last executing test programs: 3.569466845s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='dummy_hcd.0', 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a}, 0x28) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0xee01, 0x0, 0x0}) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b2"], 0x88}}, 0x20000000) fcntl$setown(r2, 0x8, r4) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x64010101, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 3.415771539s ago: executing program 4 (id=5): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)=ANY=[@ANYBLOB="30000000020101020000000000000000020000091000028004000298050001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x3ed}, [], {0x14, 0x3f5}}, 0x28}}, 0x0) 3.120887956s ago: executing program 4 (id=6): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x9f9204da10293d09, 0x8010, 0xffffffffffffffff, 0xa2efa000) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r0, &(0x7f00000046c0)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 2.729816385s ago: executing program 4 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000000), 0x80, 0x14f7, &(0x7f00000016c0)="$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") openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 2.040478372s ago: executing program 1 (id=8): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x1, 0x484, 0x6, 0x8, 0x20, "1a4109010100d2b7f30205000000000000006b", 0x7fffbffc, 0x603}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0xd) 2.004014983s ago: executing program 3 (id=4): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x824ace354e0064fb}, 0x20) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000100)={0x0, 0x80000000, [0x7, 0x10001, 0xb91, 0x5, 0x8, 0x5]}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x0, r3, 0x15}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r5, 0x6000, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) 1.981656573s ago: executing program 2 (id=3): clock_gettime(0x8, &(0x7f0000000580)) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a440000102030109026400020188e0030904000001020d0000052406000105240002000d240f012c0e000008007f000406241a02000104241302042413a00905810310000302090904010000020d00000904010102020d000009058202080004cef520a1a10209050302200005090927905f059146faf0aa2f59d2b807d2f300ec0cb97d87bf91a5a98c382914e3554b67114cdb81702fb2cf63971636c4cd944a3f9ca9"], 0x0) 1.906600095s ago: executing program 1 (id=9): syz_usb_connect(0x3, 0x24, &(0x7f0000002080)={{0x12, 0x1, 0x300, 0xd6, 0xa8, 0x30, 0x40, 0x1de1, 0xf105, 0xbf64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x5, 0x40, 0xf3, "", [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0xe, 0x1, 0x0, 0x4}}]}}]}}, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000028c0)=@lang_id={0x4, 0x3, 0x418}}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000029c0)=@string={0x2}}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) 1.883926665s ago: executing program 4 (id=10): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x10, 0x803, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000969000/0x3000)=nil, r2, 0x2000000, 0x40010, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a00)={'bridge0\x00', &(0x7f0000000880)=@ethtool_drvinfo={0x3, "772cb15b3fe3aae9ce18c16d5f08956f46ff59d308cffc581b5e00b3c49b60bd", "b0d5ecae490e190fc22f8ddf47b6004b8fd571b3266a6cd231ae356610027920", "2bc667952d169f4403ef2914cd77bf2f7139fe5129207d4ab43a77908c1713be", "263874be6a4b5a5622326bbaed390208d92fa1cd722ced4c597a9346964c9aa2", "8f0df14f4a11041ceb20fd0f6b4d6c716e0802b3faee625ff9a6ab2331d9592f", "f238473df572e2aa9c810f98", 0x8e2f, 0xfffffff8, 0x0, 0x6, 0xe}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)="170000000200", 0x6) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x1}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="38fb004370", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf250c0000000c00018008000100", @ANYRES32=r6, @ANYBLOB="18000380140003800c000180080001000e000000a4fe0180"], 0x38}, 0x1, 0x0, 0x0, 0x818}, 0x4040400) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x206, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r7 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) io_cancel(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xf}, {0xb, 0xb}, {0xfff1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000000480)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x65, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="c8000000000000002900000036000000331600000000000001040000000000010005a5d6cc652cc1412a17dc67cd1cf506d2ce21c22d85702a7ff8051f80c04b5b1899c77d48d68ce566cacf34069d0900000000000000fe61dc267b9700a867843107cac714da0ab6301e05358f37c79f36bdef3f90a1a58245272fdef0fa3f564709fe014ebefc95c0f1609e3ca0c7ad8bf2e81e5564a3c6025a37e7b48ff2a555e336fffc500df3689a050003b9857009ccb8d1af6ddebbf6776220fbcd567f35f4edab91876a24000000000000002900000032000000fe800000000000000000000000000020", @ANYRES32, @ANYBLOB="00000000c00000000000000011"], 0x1f0}}], 0x1, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$inet6(0xa, 0x80000, 0x8) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r9, 0xff, 0x1, 0xfffffffffffffffe, 0xf) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) 1.870961486s ago: executing program 3 (id=11): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x24044851) pipe(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r4, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d00090509"], 0x0) close_range(0xffffffffffffffff, r0, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 1.794694158s ago: executing program 0 (id=12): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x9f9204da10293d09, 0x8010, 0xffffffffffffffff, 0xa2efa000) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r0, &(0x7f00000046c0)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 1.766832438s ago: executing program 0 (id=13): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'veth1_macvtap\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000002c0)="4c68e10b28dcdb9d02e0933cfb1bd17152d64a81e7e7badf51231e024fe950e6871e7ff1a91cdae8848ec389e8956398cdd463b2d749b7d5e52b1a03fe88053743a4ba2393a82b8e56eadaf8be428b33c8c7ed736a27b1566d30c091a30e1b8f39d481c24a6ab16e658d52e7a3b40be3c8267f04f6d25236d0e17708610fc93dc42e29509e669ea045ab3efa54cd4e99c6dcb29c", 0x94}, {&(0x7f0000000380)="1b07dd0ae5a04864e4f684b4983db8669c8b2441bf836b7c60c9c9a4eedddff5c8b5e5bd48e8044bda73e06f21c05068e55f", 0x32}, {&(0x7f00000003c0)="a90d348dce429d7d023a1200520caef30e7fe579f5b68eec1a84f723ee28e122ccab1f736924237a4ac999f9d5949a3e62ed5647e46cde30af66ff4cfe4c7ef52a76991fc73f86db9514542208d621482b7bc4d857e09c6812978a227bdfd3c8558886a730f5d67db0e48b9f5af43e22ecc3f842eda5087cdc58194b5b367d46a2a1da777c8e46b105438bd62fd522202e4db694d1e831649689b20a7adc23d3ffb372b0fa4623", 0xa7}, {&(0x7f0000000500)="3a5459bf590fbeb0a10c232e51667102d9e0df17aecd7542ddd321d9a41cfff2c8f35cc30446f0bf398554025c125bcb32d11f8fa764e0f413fc247517bd4b8326025418c83b00558030d90c0b561ae4ae481efb5f73b146373251f9534d70d30ae8cfb9904d822ac903ea09d39b694fc33c0ae3fb443fdf7dbc1338034629231e23", 0x82}], 0x4, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xab}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6c}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}], 0x60}, 0x80) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000200)="9de458be1bd130e16c3885d79763897479d8437fdacc10bdeb6b633632c4fd5cd95cb5c57128e5c859864f91a10e8cd3cd2a66f7623ffee1031e490558932db3107888945c1f0b4d79785061d4e08f54230d20e0d7d6ca392febf143dc3351fa4748100e6c78be27b094ecddfb13bd1a649835b799a11793ec0eb1f2935cb057ed83b0cfc845fdd6c0632cfd4878185d6b116b87132b03b190870999e4a8f42dbb13e0fd0a", 0xa5}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000040)="6828ed114b2834f6c43053957c9db4848b17fdf3edd3e8821b50", 0x1a, 0x3b00, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) readv(r2, &(0x7f0000002c00)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000001c0), &(0x7f00000006c0)=0xc) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x5548, &(0x7f0000007a00)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r5 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f00000000c0)=0x2) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) openat2(r4, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40242, 0x0, 0x12}, 0x18) 1.30602944s ago: executing program 0 (id=14): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000ffed008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000001000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.245814821s ago: executing program 0 (id=15): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4804}, 0x800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000001ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6021000000283afffe800000000000000000000000000000000000018900907800000000fe880000000000000000000000000000000000000100"/94], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) lstat(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000001400)=[r4, r5]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000800)=ANY=[]) unshare(0x880) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e00010003000000000000000200000001000000000000000c000c4000000016000000000c"], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000080)="441f08", 0x3) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) write$vga_arbiter(r8, &(0x7f0000000280)=ANY=[], 0xc) 1.022968326s ago: executing program 4 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000130d00000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="d111010004000000240012800be7c8b6418994917c5f950c450001006d616373656300001400028005000700"], 0x44}, 0x1, 0x0, 0x0, 0x20004814}, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x268, 0x1, 0x5, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x38000000}, 0xf, 0x4, 0x6, 0x5, 0x26, 'syz1\x00', "cf2525e32e65aa1fa6b34cabf8707223244abb8d79c0e44ea95f838f219e1b89", "5bce03b6d8695085b3565c237c4fff08f546c0d0a69fd2644a1074f29da49975", [{0x3, 0x2, {0x548a60a0b35d2b7b, 0x6}}, {0x8, 0x7, {0x2, 0xfffffc01}}, {0x9, 0x10, {0x2, 0x9}}, {0x5, 0x5, {0x2, 0x7}}, {0x6, 0x9, {0x0, 0x80000000}}, {0x3, 0x8, {0x0, 0x2}}, {0x4, 0x0, {0x0, 0x3}}, {0x9, 0xc3, {0x3, 0x4}}, {0x2, 0x9, {0x2, 0x6}}, {0x9, 0x9, {0x1, 0xd}}, {0xfffa, 0x7, {0x2, 0xc}}, {0x101, 0xf, {0x3, 0xfff}}, {0x4, 0xb, {0x3, 0x40}}, {0x3, 0x4, {0x1, 0x3}}, {0x6e72, 0x7}, {0xffff, 0xfff8, {0x3, 0xc}}, {0x6, 0x9, {0x1, 0x9}}, {0x0, 0xffff, {0x2, 0x4c}}, {0x5, 0x9, {0x3, 0x52c}}, {0x1ff, 0x7, {0x1, 0x3}}, {0x3, 0x0, {0x0, 0x8}}, {0x3, 0xf, {0x2, 0x1338000}}, {0x9c, 0x9, {0x3, 0x9}}, {0x4, 0xda60, {0x0, 0x1}}, {0x5, 0x95c, {0x2, 0xffffffff}}, {0xd, 0x8, {0x0, 0x2}}, {0x5, 0x8, {0x3, 0x3}}, {0x1, 0x5, {0x3, 0xe0}}, {0x3f, 0xf, {0x2, 0xfffffff6}}, {0x200, 0x2, {0x1, 0x4}}, {0x5, 0x2, {0x0, 0x5f}}, {0x0, 0x6f, {0x0, 0x2}}, {0x3, 0x6, {0x2, 0x695}}, {0x8001, 0x7, {0x1, 0xcb}}, {0x0, 0xa, {0x0, 0x1}}, {0x9, 0xffff, {0x1, 0x8}}, {0x4, 0x0, {0x1, 0xfff}}, {0x2, 0x2, {0x3, 0x81}}, {0x7, 0x5, {0x3, 0x80000001}}, {0x9, 0x7, {0x0, 0xe9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') syz_usb_connect(0x2, 0x43, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902310001080010000904df0003080662ff09050c02200006060309"], 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 348.755952ms ago: executing program 0 (id=17): statx(0xffffffffffffff9c, 0x0, 0x0, 0x4, &(0x7f0000000500)) geteuid() getcwd(&(0x7f0000000080)=""/163, 0xa3) r0 = socket$netlink(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1040892, &(0x7f0000000280), 0x1, 0x572, &(0x7f0000001700)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000200)={[{@i_version}, {@test_dummy_encryption_v1}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000a80)=@bridge_setlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x20c05}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}]}, 0x4c}}, 0x0) rename(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') ioprio_set$uid(0x3, 0x0, 0x64) 204.866706ms ago: executing program 2 (id=18): syz_usb_connect(0x0, 0x59, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109024700010000080009046900000e010000082402010202"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x2, 0x4, 0x4, 0x1, 0x1014}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x23, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x60000000}, 0xc) syz_usb_connect$midi(0x1, 0x9c, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x582, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x1, 0x1, 0x7f, 0x40, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x4, [@midi_out_jack={0x9, 0x24, 0x3, 0x1, 0xff, 0x1, [{0xa0}], 0x4}], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x0, 0xfa, 0x8, {0x4}}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x6, 0x30, 0xf7, {0x9, 0x25, 0x1, 0x5, "443e57cc2b"}}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x82, 0x0, 0x82, {0x12, 0x25, 0x1, 0xe, "dabb85f6efbe9a6d72f292c51e7e"}}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x5, 0x30, 0x6, {0x11, 0x25, 0x1, 0xd, "7f358ea397dead0002811cfc85"}}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x5, 0x3, 0x0, {0x12, 0x25, 0x1, 0xe, "edc24d34bf2b9114c7ace5d1f22c"}}}]}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x3, 0xf0, 0x3, 0x40, 0x2b}, 0x151, &(0x7f0000000240)={0x5, 0xf, 0x151, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x0, 0xc}, @ptm_cap={0x3}, @generic={0x103, 0x10, 0x4, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0x3, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0725edd2487cbd50d1dbac50013f5d21"}, @generic={0x24, 0x10, 0x4, "b1db060c76681667b4c27e44a244c94e1deffece9fca2cc1f022f36a86eb0e5ae0"}]}, 0x3, [{0x67, &(0x7f00000003c0)=ANY=[@ANYBLOB="67033367f06c057ce64afbca14b1b1eafd60492c095220d22747daba9243d92f4c4f24d9132b2e2e2c08dda280cc5928a99826712e6a98466a6404714f3f422f679b187d1fd67ecc3e31b0b41c7cbda5de29fd2553d3c0e06dbc19b3447fbd025c761b75903ae7"]}, {0x4b, &(0x7f0000000440)=@string={0x4b, 0x3, "7e1a4d224552c907cd90cfc653359a6b308ccc96e2da1f157de25ad5c16f37eee4f095614b21aa062006f5cc27402d252c5c295fe24811474eebc6ba5bb47dd552d9d4666e38d5f7fa"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3465}}]}) 0s ago: executing program 0 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x00', 0x4) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r2, &(0x7f0000000300), 0x0) close(r2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1/block.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2/block.0\x00', 0x1ff) 0s ago: executing program 0 (id=20): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_connect$uac2(0x6, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. [ 21.679151][ T30] audit: type=1400 audit(1784984235.229:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.682870][ T277] cgroup: Unknown subsys name 'net' [ 21.701861][ T30] audit: type=1400 audit(1784984235.229:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.729337][ T30] audit: type=1400 audit(1784984235.259:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.730125][ T277] cgroup: Unknown subsys name 'devices' [ 21.874061][ T277] cgroup: Unknown subsys name 'hugetlb' [ 21.879708][ T277] cgroup: Unknown subsys name 'rlimit' [ 21.990104][ T30] audit: type=1400 audit(1784984235.539:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.013351][ T30] audit: type=1400 audit(1784984235.539:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.038285][ T30] audit: type=1400 audit(1784984235.539:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.049370][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.070278][ T30] audit: type=1400 audit(1784984235.629:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.095717][ T30] audit: type=1400 audit(1784984235.629:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.121794][ T30] audit: type=1400 audit(1784984235.669:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.147661][ T30] audit: type=1400 audit(1784984235.669:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.147700][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.974685][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.981782][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.989292][ T286] device bridge_slave_0 entered promiscuous mode [ 22.996335][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.003533][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.011023][ T286] device bridge_slave_1 entered promiscuous mode [ 23.017623][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.024745][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.032294][ T285] device bridge_slave_0 entered promiscuous mode [ 23.040664][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.047782][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.055792][ T285] device bridge_slave_1 entered promiscuous mode [ 23.119600][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.126690][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.134732][ T287] device bridge_slave_0 entered promiscuous mode [ 23.146907][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.154049][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.161394][ T288] device bridge_slave_0 entered promiscuous mode [ 23.171107][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.178204][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.185784][ T288] device bridge_slave_1 entered promiscuous mode [ 23.195349][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.202544][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.209934][ T287] device bridge_slave_1 entered promiscuous mode [ 23.307909][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.315064][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.322558][ T289] device bridge_slave_0 entered promiscuous mode [ 23.349309][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.356455][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.364023][ T289] device bridge_slave_1 entered promiscuous mode [ 23.419740][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.426840][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.434174][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.441208][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.449640][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.456712][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.464052][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.471096][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.518102][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.525218][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.532545][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.539687][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.551450][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.558551][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.565874][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.572996][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.598123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.606412][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.613957][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.621198][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.628627][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.636121][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.643401][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.650624][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.657923][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.682768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.690362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.698823][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.705945][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.734015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.742288][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.749324][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.757470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.765644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.773972][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.781017][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.788450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.796811][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.803901][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.825162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.833454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.841402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.849718][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.856770][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.865206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.873453][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.880589][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.888414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.896388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.903912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.927047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.935276][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.942332][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.949690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.958104][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.965229][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.972752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.991005][ T285] device veth0_vlan entered promiscuous mode [ 24.004449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.013259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.021555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.029908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.038776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.047450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.055568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.063515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.071512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.079644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.087700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.096049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.104358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.111985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.129399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.137068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.144805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.153314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.161456][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.168770][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.176298][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.184623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.192986][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.200012][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.215960][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.223682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.231810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.240064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.248257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.256477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.264708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.274373][ T285] device veth1_macvtap entered promiscuous mode [ 24.287123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.294814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.303331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.311635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.320235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.329260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.337208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.350587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.358090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.365688][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.373749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.381784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.389531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.401515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.410042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.420274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.428738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.437701][ T286] device veth0_vlan entered promiscuous mode [ 24.444626][ T287] device veth0_vlan entered promiscuous mode [ 24.456023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.464499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.482991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.490384][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.497990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.506399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.514878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.523158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.533531][ T289] device veth0_vlan entered promiscuous mode [ 24.542172][ T286] device veth1_macvtap entered promiscuous mode [ 24.552347][ T288] device veth0_vlan entered promiscuous mode [ 24.559243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.567469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.576154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.576171][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 24.585277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.599582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.612392][ T289] device veth1_macvtap entered promiscuous mode [ 24.627960][ T288] device veth1_macvtap entered promiscuous mode [ 24.637715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.651063][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.660158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.667992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.676433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.685305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.693855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.702164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.754246][ T287] device veth1_macvtap entered promiscuous mode [ 24.789515][ T314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 24.801738][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.810562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.819227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.895543][ T317] dummy_hcd dummy_hcd.0: remove, state 4 [ 24.901307][ T317] usb usb1: USB disconnect, device number 1 [ 25.069812][ T317] dummy_hcd dummy_hcd.0: stopped [ 25.074964][ T317] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 25.144540][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.260479][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.303837][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.345116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.387318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.431258][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.856358][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.864929][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.873829][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.882344][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.890762][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.905202][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.914819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.921927][ C0] sched: RT throttling activated [ 25.928310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.969508][ T324] loop4: detected capacity change from 0 to 256 [ 26.064013][ T324] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 26.082114][ T324] exFAT-fs (loop4): failed to load upcase table [ 26.098595][ T324] exFAT-fs (loop4): failed to recognize exfat type [ 26.229919][ T332] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 26.262040][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.269316][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.447802][ T341] xt_hashlimit: size too large, truncated to 1048576 [ 26.501937][ T306] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.581903][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.597756][ T348] loop0: detected capacity change from 0 to 40427 [ 26.614943][ T348] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 26.626822][ T348] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 26.636400][ T348] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 26.816792][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 26.816807][ T30] audit: type=1400 audit(1784984240.369:141): avc: denied { write } for pid=347 comm="syz.0.13" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 26.845604][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.854115][ T30] audit: type=1400 audit(1784984240.369:142): avc: denied { associate } for pid=347 comm="syz.0.13" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.868474][ T306] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 26.894178][ T306] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 26.895281][ T30] audit: type=1400 audit(1784984240.439:143): avc: denied { map_read map_write } for pid=349 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.923483][ T306] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.958994][ T30] audit: type=1326 audit(1784984240.509:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=351 comm="syz.0.15" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce2f1ee99 code=0x7ffc0000 [ 26.984503][ T30] audit: type=1326 audit(1784984240.509:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=351 comm="syz.0.15" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce2f1ee99 code=0x7ffc0000 [ 27.012050][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.022368][ T30] audit: type=1326 audit(1784984240.509:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=351 comm="syz.0.15" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce2f1ee99 code=0x7ffc0000 [ 27.048655][ T30] audit: type=1326 audit(1784984240.509:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=351 comm="syz.0.15" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fdce2f1ee99 code=0x7ffc0000 [ 27.073729][ T30] audit: type=1326 audit(1784984240.509:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=351 comm="syz.0.15" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce2f1ee99 code=0x7ffc0000 [ 27.098568][ T30] audit: type=1326 audit(1784984240.509:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=351 comm="syz.0.15" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce2f1ee99 code=0x7ffc0000 [ 27.123570][ T306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.132727][ T26] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 27.141061][ T30] audit: type=1326 audit(1784984240.509:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=351 comm="syz.0.15" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce2f1ee99 code=0x7ffc0000 [ 27.168355][ T26] usb 2-1: config 0 has no interface number 0 [ 27.174586][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.182741][ T26] usb 2-1: config 0 interface 196 has no altsetting 0 [ 27.188241][ T354] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16'. [ 27.189675][ T306] usb 3-1: Product: syz [ 27.202846][ T306] usb 3-1: Manufacturer: syz [ 27.207476][ T306] usb 3-1: SerialNumber: syz [ 27.229503][ T355] netlink: 'syz.0.15': attribute type 12 has an invalid length. [ 27.272001][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.282674][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 27.292943][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.482013][ T20] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 27.491697][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.493630][ T306] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 27.500758][ T290] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 27.514448][ T20] usb 4-1: Product: syz [ 27.515503][ T306] cdc_ncm 3-1:1.0: bind() failure [ 27.519040][ T20] usb 4-1: Manufacturer: syz [ 27.528671][ T20] usb 4-1: SerialNumber: syz [ 27.538643][ T20] usb 4-1: config 0 descriptor?? [ 27.538698][ T306] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 27.561987][ T306] cdc_ncm 3-1:1.1: bind() failure [ 27.568421][ T306] usb 3-1: USB disconnect, device number 2 [ 27.741966][ T26] usb 2-1: New USB device found, idVendor=1de1, idProduct=f105, bcdDevice=bf.64 [ 27.751070][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.760335][ T26] usb 2-1: config 0 descriptor?? [ 27.825061][ T20] usb 4-1: USB disconnect, device number 2 [ 27.848149][ T357] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.882013][ T290] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 27.890231][ T290] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 27.907265][ T290] usb 5-1: config 8 has no interface number 0 [ 27.913599][ T290] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 27.930930][ T357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 27.945484][ T357] loop0: detected capacity change from 0 to 1024 [ 28.051041][ T357] loop0: detected capacity change from 0 to 512 [ 28.074176][ T357] EXT4-fs (loop0): Test dummy encryption mode enabled [ 28.081237][ T357] EXT4-fs (loop0): Ignoring removed oldalloc option [ 28.091385][ T357] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 28.106110][ T290] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 28.118273][ T290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.122386][ T26] usb 2-1: Found UVC 0.00 device (1de1:f105) [ 28.126852][ T290] usb 5-1: Product: syz [ 28.137693][ T290] usb 5-1: Manufacturer: syz [ 28.140310][ T26] usb 2-1: No valid video chain found. [ 28.142736][ T290] usb 5-1: SerialNumber: syz [ 28.162269][ T26] usb 2-1: USB disconnect, device number 2 [ 28.251985][ T306] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.262900][ T366] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 28.274635][ T366] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 28.283088][ T366] CPU: 0 PID: 366 Comm: syz.0.20 Not tainted syzkaller #0 [ 28.290248][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 28.300343][ T366] RIP: 0010:dummy_udc_start+0xbb/0x1d0 [ 28.305862][ T366] Code: 00 00 ff 24 c5 40 20 7c 85 e8 41 0f 40 fe eb 13 e8 3a 0f 40 fe eb 0c e8 33 0f 40 fe eb 05 e8 2c 0f 40 fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 86 7e 7f fe 4d 8b 36 4c 89 f7 e8 [ 28.325471][ T366] RSP: 0018:ffffc90007817aa8 EFLAGS: 00010246 [ 28.331558][ T366] RAX: 0000000000000000 RBX: ffff88811a1aa010 RCX: 0000000000080000 [ 28.339528][ T366] RDX: ffffc9000179c000 RSI: 000000000000083e RDI: 000000000000083f [ 28.347502][ T366] RBP: ffffc90007817ad0 R08: ffff8881164dcf00 R09: 0000000000000004 [ 28.355478][ T366] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 28.363462][ T366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 28.371449][ T366] FS: 00007fdce19786c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 28.380415][ T366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.387002][ T366] CR2: 00007fdce2f08000 CR3: 000000011a6c4000 CR4: 00000000003506b0 [ 28.394987][ T366] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.402960][ T366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.410966][ T366] Call Trace: [ 28.414275][ T366] [ 28.417212][ T366] ? dummy_pullup+0x130/0x130 [ 28.421898][ T366] udc_bind_to_driver+0x2af/0x770 [ 28.426955][ T366] usb_gadget_probe_driver+0x1fc/0x380 [ 28.432417][ T366] raw_ioctl+0x114d/0x3040 [ 28.436882][ T366] ? ioctl_has_perm+0x3ab/0x4f0 [ 28.441752][ T366] ? audio_source_pcm_show+0xe0/0xe0 [ 28.447048][ T366] ? has_cap_mac_admin+0x370/0x370 [ 28.452196][ T366] ? put_vma+0x44/0x60 [ 28.456268][ T366] ? do_user_addr_fault+0x9e5/0x11c0 [ 28.461581][ T366] ? selinux_file_ioctl+0x3ad/0x4c0 [ 28.466787][ T366] ? selinux_file_alloc_security+0x120/0x120 [ 28.472775][ T366] ? __fget_files+0x2e1/0x340 [ 28.477454][ T366] ? security_file_ioctl+0x84/0xa0 [ 28.482571][ T366] ? audio_source_pcm_show+0xe0/0xe0 [ 28.487861][ T366] __se_sys_ioctl+0x121/0x1a0 [ 28.492023][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 28.492548][ T366] __x64_sys_ioctl+0x7b/0x90 [ 28.502318][ T366] x64_sys_call+0x2f/0x9a0 [ 28.506769][ T366] do_syscall_64+0x4c/0xa0 [ 28.511210][ T366] ? clear_bhb_loop+0x50/0xa0 [ 28.515898][ T366] ? clear_bhb_loop+0x50/0xa0 [ 28.520595][ T366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.526497][ T366] RIP: 0033:0x7fdce2f1eb2b [ 28.530976][ T366] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 28.550815][ T366] RSP: 002b:00007fdce1975f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.559270][ T366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdce2f1eb2b [ 28.567282][ T366] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 28.575297][ T366] RBP: 00007fdce1976fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 28.583396][ T366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.591403][ T366] R13: 0000200000000600 R14: 0000000000000000 R15: 0000000000000000 [ 28.599407][ T366] [ 28.602457][ T366] Modules linked in: [ 28.608970][ T366] ---[ end trace 1f30df2af8e3c27e ]--- [ 28.613903][ T354] netlink: 'syz.4.16': attribute type 3 has an invalid length. [ 28.615217][ T306] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 28.631408][ T366] RIP: 0010:dummy_udc_start+0xbb/0x1d0 [ 28.637774][ T366] Code: 00 00 ff 24 c5 40 20 7c 85 e8 41 0f 40 fe eb 13 e8 3a 0f 40 fe eb 0c e8 33 0f 40 fe eb 05 e8 2c 0f 40 fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 86 7e 7f fe 4d 8b 36 4c 89 f7 e8 [ 28.658420][ T306] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.663959][ T354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 28.706072][ T306] usb 3-1: config 0 has no interface number 0 [ 28.710496][ T366] RSP: 0018:ffffc90007817aa8 EFLAGS: 00010246 [ 28.718796][ T366] RAX: 0000000000000000 RBX: ffff88811a1aa010 RCX: 0000000000080000 [ 28.728251][ T366] RDX: ffffc9000179c000 RSI: 000000000000083e RDI: 000000000000083f [ 28.736702][ T366] RBP: ffffc90007817ad0 R08: ffff8881164dcf00 R09: 0000000000000004 [ 28.745459][ T366] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 28.753844][ T366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 28.762187][ T366] FS: 00007fdce19786c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 28.771449][ T366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.778457][ T366] CR2: 0000001b2ee1cff8 CR3: 000000011a6c4000 CR4: 00000000003506b0 [ 28.786891][ T366] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.795186][ T366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.803915][ T366] Kernel panic - not syncing: Fatal exception [ 28.810397][ T366] Kernel Offset: disabled [ 28.814744][ T366] Rebooting in 86400 seconds..