last executing test programs: 2.444603733s ago: executing program 0 (id=1): syz_clone3(&(0x7f0000000280)={0x81000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x2d}, &(0x7f0000000100)=""/167, 0xa7, &(0x7f00000001c0)=""/108, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x58) syz_open_procfs(r0, &(0x7f0000000000)='net/ptype\x00') 2.426454173s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000006c0)={@void, @void, @ipv6=@tcp={0x7, 0x6, "1abcbe", 0x14, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, @remote, {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x8, 0x0, 0x8}}}}}, 0x3c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x8916, 0x0) ioctl(0xffffffffffffffff, 0x8914, 0x0) ioctl(0xffffffffffffffff, 0x890b, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @remote, 0x3}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) socket(0xa, 0x1, 0x0) 2.301923606s ago: executing program 0 (id=5): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) ptrace$setsig(0x4203, 0x0, 0x1000, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r1, 0x0, 0x8000) (async) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001100010000000000ffdbdf252c0000002500000072eaf496202493a840919fdc5a8d2527eff06892d10fe4002521f271024f6b6f66cfe5a0"], 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 2.301106126s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x1) write$cgroup_int(r0, &(0x7f0000000240), 0x12) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) (async) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 2.297283806s ago: executing program 3 (id=7): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x2) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x20002010}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000200021002ebd7000000000000ae40000050000000000000014000100"], 0x30}}, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x23, &(0x7f0000000000)="31a15332938f7bd53c804648c6af344a7aabaf11bbcc8bdacf09e294161eae3db93a1e635b5007ea868317c1bb202a99e68d4f7ec15a7cc415f8b6db3bc571854d56d2fd80d933417a54ee7702e5ba97728fa002a003afcca3114ea440169f5898800bc8bce40f5260f2e5b10b6b32b120a8e9156672f243d9901235958a5e1df051cfc12569b86a9e89d79399a85394af80ebf77ef1003884df8f06922bbe08321cdd023049d6c5", 0xa8) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="de49f2"], 0xd) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000000)=0x8001) (async) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000100)={0xfff, 0x40, 0xa, 0x5, 0x7, "9ffed64d5e621eda"}) timer_create(0xa, 0x0, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000002280)={0x22, {{0x2, 0x23c, @rand_addr=0x64010101}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000001e0000002000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) 2.296050586s ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x6ab858183a7ef63b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) unshare(0x2c020400) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.12622288s ago: executing program 3 (id=9): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = dup2(r6, r6) connect$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) r11 = syz_io_uring_setup(0x24ed, &(0x7f0000000080)={0x0, 0xf56c, 0x80, 0x3, 0x361, 0x0, r4}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000002c0)) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r11}}], 0x1, 0x0, 0x0) timer_gettime(r0, &(0x7f0000000100)) 1.733926259s ago: executing program 3 (id=10): syz_usb_connect(0x0, 0x43, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00042406"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300030c0000002cbd7000fbdbdf2502000900400000001cdc0dca1d9f0784030006000000000002004e220a010100000000000000000002000100000000000000070201000000030005000020000002004e21ac1e010100"], 0x60}, 0x1, 0x7}, 0x4084) r1 = socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000002c0)={0x7, 0x10, '\x00', 0x1, &(0x7f0000000280)=[0x0, 0x0]}) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/170, 0xaa}, {&(0x7f0000000200)=""/128, 0x80}], 0x3}}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/157, 0x9d}) 1.510962275s ago: executing program 1 (id=11): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x24, 0x1e, 0x21, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0x9, 0x0, 0x1, [@nested={0x38, 0x3f}]}]}, 0x24}}, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000240)="f728f22e660f088ee009fb66b9800000c00f326635002000000f300f20e06635400000000f22e0660f38ddd666b894d2ffff0f23d00f21f8baf80c66b8ce41828e66efbafc0ced0f23f80f0f5ac3b02e3e0f019b06000f01c5", 0x59}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xa, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0xef}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x5, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0x8000000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0xe, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x9}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x2, 0x1, 0x7, 0x8, 0x40, 0x23, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000000, 0x0, 0xfffffdffffffffff, 0xfffffffedfffffff]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYRES16=r1, @ANYRESOCT=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,allow_other,max_read=0x0000000000000005,default_permissions,allow_other,allow_other,allow_other,allow_other']) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) 1.121015534s ago: executing program 2 (id=12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x1c, 0x1e, 0x21, 0x0, 0x0, {0x9}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x1c, 0x1e, 0x21, 0x0, 0x0, {0x9}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/154, 0x9a}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000340)=""/270, 0x10e}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) (async) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/154, 0x9a}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000340)=""/270, 0x10e}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) 1.100679514s ago: executing program 2 (id=13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xffffa6a6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80000000}, 0x1c) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/fscreate\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, r4, 0xd24e0000) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0xfffffffffffffdcd, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 1.037869115s ago: executing program 2 (id=14): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x10001, 0x0, 0xf6c80002, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/3\x00') read$ptp(r5, &(0x7f00000026c0)=""/231, 0xe7) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_XEN_HVM(r4, 0x4068aea3, &(0x7f0000000300)={0x26, 0x0, 0x50}) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 32) 1.024545526s ago: executing program 1 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x6310005c34482d0d, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async, rerun: 64) r2 = getpid() (rerun: 64) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f6450000000033e010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010f50700014004000000", 0x58}], 0x1) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) prctl$PR_CAPBSET_DROP(0x18, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000000)={r6}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$BTRFS_IOC_BALANCE(r8, 0x5000940c, 0x0) (async) r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) close(r9) (async) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000020, 0x0, 0xdf3b}]}) 1.009936387s ago: executing program 1 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0xf}, 0x57) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x1000, 0x100000, &(0x7f0000000000/0x100000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0xf}, 0x57) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x1000, 0x100000, &(0x7f0000000000/0x100000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) (async) 853.07935ms ago: executing program 2 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x6ab858183a7ef63b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) unshare(0x2c020400) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 852.38068ms ago: executing program 2 (id=18): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x30e, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x481}, 0x8000000) (async, rerun: 64) syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r1) (async, rerun: 64) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x0, 0x9, 0x0, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, r4, 0x507, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) (async, rerun: 64) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000f00)={0x44, &(0x7f0000000c80)={0x0, 0x14, 0x4, "0e235d59"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20, 0x84, 0x1, 'A'}, 0x0}) (rerun: 64) 769.836632ms ago: executing program 1 (id=19): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) ioctl$TCSETAF(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x5, "0241cd032ae9da23"}) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="50010000100005000000000000000000010000000000000000000000000000000100000000000000000a00808000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000000001234320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0000009200000000000000600012"], 0x150}}, 0x0) r2 = syz_usb_connect(0x1, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRES16=r0], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000800d1a0ee2939fe7e04b7e940bbc9ce0300", @ANYRES32=r6, @ANYBLOB="0800250002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000400)={0x10b0, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8001, 0x21}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xa}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1064, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x41, 0x1, "a2e957ae346896027d9714db7b7fe8bac3093163d82964387d98a0785c28459b7753c56f6d8e0934af75dab64f2a9e68f049672fb767e46654c9d1aaef"}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb, 0x2, "19437481172e0f"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "af6f8cd4e69c25d445ea4312af22d1c59fa596a5539760444dd71f4a790b6d393f5fac90864a0940fe1e33ba0f3c868283a2bf18c447907ab691026e541d28ead4796693e6c90c84d136f170cabe98ce744facc870b8aaabe0f75e5831d2b9e02776ad3b5e241aa9ceb75323ff51da2833165c87183291488f0dfa36855c7a837c1f0cfb0f8aa7f3d2d07e3b3fd7124f50c3fd1b79e35fb89aafe2308ee7657761c67f362b9dc043ec76654fde34853c3705a8d66d7097a98491c9498ce3fbbb4e83549defda5509b5018aad9d92af5962e061e07635401117114ee47ac13bd1a0d0460dd192ac0a39729732f59772df3ffa0c0df895e4fb87184f71aa199f6f525170e933b7c8a1a2b562fb779232f7a5df0fff92da7aaf0d0c704a3661e8881d2dd78db33aa2d69537b7a712e3f2bbd005981e539f6f921220f9e7f3157204fcd36a566721f66b1434273c10718600d9303854f266d9bc252982de74f3c763cb73846f23775542806409c24f45733b34fcb92eb85e35236ec68ac44c665c3f82fe10e7e9b9cd55b5b9a96969595679e754f9caefcbb1f015c0631c30e6fd8b36e20bbe371dcb2743f6fdea60a05ea4dce4b6a3493c266ef2f16044f24b2e38e1f8ca5eabce40b78e36f876c3bd3e695ead40265591556a2213092735e769da6ffea0d3a02494e07daf9ce00456dca5019e44cf5bcd932247db5ceee129ff09e2bd9120e87314ccb64b2181d4824204a7cfe9106290e00e3d1909276ae5203b2b5454e9b6e2051918fe56d779eec8ccef72f7a937a20805003703a657d6fbc894a42f36b122002da00874cce5ac55276f0180f86c74ee001398953b37ee20366f66041ff0173a1fa7683b310146b966096219d80783bba31a9fae82cebd7eb39be08d4079c29f3442a2819900d3e9e0e24217d42f7a3383e7b727fe8792432bf34ee7e093fc50822707302edbc9b472dae2ab7b77e2c9ab1ea24f2ebc1a81861a8a2015c864e6f42545145f96cc73624e3e80e3913d16cfc5896c7dd23d40ba886aa94fb1fc84283aa04e48fe4836b99e6c1a19b700dc2f8f60df2bc769cd3e6c81d4706c1b108098ad2b3a236666370e8a93fe917f1c995e8094ae65d03e9187fc6cd9ebb79a950fc7c7a7ba193f821c8d34ca1ff6f41c2a66e3d099b5bf699d367fc93be4ad4277976af83dcab63ac2a1b127cb951e8845ef791ee6851ca779e0ebb3b0351691b676930ccd6ae5c6157f6597f96bc7482b17b27292e9cfd694e0f0cc12a95a50dad147c166c0784fb834ffe1e0e854b1543b8a74af72d7e6b34c997ff525e648b70ef3386f0d921d5b2ca2d9466db975aca9e5a521a32d80e65f52cef2cc24490f28659f743056b583d4b8d974fe8855bbaf0a61c6f20cf6605f266a9c5e93cc886ef2d6d629b7280e8235991b62ed9ae99ebd7f2ffcd36d9ca92a5137822720268c4a40cc260eaa2322241ead928a0271f9f21d85519f4830d9e93fcdd137abd056f6586ba3399c3fc823c26a4121bca818eefc8e23f4ae81bc61d5eeb4d772ccc746e726765bc007e105db96cf07f51dd3854b223dd398f854c1999be062d4d467714ea12889c37762f14d44904454aac09dfef2eda5111b69691c7afe84df4682ef2c605bb6be488c8a286f1bae5a88de789e9761890cf3e86ab003e015f5bac8086f21049a47e8334506f3e426fae04d4a2b2690430283604b93f1818c60dee8dae7ebda0936e2ff375951ae703fe9beab335cf2e3f1961014319b1332caf73c490a34b0d2ee38783355e4d0e27a84b06c7a681a54aa76f562c8966ce514a219cc9948e36ead504725a134002e46c275bb075a4dad28344438ed829386b048855989eaf8b3ed86b1bc7a7ce3a1fc343dd3c995ac5dc107e817d5beef6a5c5df761ed45c5dd921a9bd618d5cbe366d2acf20e51f4b4c742dc5272f7a74f9fa3480da9b18875e2228c535319b87ac0556915d61edfb910bfe43bdc04df25531b71675718316fc29f503488136e1baf46295388e11fc453f4c856c50c1c5e26f1f2d6b6694e9c4bada40f364621685ae534e7eef43dac1327d3e7f53b0a75dc70745a17950c565881e9f844feb9c9b877915a6dd0bbb19e16d3cc4a02abff4a10307f11f4d4419b2595f1f419f0c4860582b1f97d0c96863bd1f7297bca189a8977e8db87fa37b0d719cfa9354fe191be87bfed3c7563540ca215186e594a3e6e28143037b00230fcec1daceb0ae8426052e71f7cf6ee144dac1b59d80fb0296a2713aaf24cd46c433c823337ac8a53fa1a7690e91832793c45ed0e9afceb09f31decbe355f9ed8e966faff0481a9c199956693fa50d0a5bb0ccb202450634a164cc18079587cf8d9e3a6a61e269bce6c0a6ef67b0cdff17f0026233ceae0e7768c117afe3de0cc35faa4ec9513127bf9773df9f33ce694a06f3eab17a8f63dc1568288167e01237618202c86805e209d0e734c043b1e71c2ea05724383980f3a66bebac98779fa2ba1fb3b66b106872989cf17737de135839045f5d52fe57f4f0ef1d2fe18537eba81d7eb0da1c5f8e7d3a30f6bcbfcbb1022acc12ac2afc079996eabc846ab465443fc67c6df9833fc195b71221aa29840111eb8bf1dd4e07ea95d1ccf4fe5278d8001ff29ba8934dad7a17bc547f74b62a605199f1dc12c6dc7b3be7458c682c161e6220fc842ae7faf25460ce288d21c22547c928b31f147f21f518cae3e565778864704c54d9787ea15562dd71984e1f0b865968983f9c6cdf8b4bb599ffa8c5518fbee2050b293699b626eb30422a9876c9c93e5b3b5c40721ef81691e0921f3c3576391684ca6d72ca168d08fc108b2f5250babd37a9204658b7d74fdbdc2f77318e05e32df398eefa0d98edb6ec381660758c4d7f87aff3f38650fc98fd993c78c163d8acab336fce610ab2c7a51a27613f5837e356c41ea381bc2247da40967ab7af37a2752d3073f6679e5c219218eff13c52aa9647c2a504664b6c72e320538a884a4da622fa3db2866d620f884aa7cca415413acc3b32875fdf7ce64324f3a6881ae7fb42db5ef34d8acd225d67a557b5907b1d694df5cf70f1385bf39ce3f867acd92442e119b477bc38b0372d15e57b4efb8be9a9508a302435dc06424f01121dc7e133c5ee1cceed2db3f7a63b3f8da2a43d07f28d0c20c8bee89a387711d3da64c4b2b9a1b3f510fda15ec13e7a8c7dc7f986757a5fae4c968a4ae59144ba77a3f8501fbe1985d657cbde81ab002c146a96b4a08eeddba5b1169676efc1b6a40d170b7f833744ca469ff173ede340d7b4c2036bf136411cea39372cefd9354a41b43df8def743934e668aa7bab2e1303b58d108ed0c7e0731063155cf4b0194d533233949ecd28993a587427da678e03f3e85401a1f37be490a1d070b81e8f393ce64fd21ff371b808f011f37afc1842271823d87d35df1f0116213e4034148d03ca3105027799a85496ddf18e5d5b5b4b3ca14ae1ea2da2500c0572fb19e1e9c98f60165a4f9a4da603c57dc30dd24e4a45c7fbd3399270943c269c727c3b88a9f3f5c634b34adfa710dd2019fc4f2fed3e6a7c27ca7ea866529b3417adf55e6469adbe857d1368aa585c13f09dcea0400d7db5b73a3757f2d2d6e309d15374d91307ad76a1e1dc0499d50302e1ce1f04d991a77a9c9355c55cc26fa2709d5921234cd827e4f3d2d7558897daa866cf3620a96b0b6472f7f6dedcc25c0a61f23c437cb1685fa24f3792ca1cb5b88811c753726bfaae96b773ce1f003e18f158b629e53a124c20f6363318e3653c9cc5a67dd188eee118ef5c1158bd6d6d773f94fb20633ff71ba23822a42051065fbdf180f5814b662e61d6869c159a120135be7bdf7c7347c04d9ad5b6813c3c6ef4958c42888b574769b2d85300e544bb510377fab72fabe665956ab77c18cc83ec5e3dd252bd43c7cf9ee1df1da794cae1731b5005c4a28d09abd824fa8ccc9cad1dfffeb56187c071290e7d4c24117a4db47d6b5f82a50d12976d368adce4fb9744593bd86f832dd065a820462140871b6b3074ace7ccab6d6ab270aa17694d1cf2897bf2d20cad5b7685af9ce28123a655381b8a0369c9efb4def98cc51e500b5e874b6b8e22bab3b89e00c63820f85a817f4ca5e0465300b78b0cfe344c933d79ede9f89f231bc389a9021576bae0b808860bc0fd2815fe58068d03eb80712ccca589f12a206a2b054d7f99d06a53b2f02514934f730068b94aae777d2916f51d127d8170ee2c51ef6b456fa0cc76aadbe55f617cfd0f505ac4cbcdfdfe87e36a265077ed0fcae77bb6a8f7b02c5a87b79042d4c957eb1b667cd36d7a02ef161e156632eff144de16b04a1f146db5653d7d155805fcd46775ef8b4059f760c4927c783f991415a14fbd09a907186ca48a3920708cba63d5e043c83943716f7459d5ad9b77657411c006e788570cc8b1859f47006fe67557b4d3999f3ab12163b3d3eed2c53bc1bcc18bc2025e18922a1e6534c20c70febf4d8ea203a70640fd331226c641749c185c7afaaf6ed2a6b561c6c510dd93f6f2191240dcbedd8a17d8b1f217246f1f0cdd34c9ea0d4d72ae704956f250cd6fa1bdd06a3551597c1b0562910f41e62b7336d94aed906e82cd1e024d8fcd91e46384074eabab3d911c28ac6e4d4394ed6c61b281393b743d1bdf8b8a906e08b1030a20d7f9fe0fe94b08ac128e3bf7b8c2a202926d807b37ad91fd92d979b03fdfb3cd32875b82614bf27f06a0b04d66873fc8ef71851549633c8d33a8ea807aab0c063921758b05cbe25c8bdeb4538a01b6c06070ce0d53e38faada713d056f20eae4017354f3bae5b08455a98730579e66321fbdb1b4fed6e01f327078d24e5829f8159ee759b0d684593da4463a4064676dd4c4432e22ab2ea7bf0d92ede106cbcd241118bbee983edcb9971d8aef6d78c8ae235de184df4ff43cf581ee5ed3ead6c18f085d58d135bcb4e5140a812840be96a2554ab3fd9a5107725594e6e2ff43d77f3924acfbba08fbecb3e9546e0c871dc5658bf59aa3336d6b7559934673efb66cbaaca10ac1687cb4b0d934b75189b9a76452c2d9711c4061013b60720c507a0f97977054c00e7e03c8a6012e4af93cd353d12d3d3051e1839ec09dc04b0b95ed6f0cf8b4898d0521b7b468f562b5feea4dcf12bc5b25315535a06ef07e892eda72bd2371f9f6dcca6381e485d1350415e00a59f763c5dd5ba55c97cc8df27278b511799152595ecc858e739e1633a11db753fe3a10a4caca5ea90f21a730a71835b2a27b80db43377307ffa20db2557b1ee06d743886dc287d92e2a4401168e8d57f4537b23dc7013042ab205fadd920a79a8876366a7ec15613c9ceb6e3c13ea99548e610c11749e6f1ad425cf9f24652dfd90dc27f19d880aadc6e804c63dca3f0a2cd4c954b91db9465707b3dd9c3ba2d5b1253175bcc82207bf187bbbe0b00e06dc73b022c82472daf964b573e0a7e19648f570d9e4c94ad0a863699a4e810e5ee55e99f9e24188b2cff73cc44d162ac28d73f141d742969b7721639aefdfa371b1b686eb36c4dee6210f310f6ae56a96bb56f8bcf567aa260975203bc5f9742554b776a668da90be3d7957d63f88efe74b51e8501494cff3980a4505517a8bc1ee0979c837e1de8abc5e207a07525889632265b4d803ce227e9860e26aa6fd9c61df98e2f6459d43049d660cf199dd4552657e4ad3fd47f9bd518744cc07958710cd0740ec4fb9778313c8ba7046ccb41768ed0ceaa37c8f8790f"}}]}]}, 0x10b0}, 0x1, 0x0, 0x0, 0x20000}, 0x20008000) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0xc001) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r9, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000000)='erofs\x00', 0x0, &(0x7f0000000040)='dax=always\x00') setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r10 = fcntl$dupfd(r8, 0x0, r8) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) 133.923767ms ago: executing program 2 (id=20): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x7d3) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 0s ago: executing program 3 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x2) pipe(&(0x7f0000000c80)) (async) pipe(&(0x7f0000000c80)) pipe(&(0x7f0000000500)) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000100)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r6, 0x0, 0x0, 0x0, 0x0, 0x3, r7}]) (async) io_submit(r8, 0x1, &(0x7f0000000100)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r6, 0x0, 0x0, 0x0, 0x0, 0x3, r7}]) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000) (async) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200005d00000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) (async) syz_usb_control_io(r9, 0x0, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) syz_usb_control_io$hid(r9, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r9, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x40, 0x18, 0xb7, {0xb7, 0xb, "5c7691958a5314ddb66dbff3802a73fcaeb5a66ae3614250db52c2dc260d38216b6fa5b8ca6d1acc5b3c32c64baae6e199353be80cb6178f6368369052eb73639675ff748e41c9e1c92668808c53d05fa476e70451a8d95cc3d58d88e8eeb37588a71931d8780e0312b83c33e9d5dc7efd81526e8f82fc7c07d35c38b0835b5c8fa3076c09c8cd62c003eab342931c9873ddc74c753d15dccf9485c2c5fe42c4a1304f22e9b41cc74ac33b2a4929bec4348e0d47ba"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0xa, "2d5d001a"}, @main=@item_4={0x3, 0x0, 0x9, "868e12ef"}, @main=@item_012={0x1, 0x0, 0x9, "fc"}, @local=@item_4={0x3, 0x2, 0x1, "ea4fbdba"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe, 0x60, 0x1, {0x22, 0x103}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="200705000000966e435995cf7c43dbb6f87efd49e1f33053e955664b23abea454fc578464d3dbe66291dfbf8fc04d1346c0939b08cc042ab0e1c5bc32d7f71b97d0725b35ee59bd296551def3f63a7186e91415786bb0cf562bda858"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x68}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340), &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x3}}) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r11, 0x1, &(0x7f0000000000)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r5, &(0x7f0000000080)='\r', 0x1}]) r12 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f0000002780)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x722}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 30.157549][ T36] audit: type=1400 audit(1786833070.320:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.161089][ T287] cgroup: Unknown subsys name 'net' [ 30.180679][ T36] audit: type=1400 audit(1786833070.320:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.208079][ T36] audit: type=1400 audit(1786833070.350:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.208525][ T287] cgroup: Unknown subsys name 'devices' [ 30.309592][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.315238][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.410670][ T36] audit: type=1400 audit(1786833070.570:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.433894][ T36] audit: type=1400 audit(1786833070.570:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.458702][ T36] audit: type=1400 audit(1786833070.570:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.489262][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.498174][ T36] audit: type=1400 audit(1786833070.660:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.523652][ T36] audit: type=1400 audit(1786833070.660:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.542198][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.549602][ T36] audit: type=1400 audit(1786833070.700:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.583663][ T36] audit: type=1400 audit(1786833070.700:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.959868][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.966988][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.974085][ T297] bridge_slave_0: entered allmulticast mode [ 31.980611][ T297] bridge_slave_0: entered promiscuous mode [ 31.987542][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.994605][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.001851][ T297] bridge_slave_1: entered allmulticast mode [ 32.008246][ T297] bridge_slave_1: entered promiscuous mode [ 32.071921][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.079417][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.086502][ T295] bridge_slave_0: entered allmulticast mode [ 32.092850][ T295] bridge_slave_0: entered promiscuous mode [ 32.103997][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.111127][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.118316][ T296] bridge_slave_0: entered allmulticast mode [ 32.124583][ T296] bridge_slave_0: entered promiscuous mode [ 32.130896][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.138079][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.145187][ T295] bridge_slave_1: entered allmulticast mode [ 32.151666][ T295] bridge_slave_1: entered promiscuous mode [ 32.166945][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.174035][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.181312][ T296] bridge_slave_1: entered allmulticast mode [ 32.187669][ T296] bridge_slave_1: entered promiscuous mode [ 32.199630][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.206729][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.213823][ T294] bridge_slave_0: entered allmulticast mode [ 32.220181][ T294] bridge_slave_0: entered promiscuous mode [ 32.229670][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.236757][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.243839][ T294] bridge_slave_1: entered allmulticast mode [ 32.250293][ T294] bridge_slave_1: entered promiscuous mode [ 32.344010][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.351141][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.358529][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.365589][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.433324][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.440445][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.447770][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.454824][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.478617][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.485710][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.493056][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.500167][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.511185][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.518306][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.525614][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.532701][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.568783][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.576163][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.584483][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.592148][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.599951][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.607235][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.614673][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.626918][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.634007][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.659360][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.666431][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.674260][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.681350][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.690043][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.697182][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.711371][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.718478][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.748239][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.755317][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.763045][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.770141][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.805707][ T297] veth0_vlan: entered promiscuous mode [ 32.817784][ T296] veth0_vlan: entered promiscuous mode [ 32.834921][ T294] veth0_vlan: entered promiscuous mode [ 32.853894][ T296] veth1_macvtap: entered promiscuous mode [ 32.862484][ T297] veth1_macvtap: entered promiscuous mode [ 32.884678][ T295] veth0_vlan: entered promiscuous mode [ 32.897262][ T294] veth1_macvtap: entered promiscuous mode [ 32.931261][ T295] veth1_macvtap: entered promiscuous mode [ 32.945977][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.206391][ T335] dummy_hcd dummy_hcd.0: remove, state 1 [ 33.212943][ T335] usb usb1: USB disconnect, device number 1 [ 33.232522][ T335] dummy_hcd dummy_hcd.0: stopped [ 33.238558][ T335] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 33.936061][ T352] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.339888][ T361] overlayfs: failed to resolve './bus': -2 [ 34.436625][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.586630][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 34.594348][ T310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.605144][ T310] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 34.614532][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.628017][ T310] usb 4-1: config 0 descriptor?? [ 34.636414][ T310] usb 4-1: bad CDC descriptors [ 34.836887][ T356] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.877862][ T31] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 34.887555][ T310] usb 4-1: USB disconnect, device number 2 [ 34.986606][ T356] usb 3-1: Using ep0 maxpacket: 32 [ 34.992973][ T356] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 35.001265][ T356] usb 3-1: config 0 has no interface number 0 [ 35.007524][ T356] usb 3-1: config 0 interface 184 has no altsetting 0 [ 35.015798][ T356] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 35.017974][ T31] usb 2-1: device descriptor read/64, error -71 [ 35.025557][ T356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.039264][ T356] usb 3-1: Product: syz [ 35.043468][ T356] usb 3-1: Manufacturer: syz [ 35.048382][ T356] usb 3-1: SerialNumber: syz [ 35.053706][ T356] usb 3-1: config 0 descriptor?? [ 35.060222][ T356] smsc75xx v1.0.0 [ 35.261529][ T356] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 35.266780][ T31] usb 2-1: device descriptor read/64, error -71 [ 35.272750][ T356] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 35.290689][ T356] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 35.301758][ T356] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 35.311893][ T356] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 35.322471][ T356] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 35.332160][ T356] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 35.346656][ T356] usb 3-1: USB disconnect, device number 2 [ 35.405086][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 35.405105][ T36] audit: type=1400 audit(1786833075.560:151): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.444613][ T395] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 35.446698][ T36] audit: type=1400 audit(1786833075.600:152): avc: denied { load_policy } for pid=394 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 35.455255][ T395] SELinux: failed to load policy [ 35.479880][ T396] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 35.490503][ T396] SELinux: failed to load policy [ 35.536716][ T31] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 35.676692][ T31] usb 2-1: device descriptor read/64, error -71 [ 35.726671][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.876598][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 35.883766][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 35.892017][ T10] usb 4-1: config 0 has no interface number 0 [ 35.899261][ T10] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.910492][ T10] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.917026][ T31] usb 2-1: device descriptor read/64, error -71 [ 35.926950][ T10] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.940079][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 35.948133][ T10] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 35.957393][ T10] usb 4-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 35.965793][ T10] usb 4-1: Manufacturer: syz [ 35.973599][ T10] usb 4-1: config 0 descriptor?? [ 36.036893][ T31] usb usb2-port1: attempt power cycle [ 36.130516][ T323] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 36.143194][ T323] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 36.151654][ T323] CPU: 1 UID: 0 PID: 323 Comm: syz.0.5 Not tainted syzkaller #0 119f1c0cd44458c2ddc7f806e6d4d2dd11ae7dae [ 36.162889][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.172984][ T323] RIP: 0010:set_link_state+0x2a/0x1240 [ 36.178545][ T323] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 0d e1 cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 68 a5 26 fe 4d 8b 75 00 49 8d 95 93 [ 36.198199][ T323] RSP: 0018:ffffc9000b75f718 EFLAGS: 00010046 [ 36.204351][ T323] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810b3cb900 [ 36.212362][ T323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.220386][ T323] RBP: ffffc9000b75f7a0 R08: 0000000000000003 R09: 0000000000000004 [ 36.228396][ T323] R10: dffffc0000000000 R11: fffff520016ebee0 R12: 0000000000000000 [ 36.236419][ T323] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888104b84000 [ 36.244428][ T323] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.253385][ T323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.259999][ T323] CR2: 00007f22cf3eb7c0 CR3: 0000000113732000 CR4: 00000000003526b0 [ 36.268016][ T323] Call Trace: [ 36.271323][ T323] [ 36.274280][ T323] ? __kasan_check_write+0x18/0x20 [ 36.279421][ T323] dummy_pullup+0xd1/0x130 [ 36.283890][ T323] ? __cfi_dummy_pullup+0x10/0x10 [ 36.288961][ T323] usb_gadget_disconnect_locked+0x14e/0x400 [ 36.294888][ T323] gadget_unbind_driver+0xaf/0x3f0 [ 36.300035][ T323] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 36.305799][ T323] device_release_driver_internal+0x4ad/0x830 [ 36.311924][ T323] driver_detach+0x1f5/0x2d0 [ 36.316556][ T323] bus_remove_driver+0x254/0x2b0 [ 36.321534][ T323] driver_unregister+0x79/0xb0 [ 36.326313][ T323] usb_gadget_unregister_driver+0x52/0x80 [ 36.332060][ T323] raw_release+0xdb/0x280 [ 36.336419][ T323] ? __cfi_raw_release+0x10/0x10 [ 36.341411][ T323] __fput+0x208/0xa30 [ 36.345438][ T323] ____fput+0x20/0x30 [ 36.349448][ T323] task_work_run+0x1e8/0x260 [ 36.354096][ T323] ? __cfi_task_work_run+0x10/0x10 [ 36.359248][ T323] ? __kasan_check_write+0x18/0x20 [ 36.364403][ T323] do_exit+0xa46/0x2850 [ 36.368621][ T323] ? hrtimer_cancel+0x31/0x60 [ 36.373361][ T323] ? __cfi_do_exit+0x10/0x10 [ 36.377989][ T323] ? futex_wait+0x23c/0x7c0 [ 36.382540][ T323] ? __cfi_futex_wait+0x10/0x10 [ 36.387430][ T323] ? __kasan_check_write+0x18/0x20 [ 36.392569][ T323] ? _raw_spin_lock_irq+0x93/0x120 [ 36.397735][ T323] do_group_exit+0x21f/0x2f0 [ 36.402370][ T323] ? __kasan_check_write+0x18/0x20 [ 36.407554][ T323] ? recalc_sigpending+0x184/0x1d0 [ 36.412710][ T323] get_signal+0x134c/0x1490 [ 36.417249][ T323] arch_do_signal_or_restart+0xbc/0x700 [ 36.422833][ T323] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 36.429021][ T323] ? __kasan_check_read+0x15/0x20 [ 36.434076][ T323] syscall_exit_to_user_mode+0x57/0xb0 [ 36.439575][ T323] do_syscall_64+0x63/0xf0 [ 36.444032][ T323] ? clear_bhb_loop+0x50/0xa0 [ 36.448754][ T323] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.454681][ T323] RIP: 0033:0x7fad0df9e0d9 [ 36.459143][ T323] Code: Unable to access opcode bytes at 0x7fad0df9e0af. [ 36.466180][ T323] RSP: 002b:00007fff2e85b848 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.474640][ T323] RAX: fffffffffffffdfc RBX: 0000000000008128 RCX: 00007fad0df9e0d9 [ 36.482642][ T323] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fad0e225fac [ 36.490649][ T323] RBP: 0000000000000bea R08: 4000000000000000 R09: 0000000000000000 [ 36.498675][ T323] R10: 00007fff2e85b950 R11: 0000000000000246 R12: 00007fff2e85b970 [ 36.506789][ T323] R13: 00007fad0e225fac R14: 0000000000008d12 R15: 00007fff2e85b950 [ 36.514815][ T323] [ 36.517884][ T323] Modules linked in: [ 36.521837][ T323] ---[ end trace 0000000000000000 ]--- [ 36.527320][ T323] RIP: 0010:set_link_state+0x2a/0x1240 [ 36.532828][ T323] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 0d e1 cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 68 a5 26 fe 4d 8b 75 00 49 8d 95 93 [ 36.552472][ T323] RSP: 0018:ffffc9000b75f718 EFLAGS: 00010046 [ 36.558570][ T323] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810b3cb900 [ 36.566570][ T323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.574581][ T323] RBP: ffffc9000b75f7a0 R08: 0000000000000003 R09: 0000000000000004 [ 36.582593][ T323] R10: dffffc0000000000 R11: fffff520016ebee0 R12: 0000000000000000 [ 36.590598][ T323] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888104b84000 [ 36.598609][ T323] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.607575][ T323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.614225][ T323] CR2: 00007f22cf3eb7c0 CR3: 0000000113732000 CR4: 00000000003526b0 [ 36.622283][ T323] Kernel panic - not syncing: Fatal exception [ 36.628526][ T323] Kernel Offset: disabled [ 36.632875][ T323] Rebooting in 86400 seconds..