, device number 2 [ 32.958382][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.497714][ T362] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 33.507084][ T362] SELinux: failed to load policy [ 33.708519][ T356] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.729309][ T356] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.803242][ T312] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 33.903292][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.964890][ T312] usb 4-1: not running at top speed; connect to a high speed hub [ 33.973764][ T312] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 115, changing to 4 [ 33.990184][ T312] usb 4-1: New USB device found, idVendor=0582, idProduct=0042, bcdDevice= 0.40 [ 33.999468][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.007865][ T312] usb 4-1: Manufacturer: 㕀⧃뺪⸡㔜휈쌡玿躕务薊혹륎︅훉㚦绊₷쌎⶯⛾浑ﾋ뷭∘훉₩扢끈ᨰﾕ⋮盵{髻〟봢嬵軑﹐෠퀞 [ 34.025503][ T312] usb 4-1: SerialNumber: 竎놫⼍␪緱ශఏ籡⎹閄覦划뀯귀辦鰹燪䗒駛寜쨣昼谴└桒ᱞ鹣꙼⼳쐼術↰綨괞鸻ﳖ维᫘ᶃ爒╯豕⅙砹ℤ㱩鍄㏚㬿嵖ꇮ㔕っꗺ딚꾙༚퐜皯㎼᛺ﱨ윬ࢉ眪⬧觊퟼翸_■ྪᝉ䙡ﯙ䡠檾쐚ฺ䯙颱ꯕᗋㅚ摡鐴뚘ﰕ厉馩ꂪ蚦柌䩰띾᷊씮갞⡝퀳㓰 [ 34.073277][ T66] usb 3-1: Using ep0 maxpacket: 8 [ 34.079891][ T66] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.090303][ T66] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 34.099695][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.108959][ T66] usb 3-1: config 0 descriptor?? [ 34.115265][ T66] usb 3-1: bad CDC descriptors [ 34.265496][ T312] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 34.276449][ T312] usb 4-1: USB disconnect, device number 3 [ 34.315817][ T313] usb 3-1: USB disconnect, device number 2 [ 34.366478][ T380] EXT4-fs: Conflicting test_dummy_encryption options [ 34.431214][ T385] kvm: MWAIT instruction emulated as NOP! [ 34.508623][ T390] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 34.516424][ T390] SELinux: failed to load policy [ 34.780345][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 34.780364][ T36] audit: type=1400 audit(1785458401.440:145): avc: denied { create } for pid=395 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.806879][ T36] audit: type=1400 audit(1785458401.450:146): avc: denied { setopt } for pid=395 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.827168][ T36] audit: type=1400 audit(1785458401.450:147): avc: denied { getopt } for pid=395 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.885564][ T404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.894432][ T404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.004264][ T36] audit: type=1400 audit(1785458401.660:148): avc: denied { append } for pid=413 comm="syz.3.37" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.130982][ T36] audit: type=1400 audit(1785458401.790:149): avc: denied { bind } for pid=415 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.143712][ T421] 9pnet_fd: Insufficient options for proto=fd [ 35.158972][ T66] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 35.165121][ T36] audit: type=1400 audit(1785458401.810:150): avc: denied { write } for pid=415 comm="syz.1.39" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.190125][ T419] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 35.190524][ T36] audit: type=1400 audit(1785458401.820:151): avc: denied { mmap_zero } for pid=416 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 35.202586][ T419] SELinux: failed to load policy [ 35.218460][ T36] audit: type=1400 audit(1785458401.830:152): avc: denied { bind } for pid=415 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.257228][ T36] audit: type=1400 audit(1785458401.920:153): avc: denied { create } for pid=424 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.276634][ T36] audit: type=1400 audit(1785458401.920:154): avc: denied { setopt } for pid=424 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.303348][ T66] usb 3-1: device descriptor read/64, error -71 [ 35.335689][ T429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 35.410742][ T436] netlink: 60 bytes leftover after parsing attributes in process `syz.0.46'. [ 35.553378][ T66] usb 3-1: device descriptor read/64, error -71 [ 35.701362][ T460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 35.708802][ T460] IPv6: NLM_F_CREATE should be set when creating new route [ 35.716129][ T460] IPv6: NLM_F_CREATE should be set when creating new route [ 35.743211][ T313] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.793211][ T66] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 35.893364][ T313] usb 2-1: Using ep0 maxpacket: 8 [ 35.899591][ T313] usb 2-1: unable to get BOS descriptor or descriptor too short [ 35.908397][ T313] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 35.917798][ T313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.928176][ T313] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 35.937290][ T313] usb 2-1: config 1 has no interface number 1 [ 35.943286][ T66] usb 3-1: device descriptor read/64, error -71 [ 35.944406][ T313] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 35.963181][ T313] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.976352][ T313] usb 2-1: config 1 interface 2 has no altsetting 0 [ 35.983325][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 35.992540][ T313] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.008258][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.016474][ T313] usb 2-1: Product: syz [ 36.020675][ T313] usb 2-1: Manufacturer: syz [ 36.025510][ T313] usb 2-1: SerialNumber: syz [ 36.133281][ T378] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.144378][ T10] usb 1-1: config 1 has an invalid descriptor of length 183, skipping remainder of the config [ 36.154878][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.164776][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 36.174363][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.182497][ T10] usb 1-1: SerialNumber: syz [ 36.184328][ T66] usb 3-1: device descriptor read/64, error -71 [ 36.233006][ T447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.241804][ T447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.257602][ T10] usb 1-1: 0:2 : does not exist [ 36.264742][ T313] usb 2-1: USB disconnect, device number 3 [ 36.271202][ T10] usb 1-1: unit 174 not found! [ 36.281928][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.300007][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 36.310266][ T66] usb usb3-port1: attempt power cycle [ 36.316494][ T378] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 36.327929][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 65535, setting to 1024 [ 36.344896][ T378] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 36.356802][ T378] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 36.366253][ T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.374359][ T378] usb 4-1: Product: syz [ 36.378839][ T378] usb 4-1: Manufacturer: syz [ 36.384381][ T378] usb 4-1: SerialNumber: syz [ 36.390119][ T378] usb 4-1: config 0 descriptor?? [ 36.395615][ T476] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 36.400942][ T480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.406608][ T378] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 36.412732][ T480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.426635][ T10] usb 1-1: USB disconnect, device number 3 [ 36.607725][ T378] scsi host1: usb-storage 4-1:0.0 [ 36.617508][ T378] usb 4-1: USB disconnect, device number 4 [ 36.653240][ T66] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 36.674368][ T66] usb 3-1: device descriptor read/8, error -71 [ 36.804581][ T66] usb 3-1: device descriptor read/8, error -71 [ 37.043179][ T66] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 37.074197][ T66] usb 3-1: device descriptor read/8, error -71 [ 37.186099][ T534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.193439][ T534] IPv6: NLM_F_CREATE should be set when creating new route [ 37.200689][ T534] IPv6: NLM_F_CREATE should be set when creating new route [ 37.208941][ T66] usb 3-1: device descriptor read/8, error -71 [ 37.317985][ T538] kvm: kvm [537]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 37.329509][ T538] kvm: kvm [537]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 37.333678][ T66] usb usb3-port1: unable to enumerate USB device [ 37.530655][ T550] input: syz0 as /devices/virtual/input/input5 [ 37.537494][ T546] dummy_hcd dummy_hcd.0: remove, state 4 [ 37.663212][ T10] hub 1-0:1.0: activate --> -108 [ 37.668309][ T10] hub 1-0:1.0: hub_ext_port_status failed (err = -108) [ 37.669335][ T546] usb usb1: USB disconnect, device number 1 [ 37.683597][ T546] dummy_hcd dummy_hcd.0: stopped [ 37.688776][ T546] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 37.782359][ T560] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 37.791350][ T560] SELinux: failed to load policy [ 37.896930][ T564] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 37.968064][ T568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.975375][ T568] IPv6: NLM_F_CREATE should be set when creating new route [ 37.982989][ T568] IPv6: NLM_F_CREATE should be set when creating new route [ 38.122245][ T66] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.298464][ T595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.305830][ T595] IPv6: NLM_F_CREATE should be set when creating new route [ 38.313091][ T595] IPv6: NLM_F_CREATE should be set when creating new route [ 38.313277][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.406609][ T605] netlink: 'syz.3.92': attribute type 64 has an invalid length. [ 38.683290][ T66] usb 2-1: device not accepting address 4, error -71 [ 38.878951][ T623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.886523][ T623] IPv6: NLM_F_CREATE should be set when creating new route [ 38.893904][ T623] IPv6: NLM_F_CREATE should be set when creating new route [ 39.327338][ T637] netlink: 'syz.3.105': attribute type 4 has an invalid length. [ 39.335197][ T637] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.105'. [ 39.426320][ T639] netlink: 140 bytes leftover after parsing attributes in process `syz.1.107'. [ 39.857537][ T36] kauditd_printk_skb: 154 callbacks suppressed [ 39.857560][ T36] audit: type=1400 audit(1785458406.520:309): avc: denied { read write } for pid=299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 39.945949][ T36] audit: type=1400 audit(1785458406.610:310): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 40.539152][ T548] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 40.551805][ T548] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 40.560231][ T548] CPU: 1 UID: 0 PID: 548 Comm: syz.0.74 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 40.572305][ T548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.582426][ T548] RIP: 0010:set_link_state+0x2a/0x1240 [ 40.587932][ T548] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 dd 01 ce fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 c4 26 fe 4d 8b 75 00 49 8d 95 93 [ 40.607644][ T548] RSP: 0018:ffffc9000d5bf718 EFLAGS: 00010046 [ 40.613746][ T548] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811a74a600 [ 40.621845][ T548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.629831][ T548] RBP: ffffc9000d5bf7a0 R08: 0000000000000003 R09: 0000000000000004 [ 40.637906][ T548] R10: dffffc0000000000 R11: fffff52001ab7ee0 R12: 0000000000000000 [ 40.645902][ T548] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888105fd4000 [ 40.653994][ T548] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.663055][ T548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.669681][ T548] CR2: 00007f4c889f14b8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 40.677669][ T548] Call Trace: [ 40.681085][ T548] [ 40.684032][ T548] ? __kasan_check_write+0x18/0x20 [ 40.689154][ T548] dummy_pullup+0xd1/0x130 [ 40.693611][ T548] ? __cfi_dummy_pullup+0x10/0x10 [ 40.698675][ T548] usb_gadget_disconnect_locked+0x151/0x400 [ 40.704583][ T548] gadget_unbind_driver+0xaf/0x3f0 [ 40.709754][ T548] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 40.715497][ T548] device_release_driver_internal+0x4ad/0x830 [ 40.721591][ T548] driver_detach+0x1f5/0x2d0 [ 40.726213][ T548] bus_remove_driver+0x254/0x2b0 [ 40.731157][ T548] driver_unregister+0x79/0xb0 [ 40.735945][ T548] usb_gadget_unregister_driver+0x52/0x80 [ 40.741707][ T548] raw_release+0xdb/0x280 [ 40.746043][ T548] ? __cfi_raw_release+0x10/0x10 [ 40.751140][ T548] __fput+0x208/0xa30 [ 40.755241][ T548] ____fput+0x20/0x30 [ 40.759308][ T548] task_work_run+0x1e8/0x260 [ 40.763925][ T548] ? __cfi_task_work_run+0x10/0x10 [ 40.769140][ T548] ? __kasan_check_write+0x18/0x20 [ 40.774276][ T548] do_exit+0xa46/0x2850 [ 40.778441][ T548] ? hrtimer_cancel+0x31/0x60 [ 40.783129][ T548] ? __cfi_do_exit+0x10/0x10 [ 40.787747][ T548] ? futex_wait+0x23c/0x7c0 [ 40.792275][ T548] ? __cfi_futex_wait+0x10/0x10 [ 40.797140][ T548] ? __kasan_check_write+0x18/0x20 [ 40.802281][ T548] ? _raw_spin_lock_irq+0x93/0x120 [ 40.807522][ T548] do_group_exit+0x21f/0x2f0 [ 40.812128][ T548] ? __kasan_check_write+0x18/0x20 [ 40.817334][ T548] ? recalc_sigpending+0x184/0x1d0 [ 40.822500][ T548] get_signal+0x134c/0x1490 [ 40.827030][ T548] arch_do_signal_or_restart+0xbc/0x700 [ 40.832685][ T548] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 40.838863][ T548] syscall_exit_to_user_mode+0x57/0xb0 [ 40.844432][ T548] do_syscall_64+0x63/0xf0 [ 40.848879][ T548] ? clear_bhb_loop+0x50/0xa0 [ 40.853592][ T548] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.859548][ T548] RIP: 0033:0x7f519579e019 [ 40.864230][ T548] Code: Unable to access opcode bytes at 0x7f519579dfef. [ 40.871260][ T548] RSP: 002b:00007ffcfce233e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 40.879695][ T548] RAX: fffffffffffffdfc RBX: 0000000000009293 RCX: 00007f519579e019 [ 40.887860][ T548] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5195a25fac [ 40.895853][ T548] RBP: 0000000000000bea R08: 4000000000000000 R09: 0000000000000000 [ 40.903846][ T548] R10: 00007ffcfce234f0 R11: 0000000000000246 R12: 00007ffcfce23510 [ 40.911844][ T548] R13: 00007f5195a25fac R14: 0000000000009e7d R15: 00007ffcfce234f0 [ 40.919824][ T548] [ 40.922841][ T548] Modules linked in: [ 40.926746][ T548] ---[ end trace 0000000000000000 ]--- [ 40.932200][ T548] RIP: 0010:set_link_state+0x2a/0x1240 [ 40.937691][ T548] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 dd 01 ce fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 c4 26 fe 4d 8b 75 00 49 8d 95 93 [ 40.957391][ T548] RSP: 0018:ffffc9000d5bf718 EFLAGS: 00010046 [ 40.963504][ T548] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811a74a600 [ 40.971568][ T548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.979580][ T548] RBP: ffffc9000d5bf7a0 R08: 0000000000000003 R09: 0000000000000004 [ 40.987651][ T548] R10: dffffc0000000000 R11: fffff52001ab7ee0 R12: 0000000000000000 [ 40.995624][ T548] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888105fd4000 [ 41.003594][ T548] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 41.012524][ T548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.019131][ T548] CR2: 00007f4c889f14b8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 41.027285][ T548] Kernel panic - not syncing: Fatal exception [ 41.034027][ T548] Kernel Offset: disabled [ 41.038377][ T548] Rebooting in 86400 seconds..