last executing test programs: 3.276006839s ago: executing program 1 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@md0, &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) 3.064164135s ago: executing program 1 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000080)={0x0, 0x40000200, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.902076018s ago: executing program 1 (id=18): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) umount2(0x0, 0xb) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x800000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.748017642s ago: executing program 4 (id=23): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$join(0x1, &(0x7f0000000400)={'syz', 0x1}) 2.747846702s ago: executing program 4 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380"], 0x38}}, 0x0) 2.747727182s ago: executing program 4 (id=26): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1018e58, &(0x7f0000000140), 0x4, 0x627, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) 2.530617418s ago: executing program 0 (id=28): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.4718241s ago: executing program 4 (id=29): syz_usb_connect$uac3(0x3, 0xa7, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001000000400c20181040000102030109029500030101c010080b0001010130070904000000010130000a2401103100070000001424020401040305490e00004a16ff030800000013240301000403050401"], 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2100, 0x0) 2.471618709s ago: executing program 3 (id=30): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xcc5, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0xb, 0x6, 0x400, 0x403, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.400999381s ago: executing program 3 (id=31): unshare(0x100000) openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x42, 0x40) 2.383283012s ago: executing program 3 (id=32): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0xfffffffd, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.068148939s ago: executing program 0 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000004900010028bd7000fbdbdf250a008000", @ANYRES32, @ANYBLOB="f8ffffff0800020001000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20044044) 2.067910899s ago: executing program 0 (id=34): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) 2.067818059s ago: executing program 0 (id=35): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xa}, {0xfff1, 0x9}}}, 0x24}}, 0x20004055) r0 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2e5}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.067749849s ago: executing program 0 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) 2.05724148s ago: executing program 1 (id=37): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x7, 0x400023}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r1, &(0x7f0000000040)=""/41, 0x66) 2.02510921s ago: executing program 0 (id=38): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0xfffffffffffffd4b, &(0x7f00000001c0)="ca4ec9680f271fa6815e3ba7ab7d100d340d72c7481659b868e2ccb25e553e0b46dc74676aebc6fca9c5ce143261f8493c5288f9311f56765a0071ee4c6a7b3589e326ec7fc1be9f34") 1.971647182s ago: executing program 1 (id=39): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) 1.459934494s ago: executing program 3 (id=40): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000001780)=0x92c, 0x4) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/69, 0x45}, 0x2}], 0x1c, 0x10022, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001940)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 1.2402947s ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='proc\x00', 0x1a) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/use-gss-proxy\x00', 0x82, 0x184) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x198) 1.24017224s ago: executing program 3 (id=43): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x0, 0xb5, 0x1c, 0x80, 0x3}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 614.298585ms ago: executing program 4 (id=44): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080), 0xfe, 0x250, &(0x7f0000000600)="$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") unshare(0x2a020480) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 476.588769ms ago: executing program 4 (id=49): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x42799000) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) 264.627553ms ago: executing program 1 (id=50): bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x14, &(0x7f0000001380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001180), 0x181402, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000011c0)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000001200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001240)={0x0, 0x3, 0x8, 0x800b2, 0x4, "1beb00000e001000000008010100005e0d01fd"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001280)=0x44) 256.923034ms ago: executing program 2 (id=53): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYBLOB="00000000000000001c00128009000100766c616e", @ANYRES32, @ANYBLOB='\b\x00?'], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) 218.037185ms ago: executing program 2 (id=54): openat$null(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x40041}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4044830}, 0x4004884) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100ffffff810100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r3], 0x22c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 188.506326ms ago: executing program 2 (id=55): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x20040010) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) preadv(0xffffffffffffffff, &(0x7f0000000e80)=[{0x0}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000c80)=""/219, 0xdb}, {&(0x7f0000000ec0)=""/245, 0xf5}], 0x4, 0x0, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 125.155357ms ago: executing program 2 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002d40), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000002f00)={0x70001, 0x0, {[0xffffffffffffffff, 0x1fb, 0xffffffffffffffff, 0x8001, 0x16, 0x4, 0x1, 0x8]}}) 82.898738ms ago: executing program 2 (id=57): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 0s ago: executing program 2 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='e:mygroup/myevent sched.sched_switch', 0x24) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs/events/mygroup/myevent/enable\x00', 0x2, 0x1) open(&(0x7f00000002c0)='./tracefs/dynamic_events\x00', 0x14927e, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. [ 23.701303][ T30] audit: type=1400 audit(1792178766.899:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.705119][ T277] cgroup: Unknown subsys name 'net' [ 23.724173][ T30] audit: type=1400 audit(1792178766.909:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.751665][ T30] audit: type=1400 audit(1792178766.929:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.771874][ T277] cgroup: Unknown subsys name 'devices' [ 23.863599][ T277] cgroup: Unknown subsys name 'hugetlb' [ 23.869282][ T277] cgroup: Unknown subsys name 'rlimit' [ 24.010193][ T30] audit: type=1400 audit(1792178767.209:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.033572][ T30] audit: type=1400 audit(1792178767.209:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.058426][ T30] audit: type=1400 audit(1792178767.209:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.078080][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.091091][ T30] audit: type=1400 audit(1792178767.289:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.116961][ T30] audit: type=1400 audit(1792178767.289:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.155117][ T30] audit: type=1400 audit(1792178767.359:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.181505][ T30] audit: type=1400 audit(1792178767.359:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.181665][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.180897][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.188206][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.195833][ T286] device bridge_slave_0 entered promiscuous mode [ 25.225714][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.232864][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.240348][ T286] device bridge_slave_1 entered promiscuous mode [ 25.262698][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.269789][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.277472][ T288] device bridge_slave_0 entered promiscuous mode [ 25.287246][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.294376][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.301872][ T288] device bridge_slave_1 entered promiscuous mode [ 25.321385][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.328588][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.336216][ T289] device bridge_slave_0 entered promiscuous mode [ 25.346024][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.353161][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.360543][ T289] device bridge_slave_1 entered promiscuous mode [ 25.415719][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.422830][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.430384][ T287] device bridge_slave_0 entered promiscuous mode [ 25.439073][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.446194][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.453761][ T287] device bridge_slave_1 entered promiscuous mode [ 25.466396][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.473949][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.481415][ T285] device bridge_slave_0 entered promiscuous mode [ 25.488568][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.495683][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.503265][ T285] device bridge_slave_1 entered promiscuous mode [ 25.655473][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.662584][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.669997][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.677078][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.689232][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.696334][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.703874][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.710920][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.726472][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.733596][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.740915][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.747995][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.767539][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.774902][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.782350][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.789400][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.826702][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.833795][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.841198][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.848459][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.874285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.882937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.891385][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.899567][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.907835][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.915387][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.923108][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.930487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.938383][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.945844][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.954312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.962916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.972487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.980108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.991887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.022362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.030889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.039394][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.046541][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.054757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.063053][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.070106][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.077571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.085037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.092564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.100712][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.107901][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.115495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.123847][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.130875][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.143020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.162831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.171331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.179561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.189630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.209252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.217577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.226161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.235387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.243564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.252080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.262411][ T286] device veth0_vlan entered promiscuous mode [ 26.277549][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.285860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.294579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.303287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.312099][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.319872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.331886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.340398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.348913][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.356153][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.363725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.372336][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.380765][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.387970][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.395520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.403789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.412647][ T286] device veth1_macvtap entered promiscuous mode [ 26.426783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.434724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.442551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.450154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.458414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.466737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.475279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.483420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.491848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.500254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.507890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.515863][ T285] device veth0_vlan entered promiscuous mode [ 26.531231][ T289] device veth0_vlan entered promiscuous mode [ 26.538182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.546394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.555202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.563446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.572060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.580371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.590074][ T285] device veth1_macvtap entered promiscuous mode [ 26.597772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.606127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.622587][ T288] device veth0_vlan entered promiscuous mode [ 26.635734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.644272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.652905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.660798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.669091][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.677510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.685674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.693374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.702525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.710869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.732230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.732237][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 26.748741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.757334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.766356][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.777064][ T289] device veth1_macvtap entered promiscuous mode [ 26.791741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.799899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.808878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.820856][ T288] device veth1_macvtap entered promiscuous mode [ 26.835471][ T287] device veth0_vlan entered promiscuous mode [ 26.845899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.855601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.857371][ T311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.867172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.887743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.896062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.903881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.941555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.949950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.005246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.014238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.028571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.037256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.045986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.054485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.072536][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.094956][ T287] device veth1_macvtap entered promiscuous mode [ 27.111894][ T321] FAULT_INJECTION: forcing a failure. [ 27.111894][ T321] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 27.125326][ T321] CPU: 0 PID: 321 Comm: syz.4.5 Not tainted syzkaller #0 [ 27.132383][ T321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 27.142478][ T321] Call Trace: [ 27.145776][ T321] [ 27.148727][ T321] __dump_stack+0x21/0x30 [ 27.153089][ T321] dump_stack_lvl+0x110/0x170 [ 27.157783][ T321] ? show_regs_print_info+0x20/0x20 [ 27.163000][ T321] ? compat_start_thread+0x20/0x20 [ 27.168136][ T321] dump_stack+0x15/0x20 [ 27.172309][ T321] should_fail+0x3ab/0x500 [ 27.176761][ T321] should_fail_alloc_page+0x55/0x80 [ 27.181982][ T321] prepare_alloc_pages+0x13f/0x590 [ 27.187115][ T321] ? __alloc_pages_bulk+0xab0/0xab0 [ 27.192428][ T321] __alloc_pages+0x11d/0x460 [ 27.197044][ T321] ? unlock_page_memcg+0x114/0x130 [ 27.202185][ T321] ? prep_new_page+0x110/0x110 [ 27.206975][ T321] ? page_remove_rmap+0xc6d/0xf40 [ 27.212140][ T321] ? page_add_file_rmap+0x700/0x700 [ 27.217628][ T321] ? mark_page_accessed+0x3a8/0x8e0 [ 27.223063][ T321] __get_free_pages+0x10/0x30 [ 27.227777][ T321] __tlb_remove_page_size+0x18a/0x310 [ 27.233182][ T321] unmap_page_range+0x1059/0x1e00 [ 27.238325][ T321] ? finish_task_switch+0x32a/0x790 [ 27.243525][ T321] ? switch_mm_irqs_off+0x2f0/0x960 [ 27.248832][ T321] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 27.255159][ T321] ? tokenize_frame_descr+0x60/0xc0 [ 27.260356][ T321] ? preempt_schedule_common+0xbe/0xf0 [ 27.265814][ T321] ? schedule_preempt_disabled+0x20/0x20 [ 27.271445][ T321] unmap_vmas+0x26d/0x380 [ 27.275804][ T321] ? unmap_page_range+0x1e00/0x1e00 [ 27.281015][ T321] ? __kasan_check_write+0x14/0x20 [ 27.286130][ T321] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 27.291618][ T321] exit_mmap+0x412/0x8b0 [ 27.295862][ T321] ? vm_brk+0x30/0x30 [ 27.299845][ T321] ? mutex_unlock+0x8f/0x230 [ 27.304437][ T321] ? uprobe_clear_state+0x2c6/0x320 [ 27.309651][ T321] __mmput+0x92/0x300 [ 27.313707][ T321] mmput+0x50/0x150 [ 27.317589][ T321] do_exit+0xacc/0x29a0 [ 27.321764][ T321] ? do_syscall_64+0x58/0xa0 [ 27.326360][ T321] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.332517][ T321] ? put_task_struct+0x90/0x90 [ 27.337289][ T321] ? __kasan_check_write+0x14/0x20 [ 27.342515][ T321] ? _raw_spin_lock_irq+0x95/0xf0 [ 27.347683][ T321] do_group_exit+0x149/0x310 [ 27.352291][ T321] ? __kasan_check_write+0x14/0x20 [ 27.357433][ T321] ? recalc_sigpending+0x1ac/0x230 [ 27.362552][ T321] get_signal+0x64f/0x1430 [ 27.366996][ T321] arch_do_signal_or_restart+0xe2/0x1100 [ 27.372652][ T321] ? rcu_gp_kthread_wake+0x90/0x90 [ 27.377789][ T321] ? kmem_cache_free+0x100/0x320 [ 27.382876][ T321] ? get_sigframe_size+0x10/0x10 [ 27.387831][ T321] ? __se_sys_futex+0x135/0x330 [ 27.392683][ T321] ? ____fput+0x15/0x20 [ 27.396840][ T321] exit_to_user_mode_loop+0xa7/0xe0 [ 27.402035][ T321] exit_to_user_mode_prepare+0x87/0xd0 [ 27.407493][ T321] syscall_exit_to_user_mode+0x1a/0x30 [ 27.412975][ T321] do_syscall_64+0x58/0xa0 [ 27.417393][ T321] ? clear_bhb_loop+0x50/0xa0 [ 27.422207][ T321] ? clear_bhb_loop+0x50/0xa0 [ 27.426920][ T321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.432826][ T321] RIP: 0033:0x7f865039d559 [ 27.437237][ T321] Code: Unable to access opcode bytes at RIP 0x7f865039d52f. [ 27.444612][ T321] RSP: 002b:00007f864edf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 27.453054][ T321] RAX: 0000000000000001 RBX: 00007f8650624fa8 RCX: 00007f865039d559 [ 27.461048][ T321] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8650624fac [ 27.469040][ T321] RBP: 00007f8650624fa0 R08: 0003c93e84a4b972 R09: 0000000000000000 [ 27.477121][ T321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.485097][ T321] R13: 00007f8650625038 R14: 00007ffcae00b520 R15: 00007ffcae00b608 [ 27.493267][ T321] [ 27.591460][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.599926][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.608477][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.617100][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.981615][ T322] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.053799][ T352] loop3: detected capacity change from 0 to 256 [ 28.083247][ T352] ======================================================= [ 28.083247][ T352] WARNING: The mand mount option has been deprecated and [ 28.083247][ T352] and is ignored by this kernel. Remove the mand [ 28.083247][ T352] option from the mount to silence this warning. [ 28.083247][ T352] ======================================================= [ 28.128154][ T350] kvm [348]: vcpu2, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0x0 [ 28.245660][ T358] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 28.253857][ T322] usb 3-1: Using ep0 maxpacket: 16 [ 28.259130][ T358] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 28.311779][ T371] loop3: detected capacity change from 0 to 256 [ 28.319121][ T373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25'. [ 28.340468][ T375] loop4: detected capacity change from 0 to 1024 [ 28.346169][ T371] exfat: Deprecated parameter 'utf8' [ 28.355261][ T371] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 28.379467][ T375] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 28.391698][ T322] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 28.401046][ T375] EXT4-fs (loop4): orphan cleanup on readonly fs [ 28.408568][ T375] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.26: bg 0: block 10: padding at end of block bitmap is not set [ 28.412829][ T322] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 28.431586][ T322] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 28.439313][ T375] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.26: Failed to acquire dquot type 0 [ 28.440014][ T322] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 28.452922][ T375] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.26: Failed to acquire dquot type 0 [ 28.461383][ T322] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 28.471109][ T375] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.26: Freeing blocks not in datazone - block = 0, count = 4096 [ 28.493068][ T375] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.26: Failed to acquire dquot type 0 [ 28.495122][ T322] usb 3-1: config 0 has no interface number 0 [ 28.506458][ T375] EXT4-fs (loop4): 1 orphan inode deleted [ 28.516778][ T375] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 28.532712][ T375] EXT4-fs error (device loop4): ext4_search_dir:1551: inode #2: block 16: comm syz.4.26: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 28.548819][ T322] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 28.570751][ T322] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 28.581268][ T322] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 28.583690][ T375] syz.4.26 (375) used greatest stack depth: 21240 bytes left [ 28.593268][ T322] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 28.612446][ T322] usb 3-1: config 0 interface 125 has no altsetting 0 [ 28.619326][ T322] usb 3-1: config 0 interface 125 has no altsetting 2 [ 28.801683][ T322] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 28.815299][ T322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.831621][ T322] usb 3-1: Product: syz [ 28.840263][ T322] usb 3-1: Manufacturer: syz [ 28.850485][ T322] usb 3-1: SerialNumber: syz [ 28.865755][ T322] usb 3-1: config 0 descriptor?? [ 29.041543][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.067622][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 29.067638][ T30] audit: type=1400 audit(1792178772.269:147): avc: denied { read write } for pid=406 comm="syz.1.39" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.099371][ T30] audit: type=1400 audit(1792178772.269:148): avc: denied { open } for pid=406 comm="syz.1.39" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.148451][ T319] usb 3-1: USB disconnect, device number 2 [ 29.159653][ T30] audit: type=1400 audit(1792178772.269:149): avc: denied { ioctl } for pid=406 comm="syz.1.39" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.381967][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.441515][ T322] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.481586][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.501550][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.629400][ T30] audit: type=1400 audit(1792178772.829:150): avc: denied { setopt } for pid=412 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.649390][ T30] audit: type=1400 audit(1792178772.849:151): avc: denied { read } for pid=412 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.681803][ T39] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 29.690932][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.700508][ T39] usb 5-1: Product: syz [ 29.705160][ T39] usb 5-1: Manufacturer: syz [ 29.709831][ T39] usb 5-1: SerialNumber: syz [ 29.731680][ T322] usb 2-1: Using ep0 maxpacket: 16 [ 29.771626][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.782987][ T26] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 29.799142][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.815172][ T26] usb 1-1: config 0 descriptor?? [ 29.861816][ T322] usb 2-1: config 0 has no interfaces? [ 29.941745][ T322] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 29.951132][ T322] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 29.962780][ T322] usb 2-1: Manufacturer: syz [ 29.971008][ T322] usb 2-1: config 0 descriptor?? [ 30.081686][ T39] usb 5-1: unit 5 not found! [ 30.089742][ T39] usb 5-1: USB disconnect, device number 3 [ 30.101535][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.171571][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 30.177599][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 30.189244][ T26] usb 1-1: USB disconnect, device number 2 [ 30.237187][ T319] usb 2-1: USB disconnect, device number 2 [ 30.292276][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.472619][ T30] audit: type=1400 audit(1792178773.679:152): avc: denied { mmap_zero } for pid=423 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 30.492698][ T424] loop4: detected capacity change from 0 to 128 [ 30.501815][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.543213][ T424] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.554083][ T424] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.569831][ T30] audit: type=1400 audit(1792178773.769:153): avc: denied { write } for pid=423 comm="syz.4.44" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.591292][ T6] usb 4-1: config 114 has an invalid interface number: 240 but max is 0 [ 30.591320][ T6] usb 4-1: config 114 has no interface number 0 [ 30.591339][ T6] usb 4-1: config 114 interface 240 has no altsetting 0 [ 30.613929][ T30] audit: type=1400 audit(1792178773.769:154): avc: denied { add_name } for pid=423 comm="syz.4.44" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.634564][ T30] audit: type=1400 audit(1792178773.769:155): avc: denied { read write open } for pid=423 comm="syz.4.44" path="/9/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.658375][ T30] audit: type=1400 audit(1792178773.769:156): avc: denied { ioctl } for pid=423 comm="syz.4.44" path="/9/file1/file1" dev="loop4" ino=12 ioctlcmd=0x661a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.691750][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.711272][ T436] xt_hashlimit: size too large, truncated to 1048576 [ 30.798580][ T442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.52'. [ 30.807977][ T442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.52'. [ 30.831351][ T444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.53'. [ 30.841669][ T6] usb 4-1: string descriptor 0 read error: -22 [ 30.850601][ T6] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 30.870759][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.941557][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 31.045250][ T456] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 31.057026][ T456] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 31.065465][ T456] CPU: 1 PID: 456 Comm: syz.2.58 Not tainted syzkaller #0 [ 31.072601][ T456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.082681][ T456] RIP: 0010:tracing_release_file_tr+0x48/0x100 [ 31.088887][ T456] Code: 81 c3 d8 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 e6 1c 3c 00 48 8b 1b 48 83 c3 28 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c9 1c 3c 00 48 8b 1b 48 85 db 74 [ 31.108526][ T456] RSP: 0018:ffffc9000b20fd80 EFLAGS: 00010206 [ 31.114631][ T456] RAX: 0000000000000005 RBX: 0000000000000028 RCX: ffff888111975000 [ 31.122629][ T456] RDX: 0000000000000000 RSI: ffff88810ef6db00 RDI: ffff888129263020 [ 31.130622][ T456] RBP: ffffc9000b20fda0 R08: ffff8881053a34c7 R09: 1ffff11020a74698 [ 31.138618][ T456] R10: dffffc0000000000 R11: ffffed1020a74699 R12: 1ffff11021dedb65 [ 31.146625][ T456] R13: ffff88810ef6db00 R14: ffff888129263020 R15: dffffc0000000000 [ 31.154620][ T456] FS: 000055555ac43500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.163578][ T456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.170195][ T456] CR2: 000000110c246b83 CR3: 000000012b852000 CR4: 00000000003506a0 [ 31.178192][ T456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.186224][ T456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.194241][ T456] Call Trace: [ 31.197537][ T456] [ 31.200483][ T456] ? tracing_open_file_tr+0x1a0/0x1a0 [ 31.205902][ T456] __fput+0x22b/0x900 [ 31.209915][ T456] ____fput+0x15/0x20 [ 31.213919][ T456] task_work_run+0x127/0x190 [ 31.218531][ T456] exit_to_user_mode_loop+0xd0/0xe0 [ 31.223759][ T456] exit_to_user_mode_prepare+0x87/0xd0 [ 31.229257][ T456] syscall_exit_to_user_mode+0x1a/0x30 [ 31.234780][ T456] do_syscall_64+0x58/0xa0 [ 31.239221][ T456] ? clear_bhb_loop+0x50/0xa0 [ 31.243924][ T456] ? clear_bhb_loop+0x50/0xa0 [ 31.248626][ T456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.254545][ T456] RIP: 0033:0x7f27aa36e559 [ 31.258986][ T456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.278885][ T456] RSP: 002b:00007ffc2a0e7c28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.287510][ T456] RAX: 0000000000000000 RBX: 00007ffc2a0e7d10 RCX: 00007f27aa36e559 [ 31.295516][ T456] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.303511][ T456] RBP: 000000000000791e R08: 0000000000000001 R09: 0000000000000000 [ 31.311514][ T456] R10: 0000001b2da20000 R11: 0000000000000246 R12: 00007ffc2a0e7d50 [ 31.319527][ T456] R13: 00007f27aa5f5fac R14: 0000000000007957 R15: 00007f27aa5f5fa0 [ 31.327536][ T456] [ 31.330599][ T456] Modules linked in: [ 31.351598][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.371528][ T26] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 31.371595][ T456] ---[ end trace 59171aefcddfe19a ]--- [ 31.380607][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.387654][ T26] usb 1-1: config 0 descriptor?? [ 31.394643][ T456] RIP: 0010:tracing_release_file_tr+0x48/0x100 [ 31.406950][ T456] Code: 81 c3 d8 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 e6 1c 3c 00 48 8b 1b 48 83 c3 28 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c9 1c 3c 00 48 8b 1b 48 85 db 74 [ 31.427056][ T456] RSP: 0018:ffffc9000b20fd80 EFLAGS: 00010206 [ 31.441618][ T456] RAX: 0000000000000005 RBX: 0000000000000028 RCX: ffff888111975000 [ 31.451816][ T456] RDX: 0000000000000000 RSI: ffff88810ef6db00 RDI: ffff888129263020 [ 31.459849][ T456] RBP: ffffc9000b20fda0 R08: ffff8881053a34c7 R09: 1ffff11020a74698 [ 31.482301][ T456] R10: dffffc0000000000 R11: ffffed1020a74699 R12: 1ffff11021dedb65 [ 31.491637][ T456] R13: ffff88810ef6db00 R14: ffff888129263020 R15: dffffc0000000000 [ 31.501314][ T456] FS: 000055555ac43500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.514108][ T456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.520762][ T456] CR2: 00007fe6a00791d9 CR3: 000000012b852000 CR4: 00000000003506b0 [ 31.531565][ T456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.539823][ T456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.548489][ T456] Kernel panic - not syncing: Fatal exception [ 31.555279][ T456] Kernel Offset: disabled [ 31.559639][ T456] Rebooting in 86400 seconds..