last executing test programs: 3.713953781s ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000006c0)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x16}, [@call={0x5c, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x40000000}}}}}}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9, 0x702}) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '.{$', 0x3a, '&-&^', 0x3a, './file0'}, 0x2e) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x87, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x5, 0x80, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "21478d9b0868"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x5, 0x80}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x5, 0x8}, @country_functional={0x6, 0x24, 0x7, 0x5, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x6, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x81, 0xc4, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x9f, 0xe}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x250, 0xf, 0xae, 0x4, 0x10, 0x6}, 0x1d, &(0x7f0000000600)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xc, 0x2, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x10, 0x4, 0xd}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0xc, 0x7}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x809}}]}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r8 = openat$incfs(r7, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x40106726, 0x0) r9 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)="3a79c62c6e7689", 0x7, 0xfffffffffffffffe) keyctl$read(0xb, r9, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0xc7, &(0x7f00000000c0)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x7, 0x10, 0x8, {0x8, 0xb, 0x2, 0x1, 0x1, 0x23, 0x30, 0xef}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x4b, 0x1}, [@processing_unit={0x1d, 0x24, 0x9, 0x2, 0x6, [0x2, 0x3, 0x1, 0x1, 0x3, 0x3]}, @extension_unit={0xd, 0x24, 0xa, 0x2, 0x6, [0x3, 0x0]}, @cluster_info_segment={0x6, 0x20, 0x5, 0xa1, 0x7}, @source_unit={0xc, 0x24, 0xb, 0x8, 0x0, 0x10001, 0x5, 0x7}, @mixer_unit={0x5, 0x24, 0x5, 0x3, 0x41}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x4, 0xb4, {0xa, 0x25, 0x25, 0x5, 0x8, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x2, 0xf9, {0xa, 0x25, 0x25, 0xff, 0x10, 0xa8d}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x3e, 0xd, 0x2, 0xff, 0x1}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x5, [{0x2, &(0x7f0000000240)=@string={0x2}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x6d, &(0x7f0000000480)=ANY=[@ANYBLOB="6d03725972ddd31d2fca6622f007946213b90903840274a57212fcdd3942edf9ff8445fcf0697461004b8973741b151a9de95064ffc3b1009b192d24504ad5d4e116d6f837ba6eb887a53354c519629493bfeefec869f591baac87d1a4af7cbd857006297df68a80cc7da85203c291b1a56350de30ad8b6e9eb6"]}, {0x7f, &(0x7f0000000380)=@string={0x7f, 0x3, "e87848d55f4e3760ba79960609cdd0c8f6a939f10dbd4793b332c03e956db7854ecfd3eaf6f253b3871ebe1dcf58ccff30f8acb921b183bd166570bbe54db80c45aeb3bddcb1840df1bb9477da9edb660f9896599925ea77abfbbaba6644cc8c533bd3b7f00197b18afbde8db2a5ed80283298df186fca4574df7dc8a2"}}]}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') read$FUSE(r10, &(0x7f0000004100)={0x2020}, 0x2020) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000b40)={0x200000, 0x104000, 0x1}) sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f0000000b00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b80)={0x2d0, r11, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f00}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x992}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc76e}]}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xac, 0x3, "d4e8677d7cf9c5805b732dbbdc0148148f3dd17b989bf016a9b3e54dd7916e955ea3792a864368ba74cea65a593cb9106ff54e77cf6204e1b57ffa12eeb900f98d8d91af900d3359d6ea6c4dcbb0d60ea9eabbb141f75ed1d6ac96f78bb3fd6d64aa0dfac58bc2539cb4c03ca49b28eede69cd6d470506bb2c79a33e59554d0f63d7b7155ce3b33f3ac7c8d120f8958ca4024b15840377c03c3204e6c730a67803af0a688d017f74"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "43e1c2816880ba7d1020a53c3323a217f55bcb8ab86c4d2d3c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x586a}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3.587699734s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000004c0)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x249, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3801009, 0x0, 0x11, 0x0, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000002c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@debug}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}], [{@dont_appraise}, {@uid_gt={'uid>', r0}}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0xc}}, {@euid_gt={'euid>', r0}}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") socket$unix(0x1, 0x5, 0x0) link(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./mnt\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 3.548378975s ago: executing program 2 (id=3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000700600000000000009000400731166000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@initdev, @initdev, 0x0}, &(0x7f0000000140)=0xc) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@random="37a975960ebc", @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x25, 0x3, 0x0, 0x0, "642f3064dc503f86a0864682723dc2c7c485dececaa09d61ce86f7a8364d41c63a6fa299dd9d42668dbd767d6f72a6e7462e1e1eedb96799ac7909eeb9ccf6b1"}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f, r1}, {0x6, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x3, 0x2, 0x32}, 0x2, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}}, 0x2000800) socket$xdp(0x2c, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x11, [@empty]}, @timestamp={0x7, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @timestamp={0x44, 0x4, 0x2}]}}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2840}, 0x20000004) 3.540410416s ago: executing program 0 (id=1): modify_ldt$write(0x1, &(0x7f0000000000)={0xbef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x28}}], 0x1, 0x4c840) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x4, "", [{{0x9, 0x4, 0x0, 0x5f, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc1, 0x4d, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)={0x20, 0x5, 0x28, {0x28, 0xb, "cb9acc5c04f8d3cfb7ea07000000b74237cc6e446c4e88e78881ce2a52973661967a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x6, 0xad, {0xad, 0xa, "ccf9fb6b22a0b6716df843dab7ee2858680cc29f672a8066a90d0dde305c7bd6349ff71c17c6a1f01797e6a878bcd585e6eff399cd3acbac155f56187abace73503b25c682b76bf925930c33c3af658fafeee31bde8725879ce7284221b9a7b5d498121ba1522a5bb04fec436ab5e6d0c205523fec05fb8530009d3f23af0de50989ff4ded6ce9463da26b6c16505d8f73102b96bb33fba188cb871b3a99a887db98c009e6a2123a1db023"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000000200)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "5679803306c70d2123014e9838aa45e6"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "bf2a1ec1da0526c6f670862b857eea9f"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x3, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0xb, 0x2b02}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xa, 0xd, 0x72b}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "9108cf3fb95f80ce1d2d3ec603d061ee"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0x2, 0x9, "1bcca002", "916a1eca"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x80, 0x5, 0xbd, 0x5, 0x7, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0xa, 0x7f, "2ffbd2aef8beaf2b672adb02f78412ea90ec3d096229e62de89a872cb0d28a5e48232443f87f233a476373c052a1cab275e33399ba30979286b014b0b274720c45d56e6b8c013c418856662122598cfca69a22c61daa82d7038c0f4c40536c772a0f7db94d9f309d89f710a646988a17f8490a5c50a842bcc5a31da7811be1"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000480)={0x20, 0x0, 0x4}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0xe0, 0x20}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000580)={0x40, 0xb, 0x2, "b303"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "cc2d"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xe1d5}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x6}}) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.34090002s ago: executing program 3 (id=4): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0x9}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0x7, 0x4, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8850, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) 3.179468884s ago: executing program 3 (id=6): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0x29bc8c3c67235b19, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xf}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4018848}, 0x20004804) rmdir(&(0x7f0000001300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.151804945s ago: executing program 3 (id=7): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x9f9204da10293d0d, 0x12, 0xffffffffffffffff, 0x50fdf000) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r0, &(0x7f00000046c0)={0x2020}, 0x2020) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000180)={0x6, 0x2010, 0x18b7, 0x3}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="b80000001900b3f90000000001dcdf25ffffffff000000000000000000000000ac1414aa0000000000000000000000004e2400004e25008102002020c6000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000002000000000007b3417eb2a18ffd917c59fffffff700000000000000000000000000000000000000070000000000002002000000000000000000000000000000000000000000000003000000000000000000000000007ab35100000000000000000000fdffffffffffffff00000000000000000101000300000000b99f0c2d292a3ec9c7d1e9fe0b4b78f94e6bccff0e3ca31da663809b626c3a7d479bed3bd647b2e39205"], 0xb8}}, 0x0) r4 = socket(0x2, 0x3, 0x6) bind$inet(r4, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r4, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000006800019f000200000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) socketpair(0x5, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000140)) r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f00000002c0)) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0022020008005267"], 0x0}, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 2.278318626s ago: executing program 2 (id=8): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0x9}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0x7, 0x4, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$cdc_ncm(0x4, 0x92, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0x2, 0x20, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0xb800, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x9}, [@acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xd}, @mdlm={0x15, 0x24, 0x12, 0x8}, @country_functional={0x6, 0x24, 0x7, 0x5, 0xf99}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x19, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x40, 0x80, 0x1}}}}}}}]}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) 2.175328428s ago: executing program 1 (id=9): socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) readlink(0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x2200006, &(0x7f0000000100)=ANY=[], 0x2, 0x252, &(0x7f0000000580)="$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") fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000280)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x5, 0xfffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x2716, 0x8, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 1.849994426s ago: executing program 1 (id=10): socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) readlink(0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x2200006, &(0x7f0000000100)=ANY=[], 0x2, 0x252, &(0x7f0000000580)="$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") fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000280)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x5, 0xfffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x2716, 0x8, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 1.849635486s ago: executing program 32 (id=10): socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) readlink(0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x2200006, &(0x7f0000000100)=ANY=[], 0x2, 0x252, &(0x7f0000000580)="$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") fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000280)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x5, 0xfffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x2716, 0x8, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 1.325784389s ago: executing program 5 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='dummy_hcd.0', 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a}, 0x28) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0xee01, 0x0, 0x0}) unlinkat(r5, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x64010101, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 90.422988ms ago: executing program 3 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='dummy_hcd.0', 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a}, 0x28) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0xee01, 0x0, 0x0}) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002"], 0x88}}, 0x20000000) fcntl$setown(r2, 0x8, r4) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x64010101, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 0s ago: executing program 5 (id=13): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$midi(0x3, 0x83, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x1, 0x1, 0x9, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0x7, [@midi_out_jack={0x13, 0x24, 0x3, 0x1, 0xb, 0x6, [{0x9, 0xfd}, {0xa, 0x1}, {0x7, 0xfc}, {0x6, 0x2c}, {0x9, 0xcc}, {0x80, 0xc5}]}, @ms_header={0x7, 0x24, 0x1, 0x43, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xd, 0x5}, @ms_header={0x7, 0x24, 0x1, 0x1000, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0x0, 0x9, 0x7, {0x4}}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x8, 0x0, {0xc, 0x25, 0x1, 0x8, "f32c289f03d56fee"}}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x1, 0x3, 0xbd, {0x6, 0x25, 0x1, 0x2, '/9'}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x80, 0x9, 0xff, 0x8}, 0x2c, &(0x7f00000001c0)={0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x6, 0x0, 0x7d, [0xc0, 0x3f, 0xff00c0, 0x30, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0xff}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x455}}, {0xdc, &(0x7f0000000300)=@string={0xdc, 0x3, "fcb4c064c82fa57cc1d2b552f142f3327e56dad5a66da14751b278cd215d6a1bcb9769ca1f1b6f57d760ace8a0a4f458d63009fad7985e18fbc2b1ec9f12e2c79aba765cdb9f44f57791abe2170c5385775fb650230914c4fc084dfc959de8e4dd767ce6cad2c6c09f15d85c15aadea4421696d8279cb20c6f00e872cc22c9b89e86240aba8dab1e55eef85d812159229b0301cd6b47f5f2c8dfa8ffe03338994168483961ac4012181172be9c72bc86797ae26749d5e7ddba91d939d704c2f995591a33b1ff5fa042adafb91ed1f0cd4d02fc4cddfe24ea5496"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc04}}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000500)={0x14, &(0x7f0000000480)={0x20, 0x9, 0x3a, {0x3a, 0x14, "fcd5610e8bfc2b7a8a6de323691118c00d42051051d362257f6cd732cc30b504c02da73d6988b51e8795b88e908a40a4d77799e51c305ade"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000540)={0x0, 0x0, 0x46, "bab3b31fa3f240e8dd8fc518f9477f1cba2101a38c155434e045021982099f762aec7e5f564a089e40039ca8a214b4c2f0d6fd8e280f3de9c352e5337d466a153818f3dce6cc"}, &(0x7f00000005c0)={0x0, 0xa, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000640)={0x20, 0x81, 0x1, "a4"}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "90f0"}, &(0x7f0000000700)={0x20, 0x83, 0x1, 'f'}, &(0x7f0000000740)={0x20, 0x84, 0x2, "a123"}, &(0x7f0000000780)={0x20, 0x85, 0x3, '-*f'}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 21.317373][ T30] audit: type=1400 audit(1784983921.538:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.318377][ T277] cgroup: Unknown subsys name 'net' [ 21.340159][ T30] audit: type=1400 audit(1784983921.538:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.367771][ T30] audit: type=1400 audit(1784983921.568:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.367912][ T277] cgroup: Unknown subsys name 'devices' [ 21.542020][ T277] cgroup: Unknown subsys name 'hugetlb' [ 21.547745][ T277] cgroup: Unknown subsys name 'rlimit' [ 21.654332][ T30] audit: type=1400 audit(1784983921.878:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.677607][ T30] audit: type=1400 audit(1784983921.878:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.702423][ T30] audit: type=1400 audit(1784983921.878:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.710844][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.734687][ T30] audit: type=1400 audit(1784983921.958:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.760619][ T30] audit: type=1400 audit(1784983921.958:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.762445][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.786629][ T30] audit: type=1400 audit(1784983921.988:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.820561][ T30] audit: type=1400 audit(1784983921.988:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.307235][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.314798][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.322345][ T285] device bridge_slave_0 entered promiscuous mode [ 22.341181][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.348262][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.355692][ T285] device bridge_slave_1 entered promiscuous mode [ 22.415895][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.423196][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.430632][ T287] device bridge_slave_0 entered promiscuous mode [ 22.438448][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.445578][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.453031][ T287] device bridge_slave_1 entered promiscuous mode [ 22.459524][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.466625][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.474016][ T286] device bridge_slave_0 entered promiscuous mode [ 22.484146][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.491262][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.498741][ T286] device bridge_slave_1 entered promiscuous mode [ 22.562896][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.570044][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.577364][ T289] device bridge_slave_0 entered promiscuous mode [ 22.584777][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.591862][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.599281][ T289] device bridge_slave_1 entered promiscuous mode [ 22.665324][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.672420][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.679711][ T288] device bridge_slave_0 entered promiscuous mode [ 22.702521][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.709582][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.717309][ T288] device bridge_slave_1 entered promiscuous mode [ 22.768663][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.775744][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.783797][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.790877][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.798132][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.805175][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.830629][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.837689][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.844986][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.852047][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.905997][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.913522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.921365][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.928520][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.935931][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.943247][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.964976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.973873][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.980934][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.988445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.997265][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.004455][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.023734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.031452][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.039018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.047634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.056145][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.063339][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.070974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.079132][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.086197][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.114316][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.123106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.131685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.139769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.148130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.156988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.165529][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.172768][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.180429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.189016][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.196258][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.218929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.227478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.236059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.243765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.253820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.268604][ T285] device veth0_vlan entered promiscuous mode [ 23.277219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.285438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.293206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.301005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.309534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.326717][ T285] device veth1_macvtap entered promiscuous mode [ 23.333850][ T286] device veth0_vlan entered promiscuous mode [ 23.350481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.357977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.365681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.375139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.383608][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.390658][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.398590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.406986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.415277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.423135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.431622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.439835][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.446890][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.454433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.462056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.469444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.477875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.486188][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.493404][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.501032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.509430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.517648][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.524689][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.532098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.540318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.548248][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.555973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.566339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.575191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.588009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.596434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.607435][ T286] device veth1_macvtap entered promiscuous mode [ 23.617165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.625709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.633897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.642643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.650948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.661507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.669661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.691225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.699643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.708294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.717364][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.725896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.734422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.743855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.752398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.763888][ T287] device veth0_vlan entered promiscuous mode [ 23.774586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.783018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.791558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.799391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.807705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.815387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.831312][ T289] device veth0_vlan entered promiscuous mode [ 23.841887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.850361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.858710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.866886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.875295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.883827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.891934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.899510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.907254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.915336][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.925178][ T288] device veth0_vlan entered promiscuous mode [ 23.932282][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 23.935846][ T287] device veth1_macvtap entered promiscuous mode [ 23.956481][ T289] device veth1_macvtap entered promiscuous mode [ 23.964369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.972599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.980946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.988625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.997263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.005408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.031002][ T309] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.048771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.057373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.065968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.074305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.082740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.091094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.099424][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.108202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.116948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.125660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.135785][ T288] device veth1_macvtap entered promiscuous mode [ 24.149328][ T314] loop1: detected capacity change from 0 to 128 [ 24.196679][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.207537][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.210258][ T314] ======================================================= [ 24.210258][ T314] WARNING: The mand mount option has been deprecated and [ 24.210258][ T314] and is ignored by this kernel. Remove the mand [ 24.210258][ T314] option from the mount to silence this warning. [ 24.210258][ T314] ======================================================= [ 24.217660][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.263650][ T321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 24.284635][ T314] EXT4-fs (loop1): Test dummy encryption mode enabled [ 24.301356][ T321] Zero length message leads to an empty skb [ 24.307739][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.320218][ T314] EXT4-fs (loop1): Test dummy encryption mode enabled [ 24.327440][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.348810][ T314] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 24.365889][ T314] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 24.419677][ T329] loop3: detected capacity change from 0 to 512 [ 24.427687][ T314] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 24.479270][ T309] Illegal XDP return value 4294966772, expect packet loss! [ 24.510470][ T329] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 24.521937][ T329] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 24.556896][ T334] process 'syz.3.6' launched './file0' with NULL argv: empty string added [ 24.570195][ T26] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 24.681460][ T337] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 25.393467][ T337] syz.1.2 (337) used greatest stack depth: 21960 bytes left [ 25.420749][ T321] syz.2.3 (321) used greatest stack depth: 21856 bytes left [ 25.440186][ T26] usb 1-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 25.461668][ T26] usb 1-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.475084][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.482282][ T26] usb 1-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.00 [ 25.491693][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.503819][ T26] usb 1-1: config 0 descriptor?? [ 25.520137][ T320] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 25.537817][ T285] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/mnt/lost+found: directory fails checksum at offset 1024 [ 25.557528][ T285] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/mnt/lost+found: directory fails checksum at offset 6144 [ 25.572837][ T285] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 25.586365][ T285] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/mnt/lost+found: directory fails checksum at offset 1024 [ 25.601903][ T285] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/mnt/lost+found: directory fails checksum at offset 6144 [ 25.617183][ T285] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 25.631289][ T285] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/mnt/lost+found: directory fails checksum at offset 1024 [ 25.646312][ T285] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/mnt/lost+found: directory fails checksum at offset 6144 [ 25.661403][ T285] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 25.674761][ T285] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /0/mnt/lost+found: directory fails checksum at offset 1024 [ 25.689604][ T316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.700145][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.790135][ T315] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.903230][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.910685][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.918193][ T342] device bridge_slave_0 entered promiscuous mode [ 25.925458][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.932619][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.940798][ T342] device bridge_slave_1 entered promiscuous mode [ 25.950156][ T316] usb 5-1: Using ep0 maxpacket: 16 [ 25.981576][ T26] ntrig 0003:1B96:0014.0001: item fetching failed at offset 7/40 [ 25.989593][ T26] ntrig 0003:1B96:0014.0001: parse failed [ 25.991172][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.995674][ T26] ntrig: probe of 0003:1B96:0014.0001 failed with error -22 [ 26.002406][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.017376][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.024454][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.031887][ T6] usb 4-1: device descriptor read/64, error -71 [ 26.040063][ T315] usb 3-1: Using ep0 maxpacket: 8 [ 26.046569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.055108][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.062410][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.073294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.081775][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.089526][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.098419][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.106801][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.113885][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.121299][ T316] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 26.129612][ T316] usb 5-1: config 0 has no interface number 0 [ 26.136027][ T316] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 26.147498][ T316] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 26.158742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.166617][ T315] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 26.166878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.175447][ T315] usb 3-1: config 179 has no interface number 0 [ 26.195180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.200054][ T315] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 26.213610][ T342] device veth0_vlan entered promiscuous mode [ 26.214660][ T315] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 26.232130][ T315] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 26.243588][ T315] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 26.255399][ T315] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 26.255572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.268932][ T315] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 26.278187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.286114][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.294189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.313746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.321805][ T340] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 26.330196][ T316] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 26.330709][ T342] device veth1_macvtap entered promiscuous mode [ 26.339524][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.355279][ T316] usb 5-1: Product: syz [ 26.361292][ T316] usb 5-1: Manufacturer: syz [ 26.361307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.374500][ T316] usb 5-1: SerialNumber: syz [ 26.375561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.387814][ T316] usb 5-1: config 0 descriptor?? [ 26.410144][ T309] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 26.417230][ T309] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 26.440513][ T6] usb 4-1: device descriptor read/64, error -71 [ 26.510592][ T306] device bridge_slave_1 left promiscuous mode [ 26.516724][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.524307][ T306] device bridge_slave_0 left promiscuous mode [ 26.530589][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.538451][ T306] device veth1_macvtap left promiscuous mode [ 26.544611][ T306] device veth0_vlan left promiscuous mode [ 26.740398][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 26.740439][ T30] audit: type=1400 audit(1784983926.828:137): avc: denied { mount } for pid=347 comm="syz.5.11" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 26.908847][ T309] UDC core: couldn't find an available UDC or it's busy: -16 [ 27.049257][ T309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.208753][ T30] audit: type=1400 audit(1784983927.068:138): avc: denied { read } for pid=307 comm="syz.4.5" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.684305][ T30] audit: type=1400 audit(1784983927.068:139): avc: denied { open } for pid=307 comm="syz.4.5" path="/0/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.708680][ T316] asix: probe of 5-1:0.34 failed with error -71 [ 27.721269][ T30] audit: type=1400 audit(1784983927.088:140): avc: denied { ioctl } for pid=307 comm="syz.4.5" path="/0/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.779412][ T30] audit: type=1400 audit(1784983927.948:141): avc: denied { unmount } for pid=342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 27.791006][ T316] usb 5-1: USB disconnect, device number 2 [ 27.802907][ T39] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input4 [ 27.926777][ T363] dummy_hcd dummy_hcd.0: remove, state 1 [ 27.933009][ T363] usb usb1: USB disconnect, device number 1 [ 27.939314][ T363] usb 1-1: USB disconnect, device number 2 [ 28.074943][ T30] audit: type=1400 audit(1784983928.288:142): avc: denied { create } for pid=356 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 28.112572][ T363] dummy_hcd dummy_hcd.0: stopped [ 28.117762][ T363] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 28.244117][ T315] usb 3-1: USB disconnect, device number 2 [ 28.250047][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 28.250081][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 28.353571][ T30] audit: type=1400 audit(1784983928.298:143): avc: denied { write } for pid=356 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 28.379062][ T315] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 28.864505][ T320] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 28.876361][ T320] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 28.884882][ T320] CPU: 1 PID: 320 Comm: syz.0.1 Not tainted syzkaller #0 [ 28.892008][ T320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 28.902080][ T320] RIP: 0010:set_link_state+0x2a/0x1210 [ 28.907576][ T320] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 9d 08 40 fe 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 f8 77 7f fe 4d 8b 75 00 49 8d 95 8b [ 28.927196][ T320] RSP: 0018:ffffc900078bf760 EFLAGS: 00010046 [ 28.933289][ T320] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810d5b13c0 [ 28.941280][ T320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.949269][ T320] RBP: ffffc900078bf7e8 R08: 0000000000000003 R09: 0000000000000004 [ 28.957259][ T320] R10: dffffc0000000000 R11: fffff52000f17eec R12: 0000000000000000 [ 28.965250][ T320] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888101994000 [ 28.973247][ T320] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.982267][ T320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.988849][ T320] CR2: 00007f887af41990 CR3: 000000000660f000 CR4: 00000000003526a0 [ 28.996821][ T320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.004808][ T320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.012777][ T320] Call Trace: [ 29.016055][ T320] [ 29.018986][ T320] dummy_pullup+0xcd/0x130 [ 29.023494][ T320] ? dummy_set_selfpowered+0x150/0x150 [ 29.029048][ T320] usb_gadget_disconnect+0xe0/0x330 [ 29.034453][ T320] usb_gadget_remove_driver+0x46/0x310 [ 29.039927][ T320] usb_gadget_unregister_driver+0x181/0x480 [ 29.045909][ T320] ? kasan_quarantine_put+0x34/0x190 [ 29.051193][ T320] raw_release+0xda/0x260 [ 29.055533][ T320] ? raw_open+0x3d0/0x3d0 [ 29.059865][ T320] __fput+0x22b/0x900 [ 29.063844][ T320] ____fput+0x15/0x20 [ 29.067822][ T320] task_work_run+0x127/0x190 [ 29.072408][ T320] do_exit+0xb70/0x29a0 [ 29.076559][ T320] ? __up+0x160/0x160 [ 29.080554][ T320] ? put_task_struct+0x90/0x90 [ 29.085318][ T320] ? __kasan_check_write+0x14/0x20 [ 29.090783][ T320] ? _raw_spin_lock_irq+0x95/0xf0 [ 29.095872][ T320] do_group_exit+0x149/0x310 [ 29.100607][ T320] ? __kasan_check_write+0x14/0x20 [ 29.105896][ T320] ? recalc_sigpending+0x1c4/0x230 [ 29.111038][ T320] get_signal+0x64f/0x1430 [ 29.115470][ T320] arch_do_signal_or_restart+0xe2/0x1100 [ 29.121105][ T320] ? _raw_spin_unlock+0x4d/0x70 [ 29.125957][ T320] ? finish_task_switch+0x16b/0x790 [ 29.131254][ T320] ? switch_mm_irqs_off+0x730/0x960 [ 29.136457][ T320] ? __schedule+0xbd7/0x14a0 [ 29.141048][ T320] ? get_sigframe_size+0x10/0x10 [ 29.145988][ T320] ? fput_many+0x15a/0x1a0 [ 29.150510][ T320] ? __kasan_check_read+0x11/0x20 [ 29.155585][ T320] exit_to_user_mode_loop+0xa7/0xe0 [ 29.160804][ T320] exit_to_user_mode_prepare+0x87/0xd0 [ 29.166267][ T320] syscall_exit_to_user_mode+0x1a/0x30 [ 29.171929][ T320] do_syscall_64+0x58/0xa0 [ 29.176438][ T320] ? clear_bhb_loop+0x50/0xa0 [ 29.181111][ T320] ? clear_bhb_loop+0x50/0xa0 [ 29.185815][ T320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.191731][ T320] RIP: 0033:0x7f78a7ad4b2b [ 29.196184][ T320] Code: Unable to access opcode bytes at RIP 0x7f78a7ad4b01. [ 29.203545][ T320] RSP: 002b:00007f78a652bf50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.211956][ T320] RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 00007f78a7ad4b2b [ 29.219933][ T320] RDX: 00007f78a652cfe0 RSI: 0000000080085502 RDI: 0000000000000007 [ 29.227906][ T320] RBP: 00007f78a7b6aeaf R08: 0000000000000000 R09: 0000000000000000 [ 29.235877][ T320] R10: 0000000000000007 R11: 0000000000000246 R12: 00002000000007c0 [ 29.243858][ T320] R13: 0000200000000300 R14: 00007f78a7d5cfa0 R15: 00007ffc0976c638 [ 29.251831][ T320] [ 29.254848][ T320] Modules linked in: [ 29.258755][ T320] ---[ end trace 755f56865891496f ]--- [ 29.264397][ T320] RIP: 0010:set_link_state+0x2a/0x1210 [ 29.269873][ T320] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 9d 08 40 fe 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 f8 77 7f fe 4d 8b 75 00 49 8d 95 8b [ 29.289677][ T320] RSP: 0018:ffffc900078bf760 EFLAGS: 00010046 [ 29.295763][ T320] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810d5b13c0 [ 29.303869][ T320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.311940][ T320] RBP: ffffc900078bf7e8 R08: 0000000000000003 R09: 0000000000000004 [ 29.319926][ T320] R10: dffffc0000000000 R11: fffff52000f17eec R12: 0000000000000000 [ 29.327908][ T320] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888101994000 [ 29.335887][ T320] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.344834][ T320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.351516][ T320] CR2: 00007f887af41990 CR3: 000000000660f000 CR4: 00000000003526a0 [ 29.359668][ T320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.367726][ T320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.375798][ T320] Kernel panic - not syncing: Fatal exception [ 29.382136][ T320] Kernel Offset: disabled [ 29.386478][ T320] Rebooting in 86400 seconds..