last executing test programs: 5.206778081s ago: executing program 2 (id=158): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00003b3000/0x3000)=nil) (async, rerun: 64) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async, rerun: 64) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) (async) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f0000000100)={'U-', 0x8}, 0x16, 0x6) r4 = open(&(0x7f0000000000)='./file0\x00', 0x40c3, 0x8) mmap(&(0x7f0000224000/0x2000)=nil, 0x2000, 0x3000002, 0x80010, r4, 0xe9993000) 5.146254908s ago: executing program 2 (id=159): prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000008c0), 0x0, 0x882) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000000c0)={{0x4000, 0xe000, 0xd, 0x79, 0xc, 0x3, 0x9d, 0x2, 0x0, 0x6, 0x6, 0xf}, {0x2, 0xffff1000, 0x9, 0xee, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0x2000, 0x1000, 0x3, 0x0, 0x6, 0xc4, 0x2, 0x9, 0x27, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x9, 0x81, 0x0, 0x9, 0x0, 0x3, 0x8, 0x9}, {0xeeee8000, 0xffff1000, 0x3, 0x0, 0x2, 0x6, 0x4, 0x6, 0x2, 0x4, 0x4}, {0xffffffff, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0x3, 0xed, 0x5}, {0xeeee8000, 0xfec00000, 0xc, 0x3, 0x0, 0x3, 0xc, 0x20, 0x0, 0x0, 0x2}, {0x0, 0x8080000, 0x0, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x9000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x60, 0x8, 0x0, 0x3000, [0x80000001, 0x0, 0x1]}) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x3c, r6, 0x1, 0xffffffff, 0x1, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x3c}}, 0x24048000) sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@getpolicy={0x74, 0x15, 0x4, 0x70bd28, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x4e24, 0x800, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x32, r8, 0xee01}, 0x6e6bb3, 0x1}, [@replay_thresh={0x8, 0xb, 0x81}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd28, 0x7}}, @iptfs_dont_frag={0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x16) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000200)=""/119) 5.145086478s ago: executing program 2 (id=160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x101042, 0x5) ioctl$FIBMAP(r1, 0x5393, &(0x7f0000000280)=0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) (async) listen(r0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x200002, 0x200003, 0x4000801, 0x4, 0x4}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) lsm_set_self_attr(0x65, 0x0, 0x0, 0x0) (async) lsm_set_self_attr(0x65, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000d80)=ANY=[@ANYRES8=r0, @ANYRES8=0x0, @ANYBLOB='\a'], 0x0) (async) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000d80)=ANY=[@ANYRES8=r0, @ANYRES8=0x0, @ANYBLOB='\a'], 0x0) 4.784863365s ago: executing program 0 (id=165): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) dup3(r0, r2, 0x80000) sendmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000851}}], 0x1, 0x5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000280)={r4, &(0x7f0000000140)='syzkaller1\x00', 0x105000, &(0x7f0000000180)={@_ha_fsid={[0x7, 0x5]}, {0xfee, 0x4, 0xd}}, 0x800, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xfffffffb}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f00000002c0)={0x0, r6}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x206, 0x82) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000100)={0x80, 0x6, 0x8, 0x7, 0x0, 0x0, 0x0}) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prctl$PR_SET_MM(0x23, 0x2, &(0x7f00004e3000/0x2000)=nil) 4.73445045s ago: executing program 0 (id=166): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b87, 0x0, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x15, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001140)={0x24, 0x0, 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x800, 0xffffffffffffffff, 'id0\x00'}) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='$.@@}-.\x00', &(0x7f00000000c0)="be55dcbcc4876b85436286e2f2bc19a9b61ade7e06776de2203bc70591a02a8faf494172", 0x24) 4.678026355s ago: executing program 3 (id=167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0xb8, 0x1, 0x2, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfa30}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf}, @CTA_EXPECT_MASTER={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20044840}, 0x4004008) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x2, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x8, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x9, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0xeeef0000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0x6, 0x81}, {0x4000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.580720785s ago: executing program 3 (id=168): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="000c0600feffe469904a7a8b452455750e5a4a95340781315c183bc842f6352b817e6093af95686f0364391ce5a6d1c93e1cd67e65f40d003ba76f5964f5891354933e6e31adf4530cecc8ca982080b86f04d73b7d08d6c19c08223c9a2da978b14c05c1f501192d2b9b49eb180f415dbad9e7a9d5461354ea963528245e3cffa34582bfc5f8032074cab693ea821bea61c8685a2a14bccaa6b85b6dfaf2f1598de2b30d3b4442972a1a54e18fd8dbef41514b18cc4341299a1cadfb4df59dc0ac79353620ae4bfd9cfd1fc34084621d73ecf580acb747fe27ce46a0de7c8505eedf71bff0c769ec5b941b2055c6a688e0fce42433"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="2d74115fd9", 0x2}], 0x1, 0x4, 0xa) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1912c5"], 0x0, 0x0}) 3.026266323s ago: executing program 0 (id=172): unshare(0x60000600) r0 = open(&(0x7f0000000080)='./file0\x00', 0x149040, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) truncate(&(0x7f0000000300)='./file0\x00', 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$inet6(0xa, 0x4, 0x5) close_range(r1, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000000)={0x0, 0x98e1, 0x10, 0x40002, 0x1e5}, &(0x7f00000000c0), &(0x7f00000004c0), &(0x7f0000000500)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, &(0x7f0000000540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000600)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x115) lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000018c0)={0x0, 0xfb, 0x1015, 0x2, 0x6, "f07431812ce8494161880e13cb324d71", "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"}, 0x1015, 0x2) getdents(r5, &(0x7f00000001c0)=""/61, 0x3d) getdents64(r5, &(0x7f00000008c0)=""/4096, 0x1000) r6 = dup(r4) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x8000, 0x0, 0xc, 0x5, 0x0, 0x0, 0xaa]}}) syz_ublk_setup_queues(r6, r3, 0x0, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x95f5, 0x80000, 0x1000000, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x4000, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 2.997929406s ago: executing program 0 (id=173): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x24) open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0xc0940, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x1c1002, 0x0) sendfile(r3, r2, 0x0, 0x7fffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x2000, 0x0, 0x118}, &(0x7f0000000080), &(0x7f00000002c0), &(0x7f00000003c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f00000004c0)={0x0, 0xd17, 0x10, 0x1, 0x80, 0x0, r7}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bffc, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 2.394188977s ago: executing program 0 (id=175): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000400)=0x4, 0x4) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000780)='./config/usb_gadget/g1\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000003c0)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x115, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x103, 0x2, 0x1, 0x8, 0x0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "25eb6e"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x1000, 0x70}, {0x6, 0x24, 0x1a, 0x1, 0x29}, [@country_functional={0x12, 0x24, 0x7, 0xf7, 0x4, [0x138b, 0x6, 0x7, 0x3, 0x8, 0x6]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @mdlm_detail={0x86, 0x24, 0x13, 0xfa, "86be295bba733c5ed399f9c2fbb699a5b4831fd00309422b9e582a681e1f73c0032d100bc161860b7b0dbdd765a9b6604d8a61ac61039c3f29c3d50dba47ae778afcaa351cadbe38e63eb95e42c17a3ab0ff447972d1ff19923039d6d54866eaced9b565e13763fac46c2a72f221a8387b2ccd12027352ace9ea389cd3964c22367b"}, @network_terminal={0x7, 0x24, 0xa, 0xfc, 0x10, 0x4, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x7, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xc, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0xb, 0x5}}}}}}}]}}, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 2.141692703s ago: executing program 2 (id=176): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@loopback, @initdev, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_virt_wifi\x00', 0x0}) r6 = openat$kvm(0x0, &(0x7f0000000800), 0x40000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_TDX_INIT_MEM_REGION(r7, 0xc008aeba, &(0x7f0000000880)={0x3, 0x1, &(0x7f0000000840)={&(0x7f0000ffc000/0x2000)=nil, 0xf000, 0x8000000000000001}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@private, @loopback, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x6, 0x5, {{0xf, 0x4, 0x3, 0x2, 0x3c, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@rr={0x7, 0x13, 0xe5, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0xf4, 0x3, 0x9, [{@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x7, 0x2f, 0x4c, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7, 0x6, 0x80000001}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8000, 0x116, 0x3, 0x7ff, {{0x36, 0x4, 0x2, 0x37, 0xd8, 0x67, 0x0, 0x10, 0x29, 0x0, @empty, @empty, {[@ssrr={0x89, 0x17, 0x6c, [@multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x59, 0x1, 0x9, [{@multicast2, 0xfffffff8}, {@loopback, 0x5}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x54, 0x6b, 0x3, 0x8, [{@empty, 0xd200}, {@multicast1, 0x81}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0x80000001}, {@multicast1, 0x3}, {@broadcast, 0x5}, {@private=0xa010101, 0x4}, {@multicast1, 0x7f}, {@remote, 0x316}, {@private=0xa010102, 0x10000}]}, @timestamp_addr={0x44, 0x2c, 0xd, 0x1, 0xd, [{@rand_addr=0x64010102, 0xfffffffa}, {@private=0xa010101, 0x1}, {@rand_addr=0x64010100, 0x9}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x10}]}, @timestamp_addr={0x44, 0x14, 0x72, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x8}, {@empty, 0x1}]}]}}}}}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000640)={'ip6tnl0\x00', 0x0}) r14 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r14, 0x65, 0x7, &(0x7f0000000680)=0x6, 0x4) sendmsg$can_raw(r14, &(0x7f00000006c0)={&(0x7f0000000700)={0x1d, r13}, 0x10, &(0x7f0000000740)={&(0x7f0000000780)=@canfd={{0x0, 0x1, 0x1}, 0x1a, 0x2, 0x0, 0x0, "d31a5c0c8a99b3ad23cceec63f99a8bebbbd5df127286761c993309a2a3fb1da9aab2d90e6ec91b3b85ae5a95a0d89354663dc24d0eafd2289ea528293cefd50"}, 0x48}, 0x1, 0x0, 0x0, 0x2408408c}, 0xc008004) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)={0x220, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.960287341s ago: executing program 2 (id=177): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_ublk_setup_io_uring(0x3, &(0x7f0000000780)={0x0, 0x4, 0x1000}, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x163) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x143142, 0x120) landlock_restrict_self(r2, 0x34) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2002, 0x0) socket(0x10, 0x803, 0x5) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6f925cda7c6597786cfa4ddb8cbcf5e9d0fa9cc449c62ae566e894cae5dba41ab4687a100415c063d9f8d2ed884758d7eab1fad95c7da84861c4e7e89b82c70c83af8687591a38ec6b2c2905f89e59c1f4fc382a2aa509bc13a1e2f5258cc7b8f26fbcfada4909fef8518fd82be3a0d3040da58b32d310a849aaa5270df4963e7bfb4daa26c20a3290c4f93207d409cb3696f08874782e170003ec78e83b7940ea7847cb3a1c729885918e468a3aeab4b5f27b2c800d65ac5cbdee8b52efad0bc376602c5eeef5117cefba355e7fabb2c50737c9727b9fcec1d4b16cc2dfed9b6cb6a866fb8f216adb7580b3cf8c00", @ANYBLOB, @ANYRES8=r4], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffc, 0x0, 0x1, 0x1f4}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0d1, 0x4000, 0x2, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x905b, 0x100, 0x4000, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x40040004, 0x3cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x0, 0xfffffffb}}], 0x1, 0x0, 0x0) 1.518165966s ago: executing program 3 (id=178): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = getpid() syz_pidfd_open(r0, 0x0) eventfd(0x7) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = fsopen(&(0x7f00000005c0)='securityfs\x00', 0x0) socket$inet(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xa) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x127e00, 0x19) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x29, 0x5, 0xd, 0x8, 0x7, @mcast2, @mcast2, 0x80, 0x40, 0x0, 0x7}}) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r6 = socket$inet6(0xa, 0x2, 0x7ff) sendmsg$inet6(r6, &(0x7f00000004c0)={&(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1400"], 0x18}, 0x20040810) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000580)=0x100e77, 0x4) 1.118156417s ago: executing program 2 (id=179): r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1df) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000840)={0x2, &(0x7f0000000880)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000840)={0x2, &(0x7f0000000880)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) epoll_create1(0x80000) (async) epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f00000008c0)='\f\x00', 0xffeb, 0x0, &(0x7f0000000900), 0x10) (async) sendto$inet(r3, &(0x7f00000008c0)='\f\x00', 0xffeb, 0x0, &(0x7f0000000900), 0x10) openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/sys/kernel/kptr_restrict\x00', 0x1, 0x1) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/sys/kernel/kptr_restrict\x00', 0x1, 0x1) capset(&(0x7f00000007c0)={0x20080522}, &(0x7f0000000800)) write(r4, 0x0, 0x0) (async) write(r4, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x8411}) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x190, 0x3, {0x8, 0xb, 0x3, 0x1, 0x1, 0x5, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffdd, 0x0, 0x9, 0xe0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x5, 0x1, {0x8, 0x25, 0x1, 0x0, 0xf, 0x7e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x8, 0x6, {0x8, 0x25, 0x1, 0x81, 0x0, 0x18, 0x7}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x190, 0x3, {0x8, 0xb, 0x3, 0x1, 0x1, 0x5, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffdd, 0x0, 0x9, 0xe0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x5, 0x1, {0x8, 0x25, 0x1, 0x0, 0xf, 0x7e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x8, 0x6, {0x8, 0x25, 0x1, 0x81, 0x0, 0x18, 0x7}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)=0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x40, [0x9, 0x1bf3, 0x2, 0x9, 0x8, 0xdb11]}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x40, [0x9, 0x1bf3, 0x2, 0x9, 0x8, 0xdb11]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000600)="390000001300034700bb65e1c3e4ffff0100320001000000000007fdd411efc408000400"/57, 0x39}], 0x1) writev(r6, &(0x7f0000000640)=[{&(0x7f0000000680)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f0000000240)={0x0, 0x49, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x0, 0x4, 0x70bd2a}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r7) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x20000010) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r9, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20054044}, 0x40000) write(r0, &(0x7f0000000400)='0', 0x1) 930.971716ms ago: executing program 1 (id=180): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="428184a477201acb0f24d8c531680464ff1e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3da0000000c000d800800"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804) 882.304951ms ago: executing program 1 (id=181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0xffffffff}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000200)="0f30c402fd3eecaeb95b080000b800700000ba000000000f3066b80c010f00d0662e3646d87213460f09b98c0900000f301717010000002e644c0fc72f", 0x3d}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000140)={[0xa, 0x4, 0x5, 0xfa, 0x401, 0x8000040000000001, 0xb7, 0x8, 0x6, 0xfffffffffffffff7, 0x10002000000000d, 0x10001, 0x10, 0x1ff, 0x6, 0x5], 0xdddd0000, 0x383f42}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x5) r8 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000240)=0x0) io_pgetevents(r9, 0xffffffffffffffff, 0x2, &(0x7f0000000280)=[{}, {}], 0x0, 0x0) io_submit(r9, 0x1, &(0x7f0000000340)=[&(0x7f0000000d40)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r7, 0x0, 0x0, 0x0, 0x0, 0x3, r8}]) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) shutdown(r7, 0x1) shutdown(r7, 0x0) 860.380733ms ago: executing program 1 (id=182): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(0x0, 0xb7e, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000400)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r7, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x58}, 0x1, 0x0, 0x0, 0x20084801}, 0x800) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x4, 0x1, 0x6, 0x9, 0x40, @local, @loopback, 0x7, 0x10, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6tnl0\x00', r8, 0x4, 0x9, 0xb, 0x8, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf, 0x8000, 0x6, 0xff}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) 851.003134ms ago: executing program 1 (id=183): r0 = openat$kvm(0x0, &(0x7f0000000900), 0x0, 0x0) madvise(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43, 0x9, 0x1, {0x7, 0x9, 0x1, 0x0, 0x9, 0x6600000000, 0x4, 0x10, 0x1ff}}, 0x43) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000100)) ptrace$cont(0x21, r2, 0x80000001, 0x4) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000200)='_:s/', 0x4) r5 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000940)={0x0, &(0x7f0000000980)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x680c, 0xfffffffffffffbff, 0xe90d}}], 0x68}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 506.354589ms ago: executing program 1 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x20, 0x5, 0x2, 0x70ff}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) sched_setscheduler(r0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) write(r3, &(0x7f0000001640)="8b", 0x23000) 505.628149ms ago: executing program 1 (id=185): syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0, &(0x7f0000000000)) r0 = socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x80000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x420e, r3, 0x0, 0x0) write(r2, &(0x7f0000000240)='functionfs\x00', 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="040100001000000000000000fc020040000000000000000000000000ff020000000000f862000000000000014e20000000000000000000a002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000009000000000000000000001000000000010000000000000000000000000000000000000000000000000000000000000002000000000000000710000000000000000000000000000009000000ffffffffe80a000000000000003500000a0004fe340000000000000014000e00e000000200"/188], 0x104}, 0x1, 0x0, 0x0, 0x4000005}, 0x890) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="040100001000000000000000fc020040000000000000000000000000ff020000000000f862000000000000014e20000000000000000000a002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000009000000000000000000001000000000010000000000000000000000000000000000000000000000000000000000000002000000000000000710000000000000000000000000000009000000ffffffffe80a000000000000003500000a0004fe340000000000000014000e00e000000200"/188], 0x104}, 0x1, 0x0, 0x0, 0x4000005}, 0x890) syz_open_pts(r2, 0x40) read(r1, &(0x7f0000000280), 0xb) prctl$PR_SET_SECUREBITS(0x1c, 0x4) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setreuid(0x0, 0xee01) (async) setreuid(0x0, 0xee01) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r5, 0x7, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0xf, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r6, 0x80045519, 0x0) mount(0x0, &(0x7f00000002c0)='./ffs\x00', &(0x7f0000000300), 0x0, 0x0) (async) mount(0x0, &(0x7f00000002c0)='./ffs\x00', &(0x7f0000000300), 0x0, 0x0) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000040)=0x3, 0x4) 251.187035ms ago: executing program 3 (id=186): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80842, 0x15d, 0x1b}, 0x18) write$P9_RSTATFS(r1, &(0x7f0000000580)={0x43, 0x9, 0x1, {0xfffff44c, 0x928f, 0x5, 0x1c22, 0x3, 0xffff, 0xd, 0xfffffffffffffff8, 0x400}}, 0x43) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_DEV_SUSPEND(r2, 0xc138fd06, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r2, 0xc138fd0e, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, {0x40, @crypt}}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r3, 0x800452d3, &(0x7f0000000600)) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x2010080, &(0x7f0000000280)=ANY=[]) 216.743558ms ago: executing program 3 (id=187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x4, 0xdb, 0x2, '\x00', 0x6bd}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x0, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xf, '\x00', 0xfa}, {0x0, 0x5, 0x54, '\x00', 0xff}, {0x71, 0xd3, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0x1}, {0x7f, 0xff, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x0, '\x00', 0xf}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xf0, '\x00', 0x1}, {0xfe, 0x3, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x3d, 0x2, 0x6, '\x00', 0xb}, {0x8, 0x6, 0x7, '\x00', 0x8}, {0x5, 0x6, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x86}]}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) r5 = fcntl$dupfd(r4, 0x406, r3) sendmsg$key(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x6e, 0xa, 0x3, 0x70000001}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x70}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000400)=0x1c, 0x80800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f00000004c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), 0xc002, 0x0) chdir(&(0x7f0000000600)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f00000006c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x810) 1.03447ms ago: executing program 0 (id=188): mkdir(&(0x7f0000000dc0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', 0x143142, 0x120) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x3) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000380)={{0x8000000, 0x1, 0xc, 0x8, 0x2, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80, 0x2}, {0x5000, 0x7000, 0xe, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x2, 0x87}, {0xeeee8000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x0, 0x1, 0xa4, 0x1, 0x45}, {0x1, 0x54000, 0x9, 0x7, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0x8000000, 0xf, 0xc1, 0x0, 0x7, 0xab, 0x8, 0xd, 0x9, 0xf7, 0x97}, {0x2, 0x3000, 0xe, 0xb0, 0xb1, 0xff, 0x1, 0x20, 0x86, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x9d, 0x84, 0x40, 0x70}, {0x8000000, 0x4000, 0x8, 0x1, 0xcd, 0xb, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x7e}, {0xeeee0000, 0x30}, {0x0, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x9, 0x1, 0x100000, [0x6800000000000000, 0x7, 0x3, 0x8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1d0) setxattr$incfs_size(&(0x7f0000000f00)='./file1\x00', &(0x7f0000000f40), &(0x7f0000000f80)=0x1000, 0x8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x41) gettid() sendmsg$unix(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="f1092b82", 0x4}], 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SIOCSIFHWADDR(r5, 0x8905, &(0x7f0000000200)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) mount$overlay(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x8, &(0x7f0000001040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_evm(&(0x7f0000001080)='./file1\x00', &(0x7f00000010c0), &(0x7f0000001100)=@v2={0x5, 0x1, 0x3, 0x31d}, 0x9, 0x1) linkat(0xffffffffffffff9c, &(0x7f0000001140)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000001180)='./file0/file2\x00', 0x1000) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f00000004c0)={0x2, 0x100, 0x3, 0xaf, 0x6, 0x8}) 0s ago: executing program 3 (id=189): r0 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000beb000/0x400000)=nil) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0xf0}}, 0x804) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000140001b66fb1b313ba36db000a0000000400000014000100fd010000000000000000000000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) writev(r3, &(0x7f00000001c0)=[{0x0}], 0x1) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000340)={0x0, &(0x7f0000000640)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x4016, 0xb08, 0x2ffffe, 0x80000007}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x80}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)) write$tun(r5, 0x0, 0xfffffd68) ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f0000000200)=@attr_other={0x0, 0x3ff, 0xa, &(0x7f00000000c0)}) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): cess permissive=1 [ 14.399826][ T36] audit: type=1400 audit(1794183667.730:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 21.811922][ T36] audit: type=1400 audit(1794183675.150:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.834891][ T36] audit: type=1400 audit(1794183675.180:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.835828][ T287] cgroup: Unknown subsys name 'net' [ 21.862614][ T36] audit: type=1400 audit(1794183675.200:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.862730][ T287] cgroup: Unknown subsys name 'devices' [ 21.986076][ T287] cgroup: Unknown subsys name 'hugetlb' [ 21.991685][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.144175][ T36] audit: type=1400 audit(1794183675.480:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.167426][ T36] audit: type=1400 audit(1794183675.480:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.192228][ T36] audit: type=1400 audit(1794183675.480:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.200706][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.224721][ T36] audit: type=1400 audit(1794183675.560:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.250223][ T36] audit: type=1400 audit(1794183675.570:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.282609][ T36] audit: type=1400 audit(1794183675.620:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.308841][ T36] audit: type=1400 audit(1794183675.620:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.309169][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.171585][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.179119][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.186357][ T295] bridge_slave_0: entered allmulticast mode [ 23.192671][ T295] bridge_slave_0: entered promiscuous mode [ 23.199591][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.206649][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.213697][ T295] bridge_slave_1: entered allmulticast mode [ 23.219981][ T295] bridge_slave_1: entered promiscuous mode [ 23.273092][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.280160][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.287304][ T294] bridge_slave_0: entered allmulticast mode [ 23.293453][ T294] bridge_slave_0: entered promiscuous mode [ 23.299920][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.306982][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.314018][ T294] bridge_slave_1: entered allmulticast mode [ 23.320292][ T294] bridge_slave_1: entered promiscuous mode [ 23.350259][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.357320][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.364393][ T296] bridge_slave_0: entered allmulticast mode [ 23.370656][ T296] bridge_slave_0: entered promiscuous mode [ 23.384125][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.391213][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.398370][ T296] bridge_slave_1: entered allmulticast mode [ 23.404652][ T296] bridge_slave_1: entered promiscuous mode [ 23.435326][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.442395][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.449487][ T297] bridge_slave_0: entered allmulticast mode [ 23.455678][ T297] bridge_slave_0: entered promiscuous mode [ 23.461986][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.469082][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.476251][ T297] bridge_slave_1: entered allmulticast mode [ 23.482405][ T297] bridge_slave_1: entered promiscuous mode [ 23.589507][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.596674][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.604317][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.611514][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.626845][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.633905][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.641190][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.648230][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.660104][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.667169][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.674569][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.681599][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.722621][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.729686][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.736955][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.744007][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.762124][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.769511][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.777404][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.784822][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.791975][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.799219][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.806537][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.813920][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.851706][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.858774][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.866554][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.873594][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.881589][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.888816][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.896857][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.904085][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.913937][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.920981][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.938189][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.945251][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.959514][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.966551][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.974116][ T294] veth0_vlan: entered promiscuous mode [ 23.986669][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.993692][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.013065][ T296] veth0_vlan: entered promiscuous mode [ 24.033803][ T294] veth1_macvtap: entered promiscuous mode [ 24.042686][ T296] veth1_macvtap: entered promiscuous mode [ 24.067743][ T297] veth0_vlan: entered promiscuous mode [ 24.095568][ T297] veth1_macvtap: entered promiscuous mode [ 24.109222][ T295] veth0_vlan: entered promiscuous mode [ 24.136938][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.163996][ T295] veth1_macvtap: entered promiscuous mode [ 24.261306][ T316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.268249][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.274179][ T316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.346829][ T322] process 'syz.1.2' launched './file0' with NULL argv: empty string added [ 24.409726][ T334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 24.504446][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.575171][ T347] netlink: 504 bytes leftover after parsing attributes in process `syz.0.10'. [ 24.613419][ T349] rust_binder: 348:349 got transaction to invalid handle 4294967295 [ 24.621936][ T349] rust_binder: 348:349 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 24.633923][ T62] rust_binder: 348: undelivered TRANSACTION_ERROR: 29201 [ 24.674260][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 24.680893][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 24.691270][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 24.694324][ T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.700445][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.715969][ T10] usb 3-1: Product: syz [ 24.720133][ T10] usb 3-1: Manufacturer: syz [ 24.724775][ T10] usb 3-1: SerialNumber: syz [ 24.834321][ T310] usb 2-1: device descriptor read/64, error -71 [ 24.932191][ T10] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 24.942086][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 24.953281][ T10] usb 3-1: USB disconnect, device number 2 [ 25.034907][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.084328][ T310] usb 2-1: device descriptor read/64, error -71 [ 25.324456][ T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.374284][ T62] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.444092][ T377] overlay: filesystem on ./bus not supported as upperdir [ 25.451591][ T377] overlay: filesystem on ./bus not supported as upperdir [ 25.459262][ T377] overlay: filesystem on ./bus not supported as upperdir [ 25.464316][ T310] usb 2-1: device descriptor read/64, error -71 [ 25.472807][ T377] overlay: filesystem on ./bus not supported as upperdir [ 25.480212][ T377] overlay: filesystem on ./bus not supported as upperdir [ 25.487637][ T377] overlay: filesystem on ./bus not supported as upperdir [ 25.525298][ T62] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 25.534908][ T62] usb 4-1: config 0 has no interface number 0 [ 25.541230][ T62] usb 4-1: config 0 interface 200 has no altsetting 0 [ 25.549861][ T62] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=67.93 [ 25.562371][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.578562][ T62] usb 4-1: Product: syz [ 25.583160][ T62] usb 4-1: Manufacturer: syz [ 25.588045][ T62] usb 4-1: SerialNumber: syz [ 25.593659][ T62] usb 4-1: config 0 descriptor?? [ 25.620092][ T376] cgroup: fork rejected by pids controller in /syz2 [ 25.714504][ T310] usb 2-1: device descriptor read/64, error -71 [ 25.800097][ T360] FAULT_INJECTION: forcing a failure. [ 25.800097][ T360] name failslab, interval 1, probability 0, space 0, times 1 [ 25.824405][ T310] usb usb2-port1: attempt power cycle [ 25.825744][ T360] CPU: 0 UID: 0 PID: 360 Comm: syz.3.14 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 25.825770][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 25.825788][ T360] Call Trace: [ 25.825794][ T360] [ 25.825801][ T360] __dump_stack+0x21/0x30 [ 25.825823][ T360] dump_stack_lvl+0x140/0x1c0 [ 25.825839][ T360] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.825857][ T360] dump_stack+0x19/0x20 [ 25.825871][ T360] should_fail_ex+0x3c2/0x510 [ 25.825888][ T360] should_failslab+0xac/0x100 [ 25.825906][ T360] kmem_cache_alloc_noprof+0x42/0x410 [ 25.825929][ T360] ? alloc_empty_file+0xbf/0x270 [ 25.825949][ T360] ? _raw_spin_unlock+0x45/0x60 [ 25.825967][ T360] alloc_empty_file+0xbf/0x270 [ 25.825986][ T360] ? _raw_spin_unlock+0x45/0x60 [ 25.826002][ T360] alloc_file_pseudo+0x142/0x1f0 [ 25.826021][ T360] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 25.826042][ T360] sock_alloc_file+0xbe/0x2b0 [ 25.826066][ T360] __sys_socket+0x14c/0x1c0 [ 25.826084][ T360] __x64_sys_socket+0x7e/0x90 [ 25.826102][ T360] x64_sys_call+0x2608/0x2ee0 [ 25.826119][ T360] do_syscall_64+0x57/0xf0 [ 25.826136][ T360] ? clear_bhb_loop+0x50/0xa0 [ 25.826158][ T360] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.826179][ T360] RIP: 0033:0x7fa705f9fb19 [ 25.826198][ T360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.826211][ T360] RSP: 002b:00007fa706ded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 25.826230][ T360] RAX: ffffffffffffffda RBX: 00007fa706225fa0 RCX: 00007fa705f9fb19 [ 25.826243][ T360] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 25.826253][ T360] RBP: 00007fa706037b70 R08: 0000000000000000 R09: 0000000000000000 [ 25.826264][ T360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.826275][ T360] R13: 00007fa706226038 R14: 00007fa706225fa0 R15: 00007ffe5cc22108 [ 25.826290][ T360] [ 25.930451][ T440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.041232][ T440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.249901][ T481] ======================================================= [ 26.249901][ T481] WARNING: The mand mount option has been deprecated and [ 26.249901][ T481] and is ignored by this kernel. Remove the mand [ 26.249901][ T481] option from the mount to silence this warning. [ 26.249901][ T481] ======================================================= [ 26.274328][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.315243][ T310] usb 2-1: device descriptor read/8, error -71 [ 26.445244][ T310] usb 2-1: device descriptor read/8, error -71 [ 26.544281][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.694267][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 26.694276][ T310] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 26.708234][ T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.717888][ T310] usb 2-1: device descriptor read/8, error -71 [ 26.719333][ T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.738211][ T9] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 26.751294][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 26.758029][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 26.768201][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.777509][ T9] usb 1-1: config 0 descriptor?? [ 26.823407][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 26.823434][ T36] audit: type=1400 audit(1794183680.160:157): avc: denied { create } for pid=504 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.849168][ T506] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.861216][ T36] audit: type=1400 audit(1794183680.210:158): avc: denied { bind } for pid=504 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.880765][ T36] audit: type=1400 audit(1794183680.230:159): avc: denied { name_bind } for pid=504 comm="syz.2.22" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 26.881873][ T310] usb 2-1: device descriptor read/8, error -71 [ 26.903453][ T36] audit: type=1400 audit(1794183680.230:160): avc: denied { node_bind } for pid=504 comm="syz.2.22" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 26.929898][ T36] audit: type=1400 audit(1794183680.230:161): avc: denied { connect } for pid=504 comm="syz.2.22" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.953045][ T36] audit: type=1400 audit(1794183680.230:162): avc: denied { setopt } for pid=504 comm="syz.2.22" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.978405][ T36] audit: type=1400 audit(1794183680.230:163): avc: denied { write } for pid=504 comm="syz.2.22" path="socket:[4904]" dev="sockfs" ino=4904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.001368][ T36] audit: type=1400 audit(1794183680.250:164): avc: denied { read } for pid=504 comm="syz.2.22" laddr=127.0.0.1 lport=20001 faddr=127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.014391][ T310] usb usb2-port1: unable to enumerate USB device [ 27.164301][ T36] audit: type=1400 audit(1794183680.500:165): avc: denied { set_context_mgr } for pid=509 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.164718][ T510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.246693][ T36] audit: type=1400 audit(1794183680.590:166): avc: denied { map } for pid=509 comm="syz.2.23" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.430954][ T9] usb 1-1: USB disconnect, device number 2 [ 27.476467][ T514] tipc: Started in network mode [ 27.481348][ T514] tipc: Node identity ffffffff, cluster identity 4711 [ 27.488411][ T514] tipc: Enabling of bearer rejected, failed to enable media [ 27.523462][ T518] ./dev/sda1: Can't lookup blockdev [ 27.716612][ T535] kvm: kvm [534]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 27.725701][ T535] kvm: kvm [534]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 27.753330][ T535] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.971725][ T551] capability: warning: `syz.0.38' uses 32-bit capabilities (legacy support in use) [ 27.998490][ T361] rust_binder: 509: undelivered TRANSACTION_ERROR: 29189 [ 28.006464][ T361] rust_binder: 509: undelivered TRANSACTION_ERROR: 29189 [ 28.142722][ T62] ftdi_sio 4-1:0.200: FTDI USB Serial Device converter detected [ 28.151035][ T62] ftdi_sio ttyUSB0: unknown device type: 0x6793 [ 28.158668][ T62] usb 4-1: USB disconnect, device number 2 [ 28.165563][ T62] ftdi_sio 4-1:0.200: device disconnected [ 28.189682][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.234324][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.346768][ T9] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 28.355934][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.363936][ T9] usb 2-1: Product: syz [ 28.368321][ T9] usb 2-1: Manufacturer: syz [ 28.372935][ T9] usb 2-1: SerialNumber: syz [ 28.381052][ T9] usb 2-1: UAS is ignored for this device, using usb-storage instead [ 28.389448][ T9] usb 2-1: UAS is ignored for this device, using usb-storage instead [ 28.397719][ T9] usb-storage 2-1:1.0: USB Mass Storage device detected [ 28.405626][ T9] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 28.406160][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.424400][ T310] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 28.424469][ T9] scsi host1: usb-storage 2-1:1.0 [ 28.452753][ T310] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 28.461846][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.470030][ T310] usb 1-1: Product: syz [ 28.474205][ T310] usb 1-1: Manufacturer: syz [ 28.478860][ T310] usb 1-1: SerialNumber: syz [ 28.486019][ T310] r8152-cfgselector 1-1: Unknown version 0x0000 [ 28.587008][ T62] usb 2-1: USB disconnect, device number 6 [ 28.695190][ T310] r8152-cfgselector 1-1: Unknown version 0x0000 [ 28.701650][ T310] r8153_ecm 1-1:1.0: probe with driver r8153_ecm failed with error -22 [ 28.713601][ T310] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 28.895130][ T578] overlayfs: conflicting options: nfs_export=on,index=off [ 29.338086][ T601] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3276594798 (26212758384 ns) > initial count (15403876168 ns). Using initial count to start timer. [ 29.364272][ T310] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 29.524255][ T310] usb 2-1: Invalid ep0 maxpacket: 16 [ 29.574315][ T66] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.582476][ T613] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 29.616017][ T613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 29.664260][ T310] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 29.725337][ T66] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 29.744299][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.824250][ T310] usb 2-1: Invalid ep0 maxpacket: 16 [ 29.835203][ T310] usb usb2-port1: attempt power cycle [ 29.934263][ T62] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 30.003262][ T66] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 30.095285][ T62] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 30.117746][ T62] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 64 [ 30.149086][ T62] usb 3-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 130 [ 30.173206][ T62] usb 3-1: config 0 interface 0 has no altsetting 0 [ 30.190113][ T62] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 30.199254][ T310] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 30.214819][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.225925][ T62] usb 3-1: config 0 descriptor?? [ 30.232510][ T615] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 30.240110][ T310] usb 2-1: Invalid ep0 maxpacket: 16 [ 30.374287][ T310] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 30.394611][ T310] usb 2-1: Invalid ep0 maxpacket: 16 [ 30.400138][ T310] usb usb2-port1: unable to enumerate USB device [ 30.444388][ T66] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.616606][ T66] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 30.634249][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.652591][ T66] usb 1-1: Product: syz [ 30.662507][ T66] usb 1-1: Manufacturer: syz [ 30.667269][ T66] usb 1-1: SerialNumber: syz [ 30.668970][ T62] logitech 0003:046D:C298.0002: unknown main item tag 0x2 [ 30.691415][ T62] logitech 0003:046D:C298.0002: unknown main item tag 0x0 [ 30.706421][ T62] logitech 0003:046D:C298.0002: unknown main item tag 0x0 [ 30.724859][ T62] input: HID 046d:c298 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C298.0002/input/input4 [ 30.822382][ T62] logitech 0003:046D:C298.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.2-1/input0 [ 30.844588][ T62] logitech 0003:046D:C298.0002: implement() called with too large value 245 (n: 0)! (kworker/1:1) [ 30.855612][ T62] logitech 0003:046D:C298.0002: implement() called with too large value 248 (n: 0)! (kworker/1:1) [ 30.866220][ T62] logitech 0003:046D:C298.0002: implement() called with too large value 3 (n: 0)! (kworker/1:1) [ 30.876652][ T62] logitech 0003:046D:C298.0002: implement() called with too large value 129 (n: 0)! (kworker/1:1) [ 30.887247][ T62] logitech 0003:046D:C298.0002: implement() called with too large value 11 (n: 0)! (kworker/1:1) [ 30.887838][ T66] usb 1-1: selecting invalid altsetting 1 [ 30.901914][ T615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.915555][ T615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.923424][ T62] logitech 0003:046D:C298.0002: Force feedback support for Logitech Gaming Wheels [ 30.938453][ T66] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 30.972158][ T512] udevd[512]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.987890][ T66] usb 1-1: USB disconnect, device number 4 [ 31.654261][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.805433][ T9] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 31.813876][ T9] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 31.822328][ T9] usb 1-1: config 0 has no interface number 0 [ 31.828628][ T9] usb 1-1: config 0 interface 255 has no altsetting 0 [ 31.835605][ T9] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 31.844854][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.853727][ T9] usb 1-1: config 0 descriptor?? [ 31.864435][ C1] logitech 0003:046D:C298.0002: usb_submit_urb(out) failed: -1 [ 31.865256][ T9] ftdi_sio 1-1:0.255: FTDI USB Serial Device converter detected [ 31.881554][ T9] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 31.994277][ T310] usb 3-1: reset full-speed USB device number 3 using dummy_hcd [ 32.068412][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 32.068442][ T36] audit: type=1400 audit(1794183685.410:217): avc: denied { write } for pid=620 comm="syz.0.59" name="usb_gadget" dev="configfs" ino=2416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.100789][ T62] usb 1-1: USB disconnect, device number 5 [ 32.107675][ T62] ftdi_sio 1-1:0.255: device disconnected [ 32.120284][ T36] audit: type=1400 audit(1794183685.440:218): avc: denied { add_name } for pid=620 comm="syz.0.59" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.143721][ T36] audit: type=1400 audit(1794183685.440:219): avc: denied { create } for pid=620 comm="syz.0.59" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 32.166216][ T36] audit: type=1400 audit(1794183685.440:220): avc: denied { ioctl } for pid=620 comm="syz.0.59" path="mnt:[4026532300]" dev="nsfs" ino=4026532300 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.191115][ T36] audit: type=1400 audit(1794183685.440:221): avc: denied { read write } for pid=620 comm="syz.0.59" name="idVendor" dev="configfs" ino=5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 32.214596][ T36] audit: type=1400 audit(1794183685.440:222): avc: denied { open } for pid=620 comm="syz.0.59" path="/19/config/usb_gadget/g1/idVendor" dev="configfs" ino=5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 32.239428][ T36] audit: type=1400 audit(1794183685.490:223): avc: denied { connect } for pid=622 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.259090][ T36] audit: type=1400 audit(1794183685.500:224): avc: denied { create } for pid=622 comm="syz.1.60" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.673990][ T36] audit: type=1400 audit(1794183686.010:225): avc: denied { unlink } for pid=294 comm="syz-executor" name="file7" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.799050][ T36] audit: type=1400 audit(1794183686.140:226): avc: denied { write } for pid=630 comm="syz.0.61" name="dynamic_events" dev="tracefs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 32.944322][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 32.994536][ T361] usb 3-1: USB disconnect, device number 3 [ 33.105239][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 33.116203][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 33.128826][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 0.40 [ 33.137974][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.144277][ T361] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.146000][ T9] usb 2-1: Product: syz [ 33.157675][ T9] usb 2-1: Manufacturer: syz [ 33.162324][ T9] usb 2-1: SerialNumber: syz [ 33.295350][ T361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.306286][ T361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.316067][ T361] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 33.325137][ T361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.333905][ T361] usb 3-1: config 0 descriptor?? [ 33.369912][ T641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.378677][ T641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.394136][ T9] usb 2-1: USB disconnect, device number 11 [ 33.404510][ T512] udevd[512]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.577020][ T633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.585749][ T633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.830681][ T361] usbhid 3-1:0.0: can't add hid device: -71 [ 33.837924][ T361] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.849965][ T361] usb 3-1: USB disconnect, device number 4 [ 33.869130][ T658] fuse: Unknown parameter 'group9_+r2!$100000000000000000000' [ 34.048411][ T671] syz.1.72 (pid 671) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 34.097689][ T675] mmap: syz.0.70 (675) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.199391][ T679] fuse: Unknown parameter '184467440737095516150x0000000000000006' [ 34.375644][ T690] capability: warning: `syz.0.77' uses deprecated v2 capabilities in a way that may be insecure [ 34.438414][ T704] FAULT_INJECTION: forcing a failure. [ 34.438414][ T704] name failslab, interval 1, probability 0, space 0, times 0 [ 34.451363][ T704] CPU: 1 UID: 0 PID: 704 Comm: syz.0.81 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 34.451396][ T704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 34.451407][ T704] Call Trace: [ 34.451413][ T704] [ 34.451421][ T704] __dump_stack+0x21/0x30 [ 34.451445][ T704] dump_stack_lvl+0x140/0x1c0 [ 34.451461][ T704] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.451480][ T704] dump_stack+0x19/0x20 [ 34.451497][ T704] should_fail_ex+0x3c2/0x510 [ 34.451514][ T704] should_failslab+0xac/0x100 [ 34.451534][ T704] __kmalloc_cache_noprof+0x41/0x470 [ 34.451561][ T704] ? __kasan_check_write+0x18/0x20 [ 34.451586][ T704] ? get_mountpoint+0x21f/0x500 [ 34.451610][ T704] ? __cfi_down_write+0x10/0x10 [ 34.451634][ T704] get_mountpoint+0x21f/0x500 [ 34.451658][ T704] do_lock_mount+0x441/0x540 [ 34.451678][ T704] ? mnt_warn_timestamp_expiry+0x350/0x350 [ 34.451697][ T704] ? mnt_warn_timestamp_expiry+0x130/0x350 [ 34.451717][ T704] ? vfs_create_mount+0x36d/0x3d0 [ 34.451738][ T704] do_new_mount+0x384/0xb40 [ 34.451760][ T704] ? security_capable+0x44/0x130 [ 34.451780][ T704] path_mount+0x66a/0xff0 [ 34.451803][ T704] ? putname+0x113/0x150 [ 34.451820][ T704] __se_sys_mount+0x2bf/0x480 [ 34.451837][ T704] ? __x64_sys_mount+0xf0/0xf0 [ 34.451853][ T704] ? __kasan_check_write+0x18/0x20 [ 34.451875][ T704] ? fpregs_restore_userregs+0x11c/0x260 [ 34.451898][ T704] __x64_sys_mount+0xc3/0xf0 [ 34.451914][ T704] x64_sys_call+0x2021/0x2ee0 [ 34.451933][ T704] do_syscall_64+0x57/0xf0 [ 34.451951][ T704] ? clear_bhb_loop+0x50/0xa0 [ 34.451973][ T704] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.451996][ T704] RIP: 0033:0x7fe9de59fb19 [ 34.452020][ T704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.452036][ T704] RSP: 002b:00007fe9df522028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.452057][ T704] RAX: ffffffffffffffda RBX: 00007fe9de825fa0 RCX: 00007fe9de59fb19 [ 34.452071][ T704] RDX: 0000200000000400 RSI: 0000200000000380 RDI: 0000000000000000 [ 34.452085][ T704] RBP: 00007fe9de637b70 R08: 0000000000000000 R09: 0000000000000000 [ 34.452098][ T704] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 34.452109][ T704] R13: 00007fe9de826038 R14: 00007fe9de825fa0 R15: 00007ffd086d0468 [ 34.452126][ T704] [ 34.460271][ T693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'. [ 34.515347][ T705] ./dev/sda1: Can't lookup blockdev [ 34.742239][ T709] fuse: Unknown parameter '000000351843720894080x0000000000000004' [ 34.778715][ T719] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.973264][ T742] sit0: entered promiscuous mode [ 34.979879][ T742] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 35.014010][ T742] netlink: 1 bytes leftover after parsing attributes in process `syz.0.94'. [ 35.084384][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.164404][ T9] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 35.264282][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 35.271130][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.282339][ T10] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 35.295536][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 35.303205][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 35.319723][ T66] usb 4-1: USB disconnect, device number 3 [ 35.326415][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.340118][ T10] usb 3-1: config 0 descriptor?? [ 35.351939][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 35.367910][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 35.368953][ T763] file system registered [ 35.379759][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 544, setting to 0 [ 35.401287][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 35.410452][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.419751][ T9] usb 2-1: Product: 泾㞕ஶ䈩绠㭼遐ﴥ㿂碊㨘쇻픙ꓑ炥伌ﻰ뽤쑅ĪЇ왒㛶铥蟀쵈ϵ崫양廧啕앪ᠦ溎๙烠옇챰ب嬮ᅲ⣑ᡒ뷙⼅鞹ꂀ쫼껩᳓쪅䖶 [ 35.439753][ T9] usb 2-1: Manufacturer: ᰊ [ 35.444404][ T9] usb 2-1: SerialNumber: ᥥ瀒뺧䤡ᗆᅠ⤏벥떊菴酝萪ꄙ찛繼෉환ꦙᓉ꼡 [ 35.634282][ T361] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 35.674277][ T66] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 35.785398][ T361] usb 1-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 35.798336][ T361] usb 1-1: config 1 interface 0 has no altsetting 0 [ 35.806380][ T361] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.815446][ T361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.823433][ T361] usb 1-1: Product: syz [ 35.827615][ T361] usb 1-1: Manufacturer: syz [ 35.832220][ T361] usb 1-1: SerialNumber: syz [ 35.845329][ T66] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 35.856244][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.867310][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 35.878245][ T66] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 35.892053][ T66] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.901515][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 35.909545][ T66] usb 4-1: SerialNumber: syz [ 35.915261][ T764] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.958526][ T10] usb 3-1: USB disconnect, device number 5 [ 36.039881][ T361] usb 1-1: bad CDC descriptors [ 36.045892][ T361] usb 1-1: USB disconnect, device number 6 [ 36.719906][ T778] cgroup: fork rejected by pids controller in /syz0 [ 36.734276][ T361] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.894251][ T361] usb 3-1: Using ep0 maxpacket: 8 [ 36.901926][ T361] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 36.911077][ T361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.919211][ T361] usb 3-1: Product: syz [ 36.923418][ T361] usb 3-1: Manufacturer: syz [ 36.928062][ T361] usb 3-1: SerialNumber: syz [ 37.074285][ T485] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 37.195863][ T361] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 37.209593][ T361] usb 3-1: USB disconnect, device number 6 [ 37.234262][ T485] usb 1-1: Using ep0 maxpacket: 16 [ 37.240628][ T485] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.251053][ T485] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.261337][ T485] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 37.270425][ T485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.278446][ T485] usb 1-1: SerialNumber: syz [ 37.285836][ T485] usb 1-1: 0:2 : does not exist [ 37.915910][ T63] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.918062][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 37.918075][ T36] audit: type=1400 audit(1794183691.260:270): avc: denied { setattr } for pid=1020 comm="syz.1.108" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 37.922521][ T63] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.054314][ T361] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.092324][ T485] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 38.101443][ T485] usb 1-1: Warning! Unlikely big volume range (=4294967295), cval->res is probably wrong. [ 38.111398][ T485] usb 1-1: [5] FU [Tone Control - Bass] ch = 1, val = -114/0/-110 [ 38.120789][ T318] udevd[318]: setting mode of /dev/bus/usb/001/007 to 020664 failed: Read-only file system [ 38.121272][ T485] usb 1-1: USB disconnect, device number 7 [ 38.131362][ T318] udevd[318]: setting owner of /dev/bus/usb/001/007 to uid=0, gid=0 failed: Read-only file system [ 38.137295][ T9] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 38.157093][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 38.169005][ T318] udevd[318]: symlink '../bus/usb/001/007' '/dev/char/189:6.tmp-c189:6' failed: Read-only file system [ 38.170364][ T9] usb 2-1: USB disconnect, device number 12 [ 38.181000][ T512] udevd[512]: setting mode of /dev/bus/usb/002/012 to 020664 failed: Read-only file system [ 38.196105][ T361] usb 3-1: device descriptor read/64, error -71 [ 38.201574][ T318] udevd[318]: symlink '../bus/usb/001/007' '/dev/char/189:6.tmp-c189:6' failed: Read-only file system [ 38.202485][ T512] udevd[512]: setting owner of /dev/bus/usb/002/012 to uid=0, gid=0 failed: Read-only file system [ 38.227168][ T512] udevd[512]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 38.245995][ T512] udevd[512]: symlink '../bus/usb/002/012' '/dev/char/189:139.tmp-c189:139' failed: Read-only file system [ 38.259456][ T512] udevd[512]: symlink '../bus/usb/002/012' '/dev/char/189:139.tmp-c189:139' failed: Read-only file system [ 38.337528][ T66] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 38.345337][ T313] udevd[313]: setting mode of /dev/bus/usb/004/004 to 020664 failed: Read-only file system [ 38.345684][ T36] audit: type=1400 audit(1794183691.690:271): avc: denied { map } for pid=1024 comm="syz.3.109" path="socket:[7173]" dev="sockfs" ino=7173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.355642][ T66] usb 4-1: USB disconnect, device number 4 [ 38.434558][ T36] audit: type=1326 audit(1794183691.780:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1029 comm="syz.3.111" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa705f9fb19 code=0x0 [ 38.459238][ T361] usb 3-1: device descriptor read/64, error -71 [ 38.603643][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 38.618012][ T1035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 38.678801][ T36] audit: type=1400 audit(1794183692.020:273): avc: denied { append } for pid=1034 comm="syz.0.113" name="pfkey" dev="proc" ino=4026532436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 38.701466][ T36] audit: type=1400 audit(1794183692.020:274): avc: denied { mounton } for pid=1034 comm="syz.0.113" path="/52/file0" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 38.734269][ T361] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.864306][ T361] usb 3-1: device descriptor read/64, error -71 [ 39.114277][ T361] usb 3-1: device descriptor read/64, error -71 [ 39.224351][ T361] usb usb3-port1: attempt power cycle [ 39.493837][ T1042] fuse: Bad value for 'fd' [ 39.501956][ T1042] netlink: 100 bytes leftover after parsing attributes in process `syz.0.115'. [ 39.514278][ T66] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.584300][ T361] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 39.615265][ T361] usb 3-1: device descriptor read/8, error -71 [ 39.665412][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.676381][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.686138][ T66] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 39.695194][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.703697][ T66] usb 4-1: config 0 descriptor?? [ 39.745280][ T361] usb 3-1: device descriptor read/8, error -71 [ 39.794458][ T62] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 39.924281][ T62] usb 1-1: device descriptor read/64, error -71 [ 39.934283][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 39.935123][ T1022] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.969656][ T1046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1046 comm=syz.1.117 [ 39.984277][ T361] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 40.005328][ T361] usb 3-1: device descriptor read/8, error -71 [ 40.111633][ T66] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0 [ 40.118816][ T66] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0 [ 40.125898][ T66] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0 [ 40.132954][ T66] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0 [ 40.135322][ T361] usb 3-1: device descriptor read/8, error -71 [ 40.140025][ T66] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0 [ 40.164310][ T62] usb 1-1: device descriptor read/64, error -71 [ 40.254390][ T361] usb usb3-port1: unable to enumerate USB device [ 40.361663][ T1052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 40.404277][ T62] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 40.534281][ T62] usb 1-1: device descriptor read/64, error -71 [ 40.734279][ T361] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 40.774300][ T62] usb 1-1: device descriptor read/64, error -71 [ 40.869487][ T36] audit: type=1400 audit(1794183694.210:275): avc: denied { ioctl } for pid=1057 comm="syz.2.120" path="socket:[7392]" dev="sockfs" ino=7392 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.884430][ T62] usb usb1-port1: attempt power cycle [ 40.900501][ T361] usb 2-1: config 0 has no interfaces? [ 40.907852][ T361] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 40.914759][ T1058] kvm: kvm [1057]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 40.917052][ T361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 40.925903][ T1058] kvm: kvm [1057]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 40.933365][ T361] usb 2-1: SerialNumber: syz [ 40.948790][ T361] usb 2-1: config 0 descriptor?? [ 40.978292][ T1058] sit0: entered promiscuous mode [ 40.984375][ T1058] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 40.992035][ T1058] netlink: 1 bytes leftover after parsing attributes in process `syz.2.120'. [ 41.137420][ T1064] FAULT_INJECTION: forcing a failure. [ 41.137420][ T1064] name failslab, interval 1, probability 0, space 0, times 0 [ 41.150089][ T1064] CPU: 1 UID: 0 PID: 1064 Comm: syz.2.122 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 41.150120][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 41.150132][ T1064] Call Trace: [ 41.150139][ T1064] [ 41.150148][ T1064] __dump_stack+0x21/0x30 [ 41.150171][ T1064] dump_stack_lvl+0x140/0x1c0 [ 41.150188][ T1064] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.150200][ T1064] dump_stack+0x19/0x20 [ 41.150209][ T1064] should_fail_ex+0x3c2/0x510 [ 41.150219][ T1064] should_failslab+0xac/0x100 [ 41.150231][ T1064] __kmalloc_cache_noprof+0x41/0x470 [ 41.150246][ T1064] ? debugfs_file_get+0x11d/0x590 [ 41.150265][ T1064] debugfs_file_get+0x11d/0x590 [ 41.150284][ T1064] ? __cfi_debugfs_file_get+0x10/0x10 [ 41.150303][ T1064] open_proxy_open+0x51/0x500 [ 41.150322][ T1064] ? __cfi_open_proxy_open+0x10/0x10 [ 41.150336][ T1064] do_dentry_open+0x97c/0x1510 [ 41.150349][ T1064] vfs_open+0x86/0x240 [ 41.150360][ T1064] ? __cfi_vfs_open+0x10/0x10 [ 41.150372][ T1064] ? may_open+0x352/0x430 [ 41.150383][ T1064] path_openat+0x2c49/0x35a0 [ 41.150396][ T1064] ? kasan_save_alloc_info+0x3a/0x50 [ 41.150421][ T1064] ? getname+0x1b/0x30 [ 41.150437][ T1064] ? x64_sys_call+0xe69/0x2ee0 [ 41.150454][ T1064] ? do_syscall_64+0x57/0xf0 [ 41.150474][ T1064] ? do_filp_open+0x440/0x440 [ 41.150486][ T1064] do_filp_open+0x1f2/0x440 [ 41.150498][ T1064] ? __cfi_do_filp_open+0x10/0x10 [ 41.150512][ T1064] ? alloc_fd+0x4c1/0x570 [ 41.150523][ T1064] do_sys_openat2+0x134/0x1d0 [ 41.150538][ T1064] ? do_sys_open+0x100/0x100 [ 41.150562][ T1064] ? __cfi_ksys_write+0x10/0x10 [ 41.150579][ T1064] __x64_sys_openat+0x13a/0x170 [ 41.150602][ T1064] x64_sys_call+0xe69/0x2ee0 [ 41.150618][ T1064] do_syscall_64+0x57/0xf0 [ 41.150628][ T1064] ? clear_bhb_loop+0x50/0xa0 [ 41.150641][ T1064] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.150654][ T1064] RIP: 0033:0x7f405cb9fb19 [ 41.150664][ T1064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.150673][ T1064] RSP: 002b:00007f405da10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 41.150689][ T1064] RAX: ffffffffffffffda RBX: 00007f405ce25fa0 RCX: 00007f405cb9fb19 [ 41.150703][ T1064] RDX: 0000000000000001 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 41.150716][ T1064] RBP: 00007f405cc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.150728][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.150739][ T1064] R13: 00007f405ce26038 R14: 00007f405ce25fa0 R15: 00007ffe9da8e6e8 [ 41.150755][ T1064] [ 41.423087][ T36] audit: type=1400 audit(1794183694.760:276): avc: denied { write } for pid=1053 comm="syz.1.118" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.435771][ T361] usb 2-1: USB disconnect, device number 13 [ 41.464275][ T62] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 41.495320][ T62] usb 1-1: device descriptor read/8, error -71 [ 41.504317][ T36] audit: type=1400 audit(1794183694.840:277): avc: denied { ioctl } for pid=1072 comm="syz.2.124" path="socket:[7023]" dev="sockfs" ino=7023 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.529337][ T36] audit: type=1400 audit(1794183694.850:278): avc: denied { bind } for pid=1072 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.548722][ T36] audit: type=1400 audit(1794183694.850:279): avc: denied { name_bind } for pid=1072 comm="syz.2.124" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 41.553329][ T1091] rust_binder: 1090:1091 got transaction to invalid handle 4 [ 41.577082][ T1091] rust_binder: 1090:1091 transaction call to 0:0 failed ENOENT, code 1 size 0-24 line process.rs:958 [ 41.591974][ T1091] rust_binder: 1090:1091 got transaction to invalid handle 4294967294 [ 41.600240][ T1091] rust_binder: 1090:1091 transaction async to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 41.625311][ T62] usb 1-1: device descriptor read/8, error -71 [ 41.844267][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 41.864270][ T62] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 41.885291][ T62] usb 1-1: device descriptor read/8, error -71 [ 41.961621][ T1093] SELinux: Context system_u:object_r:var_lock_t:s0 is not valid (left unmapped). [ 41.974278][ T10] usb 3-1: device descriptor read/64, error -71 [ 42.016010][ T62] usb 1-1: device descriptor read/8, error -71 [ 42.124353][ T62] usb usb1-port1: unable to enumerate USB device [ 42.214270][ T10] usb 3-1: device descriptor read/64, error -71 [ 42.224294][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 42.315070][ T66] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -71 [ 42.326041][ T66] usb 4-1: USB disconnect, device number 5 [ 42.374374][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 42.380471][ T9] usb 2-1: config 1 has an invalid descriptor of length 69, skipping remainder of the config [ 42.390658][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 42.401006][ T9] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 42.410229][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.418338][ T9] usb 2-1: Product: syz [ 42.422486][ T9] usb 2-1: Manufacturer: syz [ 42.427094][ T9] usb 2-1: SerialNumber: syz [ 42.454273][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 42.584258][ T10] usb 3-1: device descriptor read/64, error -71 [ 42.639818][ T9] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 42.648601][ T9] usb 2-1: clock source 0 is not valid, cannot use [ 42.651361][ T1101] incfs: Error accessing: ./file0. [ 42.655617][ T9] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 42.660288][ T1101] incfs: mount failed -20 [ 42.671466][ T9] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 42.680173][ T66] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 42.687978][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 42.702090][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 42.712647][ T9] usb 2-1: USB disconnect, device number 14 [ 42.775369][ T1115] 9pnet_fd: Insufficient options for proto=fd [ 42.824295][ T10] usb 3-1: device descriptor read/64, error -71 [ 42.845254][ T66] usb 4-1: config 0 interface 0 has no altsetting 0 [ 42.851872][ T66] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 42.861273][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.869881][ T66] usb 4-1: config 0 descriptor?? [ 42.934404][ T10] usb usb3-port1: attempt power cycle [ 43.197856][ T1125] FAULT_INJECTION: forcing a failure. [ 43.197856][ T1125] name fail_futex, interval 1, probability 0, space 0, times 1 [ 43.210708][ T1125] CPU: 1 UID: 0 PID: 1125 Comm: syz.1.134 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 43.210738][ T1125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 43.210750][ T1125] Call Trace: [ 43.210758][ T1125] [ 43.210766][ T1125] __dump_stack+0x21/0x30 [ 43.210789][ T1125] dump_stack_lvl+0x140/0x1c0 [ 43.210801][ T1125] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.210818][ T1125] ? gup_fast_fallback+0x671/0x740 [ 43.210840][ T1125] dump_stack+0x19/0x20 [ 43.210856][ T1125] should_fail_ex+0x3c2/0x510 [ 43.210874][ T1125] should_fail+0xf/0x20 [ 43.210889][ T1125] should_fail_futex+0x3c/0x50 [ 43.210900][ T1125] futex_lock_pi_atomic+0x11b/0xcb0 [ 43.210915][ T1125] ? __cfi_futex_lock_pi_atomic+0x10/0x10 [ 43.210926][ T1125] ? __cfi_futex_setup_timer+0x10/0x10 [ 43.210936][ T1125] ? __cfi_get_futex_key+0x10/0x10 [ 43.210946][ T1125] futex_lock_pi+0x2a7/0xa70 [ 43.210964][ T1125] ? futex_unqueue+0x136/0x160 [ 43.210983][ T1125] ? __cfi_futex_lock_pi+0x10/0x10 [ 43.211004][ T1125] ? __cfi_futex_wake_mark+0x10/0x10 [ 43.211028][ T1125] ? __cfi_futex_wake_mark+0x10/0x10 [ 43.211051][ T1125] ? vfs_write+0xbd2/0xfd0 [ 43.211066][ T1125] do_futex+0x2fc/0x510 [ 43.211077][ T1125] ? __cfi_do_futex+0x10/0x10 [ 43.211087][ T1125] ? mutex_unlock+0x90/0x240 [ 43.211101][ T1125] __se_sys_futex+0x13c/0x320 [ 43.211119][ T1125] ? fput+0x1a4/0x230 [ 43.211139][ T1125] ? __x64_sys_futex+0x110/0x110 [ 43.211158][ T1125] ? __cfi_ksys_write+0x10/0x10 [ 43.211175][ T1125] ? __kasan_check_write+0x18/0x20 [ 43.211193][ T1125] __x64_sys_futex+0xe9/0x110 [ 43.211203][ T1125] x64_sys_call+0x227f/0x2ee0 [ 43.211214][ T1125] do_syscall_64+0x57/0xf0 [ 43.211224][ T1125] ? clear_bhb_loop+0x50/0xa0 [ 43.211238][ T1125] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.211254][ T1125] RIP: 0033:0x7fc665b9fb19 [ 43.211270][ T1125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.211285][ T1125] RSP: 002b:00007fc666a0d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 43.211305][ T1125] RAX: ffffffffffffffda RBX: 00007fc665e25fa0 RCX: 00007fc665b9fb19 [ 43.211319][ T1125] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 43.211329][ T1125] RBP: 00007fc665c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 43.211335][ T1125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.211341][ T1125] R13: 00007fc665e26038 R14: 00007fc665e25fa0 R15: 00007fff4bc4c7c8 [ 43.211350][ T1125] [ 43.294292][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 43.327094][ T1099] netlink: 32 bytes leftover after parsing attributes in process `syz.3.128'. [ 43.365250][ T10] usb 3-1: device descriptor read/8, error -71 [ 43.491151][ T66] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 43.498382][ T66] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 43.505607][ T66] koneplus 0003:1E7D:2D51.0005: collection stack underflow [ 43.510297][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 43.510318][ T36] audit: type=1400 audit(1794183696.850:285): avc: denied { read } for pid=1129 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.512825][ T66] koneplus 0003:1E7D:2D51.0005: item 0 0 0 12 parsing failed [ 43.545410][ T66] koneplus 0003:1E7D:2D51.0005: parse failed [ 43.551503][ T66] koneplus 0003:1E7D:2D51.0005: probe with driver koneplus failed with error -22 [ 43.595488][ T1138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.128'. [ 43.605464][ T1099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.614307][ T1099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.685320][ T10] usb 3-1: device descriptor read/8, error -71 [ 43.824360][ T66] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 43.924286][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 43.945286][ T10] usb 3-1: device descriptor read/8, error -71 [ 43.976314][ T66] usb 1-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 43.985408][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 43.993395][ T66] usb 1-1: Product: syz [ 43.997569][ T66] usb 1-1: Manufacturer: syz [ 44.075235][ T10] usb 3-1: device descriptor read/8, error -71 [ 44.184319][ T10] usb usb3-port1: unable to enumerate USB device [ 44.219076][ T10] smpboot: CPU 1 is now offline [ 44.227895][ T66] scsi host1: uas [ 44.353473][ T36] audit: type=1400 audit(1794183953.688:286): avc: denied { search } for pid=1144 comm="syz.1.139" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.376673][ T36] audit: type=1400 audit(1794183953.688:287): avc: denied { write } for pid=1144 comm="syz.1.139" name="sched_switch" dev="tracefs" ino=7089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.399616][ T36] audit: type=1400 audit(1794183953.688:288): avc: denied { add_name } for pid=1144 comm="syz.1.139" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.420273][ T36] audit: type=1400 audit(1794183953.688:289): avc: denied { create } for pid=1144 comm="syz.1.139" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 44.441247][ C0] usb 1-1: stat urb: no pending cmd for uas-tag 256 [ 44.546237][ T10] rust_binder: 1090: undelivered TRANSACTION_ERROR: 29201 [ 44.584359][ T1147] Zero length message leads to an empty skb [ 44.643122][ T1152] fuse: Bad value for 'group_id' [ 44.648844][ C0] usb 1-1: cmd cmplt err -71 [ 44.655082][ T66] usb 1-1: USB disconnect, device number 12 [ 44.661405][ T66] scsi 1:0:0:0: tag#4 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 44.669123][ T66] scsi 1:0:0:0: tag#4 CDB: opcode=0x12 12 00 00 00 24 00 [ 44.676765][ T1152] fuse: Bad value for 'group_id' [ 44.682006][ T1152] fuse: Bad value for 'group_id' [ 44.687159][ T1152] fuse: Bad value for 'group_id' [ 44.692191][ T1152] fuse: Bad value for 'group_id' [ 44.698673][ T1152] fuse: Bad value for 'group_id' [ 44.703711][ T1152] fuse: Bad value for 'group_id' [ 44.713570][ T1152] fuse: Bad value for 'group_id' [ 44.718701][ T1152] fuse: Bad value for 'group_id' [ 44.723707][ T1152] fuse: Bad value for 'group_id' [ 44.728844][ T1152] fuse: Bad value for 'group_id' [ 44.733851][ T1152] fuse: Bad value for 'group_id' [ 44.738979][ T1152] fuse: Bad value for 'group_id' [ 44.743982][ T1152] fuse: Bad value for 'group_id' [ 44.749178][ T1152] fuse: Bad value for 'group_id' [ 44.754370][ T1152] fuse: Bad value for 'group_id' [ 44.759449][ T1152] fuse: Bad value for 'group_id' [ 44.764577][ T1152] fuse: Bad value for 'group_id' [ 44.769582][ T1152] fuse: Bad value for 'group_id' [ 44.774679][ T1152] fuse: Bad value for 'group_id' [ 44.779682][ T1152] fuse: Bad value for 'group_id' [ 44.784854][ T1152] fuse: Bad value for 'group_id' [ 44.789867][ T1152] fuse: Bad value for 'group_id' [ 44.795001][ T1152] fuse: Bad value for 'group_id' [ 44.800001][ T1152] fuse: Bad value for 'group_id' [ 44.805128][ T1152] fuse: Bad value for 'group_id' [ 44.810138][ T1152] fuse: Bad value for 'group_id' [ 44.815260][ T1152] fuse: Bad value for 'group_id' [ 44.820274][ T1152] fuse: Bad value for 'group_id' [ 44.825464][ T1152] fuse: Bad value for 'group_id' [ 44.830487][ T1152] fuse: Bad value for 'group_id' [ 44.835604][ T1152] fuse: Bad value for 'group_id' [ 44.840603][ T1152] fuse: Bad value for 'group_id' [ 44.845714][ T1152] fuse: Bad value for 'group_id' [ 44.851163][ T1152] fuse: Bad value for 'group_id' [ 44.856305][ T1152] fuse: Bad value for 'group_id' [ 44.861337][ T1152] fuse: Bad value for 'group_id' [ 44.866752][ T1152] fuse: Bad value for 'group_id' [ 44.871778][ T1152] fuse: Bad value for 'group_id' [ 44.876932][ T1152] fuse: Bad value for 'group_id' [ 44.881949][ T1152] fuse: Bad value for 'group_id' [ 44.892628][ T1152] fuse: Bad value for 'group_id' [ 44.903684][ T36] audit: type=1400 audit(1794183954.248:290): avc: denied { ioctl } for pid=1156 comm="syz.1.143" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 44.929673][ T1152] fuse: Bad value for 'group_id' [ 44.939622][ T1152] fuse: Bad value for 'group_id' [ 44.954193][ T1152] fuse: Bad value for 'group_id' [ 44.967437][ T1152] fuse: Bad value for 'group_id' [ 44.972933][ T1152] fuse: Bad value for 'group_id' [ 44.983263][ T1152] fuse: Bad value for 'group_id' [ 44.997940][ T1152] fuse: Bad value for 'group_id' [ 45.009312][ T1152] fuse: Bad value for 'group_id' [ 45.016011][ T36] audit: type=1400 audit(1794183954.358:291): avc: denied { setopt } for pid=1163 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.035686][ T1152] fuse: Bad value for 'group_id' [ 45.043606][ T1152] fuse: Bad value for 'group_id' [ 45.052614][ T1152] fuse: Bad value for 'group_id' [ 45.058958][ T1152] fuse: Bad value for 'group_id' [ 45.063952][ T36] audit: type=1326 audit(1794183954.408:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1166 comm="syz.1.147" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc665b9fb19 code=0x0 [ 45.088678][ T1152] fuse: Bad value for 'group_id' [ 45.093665][ T1152] fuse: Bad value for 'group_id' [ 45.098957][ T1152] fuse: Bad value for 'group_id' [ 45.103956][ T1152] fuse: Bad value for 'group_id' [ 45.109224][ T1152] fuse: Bad value for 'group_id' [ 45.114302][ T1152] fuse: Bad value for 'group_id' [ 45.119358][ T1152] fuse: Bad value for 'group_id' [ 45.124474][ T1152] fuse: Bad value for 'group_id' [ 45.129521][ T1152] fuse: Bad value for 'group_id' [ 45.135405][ T1152] fuse: Bad value for 'group_id' [ 45.140480][ T1152] fuse: Bad value for 'group_id' [ 45.145592][ T1152] fuse: Bad value for 'group_id' [ 45.150656][ T1152] fuse: Bad value for 'group_id' [ 45.155779][ T1152] fuse: Bad value for 'group_id' [ 45.160839][ T1152] fuse: Bad value for 'group_id' [ 45.173141][ T36] audit: type=1400 audit(1794183954.508:293): avc: denied { mounton } for pid=1168 comm="syz.0.148" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 45.197316][ T1169] overlayfs: missing 'lowerdir' [ 45.202299][ T1152] fuse: Bad value for 'group_id' [ 45.210518][ T1152] fuse: Bad value for 'group_id' [ 45.215689][ T1152] fuse: Bad value for 'group_id' [ 45.220801][ T1152] fuse: Bad value for 'group_id' [ 45.226010][ T1152] fuse: Bad value for 'group_id' [ 45.231126][ T1152] fuse: Bad value for 'group_id' [ 45.236249][ T1152] fuse: Bad value for 'group_id' [ 45.241611][ T1152] fuse: Bad value for 'group_id' [ 45.246727][ T1152] fuse: Bad value for 'group_id' [ 45.251834][ T1152] fuse: Bad value for 'group_id' [ 45.256952][ T1152] fuse: Bad value for 'group_id' [ 45.262037][ T1152] fuse: Bad value for 'group_id' [ 45.267130][ T1152] fuse: Bad value for 'group_id' [ 45.272197][ T1152] fuse: Bad value for 'group_id' [ 45.277303][ T1152] fuse: Bad value for 'group_id' [ 45.282476][ T1152] fuse: Bad value for 'group_id' [ 45.287602][ T1152] fuse: Bad value for 'group_id' [ 45.292701][ T1152] fuse: Bad value for 'group_id' [ 45.297800][ T1152] fuse: Bad value for 'group_id' [ 45.302860][ T1152] fuse: Bad value for 'group_id' [ 45.307970][ T1152] fuse: Bad value for 'group_id' [ 45.313026][ T1152] fuse: Bad value for 'group_id' [ 45.318283][ T1152] fuse: Bad value for 'group_id' [ 45.323431][ T1152] fuse: Bad value for 'group_id' [ 45.328532][ T1152] fuse: Bad value for 'group_id' [ 45.337205][ T9] usb 4-1: USB disconnect, device number 6 [ 45.351870][ T1152] fuse: Bad value for 'group_id' [ 45.361068][ T36] audit: type=1400 audit(1794183954.708:294): avc: denied { create } for pid=1170 comm="syz.3.149" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.383394][ T1152] fuse: Bad value for 'group_id' [ 45.388774][ T1152] fuse: Bad value for 'group_id' [ 45.398594][ T1152] fuse: Bad value for 'group_id' [ 45.409738][ T1152] fuse: Bad value for 'group_id' [ 45.426451][ T1152] fuse: Bad value for 'group_id' [ 45.437368][ T1152] fuse: Bad value for 'group_id' [ 45.444043][ T66] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 45.455946][ T1152] fuse: Bad value for 'group_id' [ 45.473987][ T1152] fuse: Bad value for 'group_id' [ 45.481055][ T1152] fuse: Bad value for 'group_id' [ 45.598955][ T1185] input: syz1 as /devices/virtual/input/input5 [ 45.607454][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.620195][ T66] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 45.643668][ T66] usb 1-1: can't read configurations, error -71 [ 45.744403][ T1200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.753946][ T1200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.973991][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 46.113988][ T9] usb 3-1: device descriptor read/64, error -71 [ 46.256870][ T1218] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 46.266189][ T1218] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 46.278097][ T1218] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 46.286453][ T1218] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 46.297489][ T1218] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 46.363939][ T9] usb 3-1: device descriptor read/64, error -71 [ 46.493937][ T66] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 46.563928][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 46.603906][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 46.643913][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 46.650213][ T66] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 46.661634][ T66] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.674810][ T66] usb 1-1: config 0 interface 0 has no altsetting 0 [ 46.681468][ T66] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 46.690812][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.699461][ T66] usb 1-1: config 0 descriptor?? [ 46.713872][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 46.720196][ T10] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 46.728494][ T10] usb 4-1: config 0 has no interface number 0 [ 46.734631][ T9] usb 3-1: device descriptor read/64, error -71 [ 46.741110][ T10] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 46.751307][ T10] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 46.762702][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 46.772172][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.780398][ T10] usb 4-1: Product: syz [ 46.784792][ T10] usb 4-1: Manufacturer: syz [ 46.789563][ T10] usb 4-1: SerialNumber: syz [ 46.797246][ T10] usb 4-1: config 0 descriptor?? [ 46.802520][ T1223] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 46.810181][ T1223] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 46.974029][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.018720][ T1223] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 47.026214][ T1223] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 47.083896][ T9] usb usb3-port1: attempt power cycle [ 47.110492][ T66] input: HID 1e7d:2c24 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1E7D:2C24.0006/input/input6 [ 47.137936][ T66] pyra 0003:1E7D:2C24.0006: input,hiddev96,hidraw0: USB HID v0.03 Device [HID 1e7d:2c24] on usb-dummy_hcd.0-1/input0 [ 47.234075][ T10] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 47.244273][ T10] asix 4-1:0.34: probe with driver asix failed with error -61 [ 47.310441][ T10] usb 1-1: USB disconnect, device number 14 [ 47.423802][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 47.444773][ T9] usb 3-1: device descriptor read/8, error -71 [ 47.574786][ T9] usb 3-1: device descriptor read/8, error -71 [ 47.783800][ T1231] fuse: Bad value for 'fd' [ 47.815526][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 47.854698][ T9] usb 3-1: device descriptor read/8, error -71 [ 47.994657][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.103806][ T9] usb usb3-port1: unable to enumerate USB device [ 48.223713][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 48.373684][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 48.380018][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 48.388336][ T10] usb 2-1: config 0 has no interface number 0 [ 48.395858][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 48.405106][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.413136][ T10] usb 2-1: Product: syz [ 48.417503][ T10] usb 2-1: Manufacturer: syz [ 48.422134][ T10] usb 2-1: SerialNumber: syz [ 48.427296][ T10] usb 2-1: config 0 descriptor?? [ 48.434145][ T10] smsc95xx v2.0.0 [ 48.533165][ T36] kauditd_printk_skb: 1090 callbacks suppressed [ 48.533177][ T36] audit: type=1400 audit(1794183957.869:1385): avc: denied { search } for pid=1245 comm="syz.0.175" name="/" dev="configfs" ino=2415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.778923][ T1251] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.786128][ T1251] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.805666][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 48.817054][ T1251] bridge0: entered allmulticast mode [ 48.835858][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 48.846967][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 48.864832][ T1251] bridge_slave_1: left allmulticast mode [ 48.870587][ T1251] bridge_slave_1: left promiscuous mode [ 48.876453][ T1251] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.884181][ T1251] bridge_slave_0: left allmulticast mode [ 48.889874][ T1251] bridge_slave_0: left promiscuous mode [ 48.895691][ T1251] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.953296][ T36] audit: type=1400 audit(1794183958.289:1386): avc: denied { create } for pid=1252 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 48.976749][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.988333][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.997555][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.008953][ T9] usb 1-1: config 0 descriptor?? [ 49.217019][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 49.223061][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 49.233234][ T9] usb 1-1: USB disconnect, device number 15 [ 49.338149][ T66] usb 4-1: USB disconnect, device number 7 [ 49.354318][ T36] audit: type=1400 audit(1794183958.699:1387): avc: denied { mount } for pid=1255 comm="syz.3.178" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 49.458192][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 49.471586][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 49.484430][ T10] usb 2-1: USB disconnect, device number 15 [ 49.653557][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 49.673523][ T66] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 49.798777][ T1260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.809039][ T1260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.818007][ T1260] netlink: 17 bytes leftover after parsing attributes in process `syz.2.179'. [ 49.818057][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.838704][ T1260] netlink: 'syz.2.179': attribute type 4 has an invalid length. [ 49.846945][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 49.854433][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.864811][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 49.873923][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.882875][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.891737][ T9] usb 1-1: config 0 descriptor?? [ 49.897363][ T66] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.908699][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.917060][ T66] usb 4-1: Product: syz [ 49.921366][ T66] usb 4-1: Manufacturer: syz [ 49.927952][ T66] usb 4-1: SerialNumber: syz [ 49.992205][ T36] audit: type=1400 audit(1794183959.329:1388): avc: denied { connect } for pid=1264 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.033773][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 50.139139][ T66] usb 4-1: 0:2 : does not exist [ 50.184484][ T66] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 50.191752][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 50.209661][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 50.243864][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 50.257340][ T66] usb 4-1: USB disconnect, device number 8 [ 50.264495][ T10] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 50.283438][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.310013][ T10] usb 3-1: Product: syz [ 50.325901][ T10] usb 3-1: Manufacturer: syz [ 50.332878][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 50.341588][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 50.353633][ T10] usb 3-1: SerialNumber: syz [ 50.371154][ T9] usb 1-1: USB disconnect, device number 16 [ 50.413776][ T36] audit: type=1326 audit(1794183959.759:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.1.185" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc665b9fb19 code=0x0 [ 50.467481][ T36] audit: type=1326 audit(1794183959.789:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.1.185" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc665b9fb19 code=0x0 [ 50.519456][ T36] audit: type=1400 audit(1794183959.839:1391): avc: denied { write } for pid=1276 comm="syz.1.185" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.569828][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 50.583250][ T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 50.598392][ T10] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 50.620131][ T10] usb 3-1: USB disconnect, device number 19 [ 50.665072][ T36] audit: type=1400 audit(1794183959.999:1392): avc: denied { mount } for pid=1284 comm="syz.3.186" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 50.719471][ T36] audit: type=1400 audit(1794183960.039:1393): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 50.781414][ T36] audit: type=1400 audit(1794183960.099:1394): avc: denied { write } for pid=1287 comm="syz.3.187" name="/" dev="incremental-fs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.868501][ T296] ------------[ cut here ]------------ [ 50.874006][ T296] WARNING: CPU: 0 PID: 296 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 50.881894][ T296] Modules linked in: [ 50.885832][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 50.897484][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 50.907674][ T296] RIP: 0010:drop_nlink+0xce/0x110 [ 50.912860][ T296] Code: 04 00 00 be 08 00 00 00 e8 3f 07 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 14 b8 03 cc e8 42 47 94 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 50.932511][ T296] RSP: 0018:ffffc9000b62fc88 EFLAGS: 00010293 [ 50.938651][ T296] RAX: ffffffff81f5228e RBX: ffff888117961e30 RCX: ffff88812a4713c0 [ 50.946653][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.954626][ T296] RBP: ffffc9000b62fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 50.962597][ T296] R10: dffffc0000000000 R11: fffff520016c5f80 R12: dffffc0000000000 [ 50.971386][ T296] R13: 1ffff11022f2c3cf R14: ffff888117961e78 R15: 0000000000000000 [ 50.979358][ T296] FS: 000055556927a500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 50.988335][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.994947][ T296] CR2: 000055556929d958 CR3: 00000001277d4000 CR4: 00000000003526b0 [ 51.002908][ T296] Call Trace: [ 51.006187][ T296] [ 51.009102][ T296] shmem_rmdir+0x5f/0x90 [ 51.013372][ T296] vfs_rmdir+0x3db/0x560 [ 51.017595][ T296] incfs_kill_sb+0x102/0x220 [ 51.022161][ T296] deactivate_locked_super+0xd5/0x270 [ 51.027539][ T296] deactivate_super+0xb8/0xe0 [ 51.032214][ T296] cleanup_mnt+0x438/0x4d0 [ 51.036630][ T296] __cleanup_mnt+0x1d/0x40 [ 51.041032][ T296] task_work_run+0x1e8/0x260 [ 51.045622][ T296] ? __cfi_task_work_run+0x10/0x10 [ 51.050732][ T296] ? __x64_sys_umount+0x12e/0x180 [ 51.055782][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 51.061135][ T296] ? __kasan_check_read+0x15/0x20 [ 51.066153][ T296] resume_user_mode_work+0x35/0x50 [ 51.071333][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 51.076809][ T296] do_syscall_64+0x63/0xf0 [ 51.081215][ T296] ? clear_bhb_loop+0x50/0xa0 [ 51.085891][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.091770][ T296] RIP: 0033:0x7fa705fa0d57 [ 51.096187][ T296] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 51.115791][ T296] RSP: 002b:00007ffe5cc21378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 51.124285][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa705fa0d57 [ 51.132238][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5cc21430 [ 51.140211][ T296] RBP: 00007ffe5cc21430 R08: 00007ffe5cc22430 R09: 00000000ffffffff [ 51.148195][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5cc224c0 [ 51.156156][ T296] R13: 00007fa706036fb3 R14: 000000000000c685 R15: 00007ffe5cc22500 [ 51.164135][ T296] [ 51.167142][ T296] ---[ end trace 0000000000000000 ]--- [ 51.249988][ T296] ================================================================== [ 51.258066][ T296] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 51.264787][ T296] Write of size 4 at addr 0000000000000168 by task syz-executor/296 [ 51.272933][ T296] [ 51.275250][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G W syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 51.275269][ T296] Tainted: [W]=WARN [ 51.275272][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 51.275280][ T296] Call Trace: [ 51.275284][ T296] [ 51.275290][ T296] __dump_stack+0x21/0x30 [ 51.275305][ T296] dump_stack_lvl+0x140/0x1c0 [ 51.275315][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.275325][ T296] print_report+0x3d/0x70 [ 51.275335][ T296] kasan_report+0x162/0x1a0 [ 51.275347][ T296] ? ihold+0x24/0x70 [ 51.275357][ T296] ? ihold+0x24/0x70 [ 51.275367][ T296] kasan_check_range+0x25a/0x2b0 [ 51.275379][ T296] __kasan_check_write+0x18/0x20 [ 51.275392][ T296] ihold+0x24/0x70 [ 51.275402][ T296] vfs_rmdir+0x25c/0x560 [ 51.275414][ T296] incfs_kill_sb+0x102/0x220 [ 51.275427][ T296] deactivate_locked_super+0xd5/0x270 [ 51.275440][ T296] deactivate_super+0xb8/0xe0 [ 51.275452][ T296] cleanup_mnt+0x438/0x4d0 [ 51.275463][ T296] __cleanup_mnt+0x1d/0x40 [ 51.275473][ T296] task_work_run+0x1e8/0x260 [ 51.275489][ T296] ? __cfi_task_work_run+0x10/0x10 [ 51.275503][ T296] ? __x64_sys_umount+0x12e/0x180 [ 51.275516][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 51.275529][ T296] ? __kasan_check_read+0x15/0x20 [ 51.275543][ T296] resume_user_mode_work+0x35/0x50 [ 51.275557][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 51.275572][ T296] do_syscall_64+0x63/0xf0 [ 51.275582][ T296] ? clear_bhb_loop+0x50/0xa0 [ 51.275596][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.275609][ T296] RIP: 0033:0x7fa705fa0d57 [ 51.275621][ T296] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 51.275629][ T296] RSP: 002b:00007ffe5cc21378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 51.275642][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa705fa0d57 [ 51.275649][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5cc21430 [ 51.275656][ T296] RBP: 00007ffe5cc21430 R08: 00007ffe5cc22430 R09: 00000000ffffffff [ 51.275664][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5cc224c0 [ 51.275671][ T296] R13: 00007fa706036fb3 R14: 000000000000c685 R15: 00007ffe5cc22500 [ 51.275679][ T296] [ 51.275683][ T296] ================================================================== [ 51.556257][ T296] Disabling lock debugging due to kernel taint [ 51.568924][ T296] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 51.576732][ T296] #PF: supervisor write access in kernel mode [ 51.582816][ T296] #PF: error_code(0x0002) - not-present page [ 51.588766][ T296] PGD 800000010ffe1067 P4D 800000010ffe1067 PUD 0 [ 51.595273][ T296] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 51.601317][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G B W syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 51.614404][ T296] Tainted: [B]=BAD_PAGE, [W]=WARN [ 51.619403][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 51.629445][ T296] RIP: 0010:ihold+0x2a/0x70 [ 51.633942][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 2d 3e 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 fc fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 3d [ 51.653538][ T296] RSP: 0018:ffffc9000b62fcc8 EFLAGS: 00010246 [ 51.659586][ T296] RAX: ffff88812a471300 RBX: 0000000000000000 RCX: ffff88812a4713c0 [ 51.667551][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.675496][ T296] RBP: ffffc9000b62fcd8 R08: ffffffff893d8967 R09: 1ffffffff127b12c [ 51.683451][ T296] R10: dffffc0000000000 R11: fffffbfff127b12d R12: 0000000000000000 [ 51.691401][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 51.699351][ T296] FS: 000055556927a500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 51.708441][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.715010][ T296] CR2: 0000000000000168 CR3: 00000001277d4000 CR4: 00000000003526b0 [ 51.722981][ T296] Call Trace: [ 51.726246][ T296] [ 51.729178][ T296] vfs_rmdir+0x25c/0x560 [ 51.733407][ T296] incfs_kill_sb+0x102/0x220 [ 51.737970][ T296] deactivate_locked_super+0xd5/0x270 [ 51.743318][ T296] deactivate_super+0xb8/0xe0 [ 51.747974][ T296] cleanup_mnt+0x438/0x4d0 [ 51.752386][ T296] __cleanup_mnt+0x1d/0x40 [ 51.756783][ T296] task_work_run+0x1e8/0x260 [ 51.761443][ T296] ? __cfi_task_work_run+0x10/0x10 [ 51.766532][ T296] ? __x64_sys_umount+0x12e/0x180 [ 51.771535][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 51.776885][ T296] ? __kasan_check_read+0x15/0x20 [ 51.781892][ T296] resume_user_mode_work+0x35/0x50 [ 51.786984][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 51.792422][ T296] do_syscall_64+0x63/0xf0 [ 51.796815][ T296] ? clear_bhb_loop+0x50/0xa0 [ 51.801480][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.807363][ T296] RIP: 0033:0x7fa705fa0d57 [ 51.811768][ T296] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 51.831356][ T296] RSP: 002b:00007ffe5cc21378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 51.839769][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa705fa0d57 [ 51.847731][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5cc21430 [ 51.856026][ T296] RBP: 00007ffe5cc21430 R08: 00007ffe5cc22430 R09: 00000000ffffffff [ 51.863975][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5cc224c0 [ 51.872012][ T296] R13: 00007fa706036fb3 R14: 000000000000c685 R15: 00007ffe5cc22500 [ 51.879979][ T296] [ 51.882978][ T296] Modules linked in: [ 51.886860][ T296] CR2: 0000000000000168 [ 51.890987][ T296] ---[ end trace 0000000000000000 ]--- [ 51.896417][ T296] RIP: 0010:ihold+0x2a/0x70 [ 51.900901][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 2d 3e 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 fc fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 3d [ 51.920479][ T296] RSP: 0018:ffffc9000b62fcc8 EFLAGS: 00010246 [ 51.926532][ T296] RAX: ffff88812a471300 RBX: 0000000000000000 RCX: ffff88812a4713c0 [ 51.934477][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.942431][ T296] RBP: ffffc9000b62fcd8 R08: ffffffff893d8967 R09: 1ffffffff127b12c [ 51.950391][ T296] R10: dffffc0000000000 R11: fffffbfff127b12d R12: 0000000000000000 [ 51.958360][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 51.966319][ T296] FS: 000055556927a500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 51.975410][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.981972][ T296] CR2: 0000000000000168 CR3: 00000001277d4000 CR4: 00000000003526b0 [ 51.989926][ T296] Kernel panic - not syncing: Fatal exception [ 51.996011][ T296] Kernel Offset: disabled [ 52.000312][ T296] Rebooting in 86400 seconds..