last executing test programs: 4.270211691s ago: executing program 2 (id=75): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500200000040532b24004000010202010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000090582d5db"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) rt_sigqueueinfo(0x0, 0xc, &(0x7f0000000180)={0x4, 0x8, 0x100}) 4.094875225s ago: executing program 3 (id=78): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) r2 = userfaultfd(0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000001340)=0x1) close_range(r2, r3, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x0, 0x130, 0xa00, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') pipe2$9p(&(0x7f0000000240), 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r8, @ANYRESHEX=r9], 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x18) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0xa902) 2.768308376s ago: executing program 1 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)="654b6d795f2f6f533f7c2baab241063dd3c81d8c536e6d5fa28de81f04038e708fab47366a93ed8d3796f9e59f73404cde30fbc584ff5baae6b532f936af0c7e96b6a7a21aae7fe960a268a872d2f16ce97162713a70b8e6840b81", 0x5b) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbff, {{@in6=@local, @in=@broadcast, 0xfffd, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@empty, 0x20, 0x32}, @in=@local, {0x0, 0x7, 0x0, 0x4, 0x7, 0x4, 0x2000000000a, 0x1}, {0x100000001, 0xa, 0xcc, 0x8}, {0xf8, 0x0, 0x1}, 0xfffffffd, 0x3506, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'aegis128\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x844) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="410fae09663af80cb8e0120383ef66bafc0cb81c193987efc4c145e38ae7000000f243adf3400f2b1d2a00000064f041ff86f61c00000f20d835200000000f22d80f01c266b835010f00d80f06", 0x4d}], 0x1, 0x39, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.646788048s ago: executing program 1 (id=83): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x16, 0x2d, 0x1, 0x8, 0x50d, 0x115, 0x133, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x9, 0x2, 0x0, 0x8, "", [{{0x9, 0x4, 0x8e, 0x11, 0x2, 0xd1, 0xc2, 0x56, 0x7, [], [{{0x9, 0x5, 0x91c46c3e7ac7f8e8, 0x16, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0x0, 0x7}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket(0xa, 0x3, 0x87) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x1c}], 0x1}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0xb, 0x4) close(0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d4979ac9f1af0bdb6f98e7c3c108b96accfc29e248700"/48, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f0000000000)={0x8, 'ip_vti0\x00', {'veth1_macvtap\x00'}, 0x10}) sendmmsg$inet(r5, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1=0xe000006a}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local}}}], 0x20}}], 0x1, 0x0) 1.523770244s ago: executing program 0 (id=87): unshare(0x60000600) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000000000)=0xfffffffffffffe26) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x7, 0x0, 0x3}, 0x1c) (async) sendmmsg(r1, &(0x7f0000000300)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}}], 0x1, 0x45) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) (async) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x38728a2, &(0x7f0000000280)) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x69fe, "0f9d0027002020000000b80cf000"}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) (async) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') sched_setscheduler(0x0, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) (async) sendto$packet(r4, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008050b431740000102030109028600030180e007080b0101010a20000904000000010120000924010200032600c511240806010001000002000200feff03000c2403fd0004a80306f9ff0a090401"], 0x0) 1.488215915s ago: executing program 0 (id=88): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x80081, 0x0) writev(r0, &(0x7f0000002840)=[{&(0x7f0000001640)="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", 0x7a6}], 0x1) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') (rerun: 64) pread64(r2, &(0x7f0000000480)=""/14, 0xd, 0x8000) (async) syz_usb_connect$midi(0x5, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async) syz_io_uring_setup(0x499e, &(0x7f0000000080)={0x0, 0xefad, 0x4, 0x1, 0x8b, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 1.419411087s ago: executing program 1 (id=89): lremovexattr(&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000000)=@random={'trusted.', 'trusted.overlay.nlink\x00'}) 1.351152838s ago: executing program 1 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000002400078008000100010000000c00030000100000000000000c0004"], 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRES64=r2], 0x68}, 0x1, 0x0, 0x0, 0x58004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCXONC(r3, 0x40045436, 0x3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x34}, @fd={0x66642a85, 0x0, r6}, @flat=@handle={0x73682a85, 0x0, 0x1}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000240)={@remote, @empty, 0x1d, 0x17}}) ioctl$GIO_FONT(r6, 0x4b60, &(0x7f0000000740)=""/109) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) sendto(0xffffffffffffffff, &(0x7f00000002c0)="cde5e79eab350f4b29c251db8a37a78d491a4cac790adf23d02cfd5c849ae2eb8b19801d361e4602cad3574348283128b0b2f9e917d25e9beb8de11375577aa9d06a58c333f3ea416421a80a231eb00db542341dc685247edb88aeaed358d9fc0dbcf1117a54c12c0d17612d1f9b54206b9714282d08115368b40e5b39a87a7e4ac185afbead16648ad16e60d9c4d3aad77c3c90368fc501e31233a847a798f4074217dd92cdc3c156433b4f7325c411a93b7202b49142a121e0a5e522908af12fe8f05fc6013f335bbb939d4b3c3e704e57012ffdb04a3c39e79060b29067bb984bfd7429528eea4d9dbf70138ce68e95f5362c820e5309393c8d7ad3f70ad7a7", 0x101, 0x8000, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1b9) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r9, 0xc0104d08, &(0x7f0000002480)) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r8], 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c001400", @ANYRES16=r1, @ANYBLOB="000228bd7000fedbdf250500000044000980080002000900000008000200030000000800010001000000080002005b5400000800010000fc3f00080002002c3a00000800020006000000080001000d0000001400038008000100c50200000800010007000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) openat$incfs(r7, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) syz_clone(0x10001400, &(0x7f0000000440)="aa26e9b2a8461596c3c3c22c9219aa6914010db5eaecf33c5c176c4a09a2b50ba75b0f38a9e0d33002ccf6918fe90b09c5bee13fedb2054b76642552280e8f69a4881d644d93cf6397", 0x49, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="f08d1a955aeb89443ae35916da4dfd4ecadf89436222badcf33bb41bfae433426b30b7dd8154236925e8ef25e86a23") 1.338689309s ago: executing program 1 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bda5, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xe0000000, 0x8, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000081) 1.318568939s ago: executing program 1 (id=92): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000003200)=ANY=[@ANYBLOB="1400000010"], 0x28}}, 0x4000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 1.25672135s ago: executing program 3 (id=93): syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a"], 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34000000000000000000000007000040441d"], 0x38}}], 0x1, 0x46000) 1.24767168s ago: executing program 2 (id=94): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x49, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000180)={0x1, 0xe, 0x0, 0x100000000000005, 0xf039, 0xffff, 0xfffffffffffffffe, 0xc000}, &(0x7f00000000c0)={0xc0, 0x7, 0xcd, 0x1000, 0x5, 0x1000000000000001, 0x7f, 0x800}, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f0000000040)={0x0}) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) 1.196436102s ago: executing program 2 (id=95): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r1], 0x10) (rerun: 64) 884.284169ms ago: executing program 0 (id=96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000001f00)=0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)={@void, @void, @eth={@broadcast, @random="2d255977719b", @val={@val={0x88a8, 0x2, 0x1, 0x1}}, {@llc={0x4, {@llc={0xaa, 0xf0, '>', "c2"}}}}}}, 0x1a) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x4, &(0x7f0000000140)=[{0x2, 0x7, 0xb, 0x1ff}, {0x10, 0x95, 0x0, 0x6b}, {0x0, 0xe, 0x6, 0x5}, {0x524, 0x5, 0x6, 0x6}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="26653e660f3839feb8d5000f00d0baf80c66b80c357f8066efbafc0ced66b92c0b00000f320f01ca66b96a0b00000f320f011fda850000f30fb8759e650f01c4", 0x40}], 0x1, 0x45, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r8 = socket$inet(0x2, 0x2, 0x1) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffeffffffff) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000380)=0xffffffff, 0x4) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000003c0)={{0x2000, 0x54000, 0x8, 0x1, 0x80, 0xa, 0x4, 0x8, 0x5, 0x7, 0x5}, {0x0, 0xa000, 0xc, 0x0, 0x3, 0x8, 0x3, 0x8, 0x9, 0x2, 0x10, 0xd}, {0x9000, 0xb000, 0x0, 0x84, 0x1, 0x7, 0x7, 0x8, 0xdb, 0x9}, {0x5000, 0xf000, 0x9, 0x1, 0x3, 0xea, 0x7f, 0x46, 0x8, 0x2, 0xf7, 0xff}, {0x10000, 0xffffffff, 0xb, 0x0, 0x0, 0x81, 0x8, 0xae, 0x8, 0xc2, 0x6f, 0x7}, {0x7000, 0xffff2ffe, 0xa, 0x6, 0x3, 0x6, 0x6, 0x9, 0x7, 0xf2, 0x4, 0x4}, {0x41000, 0xa000, 0xe, 0x2, 0x81, 0x6, 0x2, 0xaa, 0x8, 0x4, 0x8, 0x86}, {0x80a0000, 0xd000, 0xa, 0xf, 0x2, 0x80, 0xff, 0x4, 0xc0, 0x0, 0xa, 0x10}, {0xdddd1000, 0x2}, {0x6000, 0x1}, 0x20040002, 0x0, 0x4, 0x200, 0x4, 0x801, 0x40000, [0x9, 0x4d, 0x6, 0xf6a]}) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) ioprio_get$pid(0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 834.92587ms ago: executing program 2 (id=97): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001e00010025bd7000fbdbdf251a0000009b05a331b5008449"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000140)=0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x20000401) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001300010002000000f6dbdf2508000000030000001000b1800c005b80080028"], 0x28}], 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) 818.513531ms ago: executing program 2 (id=98): unshare(0x64000600) unshare(0x4000000) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/vlan/vlan1\x00') socket$inet6(0xa, 0x1, 0x3) r1 = socket(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0xffff, 0xffff, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x2b}, @in6=@mcast1, {0x5e, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) unshare(0x10040800) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mmap(&(0x7f00001fb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, 0x0, 0x0) readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42) 740.377963ms ago: executing program 3 (id=99): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f0000000680)={0x40, 0x10, 0x1, "ec"}, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_usb_connect$midi(0x0, 0x91, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0xf, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, [@midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x7, 0x1, [{0x1, 0x8}], 0xef}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}], [{{0x9, 0x5, 0xf, 0x0, 0x440, 0x5, 0x7, 0xa6, {0x7, 0x25, 0x1, 0x3, "f14e4e"}}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0xfa, 0x3, 0x2, {0x12, 0x25, 0x1, 0xe, "16e8cd3808f835cee5d3b169cbe4"}}}, {{0x9, 0x5, 0xd991f14849209397, 0x0, 0x200, 0x2, 0x9, 0xa, {0x12, 0x25, 0x1, 0xe, "9468e950ab78aabd829c95fe22b5"}}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x6, 0x5, 0x57, {0x7, 0x25, 0x1, 0x3, "e4720e"}}}]}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x250, 0x8, 0x7f, 0xd, 0x10, 0x3}, 0x62, &(0x7f00000004c0)={0x5, 0xf, 0x62, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x3, 0xf, 0x0, [0xcf]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x9, 0x9, 0x1ff}, @generic={0x3c, 0x10, 0x19, "175ca97b8c020692798f943684ffc910f4674df2f65f644b7d526eebd82e64b991994d911af431ea1487da2c191f3822e917aeba88e2d4fed0"}]}, 0x2, [{0x6f, &(0x7f00000005c0)=@string={0x6f, 0x3, "508d74d1783ff2867030e7a30d9fe09af220a8b24e0fbfeb17af851c576ccbc07defe78b952e4896df4d1e1f7bbddc5baeabbbf94ec176b50f427d42216fb10effcc94b71c2c626a7e964e48349db76e5b47200a04c925e8f2d8dd77afafbbafa606f5e4a3f9947e5b2dd9585e"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_control_io$lan78xx(r1, &(0x7f0000000800)={0x14, &(0x7f0000000700)={0x20, 0x0, 0x7, {0x7, 0x3b, "3d39dbf45a"}}, &(0x7f0000000740)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "2ec2f9f06f644e3d5c47a7b28511b9d247586c7a9a4c59dea9b9e5ad81b521a1086226cd344feaa85a661caa9cd0c1d12291ea60db997f006a8e153c2aefa1e2f551d666c0826cfd58dfe50c0a2668b9be4480b47f67ac3f7064b05989d8856c5a1ebf43d2afef6c3f3af2bf4c538d90a1b764c2d5172921c21022c6444b641217e2cd9bc908632f74c578"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000840)={0x40, 0x1, 0x7c, "f64cd4ba3dfef92d7f28b8dc2b7787b1311aff4b99e6e3a886e684a82676208ddf184ee1280b998affe7809ff4ad4875f0f8dd1e2cba55f13ddd412b95558485763c1f9feba3a3f4cd483c87a405ebdfacd18cf6829d8fbb38a3eb0a7496fd0248e95062ad48589d8b07a05168f0be325e3127286bf7454fa6138e1e"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000980)={0xc0, 0xa1, 0x4, 0x3ff}, &(0x7f00000009c0)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000a00)={0xc0, 0xa2, 0x2f, "86fddc63569c36c4a2cbed15b23e9fa836d92328c93df652f0712f1600055c2d8244ec3a6463a1d3906efcd0e63ea8"}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000d40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0']) syz_usb_connect$uac1(0x5, 0xcf, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7f, 0x6, 0x2, 0x8, 0x20}, 0xc, &(0x7f0000000380)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x9, 0xf, 0xfff9}]}}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) 740.054732ms ago: executing program 2 (id=100): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000540)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB=','], 0x31) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) openat(r3, &(0x7f00000002c0)='./sys\x00', 0x40000, 0x22) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x1f) stat(&(0x7f0000000180)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./sys/bus/platform/drivers/dummy_udc/unbind/file0\x00', &(0x7f00000000c0)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', &(0x7f0000000140), 0x2, &(0x7f0000000440)={'trans=unix,', {[{@loose}, {@access_client}, {@posixacl}, {@cache_loose}, {@mmap}, {@access_uid={'access', 0x3d, r6}}], [{@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, 'sysfs\x00'}}, {@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x38, 0x39, 0x64, 0x63, 0x34, 0x35, 0x39], 0x2d, [0x65, 0x34, 0x33, 0x33], 0x2d, [0x32, 0x62, 0x65, 0x66], 0x2d, [0x5d, 0x36, 0x38, 0x37], 0x2d, [0x30, 0x62, 0x61, 0x35, 0x65, 0x30, 0x39, 0x33]}}}, {@obj_type={'obj_type', 0x3d, '/\x80*]-:$\\.&'}}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, '(]'}}]}}) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000001c0)=@sr0, r6, &(0x7f0000000340)) write(r4, &(0x7f0000000400)='dummy_udc.0', 0xb) 738.814282ms ago: executing program 0 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x5}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@noxattr}, {@access_user}, {@cache_none}]}}) 737.552262ms ago: executing program 0 (id=102): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) readv(r0, &(0x7f0000002980)=[{&(0x7f0000000000)=""/20, 0x14}], 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x8c43, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) 723.681013ms ago: executing program 0 (id=103): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01000000000000feff0006241a00000c0905810300020000000904010000020d00000904010102020d00000905820200020000400905030220"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3b05, &(0x7f0000000140)={0x0, 0xfffffffe, 0x13580, 0x1, 0xc4}, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x800, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 244.821284ms ago: executing program 3 (id=104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x13) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, 'P~YD\bsYj', "3ee94e174080e11d7fbccba92b734ece625d7af78cd9ed847bb4d732bd8420b0", "f4481f22", "a7859bbe3366564c"}, 0x38) (async) writev(r0, &(0x7f0000004800), 0x0) 573.44µs ago: executing program 3 (id=105): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000440)={{0x2, 0x4e23, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2, {0x2, 0x4e20, @remote}, 'wg0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffefd) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0xa12, 0x0, 0x600000000000}, {0x614, 0x0, 0x45}]}) 0s ago: executing program 3 (id=106): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setregid(0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0xfffffffffffffc01, 0x0) tee(r2, r5, 0x60000000000, 0x0) close(r4) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000901b4550182185f565865db79dab3c59da13"], 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 29.073690][ T36] audit: type=1400 audit(1785589643.080:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.077202][ T286] cgroup: Unknown subsys name 'net' [ 29.096584][ T36] audit: type=1400 audit(1785589643.080:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.123867][ T36] audit: type=1400 audit(1785589643.110:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.124540][ T286] cgroup: Unknown subsys name 'devices' [ 29.247291][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.252920][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.347874][ T36] audit: type=1400 audit(1785589643.360:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.371163][ T36] audit: type=1400 audit(1785589643.360:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.395918][ T36] audit: type=1400 audit(1785589643.360:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.441909][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.451144][ T36] audit: type=1400 audit(1785589643.460:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 29.477585][ T36] audit: type=1400 audit(1785589643.460:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.511905][ T36] audit: type=1400 audit(1785589643.520:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.537544][ T36] audit: type=1400 audit(1785589643.520:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.538212][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.950672][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.957961][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.965084][ T293] bridge_slave_0: entered allmulticast mode [ 30.971457][ T293] bridge_slave_0: entered promiscuous mode [ 30.978043][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.985135][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.992365][ T293] bridge_slave_1: entered allmulticast mode [ 30.998740][ T293] bridge_slave_1: entered promiscuous mode [ 31.030064][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.037158][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.044263][ T294] bridge_slave_0: entered allmulticast mode [ 31.050652][ T294] bridge_slave_0: entered promiscuous mode [ 31.066964][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.074029][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.081156][ T296] bridge_slave_0: entered allmulticast mode [ 31.087423][ T296] bridge_slave_0: entered promiscuous mode [ 31.093657][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.100769][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.107927][ T294] bridge_slave_1: entered allmulticast mode [ 31.114178][ T294] bridge_slave_1: entered promiscuous mode [ 31.126475][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.133535][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.140796][ T295] bridge_slave_0: entered allmulticast mode [ 31.147103][ T295] bridge_slave_0: entered promiscuous mode [ 31.153329][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.160399][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.167502][ T296] bridge_slave_1: entered allmulticast mode [ 31.173776][ T296] bridge_slave_1: entered promiscuous mode [ 31.189125][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.196409][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.203513][ T295] bridge_slave_1: entered allmulticast mode [ 31.209824][ T295] bridge_slave_1: entered promiscuous mode [ 31.329678][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.336769][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.344094][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.351147][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.405226][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.412295][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.419608][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.426684][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.439809][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.447145][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.454375][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.462377][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.477350][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.484408][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.502354][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.509424][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.545699][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.552835][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.564582][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.571736][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.606268][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.613306][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.621230][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.628284][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.640615][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.647684][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.662945][ T293] veth0_vlan: entered promiscuous mode [ 31.671452][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.678525][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.702329][ T295] veth0_vlan: entered promiscuous mode [ 31.724757][ T293] veth1_macvtap: entered promiscuous mode [ 31.735374][ T295] veth1_macvtap: entered promiscuous mode [ 31.759430][ T294] veth0_vlan: entered promiscuous mode [ 31.773749][ T296] veth0_vlan: entered promiscuous mode [ 31.795537][ T294] veth1_macvtap: entered promiscuous mode [ 31.811696][ T296] veth1_macvtap: entered promiscuous mode [ 31.816831][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.914326][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.959579][ T322] kvm: kvm [321]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 32.126867][ T344] fuse: Bad value for 'fd' [ 32.143741][ T346] ======================================================= [ 32.143741][ T346] WARNING: The mand mount option has been deprecated and [ 32.143741][ T346] and is ignored by this kernel. Remove the mand [ 32.143741][ T346] option from the mount to silence this warning. [ 32.143741][ T346] ======================================================= [ 32.435471][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.584876][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 32.592162][ T310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 32.601787][ T310] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 32.611578][ T310] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 32.621303][ T310] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 32.631223][ T310] usb 3-1: config 1 interface 0 has no altsetting 0 [ 32.638245][ T310] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 32.647362][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.658411][ T310] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 32.862385][ T310] usb 3-1: USB disconnect, device number 2 [ 32.877081][ T359] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=359 comm=syz.3.14 [ 32.891747][ T359] mmap: syz.3.14 (359) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.939782][ T364] capability: warning: `syz.3.16' uses deprecated v2 capabilities in a way that may be insecure [ 33.174825][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.224833][ T365] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 33.325048][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 33.331728][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.341977][ T10] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 33.351103][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.359236][ T10] usb 2-1: Product: syz [ 33.363419][ T10] usb 2-1: Manufacturer: syz [ 33.368324][ T10] usb 2-1: SerialNumber: syz [ 33.377004][ T10] usb 2-1: unit 4 not found! [ 33.381653][ T10] usb 2-1: unit 0 not found! [ 33.390557][ T365] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.401093][ T365] usb 1-1: not running at top speed; connect to a high speed hub [ 33.410326][ T365] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.422651][ T365] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 33.432235][ T365] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 33.441046][ T365] usb 1-1: Product: syz [ 33.445582][ T365] usb 1-1: Manufacturer: syz [ 33.450220][ T365] usb 1-1: SerialNumber: syz [ 33.456541][ T365] usb 1-1: config 0 descriptor?? [ 33.644850][ T66] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.666371][ T365] usb 1-1: USB disconnect, device number 2 [ 33.778094][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 33.788040][ T10] usb 2-1: unit 4 not found! [ 33.792649][ T10] usb 2-1: unit 0 not found! [ 33.794898][ T66] usb 3-1: device descriptor read/64, error -71 [ 33.804852][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.805024][ T10] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 33.822640][ T10] usb 2-1: unit 4 not found! [ 33.827667][ T10] usb 2-1: unit 0 not found! [ 33.837306][ T10] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 33.848075][ T10] usb 2-1: USB disconnect, device number 2 [ 33.861997][ T379] udevd[379]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.965934][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.977090][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.986905][ T311] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 33.996035][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.004803][ T311] usb 4-1: config 0 descriptor?? [ 34.034955][ T66] usb 3-1: device descriptor read/64, error -71 [ 34.219039][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 34.219075][ T36] audit: type=1400 audit(1785589648.230:157): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 34.274821][ T66] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.295098][ T36] audit: type=1400 audit(1785589648.310:158): avc: denied { unmount } for pid=392 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.350749][ T36] audit: type=1400 audit(1785589648.360:159): avc: denied { create } for pid=395 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.376333][ T36] audit: type=1400 audit(1785589648.360:160): avc: denied { connect } for pid=395 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.402814][ T36] audit: type=1400 audit(1785589648.410:161): avc: denied { create } for pid=400 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.425609][ T36] audit: type=1400 audit(1785589648.420:162): avc: denied { ioctl } for pid=400 comm="syz.1.25" path="socket:[3997]" dev="sockfs" ino=3997 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.450075][ T66] usb 3-1: device descriptor read/64, error -71 [ 34.457717][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 34.465108][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 34.471948][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 34.478859][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 34.485779][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 34.492674][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 34.499559][ T311] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 34.512653][ T311] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 34.536771][ T36] audit: type=1400 audit(1785589648.550:163): avc: denied { name_bind } for pid=402 comm="syz.1.26" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.558351][ T36] audit: type=1400 audit(1785589648.550:164): avc: denied { node_bind } for pid=402 comm="syz.1.26" saddr=::ffff:100.1.1.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 34.694807][ T66] usb 3-1: device descriptor read/64, error -71 [ 34.804935][ T66] usb usb3-port1: attempt power cycle [ 34.884831][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.034806][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 35.041345][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 35.050683][ T10] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 35.060432][ T10] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 35.070206][ T10] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 35.080012][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 35.086688][ T10] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 35.095872][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.107044][ T10] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 35.135439][ T410] pim6reg1: entered promiscuous mode [ 35.140821][ T410] pim6reg1: entered allmulticast mode [ 35.154814][ T66] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.175878][ T66] usb 3-1: device descriptor read/8, error -71 [ 35.199672][ T36] audit: type=1400 audit(1785589649.210:165): avc: denied { write } for pid=411 comm="syz.0.29" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 35.305919][ T66] usb 3-1: device descriptor read/8, error -71 [ 35.317336][ T10] usb 2-1: USB disconnect, device number 3 [ 35.474835][ T45] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 35.544869][ T66] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.565909][ T66] usb 3-1: device descriptor read/8, error -71 [ 35.626015][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.636371][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.646842][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.656000][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.664023][ T45] usb 1-1: Product: syz [ 35.668474][ T45] usb 1-1: Manufacturer: syz [ 35.673172][ T45] usb 1-1: SerialNumber: syz [ 35.695903][ T66] usb 3-1: device descriptor read/8, error -71 [ 35.804966][ T66] usb usb3-port1: unable to enumerate USB device [ 35.838810][ T36] audit: type=1400 audit(1785589649.850:166): avc: denied { write } for pid=415 comm="syz.1.31" path="socket:[4496]" dev="sockfs" ino=4496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.877951][ T420] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 35.883640][ T414] overlay: Unknown parameter '$' [ 35.895016][ T414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=414 comm=syz.0.30 [ 35.895831][ T377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.916386][ T45] usb 1-1: 0:2 : does not exist [ 35.923690][ T45] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 35.934868][ T377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.952018][ T45] usb 1-1: USB disconnect, device number 3 [ 35.965449][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.070068][ T424] kvm: MWAIT instruction emulated as NOP! [ 36.149974][ T311] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 36.157498][ T311] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 36.164693][ T311] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71 [ 36.174671][ T311] usb 4-1: USB disconnect, device number 2 [ 36.554171][ T443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=443 comm=syz.2.38 [ 36.915116][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.984831][ T311] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.044852][ T365] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.065868][ T310] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 37.074186][ T310] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 37.083400][ T310] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 37.084931][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.095468][ T310] usb 4-1: config 220 has no interface number 2 [ 37.107993][ T310] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 37.121271][ T310] usb 4-1: config 220 interface 0 has no altsetting 0 [ 37.128270][ T310] usb 4-1: config 220 interface 76 has no altsetting 0 [ 37.134976][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 37.135263][ T310] usb 4-1: config 220 interface 1 has no altsetting 0 [ 37.143161][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 37.149002][ T310] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 37.157169][ T311] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 37.165377][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.176701][ T311] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 37.182985][ T310] usb 4-1: Product: syz [ 37.193466][ T311] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 37.200782][ T310] usb 4-1: Manufacturer: syz [ 37.208351][ T311] usb 3-1: config 1 interface 0 has no altsetting 0 [ 37.212072][ T310] usb 4-1: SerialNumber: syz [ 37.219368][ T311] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 37.227058][ T365] usb 1-1: config 1 interface 0 has no altsetting 0 [ 37.233238][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.248836][ T365] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 37.256408][ T311] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 37.258975][ T365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.267073][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.275621][ T365] usb 1-1: Product: syz [ 37.285519][ T365] usb 1-1: Manufacturer: syz [ 37.286291][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.290197][ T365] usb 1-1: SerialNumber: syz [ 37.308084][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.319085][ T45] usb 2-1: string descriptor 0 read error: -22 [ 37.327374][ T45] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 37.336575][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.347352][ T45] usb 2-1: selecting invalid altsetting 1 [ 37.353438][ T45] usb 2-1: unit 3 not found! [ 37.446997][ T310] usb 4-1: selecting invalid altsetting 0 [ 37.453150][ T310] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 37.459804][ T310] usb 4-1: No valid video chain found. [ 37.469028][ T311] usb 3-1: USB disconnect, device number 7 [ 37.478320][ T310] usb 4-1: USB disconnect, device number 3 [ 37.546927][ T45] usb 2-1: cannot request logical cluster ID: 0 (err: -5) [ 37.554122][ T45] usb 2-1: invalid MIXER UNIT descriptor 6 [ 37.562639][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 37.569499][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.719529][ T453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.728313][ T453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.737971][ T311] usb 1-1: USB disconnect, device number 4 [ 37.753278][ T45] usb 2-1: USB disconnect, device number 4 [ 38.099792][ T471] 9pnet_fd: Insufficient options for proto=fd [ 38.182036][ T475] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.194919][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.345695][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 38.389816][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.399763][ T45] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 38.408885][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.417000][ T45] usb 4-1: Product: syz [ 38.421870][ T45] usb 4-1: Manufacturer: syz [ 38.426722][ T45] usb 4-1: SerialNumber: syz [ 38.534993][ T495] Zero length message leads to an empty skb [ 38.554814][ T311] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 38.564825][ T365] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.634041][ T45] usb 4-1: Fast Track Pro switching to config #2 [ 38.642462][ T45] usb 4-1: USB disconnect, device number 4 [ 38.684838][ T311] usb 2-1: device descriptor read/64, error -71 [ 38.724836][ T365] usb 3-1: Using ep0 maxpacket: 16 [ 38.731360][ T365] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 38.740622][ T365] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 38.750458][ T365] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 38.760200][ T365] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 38.769983][ T365] usb 3-1: config 1 interface 0 has no altsetting 0 [ 38.776643][ T365] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 38.785734][ T365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.797882][ T365] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 38.924843][ T311] usb 2-1: device descriptor read/64, error -71 [ 38.997845][ T365] usb 3-1: USB disconnect, device number 8 [ 39.151628][ T508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.58'. [ 39.164903][ T311] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 39.266019][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 39.266058][ T36] audit: type=1400 audit(1785589653.280:207): avc: denied { mount } for pid=507 comm="syz.3.58" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.294873][ T311] usb 2-1: device descriptor read/64, error -71 [ 39.301640][ T36] audit: type=1400 audit(1785589653.310:208): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.336336][ T36] audit: type=1400 audit(1785589653.350:209): avc: denied { setopt } for pid=511 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.535126][ T311] usb 2-1: device descriptor read/64, error -71 [ 39.553183][ T36] audit: type=1400 audit(1785589653.560:210): avc: denied { create } for pid=516 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 39.647794][ T311] usb usb2-port1: attempt power cycle [ 39.706737][ T36] audit: type=1400 audit(1785589653.720:211): avc: denied { append } for pid=520 comm="syz.2.63" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.712258][ T521] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 39.801299][ T36] audit: type=1400 audit(1785589653.810:212): avc: denied { append } for pid=524 comm="syz.2.64" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.824245][ T36] audit: type=1400 audit(1785589653.810:213): avc: denied { open } for pid=524 comm="syz.2.64" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.853164][ T36] audit: type=1400 audit(1785589653.830:214): avc: denied { ioctl } for pid=524 comm="syz.2.64" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.952939][ T36] audit: type=1400 audit(1785589653.960:215): avc: denied { create } for pid=532 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 39.980395][ T36] audit: type=1400 audit(1785589653.960:216): avc: denied { sys_admin } for pid=532 comm="syz.3.67" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 40.001451][ T311] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 40.025949][ T311] usb 2-1: device descriptor read/8, error -71 [ 40.176036][ T311] usb 2-1: device descriptor read/8, error -71 [ 40.264822][ T365] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.394823][ T365] usb 4-1: device descriptor read/64, error -71 [ 40.414803][ T311] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 40.435910][ T311] usb 2-1: device descriptor read/8, error -71 [ 40.566247][ T311] usb 2-1: device descriptor read/8, error -71 [ 40.644894][ T365] usb 4-1: device descriptor read/64, error -71 [ 40.674972][ T311] usb usb2-port1: unable to enumerate USB device [ 40.884822][ T365] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.014837][ T365] usb 4-1: device descriptor read/64, error -71 [ 41.044851][ T311] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 41.194815][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 41.201224][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 41.210455][ T311] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 41.220189][ T311] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 41.229906][ T311] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 41.239834][ T311] usb 3-1: config 1 interface 0 has no altsetting 0 [ 41.246514][ T311] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 41.255609][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.264840][ T365] usb 4-1: device descriptor read/64, error -71 [ 41.271902][ T311] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 41.337502][ T332] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.374902][ T365] usb usb4-port1: attempt power cycle [ 41.467408][ T311] usb 3-1: USB disconnect, device number 9 [ 41.669309][ T550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.714889][ T365] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 41.735838][ T365] usb 4-1: device descriptor read/8, error -71 [ 41.865821][ T365] usb 4-1: device descriptor read/8, error -71 [ 41.914885][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.991625][ T553] 9pnet_fd: Insufficient options for proto=fd [ 42.015927][ T556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=512 sclass=netlink_tcpdiag_socket pid=556 comm=syz.2.74 [ 42.064831][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 42.071350][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.081225][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 42.090454][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.098526][ T10] usb 1-1: Product: syz [ 42.102704][ T10] usb 1-1: Manufacturer: syz [ 42.107454][ T10] usb 1-1: SerialNumber: syz [ 42.112448][ T365] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 42.135892][ T365] usb 4-1: device descriptor read/8, error -71 [ 42.198338][ T560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=560 comm=syz.2.74 [ 42.266187][ T365] usb 4-1: device descriptor read/8, error -71 [ 42.323494][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 42.331250][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 42.344132][ T10] usb 1-1: USB disconnect, device number 5 [ 42.374899][ T365] usb usb4-port1: unable to enumerate USB device [ 42.864202][ T562] random: crng reseeded on system resumption [ 43.164857][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 43.174816][ T311] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 43.316117][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 43.324592][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 43.327532][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 43.336052][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 43.344607][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.354998][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.364863][ T311] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 43.370764][ T547] Bluetooth: hci0: command 0x1003 tx timeout [ 43.381867][ T311] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 43.400988][ T311] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 43.410241][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 43.420496][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 43.429249][ T311] usb 3-1: Product: syz [ 43.432175][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.433950][ T311] usb 3-1: Manufacturer: syz [ 43.447196][ T311] usb 3-1: SerialNumber: syz [ 43.448140][ T10] usb 1-1: Product: syz [ 43.456060][ T365] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 43.464159][ T10] usb 1-1: Manufacturer: syz [ 43.468956][ T10] usb 1-1: SerialNumber: syz [ 43.615859][ T365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.626852][ T365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.636651][ T365] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 43.645769][ T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.654822][ T365] usb 4-1: config 0 descriptor?? [ 43.676783][ T10] usb 1-1: unit 9 not found! [ 43.692779][ T10] usb 1-1: USB disconnect, device number 6 [ 43.864245][ T365] usbhid 4-1:0.0: can't add hid device: -71 [ 43.870448][ T365] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 43.879473][ T365] usb 4-1: USB disconnect, device number 9 [ 44.305315][ T573] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 44.434830][ T380] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 44.455868][ T573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.468210][ T573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.478132][ T573] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 44.487560][ T573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.496452][ T573] usb 4-1: config 0 descriptor?? [ 44.584819][ T380] usb 1-1: Using ep0 maxpacket: 16 [ 44.591014][ T380] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 44.600085][ T380] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 44.609799][ T380] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 44.619505][ T380] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 44.629515][ T380] usb 1-1: config 1 interface 0 has no altsetting 0 [ 44.636375][ T380] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 44.645494][ T380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.655627][ T380] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 44.694813][ T31] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 44.846220][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.854325][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 44.864956][ T365] usb 1-1: USB disconnect, device number 7 [ 44.864997][ T31] usb 2-1: config 9 has an invalid interface number: 142 but max is 0 [ 44.879782][ T31] usb 2-1: config 9 has no interface number 0 [ 44.886143][ T31] usb 2-1: config 9 interface 142 altsetting 17 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 44.899984][ T31] usb 2-1: config 9 interface 142 has no altsetting 0 [ 44.908425][ T31] usb 2-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 44.917695][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.925749][ T31] usb 2-1: Product: syz [ 44.929957][ T31] usb 2-1: Manufacturer: syz [ 44.934564][ T31] usb 2-1: SerialNumber: syz [ 45.012974][ T573] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 45.025910][ T573] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input5 [ 45.110199][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 45.110219][ T36] audit: type=1400 audit(1785589659.120:234): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=482 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.136648][ T573] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 45.142535][ T36] audit: type=1400 audit(1785589659.120:235): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=482 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.176599][ T586] 9pnet_fd: Insufficient options for proto=fd [ 45.187657][ T36] audit: type=1400 audit(1785589659.120:236): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=482 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.200746][ T31] usb-storage 2-1:9.142: USB Mass Storage device detected [ 45.234331][ T573] usb 4-1: USB disconnect, device number 10 [ 45.244401][ T31] usb-storage 2-1:9.142: Quirks match for vid 050d pid 0115: 4 [ 45.258290][ T31] scsi host1: usb-storage 2-1:9.142 [ 45.268055][ T31] usb 2-1: USB disconnect, device number 9 [ 45.394576][ T36] audit: type=1400 audit(1785589659.400:237): avc: denied { ioctl } for pid=595 comm="syz.0.84" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.420287][ T36] audit: type=1400 audit(1785589659.430:238): avc: denied { write } for pid=595 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.440849][ T36] audit: type=1400 audit(1785589659.440:239): avc: denied { getopt } for pid=595 comm="syz.0.84" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.480977][ T36] audit: type=1400 audit(1785589659.490:240): avc: denied { write } for pid=600 comm="syz.0.85" name="igmp6" dev="proc" ino=4026532405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 45.561814][ T604] capability: warning: `syz.0.86' uses 32-bit capabilities (legacy support in use) [ 45.598334][ T36] audit: type=1400 audit(1785589659.610:241): avc: denied { mount } for pid=607 comm="syz.0.87" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.636819][ T36] audit: type=1400 audit(1785589659.650:242): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.736160][ T619] tipc: Started in network mode [ 45.741143][ T619] tipc: Node identity 001, cluster identity 1 [ 45.750228][ T36] audit: type=1400 audit(1785589659.760:243): avc: denied { read } for pid=618 comm="syz.1.90" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.774442][ T619] rust_binder: 618:619 transaction to 0 failed: ENOENT [ 45.897820][ T311] usb 3-1: USB disconnect, device number 10 [ 45.937094][ T630] fuse: Unknown parameter '' [ 45.941918][ T630] fuse: Unknown parameter '' [ 45.946808][ T630] fuse: Unknown parameter '' [ 45.951590][ T630] fuse: Unknown parameter '' [ 45.956407][ T630] fuse: Unknown parameter '' [ 45.961244][ T630] fuse: Unknown parameter '' [ 45.966129][ T630] fuse: Unknown parameter '' [ 45.970883][ T630] fuse: Unknown parameter '' [ 45.975734][ T630] fuse: Unknown parameter '' [ 45.980479][ T630] fuse: Unknown parameter '' [ 45.985280][ T630] fuse: Unknown parameter '' [ 45.990102][ T630] fuse: Unknown parameter '' [ 45.994900][ T630] fuse: Unknown parameter '' [ 46.000333][ T630] fuse: Unknown parameter '' [ 46.005237][ T630] fuse: Unknown parameter '' [ 46.009996][ T630] fuse: Unknown parameter '' [ 46.014925][ T630] fuse: Unknown parameter '' [ 46.019705][ T630] fuse: Unknown parameter '' [ 46.024423][ T630] fuse: Unknown parameter '' [ 46.029230][ T630] fuse: Unknown parameter '' [ 46.034012][ T630] fuse: Unknown parameter '' [ 46.038815][ T630] fuse: Unknown parameter '' [ 46.043566][ T630] fuse: Unknown parameter '' [ 46.048367][ T630] fuse: Unknown parameter '' [ 46.053119][ T630] fuse: Unknown parameter '' [ 46.057943][ T630] fuse: Unknown parameter '' [ 46.062726][ T630] fuse: Unknown parameter '' [ 46.067585][ T31] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 46.067914][ T630] fuse: Unknown parameter '' [ 46.080289][ T630] fuse: Unknown parameter '' [ 46.085289][ T630] fuse: Unknown parameter '' [ 46.090059][ T630] fuse: Unknown parameter '' [ 46.095099][ T630] fuse: Unknown parameter '' [ 46.099863][ T630] fuse: Unknown parameter '' [ 46.104606][ T630] fuse: Unknown parameter '' [ 46.109521][ T630] fuse: Unknown parameter '' [ 46.114471][ T630] fuse: Unknown parameter '' [ 46.119561][ T630] fuse: Unknown parameter '' [ 46.124336][ T630] fuse: Unknown parameter '' [ 46.129165][ T630] fuse: Unknown parameter '' [ 46.134107][ T630] fuse: Unknown parameter '' [ 46.138949][ T630] fuse: Unknown parameter '' [ 46.144238][ T630] fuse: Unknown parameter '' [ 46.149126][ T630] fuse: Unknown parameter '' [ 46.153996][ T630] fuse: Unknown parameter '' [ 46.158879][ T630] fuse: Unknown parameter '' [ 46.163726][ T630] fuse: Unknown parameter '' [ 46.168546][ T630] fuse: Unknown parameter '' [ 46.173338][ T630] fuse: Unknown parameter '' [ 46.178179][ T630] fuse: Unknown parameter '' [ 46.183094][ T630] fuse: Unknown parameter '' [ 46.194046][ T630] fuse: Unknown parameter '' [ 46.205006][ T630] fuse: Unknown parameter '' [ 46.209845][ T630] fuse: Unknown parameter '' [ 46.214664][ T630] fuse: Unknown parameter '' [ 46.214924][ T31] usb 2-1: device descriptor read/64, error -71 [ 46.219833][ T630] fuse: Unknown parameter '' [ 46.230742][ T630] fuse: Unknown parameter '' [ 46.235570][ T630] fuse: Unknown parameter '' [ 46.242589][ T630] fuse: Unknown parameter '' [ 46.247432][ T630] fuse: Unknown parameter '' [ 46.252252][ T630] fuse: Unknown parameter '' [ 46.257085][ T630] fuse: Unknown parameter '' [ 46.261918][ T630] fuse: Unknown parameter '' [ 46.266772][ T630] fuse: Unknown parameter '' [ 46.271591][ T630] fuse: Unknown parameter '' [ 46.276407][ T630] fuse: Unknown parameter '' [ 46.484923][ T31] usb 2-1: device descriptor read/64, error -71 [ 46.594835][ T573] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 46.664833][ T380] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.734968][ T31] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 46.745952][ T573] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 46.760573][ T573] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.770057][ T573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.778365][ T573] usb 3-1: SerialNumber: syz [ 46.825989][ T380] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.837157][ T380] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 46.848833][ T380] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.858232][ T380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.868117][ T31] usb 2-1: device descriptor read/64, error -71 [ 46.879168][ T380] usb 1-1: Product: syz [ 46.883401][ T380] usb 1-1: Manufacturer: syz [ 46.888396][ T380] usb 1-1: SerialNumber: syz [ 46.992180][ T642] 9pnet_fd: p9_fd_create_unix (642): problem connecting socket: ./sys/bus/platform/drivers/dummy_udc/unbind/file0: -20 [ 47.007536][ T380] cdc_ncm 1-1:1.0: bind() failure [ 47.017569][ T573] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 47.028488][ T380] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 47.037148][ T573] usb 3-1: USB disconnect, device number 11 [ 47.043179][ T380] cdc_ncm 1-1:1.1: bind() failure [ 47.052742][ T380] usb 1-1: USB disconnect, device number 8 [ 47.098239][ T649] ================================================================== [ 47.106397][ T649] BUG: KASAN: slab-use-after-free in string+0x20f/0x2b0 [ 47.113393][ T649] Read of size 1 at addr ffff888105fffde0 by task syz.0.103/649 [ 47.121044][ T649] [ 47.123489][ T649] CPU: 1 UID: 0 PID: 649 Comm: syz.0.103 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 47.123512][ T649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.123529][ T649] Call Trace: [ 47.123536][ T649] [ 47.123545][ T649] __dump_stack+0x21/0x30 [ 47.123574][ T649] dump_stack_lvl+0x140/0x1c0 [ 47.123598][ T649] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.123623][ T649] print_address_description+0x71/0x210 [ 47.123649][ T649] print_report+0x4a/0x70 [ 47.123672][ T649] kasan_report+0x162/0x1a0 [ 47.123694][ T649] ? string+0x20f/0x2b0 [ 47.123711][ T649] ? string+0x20f/0x2b0 [ 47.123727][ T649] __asan_report_load1_noabort+0x18/0x20 [ 47.123750][ T649] string+0x20f/0x2b0 [ 47.123766][ T649] vsnprintf+0xe65/0x1ad0 [ 47.123785][ T649] snprintf+0xe9/0x140 [ 47.123802][ T649] ? __cfi_snprintf+0x10/0x10 [ 47.123819][ T649] ? stack_trace_save+0xaa/0x100 [ 47.123839][ T649] ? dev_vprintk_emit+0x179/0x400 [ 47.123859][ T649] dev_vprintk_emit+0x313/0x400 [ 47.123878][ T649] ? __cfi_dev_vprintk_emit+0x10/0x10 [ 47.123897][ T649] ? kasan_save_alloc_info+0x3a/0x50 [ 47.123923][ T649] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.123947][ T649] dev_printk_emit+0xef/0x150 [ 47.123967][ T649] ? __cfi_dev_printk_emit+0x10/0x10 [ 47.123988][ T649] __dev_printk+0x17f/0x1b0 [ 47.124003][ T649] _dev_err+0x11f/0x180 [ 47.124052][ T649] ? __cfi__dev_err+0x10/0x10 [ 47.124077][ T649] ? usb_ep_enable+0x173/0x3c0 [ 47.124109][ T649] raw_ioctl+0x296d/0x37a0 [ 47.124142][ T649] ? __cfi_raw_ioctl+0x10/0x10 [ 47.124173][ T649] ? selinux_file_ioctl+0x732/0x1480 [ 47.124195][ T649] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 47.124217][ T649] ? hrtimer_nanosleep+0x265/0x340 [ 47.124251][ T649] ? do_futex+0x32a/0x510 [ 47.124291][ T649] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 47.124307][ T649] ? __cfi_do_futex+0x10/0x10 [ 47.124329][ T649] ? get_timespec64+0x11a/0x1b0 [ 47.124354][ T649] ? bpf_lsm_file_ioctl+0xd/0x20 [ 47.124376][ T649] ? security_file_ioctl+0x3e/0x110 [ 47.124401][ T649] ? __cfi_raw_ioctl+0x10/0x10 [ 47.124424][ T649] __se_sys_ioctl+0x132/0x1b0 [ 47.124471][ T649] __x64_sys_ioctl+0x7f/0xa0 [ 47.124500][ T649] x64_sys_call+0x1878/0x2ee0 [ 47.124522][ T649] do_syscall_64+0x57/0xf0 [ 47.124550][ T649] ? clear_bhb_loop+0x50/0xa0 [ 47.124573][ T649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.124595][ T649] RIP: 0033:0x7fe2b479dcab [ 47.124610][ T649] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 47.124624][ T649] RSP: 002b:00007fe2b55e5ef0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.124648][ T649] RAX: ffffffffffffffda RBX: 00007fe2b4b50320 RCX: 00007fe2b479dcab [ 47.124661][ T649] RDX: 00007fe2b4b5076c RSI: 0000000040095505 RDI: 0000000000000003 [ 47.124672][ T649] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001 [ 47.124682][ T649] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 47.124692][ T649] R13: 00007fe2b4b50950 R14: 0000000000000000 R15: 00007fe2b4b5076e [ 47.124706][ T649] [ 47.124712][ T649] [ 47.447175][ T649] Allocated by task 1: [ 47.451253][ T649] kasan_save_track+0x3e/0x80 [ 47.456040][ T649] kasan_save_alloc_info+0x3a/0x50 [ 47.461219][ T649] __kasan_kmalloc+0x96/0xb0 [ 47.465866][ T649] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 47.472309][ T649] kvasprintf+0xf1/0x260 [ 47.476585][ T649] kvasprintf_const+0xf6/0x250 [ 47.483036][ T649] kobject_set_name_vargs+0x65/0x120 [ 47.488524][ T649] dev_set_name+0xe3/0x140 [ 47.492950][ T649] usb_add_gadget+0x436/0x780 [ 47.497643][ T649] usb_add_gadget_udc+0x11e/0x160 [ 47.502670][ T649] dummy_udc_probe+0x6ea/0x7f0 [ 47.507443][ T649] platform_probe+0x17a/0x200 [ 47.512140][ T649] really_probe+0x2e1/0x8b0 [ 47.516757][ T649] __driver_probe_device+0x193/0x280 [ 47.522138][ T649] driver_probe_device+0x54/0x3f0 [ 47.527169][ T649] __device_attach_driver+0x2f1/0x4b0 [ 47.532551][ T649] bus_for_each_drv+0x264/0x300 [ 47.537844][ T649] __device_attach+0x2c4/0x3c0 [ 47.542618][ T649] device_initial_probe+0x1e/0x30 [ 47.547653][ T649] bus_probe_device+0x18b/0x270 [ 47.552509][ T649] device_add+0x7fd/0xbf0 [ 47.556862][ T649] platform_device_add+0x464/0x6c0 [ 47.562078][ T649] dummy_hcd_init+0xce2/0x1230 [ 47.566880][ T649] do_one_initcall+0x1e8/0x6a0 [ 47.571659][ T649] do_initcall_level+0x174/0x2e5 [ 47.576698][ T649] do_initcalls+0x7e/0x160 [ 47.581156][ T649] do_basic_setup+0x95/0xb0 [ 47.585710][ T649] kernel_init_freeable+0x2b1/0x400 [ 47.590932][ T649] kernel_init+0x21/0x1e0 [ 47.595385][ T649] ret_from_fork+0x67/0xa0 [ 47.599865][ T649] ret_from_fork_asm+0x1a/0x30 [ 47.604658][ T649] [ 47.607180][ T649] Freed by task 642: [ 47.611095][ T649] kasan_save_track+0x3e/0x80 [ 47.615783][ T649] kasan_save_free_info+0x44/0x50 [ 47.620856][ T649] __kasan_slab_free+0x5f/0x80 [ 47.625640][ T649] kfree+0x158/0x440 [ 47.629786][ T649] kfree_const+0x3d/0x50 [ 47.634074][ T649] kobject_put+0x21f/0x2a0 [ 47.638955][ T649] put_device+0x23/0x40 [ 47.643240][ T649] usb_del_gadget_udc+0x25/0x30 [ 47.648151][ T649] dummy_udc_remove+0x5c/0x70 [ 47.653287][ T649] platform_remove+0x7e/0xb0 [ 47.658013][ T649] device_release_driver_internal+0x4ad/0x830 [ 47.664294][ T649] device_driver_detach+0x3f/0x50 [ 47.669426][ T649] unbind_store+0x1ab/0x1f0 [ 47.674056][ T649] drv_attr_store+0x91/0xb0 [ 47.678577][ T649] sysfs_kf_write+0x141/0x160 [ 47.683266][ T649] kernfs_fop_write_iter+0x319/0x510 [ 47.688601][ T649] vfs_write+0x762/0xfd0 [ 47.692954][ T649] ksys_write+0x145/0x260 [ 47.697292][ T649] __x64_sys_write+0x7f/0x90 [ 47.701900][ T649] x64_sys_call+0x271c/0x2ee0 [ 47.706769][ T649] do_syscall_64+0x57/0xf0 [ 47.711466][ T649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.717470][ T649] [ 47.719790][ T649] The buggy address belongs to the object at ffff888105fffde0 [ 47.719790][ T649] which belongs to the cache kmalloc-16 of size 16 [ 47.734834][ T649] The buggy address is located 0 bytes inside of [ 47.734834][ T649] freed 16-byte region [ffff888105fffde0, ffff888105fffdf0) [ 47.748390][ T649] [ 47.750732][ T649] The buggy address belongs to the physical page: [ 47.757161][ T649] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105fff [ 47.766007][ T649] flags: 0x4000000000000000(zone=1) [ 47.771200][ T649] page_type: f5(slab) [ 47.775203][ T649] raw: 4000000000000000 ffff888100041640 ffffea000417ff80 dead000000000002 [ 47.783791][ T649] raw: 0000000000000000 0000000000800080 00000001f5000000 0000000000000000 [ 47.792366][ T649] page dumped because: kasan: bad access detected [ 47.798804][ T649] page_owner tracks the page as allocated [ 47.804515][ T649] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4237885863, free_ts 0 [ 47.823701][ T649] register_dummy_stack+0x99/0x110 [ 47.828838][ T649] init_page_owner+0x36/0x840 [ 47.833522][ T649] page_ext_init+0x3f8/0x44b [ 47.838118][ T649] mm_core_init+0x4b/0x7b [ 47.842453][ T649] page_owner free stack trace missing [ 47.847813][ T649] [ 47.850144][ T649] Memory state around the buggy address: [ 47.855773][ T649] ffff888105fffc80: 00 00 fc fc 00 07 fc fc 00 00 fc fc 00 04 fc fc [ 47.863856][ T649] ffff888105fffd00: 00 06 fc fc 00 00 fc fc 00 04 fc fc 00 04 fc fc [ 47.871918][ T649] >ffff888105fffd80: 00 01 fc fc 00 04 fc fc 00 05 fc fc fa fb fc fc [ 47.879973][ T649] ^ [ 47.887187][ T649] ffff888105fffe00: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 00 fc fc [ 47.895249][ T649] ffff888105fffe80: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 47.903309][ T649] ================================================================== [ 47.911363][ T649] Disabling lock debugging due to kernel taint [ 47.917507][ T649] gadget : fail, usb_ep_enable returned -108 [ 47.926184][ T31] usb 2-1: device descriptor read/64, error -71 [ 47.930300][ T649] gadget : fail, usb_ep_enable returned -108 [ 47.939964][ T649] gadget : fail, usb_ep_queue returned -108 [ 48.034918][ T31] usb usb2-port1: attempt power cycle [ 48.384853][ T31] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 48.406328][ T31] usb 2-1: device descriptor read/8, error -71 [ 48.536010][ T31] usb 2-1: device descriptor read/8, error -71 [ 48.774882][ T31] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 48.795956][ T31] usb 2-1: device descriptor read/8, error -71 [ 48.935364][ T31] usb 2-1: device descriptor read/8, error -71 [ 49.044888][ T31] usb usb2-port1: unable to enumerate USB device