last executing test programs: 9.52149171s ago: executing program 0 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mydev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000003c0)={0x1, 0x4, 0x1000, 0x8, 0x18, "ed9c52dafcfd9751b42cd3345e86d0a04e5fa4"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 9.482061664s ago: executing program 0 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) setns(0xc9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 9.217421421s ago: executing program 0 (id=17): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002b40)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000052c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000079612cdce6b72f0e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003bb3000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000019889fa800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff000000000000000000000000000000000000f700", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004f00)={0x20, 0x0, 0x1ff, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004f40)='./file0\x00', 0x101001, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000007680)='./file0\x00', &(0x7f00000076c0), 0x800) syz_fuse_handle_req(r0, &(0x7f0000002bc0)="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", 0x2000, &(0x7f0000007b00)={&(0x7f0000004bc0)={0x50, 0x0, 0x6, {0x7, 0x2d, 0x90, 0x104, 0x5, 0x7, 0x400, 0x80, 0x0, 0x0, 0x1, 0x7}}, 0x0, &(0x7f0000004c80)={0x18, 0x0, 0x9}, 0x0, 0x0, &(0x7f0000005240)={0x28, 0xfffffffffffffff5, 0x6, {{0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007400)={0x78, 0x0, 0xd51, {0x3, 0x8, 0x0, {0x0, 0x7, 0x8, 0x6, 0xffffffffffffae74, 0x5, 0x23948bf4, 0x5, 0xe, 0x6000, 0x2, r2, r3, 0x401, 0xfffffffc}}}, 0x0, &(0x7f0000007540)={0x10, 0x0, 0x3}, 0x0, 0x0, 0x0, &(0x7f00000079c0)={0x130, 0x0, 0x7, {0xffffffffffff7d3b, 0x52f, 0x0, '\x00', {0x400, 0x2, 0x7, 0x3, r2, r3, 0x2000, '\x00', 0x7fff, 0xff, 0x9, 0x1, {0xfffffffffffffffa, 0xcd}, {0x7, 0x6}, {0x10000, 0x7}, {0x2, 0x3}, 0x400, 0x5, 0x6, 0x400}}}}) writev(r4, &(0x7f0000004f80)=[{&(0x7f0000004fc0)="e1", 0x56000}], 0x1) 9.076395585s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000dc0)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 8.763656877s ago: executing program 0 (id=24): open_tree(0xffffffffffffffff, &(0x7f0000000300)='./cgroup\x00', 0x89801) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/3, 0x3}], 0x1, 0x0, 0x55) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000940)={'syzkaller0\x00', @link_local}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.633014441s ago: executing program 0 (id=34): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 8.606094893s ago: executing program 32 (id=34): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 7.95476144s ago: executing program 5 (id=40): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100100000040cc17691900010102030109024500010100803209040000"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4.867848814s ago: executing program 5 (id=74): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0xa, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x20000000000094c], 0x10000, 0x202}) syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100008e77e3405c1b0501f101010203010902240001000000000904000002a4d36f00090504090000000000090507"], 0x0) 3.546035599s ago: executing program 5 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount(&(0x7f0000000480)=@filename='mtd0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='jffs2\x00', 0x800041, 0x0) 3.538864269s ago: executing program 5 (id=76): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}], 0x1, 0x6, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) 3.218348832s ago: executing program 2 (id=84): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xe01c, 0x80000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001640)={'#! ', './file1/../file0', [{0x20, '\x00'}, {}, {0x20, '\xff\xff'}], 0xa, "439118890b9c0900594ee00405742a995f23b807e61af392f8a0e955270a56dd2b47f43ab161753b19d9e86fc19e5ccf0105e3"}, 0x4d) write$UHID_INPUT(r1, &(0x7f0000000100)={0x8, {"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", 0xfffffffffffffd4f}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001140)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859890600000000000000875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000e00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0xe, 0x7]}}) 3.217958192s ago: executing program 2 (id=85): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) fdatasync(0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x5e21, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x11, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfc, 0x1, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={'\x00', 0x42, 0x9, 0x1, 0x40000003, 0x3}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x40, 0x43, 0x32, 0x40, 0x1608, 0x305, 0x98de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x44, 0xd, 0x2, 0x21, 0x81, 0x5f, 0x8, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xb9, 0x1}}, {{0x9, 0x5, 0x83, 0x12, 0x8, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x5e21, @local}, 0x10) 3.155478688s ago: executing program 1 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x168000, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000493000/0x3000)=nil, 0x3000, 0x6) timer_settime(r2, 0x1, &(0x7f0000000200), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x4010, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000440)='\t\x1eo\x86pM\xbe\xa1\xa3\x13\xf0\x1c\x1c\x95\x06W\x00\xa3E\xde\x97\xa7\x13\x1b\xb0\xe0\xa5[\x84H\xae\xe7\x1a\xbd\xb1\xfc\xee\xcc\x0f\xc9iVX\x98\x8e~\xc9\x88\xfdA\xdem\x9f\\$\xcf\xc2d\xaaL\xfd\x1e;\xc4', 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwrite64(r3, &(0x7f0000000500)="a2", 0x1, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000580)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) 3.13467311s ago: executing program 1 (id=88): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.128368191s ago: executing program 1 (id=89): keyctl$clear(0x3, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffb) 3.079598956s ago: executing program 1 (id=90): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) r1 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000f00)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000f40)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001000)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000010c0)={0x4c, 0x0, &(0x7f0000001100)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)}, 0x0) connect$inet(r1, &(0x7f0000000a00)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000a40)=[{&(0x7f0000000a80)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x100, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000ac0), 0x4) r8 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) writev(r8, &(0x7f0000000e00)=[{&(0x7f0000000000)="f1ffd76596a5a46a140a1375c2b83a3dd86c8a891f1f9f746cf5cc02ce687df1266c432ecf460da81135167794068a1ad81bcbc75ad8af2f202c4bb28decc87f3861186b333be4c48f5e9789fe88d0a71b29fd5b81f4a2cd6456715534b84790819173b31de65dffcb13dc1a8cf0148b86984de7eb6570f35ec44832dc47c2b54cdc1e975edab01fe8eb5f20816e300051", 0x91}, {&(0x7f0000000b00)="b4872b07ad76a46ac4dbed5a173209a272daa8169a1d07fc29255989783b43bb2830cd44834a500a304c07878c6e19800645aefb035d1ca2a68f136aa6b99686d1b59965b88ae5ae3cd025a1f1d41025a1ad36943509859522fc46c20e9f33655ec776877b663779f0bee614a70d7cbf85903a05d2177daa450113df2f89aec85b71d4d74ca7d16ed0ab2e", 0x8b}, {&(0x7f0000000bc0)="009ed7a086ca4dda1d9850cbbb6665f0a1dafb918a61872daf7ba5c1115ec740955e9c1360635b0bdb1b2a22376c7ad52e9d18deea9f4af54515a307c9929d0736eebf0c8170b9648b1083d29f21847407e94f2d17c9c533eaf7ab6929e25328c2df2b72e75d2cd15858883ff403383767ed", 0x72}, {&(0x7f0000000c40)="de59153a5204f5fe67df37ed9e1d0a5fa0f3339b15642455146c93fc1af41eaf60efe7ac3048f3cb0b77ec366f66bb86bfa633bde774f602f6a5e1c666aa39e67c049c65e69c4d8f2b38f6e816a6ddb3c40af3a0b12607a9bff2cb7ebe515bde911d0ae92ce86151b6b5af84bd", 0x6d}, {&(0x7f0000000cc0)="4f20e92d0b2c5ac81177dc7e8dc2b5cdb4f258c3437c05a9e76ccce6a841d3ac0ef51ef2dcc7d8e33d005876b2a8a151445cb2138b8d5838149d06566c4b39373f8dc697d2f20cc1a20c27af2ae26f4428b9", 0x52}, {&(0x7f0000000d40)="9fbbb3286c523ac542bd49ffaa5d6a08cdde45a1ff2891560e5e81ed658566597900c4c68ec7a3d7305dd628fedcaa7ffe368301fd1ff01db8dba2088a7783e64550be2d6450a29b293c4efc3df09e39dbd59d1a91dd926e93c0d7c4f76589d0cdabb4d7a5df471900511d7b73cc0139205d7f51a3c5d421d5d6afe583ee659a2f36ab4fd2c37825415a58ce6763bce755cd4de18c78819d9dd2e4603bae5e658d1461c1f2fb6df199f97178af2407125141eacaf1f96aaded4e0cd599", 0xbd}], 0x6) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r9, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) 2.262608339s ago: executing program 1 (id=100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x1, 0x3, 0x1c, 0x5, 0x14, 0x6}, @ipv4=@igmp={{0xa, 0x4, 0x3, 0x8, 0x30, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @broadcast, {[@rr={0x7, 0x13, 0xe, [@local, @rand_addr=0x64010101, @empty, @broadcast]}]}}, {0x11, 0x8, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x3a) 1.947384181s ago: executing program 4 (id=104): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="21000000470010aaaaaaaaaa000000000000000000000000000000000340000000000000000000000000000000000000000300000000000000000000000400"/76, 0x4d) 1.829335534s ago: executing program 1 (id=106): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000206d044fc2000000000022090224000900001006090410ec010300030009218100ff012228000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2023280000002803c2631385"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0)=0x58, 0xa) 1.770438579s ago: executing program 4 (id=108): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 1.770053959s ago: executing program 4 (id=109): unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x149040, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x4) syz_usb_disconnect(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000480)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 1.403439037s ago: executing program 3 (id=113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c000780080006400000070105000500020000000500040000000000160003"], 0x5c}}, 0x0) 1.398106678s ago: executing program 3 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='dir0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='dir0/trace_marker\x00', 0x1, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000800)="e1", 0x1}], 0x1) 1.309620676s ago: executing program 2 (id=115): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xa, 0x5000, 0x0, @loopback, 0x7ffffff7}, 0x1c) 1.287083019s ago: executing program 2 (id=116): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xffa1}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.242144113s ago: executing program 2 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, 0x7, 0xa, 0x201, 0x900, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x48804) 1.241919773s ago: executing program 2 (id=118): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) fdatasync(0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x5e21, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x11, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfc, 0x1, 0x4}}}}}]}}]}}, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x42, 0x9, 0x1, 0x40000003, 0x3}) 935.127874ms ago: executing program 4 (id=119): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000380)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file0/file0\x00', 0x40) open(&(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0) rmdir(0x0) 934.820374ms ago: executing program 4 (id=120): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x4040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000013108000c"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, &(0x7f0000000680)={0x4000000000000109, [0x0]}) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x12002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) sendmsg$802154_raw(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)="c103d3e4", 0x4}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 552.060934ms ago: executing program 3 (id=121): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x282, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 532.164155ms ago: executing program 3 (id=122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000240)="0f20e035000020000f22e0b805000000b975cea2010f01c10f23a6400f785800b9800000c00f3235010000000f30440f20c03505000000440f22c00f3266baf80cb818c6aa8def66bafc0c66b8a80066ef663e420f01dfd984b6a6b967e2", 0x5e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 229.827786ms ago: executing program 5 (id=123): r0 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./proc\x00', 0x1fb) mount(0x0, &(0x7f0000000f00)='./proc\x00', &(0x7f0000000f40)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./proc/thread-self/fail-nth\x00', 0x109002, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000fc0)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) write(r1, &(0x7f0000001080)='3', 0x4e) close_range(r0, 0xffffffffffffffff, 0x0) 207.141159ms ago: executing program 5 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x168000, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000493000/0x3000)=nil, 0x3000, 0x6) timer_settime(r2, 0x1, &(0x7f0000000200), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x4010, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000440)='\t\x1eo\x86pM\xbe\xa1\xa3\x13\xf0\x1c\x1c\x95\x06W\x00\xa3E\xde\x97\xa7\x13\x1b\xb0\xe0\xa5[\x84H\xae\xe7\x1a\xbd\xb1\xfc\xee\xcc\x0f\xc9iVX\x98\x8e~\xc9\x88\xfdA\xdem\x9f\\$\xcf\xc2d\xaaL\xfd\x1e;\xc4', 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwrite64(r3, &(0x7f0000000500)="a2", 0x1, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000540)=""/21, 0xfffffe0d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/13, 0xfffffffffffffd62) 180.369611ms ago: executing program 3 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x168000, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000493000/0x3000)=nil, 0x3000, 0x6) timer_settime(r2, 0x1, &(0x7f0000000200), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x4010, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000440)='\t\x1eo\x86pM\xbe\xa1\xa3\x13\xf0\x1c\x1c\x95\x06W\x00\xa3E\xde\x97\xa7\x13\x1b\xb0\xe0\xa5[\x84H\xae\xe7\x1a\xbd\xb1\xfc\xee\xcc\x0f\xc9iVX\x98\x8e~\xc9\x88\xfdA\xdem\x9f\\$\xcf\xc2d\xaaL\xfd\x1e;\xc4', 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwrite64(r3, &(0x7f0000000500)="a2", 0x1, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000540)=""/21, 0xfffffe0d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000580)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) 127.640987ms ago: executing program 4 (id=126): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) fdatasync(0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x5e21, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x11, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfc, 0x1, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={'\x00', 0x42, 0x9, 0x1, 0x40000003, 0x3}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x40, 0x43, 0x32, 0x40, 0x1608, 0x305, 0x98de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x44, 0xd, 0x2, 0x21, 0x81, 0x5f, 0x8, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xb9, 0x1}}, {{0x9, 0x5, 0x83, 0x12, 0x8, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x5e21, @local}, 0x10) 0s ago: executing program 3 (id=127): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @private=0xa010100}, 0x2}}, 0x2e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 18.090926][ T28] audit: type=1400 audit(1793084691.532:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.091975][ T279] cgroup: Unknown subsys name 'net' [ 18.113562][ T28] audit: type=1400 audit(1793084691.532:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.140818][ T28] audit: type=1400 audit(1793084691.552:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.140954][ T279] cgroup: Unknown subsys name 'devices' [ 18.282317][ T279] cgroup: Unknown subsys name 'hugetlb' [ 18.287942][ T279] cgroup: Unknown subsys name 'rlimit' [ 18.390055][ T28] audit: type=1400 audit(1793084691.822:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.413314][ T28] audit: type=1400 audit(1793084691.822:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 18.421569][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.438187][ T28] audit: type=1400 audit(1793084691.822:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.469817][ T28] audit: type=1400 audit(1793084691.882:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.479069][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.495392][ T28] audit: type=1400 audit(1793084691.882:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.529900][ T28] audit: type=1400 audit(1793084691.912:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.555485][ T28] audit: type=1400 audit(1793084691.912:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.795977][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.803092][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.810391][ T287] device bridge_slave_0 entered promiscuous mode [ 19.818333][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.825531][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.833007][ T287] device bridge_slave_1 entered promiscuous mode [ 19.839525][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.846572][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.853918][ T288] device bridge_slave_0 entered promiscuous mode [ 19.877979][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.885065][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.892427][ T288] device bridge_slave_1 entered promiscuous mode [ 19.999990][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.007119][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.014598][ T292] device bridge_slave_0 entered promiscuous mode [ 20.034527][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.041661][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.048931][ T292] device bridge_slave_1 entered promiscuous mode [ 20.067074][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.074147][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.081565][ T289] device bridge_slave_0 entered promiscuous mode [ 20.101474][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.108517][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.116051][ T289] device bridge_slave_1 entered promiscuous mode [ 20.138098][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.145206][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.152639][ T294] device bridge_slave_0 entered promiscuous mode [ 20.192043][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.199097][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.206531][ T294] device bridge_slave_1 entered promiscuous mode [ 20.244210][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.251278][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.258538][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.265571][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.285828][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.292897][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.300144][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.307177][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.343266][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.350317][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.357607][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.364632][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.425730][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.432948][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.440054][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.447734][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.455273][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.462694][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.471158][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.478596][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.487476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.495680][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.502731][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.523450][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.531485][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.539574][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.546630][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.554117][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.562441][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.569483][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.603314][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.611357][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.619390][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.627734][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.635862][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.644119][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.651164][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.658449][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.666600][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.673618][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.680958][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.688845][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.697039][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.704073][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.711516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.719651][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.726689][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.734001][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.742263][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.749278][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.757232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.776585][ T288] device veth0_vlan entered promiscuous mode [ 20.784573][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.793406][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.801938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.810201][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.818720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.826690][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.834930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.842495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.860926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.869072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.877267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.884777][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.892375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.900371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.908377][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.916675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.924873][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.931901][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.939247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.947613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.955793][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.962810][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.975812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.983529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.991620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.999487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.007697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.024555][ T292] device veth0_vlan entered promiscuous mode [ 21.031259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.039627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.048285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.056329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.064588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.072858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.081040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.088454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.099436][ T288] device veth1_macvtap entered promiscuous mode [ 21.106754][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.114424][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.122580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.139413][ T287] device veth0_vlan entered promiscuous mode [ 21.151277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.159614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.167996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.176332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.184848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.192818][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.200896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.208855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.216911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.225228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.233629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.241968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.250233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.257714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.267621][ T294] device veth0_vlan entered promiscuous mode [ 21.278194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.286076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.294130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.301731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.310170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.318495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.331958][ T287] device veth1_macvtap entered promiscuous mode [ 21.343216][ T292] device veth1_macvtap entered promiscuous mode [ 21.349995][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.357728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.366067][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.374309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.386774][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 21.390441][ T294] device veth1_macvtap entered promiscuous mode [ 21.404053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.412869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.421320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.440824][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.449073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.457427][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.466188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.475268][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.484035][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.496165][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.502357][ T312] capability: warning: `syz.1.6' uses deprecated v2 capabilities in a way that may be insecure [ 21.504941][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.517979][ T312] tmpfs: Unknown parameter 'quota' [ 21.540114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.548596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.557163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.573868][ T289] device veth0_vlan entered promiscuous mode [ 21.580107][ T315] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.600189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.629478][ T289] device veth1_macvtap entered promiscuous mode [ 21.642202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.651749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.659555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.683398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.692217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.701297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.718702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.773405][ T328] ======================================================= [ 21.773405][ T328] WARNING: The mand mount option has been deprecated and [ 21.773405][ T328] and is ignored by this kernel. Remove the mand [ 21.773405][ T328] option from the mount to silence this warning. [ 21.773405][ T328] ======================================================= [ 21.813154][ T330] FAULT_INJECTION: forcing a failure. [ 21.813154][ T330] name failslab, interval 1, probability 0, space 0, times 0                                                                                                                                                                                                                                                                                                                                                                                                                                                           [ 22.910066][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.917188][ T401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.924468][ T401] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.931496][ T401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.938895][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.954774][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.962552][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.969742][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.976857][ T298] usb 5-1: new full-speed USB device number 2 using dummy_hcd syzkaller syzkaller login: [ 22.987982][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.996382][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.003416][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.012070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.020231][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.027261][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.044432][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.052379][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.065862][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.077381][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.085558][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.093769][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.101751][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.113203][ T401] device veth0_vlan entered promiscuous mode [ 23.123015][ T6] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 23.126196][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.132220][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 23.141618][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.148322][ T6] usb 2-1: Product: syz [ 23.157792][ T401] device veth1_macvtap entered promiscuous mode [ 23.160318][ T6] usb 2-1: Manufacturer: syz [ 23.170779][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.172872][ T298] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 23.179348][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.189502][ T298] usb 5-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.198182][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.210455][ T402] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.226390][ T298] usb 5-1: config 0 interface 0 has no altsetting 0 [ 23.233124][ T298] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 23.242324][ T298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.253107][ T298] usb 5-1: config 0 descriptor?? [ 23.258886][ T396] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 23.259854][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.271221][ T28] kauditd_printk_skb: 4413 callbacks suppressed [ 23.271233][ T28] audit: type=1400 audit(1793084696.762:4485): avc: denied { unmount } for pid=401 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 23.276597][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.319501][ T28] audit: type=1400 audit(1793084696.812:4486): avc: denied { write } for pid=412 comm="syz.5.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 23.346471][ T28] audit: type=1400 audit(1793084696.842:4487): avc: denied { write } for pid=414 comm="syz.5.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 23.383335][ T419] fuse: Bad value for 'group_id' [ 23.410690][ T402] usb 3-1: Using ep0 maxpacket: 16 [ 23.417045][ T402] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 23.427426][ T402] usb 3-1: config 0 has no interfaces? [ 23.435046][ T6] scsi host1: uas [ 23.439426][ T402] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 23.451453][ T402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.459575][ T402] usb 3-1: Product: syz [ 23.463815][ T402] usb 3-1: Manufacturer: syz [ 23.468424][ T402] usb 3-1: SerialNumber: syz [ 23.473388][ T313] device bridge_slave_1 left promiscuous mode [ 23.475394][ T402] usb 3-1: config 0 descriptor?? [ 23.481367][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.492310][ T313] device bridge_slave_0 left promiscuous mode [ 23.498468][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.506669][ T313] device veth1_macvtap left promiscuous mode [ 23.512711][ T313] device veth0_vlan left promiscuous mode [ 23.643786][ C0] usb 2-1: stat urb: status -71 [ 23.643875][ T24] usb 2-1: USB disconnect, device number 2 [ 23.648744][ C0] usb 2-1: cmd cmplt err -71 [ 23.659404][ T24] scsi 1:0:0:0: tag#16 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 23.667245][ T24] scsi 1:0:0:0: tag#16 CDB: opcode=0x12 12 00 00 00 24 00 [ 23.670690][ T28] audit: type=1400 audit(1793084697.162:4488): avc: denied { write } for pid=435 comm="syz.3.44" name="anycast6" dev="proc" ino=4026532423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 23.699183][ T28] audit: type=1400 audit(1793084697.162:4489): avc: denied { create } for pid=435 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 23.720145][ T298] belkin 0003:1020:0006.0001: ignoring exceeding usage max [ 23.720777][ T59] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 23.733348][ T298] belkin 0003:1020:0006.0001: No inputs registered, leaving [ 23.742143][ T28] audit: type=1400 audit(1793084697.192:4490): avc: denied { create } for pid=395 comm="syz.4.32" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 23.763835][ T298] belkin 0003:1020:0006.0001: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.4-1/input0 [ 23.765788][ T40] usb 3-1: USB disconnect, device number 2 [ 23.783342][ T28] audit: type=1400 audit(1793084697.192:4491): avc: denied { write } for pid=395 comm="syz.4.32" name="file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 23.808020][ T28] audit: type=1400 audit(1793084697.192:4492): avc: denied { open } for pid=395 comm="syz.4.32" path="/8/file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 23.830351][ T28] audit: type=1400 audit(1793084697.192:4493): avc: denied { ioctl } for pid=395 comm="syz.4.32" path="/8/file0" dev="tmpfs" ino=62 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 23.945139][ T396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.953707][ T396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.962397][ T59] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.963452][ T298] usb 5-1: USB disconnect, device number 2 [ 23.976264][ T59] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 23.987668][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.995850][ T59] usb 6-1: Product: syz [ 23.999997][ T59] usb 6-1: Manufacturer: syz [ 24.004665][ T59] usb 6-1: SerialNumber: syz [ 24.024607][ T28] audit: type=1400 audit(1793084697.522:4494): avc: denied { create } for pid=452 comm="syz.3.50" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 24.320713][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.500706][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 24.506749][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 24.518429][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 24.531568][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 24.540779][ T402] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.540810][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.561753][ T24] usb 4-1: config 0 descriptor?? [ 24.643695][ T472] loop4: detected capacity change from 0 to 2048 [ 24.672590][ T472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 24.685623][ T477] netlink: 'syz.1.60': attribute type 27 has an invalid length. [ 24.697747][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 24.705589][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 24.725499][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 24.733458][ T402] usb 3-1: Using ep0 maxpacket: 16 [ 24.739882][ T402] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 24.743061][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 24.758530][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 24.763974][ T402] usb 3-1: config 0 has no interface number 0 [ 24.766774][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 24.781845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 24.788662][ T402] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.790148][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 24.809084][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 24.818019][ T402] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.821165][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 24.831340][ T472] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 24.856411][ T402] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.869709][ T402] usb 3-1: config 0 interface 1 has no altsetting 0 [ 24.876639][ T402] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 24.890758][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.919055][ T402] usb 3-1: config 0 descriptor?? [ 24.930328][ T402] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 24.946168][ T294] EXT4-fs (loop4): unmounting filesystem. [ 25.002298][ T24] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 25.013368][ T24] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 25.020523][ T24] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 25.029277][ T24] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 25.038083][ T24] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 25.046064][ T24] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 25.054348][ T24] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 25.061667][ T24] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 25.073262][ T24] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 25.092726][ T479] syz.1.61 (479) used greatest stack depth: 20640 bytes left [ 25.278749][ T505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.71'. [ 25.287638][ T505] netlink: 'syz.4.71': attribute type 1 has an invalid length. [ 25.332155][ T402] hid-generic 0003:04F3:074D.0003: failed to start in urb: -90 [ 25.340258][ T402] input: HID 04f3:074d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04F3:074D.0003/input/input5 [ 25.353232][ T402] hid-generic 0003:04F3:074D.0003: input,hiddev96,hidraw1: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 25.403548][ T24] lenovo 0003:17EF:6047.0002: Failed to switch middle button: -71 [ 25.411823][ T24] lenovo 0003:17EF:6047.0002: Fn-lock setting failed: -71 [ 25.419100][ T24] lenovo 0003:17EF:6047.0002: Sensitivity setting failed: -71 [ 25.420705][ T410] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 25.459208][ T24] usb 4-1: USB disconnect, device number 2 [ 25.622906][ T410] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 25.632020][ T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.639989][ T410] usb 2-1: Product: syz [ 25.644173][ T410] usb 2-1: Manufacturer: syz [ 25.648756][ T410] usb 2-1: SerialNumber: syz [ 25.653829][ T410] usb 2-1: config 0 descriptor?? [ 26.190731][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.371707][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.382290][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.391960][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 26.401616][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.414426][ T24] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 26.415534][ T402] usb 6-1: USB disconnect, device number 2 [ 26.423533][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.830789][ T402] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 26.939309][ T523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.948180][ T523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.022274][ T402] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 27.033165][ T402] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 27.043980][ T402] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 8196, setting to 1024 [ 27.056248][ T402] usb 6-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 27.065305][ T402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.073304][ T402] usb 6-1: Product: syz [ 27.077447][ T402] usb 6-1: Manufacturer: syz [ 27.082068][ T402] usb 6-1: SerialNumber: syz [ 27.087387][ T402] usb 6-1: config 0 descriptor?? [ 27.093240][ T402] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 27.101253][ T402] usb 6-1: Detected SIO [ 27.105399][ T402] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 27.113275][ T402] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 27.297005][ T24] usb 6-1: USB disconnect, device number 3 [ 27.303563][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 27.313170][ T24] ftdi_sio 6-1:0.0: device disconnected [ 27.972641][ T24] usb 3-1: USB disconnect, device number 3 [ 28.090703][ T402] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 28.117733][ T549] loop2: detected capacity change from 0 to 8 [ 28.148745][ T59] usb 2-1: USB disconnect, device number 3 [ 28.228488][ T562] x_tables: duplicate entry at hook 1 [ 28.235383][ T562] binder: 561:562 ioctl c0306201 0 returned -14 [ 28.292937][ T402] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 28.302069][ T402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.302727][ T563] netlink: 'syz.1.90': attribute type 4 has an invalid length. [ 28.310054][ T402] usb 6-1: Product: syz [ 28.310070][ T402] usb 6-1: Manufacturer: syz [ 28.310083][ T402] usb 6-1: SerialNumber: syz [ 28.530716][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 28.711797][ T24] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 28.722774][ T24] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.735683][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 28.742343][ T24] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 28.751378][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.759862][ T24] usb 3-1: config 0 descriptor?? [ 28.765113][ T551] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 28.929298][ T59] usb 4-1: USB disconnect, device number 3 [ 29.029223][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 29.029236][ T28] audit: type=1400 audit(1793084702.522:4522): avc: denied { create } for pid=582 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.054632][ T28] audit: type=1400 audit(1793084702.532:4523): avc: denied { mount } for pid=584 comm="syz.3.98" name="/" dev="configfs" ino=7836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 29.086132][ T28] audit: type=1400 audit(1793084702.532:4524): avc: denied { search } for pid=584 comm="syz.3.98" name="/" dev="configfs" ino=7836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 29.108316][ T28] audit: type=1400 audit(1793084702.532:4525): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 29.161784][ T28] audit: type=1400 audit(1793084702.662:4526): avc: denied { mounton } for pid=591 comm="syz.3.101" path="/25/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 29.161830][ T592] FAULT_INJECTION: forcing a failure. [ 29.161830][ T592] name failslab, interval 1, probability 0, space 0, times 0 [ 29.185653][ T24] belkin 0003:1020:0006.0004: ignoring exceeding usage max [ 29.196482][ T592] CPU: 0 PID: 592 Comm: syz.3.101 Not tainted syzkaller #0 [ 29.209282][ T24] belkin 0003:1020:0006.0004: No inputs registered, leaving [ 29.210623][ T592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.210634][ T592] Call Trace: [ 29.210640][ T592] [ 29.210647][ T592] __dump_stack+0x21/0x24 [ 29.210667][ T592] dump_stack_lvl+0x110/0x170 [ 29.210681][ T592] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.219177][ T24] belkin 0003:1020:0006.0004: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 29.227981][ T592] ? xas_find_marked+0xc58/0xd70 [ 29.228010][ T592] dump_stack+0x15/0x24 [ 29.228025][ T592] should_fail_ex+0x3bf/0x510 [ 29.273163][ T592] __should_failslab+0xac/0xf0 [ 29.277914][ T592] should_failslab+0x9/0x20 [ 29.282403][ T592] __kmem_cache_alloc_node+0x3d/0x2d0 [ 29.287756][ T592] ? alloc_vfsmnt+0xa1/0x4a0 [ 29.292330][ T592] ? __cfi_ida_alloc_range+0x10/0x10 [ 29.297604][ T592] ? alloc_vfsmnt+0xa1/0x4a0 [ 29.302177][ T592] __kmalloc_node_track_caller+0xa1/0x1e0 [ 29.307874][ T592] ? alloc_vfsmnt+0x27/0x4a0 [ 29.312446][ T592] kstrdup_const+0x5a/0xa0 [ 29.316841][ T592] alloc_vfsmnt+0xa1/0x4a0 [ 29.321235][ T592] vfs_create_mount+0x7b/0x4b0 [ 29.325977][ T592] do_new_mount+0x355/0xb40 [ 29.330454][ T592] ? security_capable+0x99/0xc0 [ 29.335288][ T592] path_mount+0x640/0xfd0 [ 29.339616][ T592] __se_sys_mount+0x320/0x390 [ 29.344274][ T592] ? __x64_sys_mount+0xd0/0xd0 [ 29.349037][ T592] ? __kasan_check_write+0x14/0x20 [ 29.354149][ T592] ? fpregs_restore_userregs+0x128/0x260 [ 29.359784][ T592] __x64_sys_mount+0xbf/0xd0 [ 29.364375][ T592] x64_sys_call+0x65d/0x9a0 [ 29.368883][ T592] do_syscall_64+0x4c/0xa0 [ 29.373299][ T592] ? clear_bhb_loop+0x30/0x80 [ 29.377976][ T592] ? clear_bhb_loop+0x30/0x80 [ 29.382637][ T592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.388509][ T592] RIP: 0033:0x7fc648b9f559 [ 29.392906][ T592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.412494][ T592] RSP: 002b:00007fc649a5a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 29.417685][ T551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.420903][ T592] RAX: ffffffffffffffda RBX: 00007fc648e25fa0 RCX: 00007fc648b9f559 [ 29.420920][ T592] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000200000000200 [ 29.420931][ T592] RBP: 00007fc648c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 29.420947][ T592] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 29.429995][ T551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.437197][ T592] R13: 00007fc648e26038 R14: 00007fc648e25fa0 R15: 00007ffd7ee73758 [ 29.451636][ T24] usb 3-1: USB disconnect, device number 4 [ 29.453102][ T592] [ 29.498669][ T28] audit: type=1400 audit(1793084702.992:4527): avc: denied { bind } for pid=598 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.520073][ T28] audit: type=1400 audit(1793084703.012:4528): avc: denied { write } for pid=598 comm="syz.4.104" path="socket:[18079]" dev="sockfs" ino=18079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.557875][ T28] audit: type=1400 audit(1793084703.052:4529): avc: denied { create } for pid=607 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.577871][ T28] audit: type=1400 audit(1793084703.052:4530): avc: denied { bind } for pid=607 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.598601][ T28] audit: type=1400 audit(1793084703.052:4531): avc: denied { write } for pid=607 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.735293][ T616] device-mapper: table: 252:0: zero-length target [ 29.741787][ T616] device-mapper: ioctl: error adding target to table [ 29.780783][ T59] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.980737][ T59] usb 2-1: Using ep0 maxpacket: 32 [ 29.986313][ T59] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 29.994994][ T59] usb 2-1: config 0 has an invalid interface number: 16 but max is 8 [ 30.003309][ T59] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 30.105719][ T59] usb 2-1: config 0 has no interface number 0 [ 30.112031][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.123173][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.133181][ T59] usb 2-1: config 0 interface 16 has no altsetting 0 [ 30.140511][ T59] usb 2-1: config 0 has an invalid interface number: 16 but max is 8 [ 30.148617][ T59] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 30.157493][ T59] usb 2-1: config 0 has no interface number 0 [ 30.163601][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.174747][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.184742][ T59] usb 2-1: config 0 interface 16 has no altsetting 0 [ 30.192338][ T59] usb 2-1: config 0 has an invalid interface number: 16 but max is 8 [ 30.200400][ T59] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 30.209258][ T59] usb 2-1: config 0 has no interface number 0 [ 30.215345][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.226465][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.236469][ T59] usb 2-1: config 0 interface 16 has no altsetting 0 [ 30.243820][ T59] usb 2-1: config 0 has an invalid interface number: 16 but max is 8 [ 30.251915][ T59] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 30.260770][ T59] usb 2-1: config 0 has no interface number 0 [ 30.266860][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.277971][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.287965][ T59] usb 2-1: config 0 interface 16 has no altsetting 0 [ 30.295312][ T59] usb 2-1: config 0 has an invalid interface number: 16 but max is 8 [ 30.303516][ T59] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 30.312391][ T59] usb 2-1: config 0 has no interface number 0 [ 30.318454][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.329588][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.339599][ T59] usb 2-1: config 0 interface 16 has no altsetting 0 [ 30.350712][ T402] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 30.361024][ T59] usb 2-1: config 0 has an invalid interface number: 16 but max is 8 [ 30.369109][ T59] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 30.377997][ T59] usb 2-1: config 0 has no interface number 0 [ 30.384462][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.395837][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.405866][ T59] usb 2-1: config 0 interface 16 has no altsetting 0 [ 30.413394][ T59] usb 2-1: config 0 has an invalid interface number: 16 but max is 8 [ 30.421663][ T59] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 30.430513][ T59] usb 2-1: config 0 has no interface number 0 [ 30.436599][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.447750][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.457740][ T59] usb 2-1: config 0 interface 16 has no altsetting 0 [ 30.465202][ T59] usb 2-1: config 0 has an invalid interface number: 16 but max is 8 [ 30.473390][ T59] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 30.482266][ T59] usb 2-1: config 0 has no interface number 0 [ 30.488326][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.499465][ T59] usb 2-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.509476][ T59] usb 2-1: config 0 interface 16 has no altsetting 0 [ 30.516178][ T59] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 30.525211][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.533748][ T59] usb 2-1: config 0 descriptor?? [ 30.541743][ T402] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 30.552698][ T402] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.565651][ T402] usb 3-1: config 0 interface 0 has no altsetting 0 [ 30.572384][ T402] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 30.581490][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.590257][ T402] usb 3-1: config 0 descriptor?? [ 30.595566][ T635] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 30.800997][ T642] Zero length message leads to an empty skb [ 30.807722][ T402] usbhid 3-1:0.0: can't add hid device: -71 [ 30.813777][ T402] usbhid: probe of 3-1:0.0 failed with error -71 [ 30.825122][ T402] usb 3-1: USB disconnect, device number 5 [ 30.831253][ T428] usb 6-1: USB disconnect, device number 4 [ 30.847421][ T647] FAULT_INJECTION: forcing a failure. [ 30.847421][ T647] name failslab, interval 1, probability 0, space 0, times 0 [ 30.860078][ T647] CPU: 1 PID: 647 Comm: syz.5.123 Not tainted syzkaller #0 [ 30.867277][ T647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.877320][ T647] Call Trace: [ 30.880596][ T647] [ 30.883519][ T647] __dump_stack+0x21/0x24 [ 30.887832][ T647] dump_stack_lvl+0x110/0x170 [ 30.892491][ T647] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.897499][ T647] ? _raw_spin_lock+0x94/0xf0 [ 30.902163][ T647] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.907341][ T647] dump_stack+0x15/0x24 [ 30.911485][ T647] should_fail_ex+0x3bf/0x510 [ 30.916172][ T647] __should_failslab+0xac/0xf0 [ 30.920943][ T647] should_failslab+0x9/0x20 [ 30.925429][ T647] kmem_cache_alloc_node+0x42/0x330 [ 30.930613][ T647] ? __alloc_skb+0xe8/0x4a0 [ 30.935108][ T647] __alloc_skb+0xe8/0x4a0 [ 30.939424][ T647] tipc_buf_acquire+0x2b/0xe0 [ 30.944088][ T647] tipc_named_withdraw+0x225/0x7c0 [ 30.949183][ T647] tipc_nametbl_withdraw+0x170/0x360 [ 30.954452][ T647] tipc_release+0x286/0x1640 [ 30.959024][ T647] ? rwsem_write_trylock+0x136/0x300 [ 30.964288][ T647] ? __cfi_tipc_release+0x10/0x10 [ 30.969304][ T647] sock_close+0xc9/0x220 [ 30.973527][ T647] ? __cfi_sock_close+0x10/0x10 [ 30.978356][ T647] __fput+0x1fd/0x8f0 [ 30.982323][ T647] ____fput+0x15/0x20 [ 30.986285][ T647] task_work_run+0x1e1/0x250 [ 30.990863][ T647] ? __cfi_task_work_run+0x10/0x10 [ 30.995959][ T647] ? __cfi___close_range+0x10/0x10 [ 31.001057][ T647] exit_to_user_mode_loop+0x9b/0xb0 [ 31.006237][ T647] exit_to_user_mode_prepare+0x87/0xd0 [ 31.011679][ T647] syscall_exit_to_user_mode+0x1a/0x30 [ 31.017121][ T647] do_syscall_64+0x58/0xa0 [ 31.021525][ T647] ? clear_bhb_loop+0x30/0x80 [ 31.026198][ T647] ? clear_bhb_loop+0x30/0x80 [ 31.030857][ T647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.036740][ T647] RIP: 0033:0x7f0919b9f559 [ 31.041136][ T647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.060724][ T647] RSP: 002b:00007f091a994028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.069133][ T647] RAX: 0000000000000000 RBX: 00007f0919e25fa0 RCX: 00007f0919b9f559 [ 31.077090][ T647] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 31.085043][ T647] RBP: 00007f0919c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 31.092997][ T647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.100949][ T647] R13: 00007f0919e26038 R14: 00007f0919e25fa0 R15: 00007ffe3a723268 [ 31.108937][ T647] [ 31.111993][ T647] tipc: Withdrawal distribution failure [ 31.358405][ T298] usb 2-1: USB disconnect, device number 4 [ 31.365666][ T658] ================================================================== [ 31.373739][ T658] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x62/0xb0 [ 31.381378][ T658] Write of size 8 at addr ffff888130fab990 by task syz.3.127/658 [ 31.389090][ T658] [ 31.391407][ T658] CPU: 0 PID: 658 Comm: syz.3.127 Not tainted syzkaller #0 [ 31.398604][ T658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.408656][ T658] Call Trace: [ 31.411932][ T658] [ 31.414862][ T658] __dump_stack+0x21/0x24 [ 31.419191][ T658] dump_stack_lvl+0x110/0x170 [ 31.423884][ T658] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.428892][ T658] ? rcu_segcblist_enqueue+0x62/0xb0 [ 31.434158][ T658] print_address_description+0x71/0x200 [ 31.439689][ T658] print_report+0x4a/0x60 [ 31.444009][ T658] kasan_report+0x122/0x150 [ 31.448530][ T658] ? rcu_segcblist_enqueue+0x62/0xb0 [ 31.453819][ T658] __asan_report_store8_noabort+0x17/0x20 [ 31.459525][ T658] rcu_segcblist_enqueue+0x62/0xb0 [ 31.464617][ T658] call_rcu+0x554/0xf50 [ 31.468761][ T658] ? __cfi_call_rcu+0x10/0x10 [ 31.473444][ T658] ? mutex_unlock+0x8f/0x230 [ 31.478014][ T658] ? __cfi_mutex_unlock+0x10/0x10 [ 31.483021][ T658] ? __kasan_check_write+0x14/0x20 [ 31.488110][ T658] ? l2tp_session_delete+0x48/0x4d0 [ 31.493291][ T658] pppol2tp_release+0x1e3/0x2b0 [ 31.498126][ T658] sock_close+0xc9/0x220 [ 31.500681][ T428] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 31.502348][ T658] ? __cfi_sock_close+0x10/0x10 [ 31.502370][ T658] __fput+0x1fd/0x8f0 [ 31.518570][ T658] ____fput+0x15/0x20 [ 31.522541][ T658] task_work_run+0x1e1/0x250 [ 31.527136][ T658] ? __cfi_task_work_run+0x10/0x10 [ 31.532251][ T658] ? __cfi___close_range+0x10/0x10 [ 31.537349][ T658] ? do_user_addr_fault+0x9a5/0x1030 [ 31.542645][ T658] exit_to_user_mode_loop+0x9b/0xb0 [ 31.547842][ T658] exit_to_user_mode_prepare+0x87/0xd0 [ 31.553278][ T658] syscall_exit_to_user_mode+0x1a/0x30 [ 31.558721][ T658] do_syscall_64+0x58/0xa0 [ 31.563113][ T658] ? clear_bhb_loop+0x30/0x80 [ 31.567774][ T658] ? clear_bhb_loop+0x30/0x80 [ 31.572450][ T658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.578321][ T658] RIP: 0033:0x7fc648b9f559 [ 31.582717][ T658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.602302][ T658] RSP: 002b:00007ffd7ee738b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.610702][ T658] RAX: 0000000000000000 RBX: 00007ffd7ee739a0 RCX: 00007fc648b9f559 [ 31.618655][ T658] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.626607][ T658] RBP: 0000000000007a62 R08: 0000000000000001 R09: 0000000000000000 [ 31.634560][ T658] R10: 0000001b2dd20000 R11: 0000000000000246 R12: 00007ffd7ee739e0 [ 31.642511][ T658] R13: 00007fc648e25fac R14: 0000000000007aa2 R15: 00007fc648e25fa0 [ 31.650479][ T658] [ 31.653488][ T658] [ 31.655794][ T658] Allocated by task 659: [ 31.660010][ T658] kasan_set_track+0x4b/0x70 [ 31.664582][ T658] kasan_save_alloc_info+0x1f/0x30 [ 31.669675][ T658] __kasan_kmalloc+0x95/0xb0 [ 31.674249][ T658] __kmalloc+0xb4/0x1e0 [ 31.678383][ T658] l2tp_session_create+0x38/0xbd0 [ 31.681794][ T428] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 31.683387][ T658] pppol2tp_connect+0xbf5/0x1640 [ 31.694367][ T428] usb 5-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.699141][ T658] __sys_connect+0x3da/0x460 [ 31.699166][ T658] __x64_sys_connect+0x7a/0x90 [ 31.713453][ T428] usb 5-1: config 0 interface 0 has no altsetting 0 [ 31.716550][ T658] x64_sys_call+0x88d/0x9a0 [ 31.716575][ T658] do_syscall_64+0x4c/0xa0 [ 31.721585][ T428] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 31.727880][ T658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.727905][ T658] [ 31.727908][ T658] Freed by task 10: [ 31.727916][ T658] kasan_set_track+0x4b/0x70 [ 31.732779][ T428] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.736791][ T658] kasan_save_free_info+0x2b/0x40 [ 31.736812][ T658] ____kasan_slab_free+0x132/0x180 [ 31.780336][ T658] __kasan_slab_free+0x11/0x20 [ 31.785083][ T658] slab_free_freelist_hook+0xc2/0x190 [ 31.790432][ T658] __kmem_cache_free+0xb7/0x1b0 [ 31.795262][ T658] kfree+0x6f/0xf0 [ 31.798978][ T658] l2tp_session_put+0xaf/0x1a0 [ 31.803733][ T658] l2tp_session_delete+0x3df/0x4d0 [ 31.808831][ T658] l2tp_tunnel_del_work+0x199/0x410 [ 31.814014][ T658] process_one_work+0x717/0xc30 [ 31.818843][ T658] worker_thread+0xa4d/0x11d0 [ 31.823520][ T658] kthread+0x281/0x320 [ 31.827571][ T658] ret_from_fork+0x1f/0x30 [ 31.831969][ T658] [ 31.834271][ T658] Last potentially related work creation: [ 31.839959][ T658] kasan_save_stack+0x3a/0x60 [ 31.844621][ T658] __kasan_record_aux_stack+0xb6/0xc0 [ 31.849974][ T658] kasan_record_aux_stack_noalloc+0xb/0x10 [ 31.855767][ T658] call_rcu+0xcf/0xf50 [ 31.859824][ T658] pppol2tp_release+0x1e3/0x2b0 [ 31.864655][ T658] sock_close+0xc9/0x220 [ 31.868876][ T658] __fput+0x1fd/0x8f0 [ 31.872838][ T658] ____fput+0x15/0x20 [ 31.876798][ T658] task_work_run+0x1e1/0x250 [ 31.881368][ T658] exit_to_user_mode_loop+0x9b/0xb0 [ 31.886560][ T658] exit_to_user_mode_prepare+0x87/0xd0 [ 31.891995][ T658] syscall_exit_to_user_mode+0x1a/0x30 [ 31.897438][ T658] do_syscall_64+0x58/0xa0 [ 31.901832][ T658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.907704][ T658] [ 31.910011][ T658] The buggy address belongs to the object at ffff888130fab800 [ 31.910011][ T658] which belongs to the cache kmalloc-512 of size 512 [ 31.924043][ T658] The buggy address is located 400 bytes inside of [ 31.924043][ T658] 512-byte region [ffff888130fab800, ffff888130faba00) [ 31.937297][ T658] [ 31.939607][ T658] The buggy address belongs to the physical page: [ 31.945995][ T658] page:ffffea0004c3ea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x130fa8 [ 31.956224][ T658] head:ffffea0004c3ea00 order:2 compound_mapcount:0 compound_pincount:0 [ 31.964529][ T658] flags: 0x4000000000010200(slab|head|zone=1) [ 31.970594][ T658] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 31.979162][ T658] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 31.987723][ T658] page dumped because: kasan: bad access detected [ 31.994131][ T658] page_owner tracks the page as allocated [ 31.999847][ T658] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 294, tgid 294 (syz-executor), ts 19774406144, free_ts 0 [ 32.020142][ T658] post_alloc_hook+0x1f5/0x210 [ 32.024894][ T658] prep_new_page+0x1c/0x110 [ 32.029386][ T658] get_page_from_freelist+0x2ca9/0x2d20 [ 32.034912][ T658] __alloc_pages+0x1fa/0x610 [ 32.039522][ T658] alloc_slab_page+0x6e/0xf0 [ 32.044096][ T658] new_slab+0x98/0x3e0 [ 32.048147][ T658] ___slab_alloc+0x70f/0xb70 [ 32.052746][ T658] __slab_alloc+0x5e/0xa0 [ 32.057063][ T658] __kmem_cache_alloc_node+0x204/0x2d0 [ 32.062505][ T658] __kmalloc_node_track_caller+0xa1/0x1e0 [ 32.068211][ T658] kmemdup+0x2b/0x60 [ 32.072124][ T658] ipv6_icmp_sysctl_init+0x2b/0x120 [ 32.077303][ T658] ipv6_sysctl_net_init+0x2f8/0x4a0 [ 32.082478][ T658] ops_init+0x2ce/0x470 [ 32.086641][ T658] setup_net+0x4b4/0xcd0 [ 32.090862][ T658] copy_net_ns+0x355/0x5c0 [ 32.095261][ T658] page_owner free stack trace missing [ 32.100604][ T658] [ 32.102906][ T658] Memory state around the buggy address: [ 32.108512][ T658] ffff888130fab880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.116558][ T658] ffff888130fab900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.124602][ T658] >ffff888130fab980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.132637][ T658] ^ [ 32.137206][ T658] ffff888130faba00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 32.145249][ T658] ffff888130faba80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 32.153287][ T658] ================================================================== [ 32.161322][ T658] Disabling lock debugging due to kernel taint [ 32.184290][ T428] usb 5-1: config 0 descriptor?? [ 32.189874][ T655] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 32.599637][ T428] belkin 0003:1020:0006.0006: ignoring exceeding usage max [ 32.610124][ T428] belkin 0003:1020:0006.0006: No inputs registered, leaving [ 32.617869][ T428] belkin 0003:1020:0006.0006: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.4-1/input0 [ 32.807441][ T655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.815990][ T655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.824504][ T428] usb 5-1: USB disconnect, device number 3