last executing test programs: 4.368105335s ago: executing program 2 (id=55): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xb3ca, 0x4cc, 0xffff, 0x7f, 0x10, "0000faffffff00"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000206307012040000102030109026f00030109403f0904000000010100000a2401d2000a0002010209040100000102000009040101010102000009050109ff037808ba0725010804fc00090b0200000102000009040201010102000008240201fc030801072401080502100905820920"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 4.036357251s ago: executing program 3 (id=63): r0 = socket(0x10, 0x803, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0, 0x0, &(0x7f0000000340)=""/46, 0x2e}, 0x40000160) getsockopt(r0, 0xb, 0x4000000, &(0x7f0000000080)=""/191, &(0x7f0000000300)=0xbf) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.005593442s ago: executing program 3 (id=64): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)={0x8040, 0x0, 0x29}, 0x18) lsetxattr$security_selinux(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:gpg_agent_exec_t:s0\x00', 0x26, 0x3) r1 = openat(r0, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018", 0x5, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000) write$char_usb(r5, 0x0, 0x1a) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x5, 0x4) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000180)=0x9, 0x4) read$FUSE(r1, 0x0, 0x0) 2.599882242s ago: executing program 0 (id=70): sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, 0x0, &(0x7f0000000100)=0x60) write$tun(r2, &(0x7f00000002c0)={@val={0xa, 0x8848}, @void, @ipv6=@generic={0x2, 0x6, "1798ed", 0xbe, 0x62, 0x1, @private0, @local, {[@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2, 0xd}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}], "11210f4e61b528fb0e9c4ae8db5a509aecaf071cca858957ea04a5984398ee8e95a63e566ceeb836b487c613e4f91dae056d9be28e05bf54b6e9c17d58b071948e889133989449094deaa122fafcdf0399d6c13e63a9366874fff45de36cad565894829dcc1411e4d14930c7d0a301bd0a96bc5a2ffe1130871db15a0bcab21ce2eafe8a45a5093f1761dabbc903c239af53820c9c833897a5e61511616b"}}}, 0xea) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.483839037s ago: executing program 0 (id=74): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x0, 0xfc, r2}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0xd, 0x4) (async) r3 = inotify_init() (async) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) (async) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e) (async) close_range(r3, 0xffffffffffffffff, 0x0) 2.452465909s ago: executing program 3 (id=75): r0 = getpgrp(0xffffffffffffffff) setpgid(0xffffffffffffffff, r0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x68, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x4000) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="0f18de48b80b5c0000000000000f21d80f21f835400000400f23f866baf80cb860d7e5876766bafc0ced66ba2100b009ee42831bfe66baf80cb8b80c4f8fef66bafc0c66ed65460f78caf340d2757dc48135e81666baf80cb8acc12f8cef0f5ca766b800400f98cc", 0x68}], 0x1, 0x64, 0x0, 0x7) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000080)) (async, rerun: 64) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x1) fchdir(r8) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x8914, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='loginuid\x00') pwritev(r10, &(0x7f0000000180)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) r13 = ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r13, 0xb704, 0x0) 2.43047022s ago: executing program 1 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) (async, rerun: 32) landlock_restrict_self(r0, 0x0) (rerun: 32) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async, rerun: 32) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x3172, 0x0, 0x2}, 0x18, 0x0) (rerun: 32) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r1, 0x0) (async, rerun: 64) landlock_restrict_self(r1, 0x0) (async, rerun: 64) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) (async, rerun: 32) landlock_restrict_self(r1, 0x0) (async, rerun: 32) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x420, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) (async, rerun: 32) unshare(0x22020600) (async, rerun: 32) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, 0x0) (async, rerun: 32) landlock_restrict_self(r0, 0x0) (rerun: 32) landlock_restrict_self(r0, 0x0) (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) (rerun: 64) 2.374714703s ago: executing program 0 (id=77): r0 = inotify_init1(0x80000) r1 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r2 = syz_open_dev$loop(0x0, 0x87, 0x180020) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x7fff) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) close(r0) r3 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x1}, 0xe) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x8) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) 2.372686823s ago: executing program 1 (id=78): futex(&(0x7f0000000200)=0x1, 0xd, 0x2, &(0x7f0000000240), 0x0, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000500)="1fd4787488b1f24058b8199d33a8178ba1174e104ae1b3abb3faffaeb1a08aaeb8993c5fefff92daa06a331e595157761f72d282866c198c75e5f4c1f114555440e2c923df89b8a29cf82b51cddfc9f6855b9358722868848277b2ffaa380219e2103ad94a5c527d277624d6e0957baa3bbba59334916fb41475e5e891320186c1ee0e2a48e51a93311a4d776025dafd266c7cff569c60e008e76b2c734411ad8c57", 0xa2}, {&(0x7f00000005c0)="a2e1f75a5acb51fba68f72d473a1438b2fa6aee9bc10efc70b7f16e654f340c9fd9b40fcd7c2f55583cf7a2ca7be4c18b181cd1ccf007f5650ff7e01c64ccd85f8d4ed226e4ca0399034a0a45619339ff79f9c8ced0dfced5782fa0ce482417b8e9343ed19679dda57256a0078754e47388b9b107af79c32c54fc29793a2d05dd1f732e60edeb9", 0x87}, {&(0x7f0000000780)="395b7b9931074d3e26deed94dab0ab3d30a80a8806029d7a7f1e0367db29c9eac20789979cad7071d6bf4e4f222296281cfaf2c95f85adcf76cf8be4345a9bf66ad6baac6c502e0894d518279c8c310b355c34da938cdab36a66f17bfa8986708fb9fc296c5a48e8ed5f67758de22b2ae9c2f6bdb5fe832560470db8c522cfccf093eff1eb8f12ee44ac52a236b3cc2c068f94fd39e24151f6f3ee9cb32efb", 0x9f}, {&(0x7f0000001040)="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", 0x3bd}], 0x4, &(0x7f0000000840)=[@ip_retopts={{0x38, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x24, 0x9f, 0x1, 0x8, [{@rand_addr=0x64010102, 0x3}, {@local, 0x9}, {@local, 0xfffffff8}, {@remote, 0x8000a}]}]}}}], 0x38}}], 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) iopl(0xff) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x428341, 0x18) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000880)={0x9, {{0xa, 0x4e24, 0xdc05, @local, 0x5}}, 0x1, 0x1, [{{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}]}, 0x110) write$khugepaged_scan(r2, &(0x7f0000000000), 0x8) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f0000000100)={0xfffffffd, 0x2, 0x4, 0x80, 0xffffffff, 0x2}) 2.308271026s ago: executing program 3 (id=79): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='^\t*([%\x8e\x00', &(0x7f0000000200)='@!\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x81) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r0], 0x0) 1.743178904s ago: executing program 3 (id=80): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001d0021000000000000000000070000000500000009000000090002"], 0x34}, 0x1, 0x0, 0x0, 0x24040090}, 0x20000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22182, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) socket$inet_udp(0x2, 0x2, 0x0) dup(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230032) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r5], 0xa) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x30d000, 0x0) 1.558669303s ago: executing program 3 (id=81): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x120296480, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0}}, 0x58) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006220003000000002a90a0753883"], 0x0}, 0x0) 1.344716213s ago: executing program 2 (id=82): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) r2 = userfaultfd(0x801) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x7d, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x9, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x7ff, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x80007, 0x38, 0x800003, 0x201, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x4, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaec, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x203, 0x3, 0x7, 0x5, 0x1003, 0x100, 0x10000, 0x8, 0x7fff, 0xffff, 0xe620, 0x7, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x200100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xe, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000080)={0x1, 0x8}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b73ebf0ba221998103ddd4f80f40e140c3e789813d37c5825c5b1457343b280fa9d6152287ddab498ac1bb9bad049d0ab1d3c722ab2d0ddd3c7170c87894a003eadabeabb47e1f55afe45c2a0a2c00c0a36160a0e78b9cdcb11b44476d989fe713ed7f5c4132936a47f97bbefb1c8aa8718871793115f693aac10595928bb9e46cb9ebc2ed4bfea3e62ad4a754f8ebcd38e4ff8e302f8d", 0x97, 0x8040, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @private0, 0x156a933a}, 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) (async) userfaultfd(0x801) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x7d, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x9, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x7ff, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x80007, 0x38, 0x800003, 0x201, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x4, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaec, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x203, 0x3, 0x7, 0x5, 0x1003, 0x100, 0x10000, 0x8, 0x7fff, 0xffff, 0xe620, 0x7, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x200100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xe, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000080)={0x1, 0x8}) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b73ebf0ba221998103ddd4f80f40e140c3e789813d37c5825c5b1457343b280fa9d6152287ddab498ac1bb9bad049d0ab1d3c722ab2d0ddd3c7170c87894a003eadabeabb47e1f55afe45c2a0a2c00c0a36160a0e78b9cdcb11b44476d989fe713ed7f5c4132936a47f97bbefb1c8aa8718871793115f693aac10595928bb9e46cb9ebc2ed4bfea3e62ad4a754f8ebcd38e4ff8e302f8d", 0x97, 0x8040, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @private0, 0x156a933a}, 0x1c) (async) 1.306464026s ago: executing program 2 (id=83): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6}) ioctl$UI_DEV_CREATE(r3, 0x5501) syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000000)={r4, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x5, 0xff, 0x304, 0x1, 0x7, 0x0, 0x0, 'syz1\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) 1.166681072s ago: executing program 2 (id=84): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f00000000c0)) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000d36000/0x1000)=nil, 0x1000}}) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="4c4d9a8290529662de64f29487ebb795b3d72944a0e5cff4bdcf08f1eef4a6e6a27ebdc21b5c3eed19999e9fe75ae5057b5a6de0b27c7459dbe3a5adf864f2b5421c11e59a18c54c8015e953c59de3a769d405db8df1fcb63199ef61fe63d74e192f3dc344f2e622659f02e88a11ec7fc66a1461fce8d7a8634be33f892c049fd480186f8577c45c5d122cd87be0a3fdf45b6cb9d17bd5e270af9bedece858dd775253d8607c883102b32676d1a0d5055f020bf1bcb3e0ae85f1c51ed4818d", 0xbf}], 0x2, 0xd4b6, 0x9, 0x0) syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.134265274s ago: executing program 2 (id=85): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x8) (async) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) (async) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r2, 0x0, 0x25a5, 0x7) (async) splice(r1, 0x0, r2, 0x0, 0x25a5, 0x7) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)}, 0x20000810) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x8000) 1.049686158s ago: executing program 2 (id=86): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="12010000000000406d041fc700000000000109022400010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x20, 0x31, 0x1d, {0x1d, 0xe, "0b7e8a8bbd5fca0d2392bc54fb88f2154e6971cbb83c4ad7a21a8e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x22, @string={0x22, 0x3, "30da9874a2e6a8bf28be581549fbd930f878e36bd2797456803e34256d692f95"}}, &(0x7f0000000100)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x1, 0x15}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "1015c765bca872437b86be8eb70de3b3"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6f, 0x0, 0x7f, 0x7, "f9892492", "4bfbc873"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x6, 0xe4, 0x40, 0x5, 0x4}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000200)={0x0, 0x17, 0x88, "5286a34fb38f40d5f3c22b864258ec40325a82a0f64133fc3e9d0f55448cd29de4e489a2aa1bd23bbbf874e17b3547b357bd330d4dde1f07d9dfddf36476207209b5a4fb300f098bd1a26267b66b02b1f2c6e4cfa06ded5c3680f092e50a8c3565c355bea71f34e76080aeb68c92fc17fa2c0ffce9d676f2f5e61a8eb6094b278b78753b730d101f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x60}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000480)={0x40, 0xb, 0x2, ';/'}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x4aa6}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "85a3"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x19, &(0x7f0000000040)="9ca4f412d1f324f727c8c3394fcf323ec8d05ab41b42f424fa73b5c324dbec356b67b1c3cca1", 0x26) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r2], 0x20}}, 0x40816) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0xa, "39809f5d"}, @local=@item_012={0x0, 0x2, 0x9}]}}, 0x0}, 0x0) 818.375739ms ago: executing program 0 (id=87): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x8000000010, 0x2, 0x0) (async) write(r0, &(0x7f0000000280)="fc0000001c000720ab5b2509b86803000aab087a0400000001e2bb93210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8362defe04f000000006239ec2a0f0d1bcae5fa8f5f9dcdd51af51af8502943283f4bb102ddf9b2b8f5566791cf1902a38204ea45e601ded815b2ccd2430de4cc71e0ad73bd6433802e0784f2013cd1890058a10000c880ac801fe4af00004900d4", 0xfc) (async) 817.785129ms ago: executing program 0 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2120465, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) dup(r0) r2 = syz_open_dev$usbmon(&(0x7f0000000480), 0x4, 0x40200) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r2, 0xd2604000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') read$FUSE(r3, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000004000000000000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00v\x00'/28, @ANYRES32, @ANYBLOB="00000000018000"/28, @ANYRES32, @ANYBLOB="000000000300"/28]) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r4, r4, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000040)=@rnullb, r4, &(0x7f00000001c0)) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000005, 0x10012, r5, 0x37973000) 688.492535ms ago: executing program 1 (id=89): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) madvise(&(0x7f00005b7000/0x3000)=nil, 0x3000, 0xe) r1 = syz_clone(0x1140000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x8, &(0x7f0000000200), 0x4) ptrace(0x10, r1) ptrace$cont(0x7, r1, 0xdfd, 0x106) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') lseek(r3, 0x4, 0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000000)={0x9}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x12, r0, 0xa206e000) 521.010854ms ago: executing program 1 (id=90): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x2001}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$tipc(r1, &(0x7f0000000980)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x80000000, 0x1}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000480)="b4094c8936182c877f74c059ec63592d1dc5c4828e684779c038c9df4181e17588c9cee2a94a248cafa406759951af9df68cd8e933f49ce80625311300a43bdeed0f44b1260f4d266fddbafb6f490611607f9372", 0x54}, {&(0x7f0000000500)="4a6395f5972c63fb90c779cd79fdfeaccf08c37be2fe9c2eef94c68607985426b6f0ed736ac84e83dbc0a3e4c3b22b075c83741e81d543c4a575a1d8173bfb31166861e56119a79cd0e4e7a9283ef17fa3d8d8e0f4dbcb8648d310330afe8ff602cf2bf0fd5fa292c9a6c2d88e", 0x6d}, {&(0x7f0000000580)="c6a150904d77c778858143990b69e429d3a1f6c2cce74928794b2b156fb3649a9db31c18019545ba9f2612245e694982480874c6f78587eb41d81fdc2955566cbc1ea30830a21556b1d16e530b29dd5be03c4a1f8266254bc8ab3f0f5f9c944daa51c114adc50e5803dffba52d717d8c6b50f730dea0930b5cef692045a3b8d23d0e51ea7071", 0x86}, {&(0x7f0000000640)="6972b51cca3fc7937fb77aa57945b31b75ecb7920d8051bd0e41f1d54a311e650af3a904094ce80f1957541bea5c61182a045b95f37dd22a6e9fc366a58f203e6f741684809d0b96f155a091a0c008502801052e", 0x54}, {&(0x7f0000000380)="b95738381d2f927222ccc44e34", 0xd}, {&(0x7f00000006c0)="3d1d03011754c45737bc56ba8e7a4166c6fd2c37d59bbfc36be7be9eaf66f40b2833926318ab93903ceb236fb7d420b53035f1aa264849341bd19225313056bb83bd803c7db97f06fef5b55cee331ee496f2fe846002cba90850df4e3edcfceed68c068a9ea591d61c8870e204fb7d5ede004405f0ce43bb7c7fb3439fe746591b5fa923ce9b7131d79acc589be190c48a0937c3c8bab44494fab4b5d736f983dcebde2f1bd89d23865eb5fbec35f7c647073f116708d373d0e1396f45fa54f911f6d72132562ba7a62f", 0xca}, {&(0x7f00000007c0)="4e2dd998b41fcded6d99f958a402ee8f8a8f66d94f9fb3c30ae16d0d4eb4253c94cdc47b74ab5110daa6d269cfbb73a2e0f7dd714e4dcf64802b223a9c9a3e4b32e94cd20099e600b382b4ecfd425d53e3a0f7", 0x53}, {&(0x7f0000000840)="96ff231f9a830fcc8251da6d508e9c5213395b6f3905dec43aabb305371e911a53c4cde41919037bba6422aff9935b9d7418483fc7da0e28c05b7e2a21b4c1e2fce302949450cb296e479362c28f271c5401661e17575f217b4be82450ffd4c210ed3af7bd06a79523f60481e30c3878aa", 0x71}], 0x8, &(0x7f0000000940)="58e9be2ac2e463d9ccfecf2e4950a6f51c", 0x11}, 0x4000014) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x440082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendto(r5, &(0x7f0000000300)="936dba84dea1254ac53f5ece2e188b85a5d71918b84658479deb7dd66a15638c37fe9be39f50c3dd5bdfb305ba697a2c2f368f4fea62494f91a0085ec5e93a6f950fece57d03b7afd5f33ac7d1ba93b472a0bdebe08f95d12b731eeac58c828c64567256118840d0d738cd78cb86fce0668b", 0x72, 0x44, &(0x7f0000000400)=@in6={0xa, 0x4e24, 0x9, @mcast2, 0x4}, 0x80) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072081f03000500000000", 0x39}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x400000004) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000040005"], 0x40}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x3000, 0x8, 0xb, 0x3, 0x6, 0x42, 0x7, 0x0, 0x34, 0x19}, {0x10000, 0x2, 0x0, 0x2, 0x43, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3}, {0x5000, 0x4000, 0x3, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0x8, 0x8, 0x81}, {0xeeee0000, 0x8000000, 0xa, 0x6, 0x3, 0x2, 0xfd, 0xf8, 0xa, 0x7, 0x9, 0xf1}, {0xc000, 0x2000, 0x10, 0x3, 0xf6, 0x2, 0xa7, 0x7f, 0x41, 0x83, 0xf7, 0x6}, {0xeeef0000, 0x191bd000, 0xc, 0x77, 0xb3, 0x6, 0x1, 0x4, 0x80, 0x13, 0x44}, {0x25000, 0x1, 0xb, 0x5, 0x0, 0x2, 0x40, 0x43, 0x3, 0x7d, 0x2, 0x70}, {0x80a0000, 0xeeef0000, 0xc, 0xa, 0xf, 0x7, 0x0, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x29ad}, {0x1000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x400000006, 0x0, 0x40000, [0xa4, 0x1000, 0x400000000063, 0xfffffffffffffff8]}) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_GET_DIRTY_LOG(r10, 0x4010ae42, &(0x7f00000000c0)={0x2710, 0x0, &(0x7f0000ffd000/0x3000)=nil}) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="8fc9809a5c61000f090f082503000000b805000000b9cc8600000f01c1c4c189d188efbb0000b87b8d00000f23d00f21f835300000080f23f80f71f4dafb9a00000080d800", 0x45}], 0x1, 0x49, &(0x7f0000000000)=[@flags={0x3, 0x2d2754}], 0x1) ioctl$KVM_SET_CPUID(r11, 0x4008ae8a, 0x0) 424.809629ms ago: executing program 1 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req={0x2, 0xffffffff, 0x0, 0x2263}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x9, 0x1000000, 0x0, 0x0, 0x1) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000001c0)=""/33) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000180)='./file0\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 83.492246ms ago: executing program 1 (id=92): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async, rerun: 32) unshare(0x6060600) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000024c0)={0x2020}, 0x2020) (async) lseek(r3, 0xfffffffffffffff5, 0x1) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000003c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x8, 0x1, 0x2}}, {0x3, 0x3, 0x0, 0x0, @irqchip={0x4, 0x9}}]}) (async, rerun: 64) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r5, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, &(0x7f0000000080)=[@request_death={0x400c630e, 0x20}, @clear_death], 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=93): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x180800) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x83f, 0x10004, 0x1}, 0xfffffffffffffe7f) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x2}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 21.435648][ T36] audit: type=1400 audit(1774102527.060:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.436701][ T283] cgroup: Unknown subsys name 'net' [ 21.458582][ T36] audit: type=1400 audit(1774102527.060:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.486145][ T36] audit: type=1400 audit(1774102527.090:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.486319][ T283] cgroup: Unknown subsys name 'devices' [ 21.669447][ T283] cgroup: Unknown subsys name 'hugetlb' [ 21.675073][ T283] cgroup: Unknown subsys name 'rlimit' [ 21.827578][ T36] audit: type=1400 audit(1774102527.460:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.851026][ T36] audit: type=1400 audit(1774102527.460:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.859954][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.876307][ T36] audit: type=1400 audit(1774102527.460:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.908390][ T36] audit: type=1400 audit(1774102527.510:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.934287][ T36] audit: type=1400 audit(1774102527.510:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.964109][ T36] audit: type=1400 audit(1774102527.590:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.964573][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.989838][ T36] audit: type=1400 audit(1774102527.590:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.721577][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.732584][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.739752][ T290] bridge_slave_0: entered allmulticast mode [ 22.746240][ T290] bridge_slave_0: entered promiscuous mode [ 22.752948][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.760153][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.767273][ T290] bridge_slave_1: entered allmulticast mode [ 22.773467][ T290] bridge_slave_1: entered promiscuous mode [ 22.902324][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.909597][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.917308][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.924340][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.932367][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.939748][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.946939][ T294] bridge_slave_0: entered allmulticast mode [ 22.953270][ T294] bridge_slave_0: entered promiscuous mode [ 22.960144][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.967429][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.974532][ T294] bridge_slave_1: entered allmulticast mode [ 22.980946][ T294] bridge_slave_1: entered promiscuous mode [ 23.033540][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.040848][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.048192][ T295] bridge_slave_0: entered allmulticast mode [ 23.054440][ T295] bridge_slave_0: entered promiscuous mode [ 23.061200][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.068590][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.075855][ T295] bridge_slave_1: entered allmulticast mode [ 23.082700][ T295] bridge_slave_1: entered promiscuous mode [ 23.101549][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.108665][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.115721][ T296] bridge_slave_0: entered allmulticast mode [ 23.122062][ T296] bridge_slave_0: entered promiscuous mode [ 23.131334][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.138469][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.145619][ T296] bridge_slave_1: entered allmulticast mode [ 23.152046][ T296] bridge_slave_1: entered promiscuous mode [ 23.249265][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.256547][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.273640][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.280757][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.296920][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.304011][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.389683][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.396932][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.408656][ T290] veth0_vlan: entered promiscuous mode [ 23.417958][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.425449][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.443757][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.450850][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.464980][ T290] veth1_macvtap: entered promiscuous mode [ 23.473176][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.480341][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.521226][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.528497][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.537000][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.544154][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.552337][ T296] veth0_vlan: entered promiscuous mode [ 23.570812][ T296] veth1_macvtap: entered promiscuous mode [ 23.594187][ T294] veth0_vlan: entered promiscuous mode [ 23.625089][ T294] veth1_macvtap: entered promiscuous mode [ 23.637725][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.639048][ T295] veth0_vlan: entered promiscuous mode [ 23.697877][ T295] veth1_macvtap: entered promiscuous mode [ 23.740088][ T340] ======================================================= [ 23.740088][ T340] WARNING: The mand mount option has been deprecated and [ 23.740088][ T340] and is ignored by this kernel. Remove the mand [ 23.740088][ T340] option from the mount to silence this warning. [ 23.740088][ T340] ======================================================= [ 23.783697][ T335] fuse: root generation should be zero [ 23.815399][ T344] mmap: syz.0.1 (344) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 23.840842][ T348] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 23.883870][ T350] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.057223][ T10] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 24.077200][ T330] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.187621][ T10] usb 3-1: device descriptor read/64, error -71 [ 24.208561][ T353] veth0: entered promiscuous mode [ 24.217151][ T330] usb 1-1: device descriptor read/64, error -71 [ 24.238099][ T352] veth0: left promiscuous mode [ 24.276299][ T360] Zero length message leads to an empty skb [ 24.309908][ T363] netlink: 'syz.3.9': attribute type 27 has an invalid length. [ 24.427143][ T10] usb 3-1: device descriptor read/64, error -71 [ 24.467157][ T330] usb 1-1: device descriptor read/64, error -71 [ 24.597245][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.687376][ T10] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 24.707235][ T330] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.747153][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 24.753498][ T31] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 24.763916][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.774562][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 24.783789][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.792088][ T31] usb 4-1: Product: syz [ 24.796742][ T31] usb 4-1: Manufacturer: syz [ 24.801366][ T31] usb 4-1: SerialNumber: syz [ 24.817182][ T10] usb 3-1: device descriptor read/64, error -71 [ 24.837179][ T330] usb 1-1: device descriptor read/64, error -71 [ 25.009941][ T31] usb 4-1: 0:2 : does not exist [ 25.014879][ T31] usb 4-1: unit 9 not found! [ 25.021379][ T31] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 25.031879][ T31] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 25.041920][ T31] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 25.052393][ T31] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 25.057179][ T10] usb 3-1: device descriptor read/64, error -71 [ 25.062699][ T31] usb 4-1: 4:0: cannot get min/max values for control 5 (id 4) [ 25.076541][ T31] usb 4-1: 4:0: cannot get min/max values for control 6 (id 4) [ 25.077139][ T330] usb 1-1: device descriptor read/64, error -71 [ 25.092474][ T31] usb 4-1: USB disconnect, device number 2 [ 25.103558][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.167339][ T10] usb usb3-port1: attempt power cycle [ 25.197240][ T330] usb usb1-port1: attempt power cycle [ 25.305110][ T372] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.389923][ T375] input: syz0 as /devices/virtual/input/input4 [ 25.398213][ T375] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 25.507221][ T10] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 25.530931][ T10] usb 3-1: device descriptor read/8, error -71 [ 25.547414][ T330] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 25.578208][ T330] usb 1-1: device descriptor read/8, error -71 [ 25.603188][ T393] capability: warning: `syz.3.18' uses deprecated v2 capabilities in a way that may be insecure [ 25.657237][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.672355][ T10] usb 3-1: device descriptor read/8, error -71 [ 25.708187][ T330] usb 1-1: device descriptor read/8, error -71 [ 25.808619][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 25.819832][ T31] usb 2-1: string descriptor 0 read error: -22 [ 25.826259][ T31] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 25.835453][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.917194][ T10] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 25.938509][ T10] usb 3-1: device descriptor read/8, error -71 [ 25.947183][ T330] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 25.968617][ T330] usb 1-1: device descriptor read/8, error -71 [ 26.047665][ T377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.056543][ T377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.068438][ T10] usb 3-1: device descriptor read/8, error -71 [ 26.098371][ T330] usb 1-1: device descriptor read/8, error -71 [ 26.177994][ T10] usb usb3-port1: unable to enumerate USB device [ 26.207269][ T330] usb usb1-port1: unable to enumerate USB device [ 26.266714][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 26.273796][ T31] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 26.287321][ T31] usb 2-1: USB disconnect, device number 2 [ 26.685977][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 26.685995][ T36] audit: type=1400 audit(1774102532.310:154): avc: denied { setopt } for pid=408 comm="syz.3.22" lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.720273][ T36] audit: type=1400 audit(1774102532.310:155): avc: denied { write } for pid=408 comm="syz.3.22" path="socket:[4569]" dev="sockfs" ino=4569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.743797][ T36] audit: type=1400 audit(1774102532.330:156): avc: denied { read append } for pid=412 comm="syz.3.23" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 26.767426][ T36] audit: type=1400 audit(1774102532.330:157): avc: denied { open } for pid=412 comm="syz.3.23" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 26.824880][ T36] audit: type=1400 audit(1774102532.330:158): avc: denied { map } for pid=412 comm="syz.3.23" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 26.863590][ T36] audit: type=1400 audit(1774102532.330:159): avc: denied { write execute } for pid=412 comm="syz.3.23" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 26.887655][ T36] audit: type=1400 audit(1774102532.330:160): avc: denied { ioctl } for pid=412 comm="syz.3.23" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 26.920442][ T36] audit: type=1400 audit(1774102532.350:161): avc: denied { read append } for pid=412 comm="syz.3.23" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 26.952425][ T36] audit: type=1400 audit(1774102532.350:162): avc: denied { open } for pid=412 comm="syz.3.23" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 26.991402][ T36] audit: type=1400 audit(1774102532.350:163): avc: denied { ioctl } for pid=412 comm="syz.3.23" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 27.277162][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.367172][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.427169][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 27.435639][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.446964][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.457380][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 27.466746][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.475627][ T10] usb 2-1: config 0 descriptor?? [ 27.481620][ T10] hub 2-1:0.0: USB hub found [ 27.517201][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 27.523755][ T31] usb 4-1: config 8 has an invalid interface number: 77 but max is 0 [ 27.532093][ T31] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 27.542499][ T31] usb 4-1: config 8 has no interface number 0 [ 27.549001][ T31] usb 4-1: config 8 interface 77 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.562007][ T31] usb 4-1: config 8 interface 77 has no altsetting 0 [ 27.570330][ T31] usb 4-1: New USB device found, idVendor=470c, idProduct=8062, bcdDevice=95.49 [ 27.580076][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.588119][ T31] usb 4-1: Product: syz [ 27.592310][ T31] usb 4-1: Manufacturer: syz [ 27.596919][ T31] usb 4-1: SerialNumber: syz [ 27.677167][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 27.683423][ T10] hub 2-1:0.0: 1 port detected [ 27.807229][ T31] usb 4-1: USB disconnect, device number 3 [ 27.828740][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.841287][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.851309][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.867572][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.876722][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.885987][ T45] usb 3-1: config 0 descriptor?? [ 27.983373][ T443] process 'syz.0.35' launched '/dev/fd/6' with NULL argv: empty string added [ 28.227147][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 28.286280][ T347] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 28.293257][ T10] usb 2-1: USB disconnect, device number 3 [ 28.296301][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 28.305633][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 28.314392][ T45] usb 3-1: USB disconnect, device number 6 [ 28.377194][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 28.385422][ T31] usb 1-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 28.394298][ T447] loop6: detected capacity change from 0 to 7 [ 28.403082][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 28.412291][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 28.420284][ T31] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 28.420645][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 28.431604][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.440610][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 28.455112][ T31] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 28.461840][ T447] loop6: unable to read partition table [ 28.471665][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.476699][ T447] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 28.485081][ T31] usb 1-1: Product: syz [ 28.502151][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 28.511423][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 28.519713][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 28.528984][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 28.537274][ T31] usb 1-1: Manufacturer: syz [ 28.538383][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 28.541909][ T31] usb 1-1: SerialNumber: syz [ 28.555876][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 28.563900][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 28.573144][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 28.581626][ T447] loop6: unable to read partition table [ 28.582789][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 28.596911][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 28.605201][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 28.614341][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 28.622600][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 28.631846][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 28.748408][ T31] usb 1-1: USB disconnect, device number 6 [ 28.807169][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.856099][ T456] tipc: Enabling of bearer rejected, failed to enable media [ 28.967234][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 28.973983][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.985600][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.995519][ T45] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 29.005049][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.017387][ T45] usb 4-1: config 0 descriptor?? [ 29.430091][ T45] konepure 0003:1E7D:2DB4.0001: item fetching failed at offset 3/4 [ 29.438492][ T45] konepure 0003:1E7D:2DB4.0001: parse failed [ 29.447674][ T45] konepure 0003:1E7D:2DB4.0001: probe with driver konepure failed with error -22 [ 29.633021][ T45] usb 4-1: USB disconnect, device number 4 [ 29.847149][ T347] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 30.037133][ T347] usb 1-1: Using ep0 maxpacket: 16 [ 30.043884][ T347] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.055326][ T347] usb 1-1: config 0 interface 0 has no altsetting 0 [ 30.062137][ T347] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 30.071726][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.088208][ T347] usb 1-1: config 0 descriptor?? [ 30.317392][ T347] usbhid 1-1:0.0: can't add hid device: -71 [ 30.324018][ T347] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 30.334981][ T347] usb 1-1: USB disconnect, device number 7 [ 30.412946][ T523] batadv_slave_1: entered promiscuous mode [ 30.425537][ T526] bond_slave_1: mtu less than device minimum [ 30.557147][ T330] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.564042][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 30.576284][ T523] batadv_slave_1: left promiscuous mode [ 30.589468][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.596951][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.604639][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.612236][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.619802][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.627349][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.634780][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.642437][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.649766][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.657180][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.664611][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.672021][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.679433][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.686897][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.694583][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.702001][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.709555][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.717017][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.724329][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.731698][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 30.736880][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.737134][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 30.744299][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.751278][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 30.757038][ T347] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.765904][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.772357][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.782764][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 30.789958][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.801287][ T45] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 30.808401][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.819667][ T45] usb 3-1: config 1 interface 2 has no altsetting 0 [ 30.826838][ T330] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 30.835163][ T45] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 30.841796][ T330] usb 2-1: config 2 has no interface number 0 [ 30.851241][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.857233][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.865305][ T45] usb 3-1: Product: syz [ 30.872479][ T330] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 30.876761][ T45] usb 3-1: Manufacturer: syz [ 30.886595][ T330] usb 2-1: config 2 interface 88 has no altsetting 0 [ 30.891495][ T45] usb 3-1: SerialNumber: syz [ 30.898099][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.910051][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.911595][ T330] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 30.918724][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.928161][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.934371][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.942211][ T330] usb 2-1: Product: syz [ 30.949814][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.953788][ T330] usb 2-1: Manufacturer: syz [ 30.961240][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.965737][ T330] usb 2-1: SerialNumber: syz [ 30.973346][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.980589][ T518] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 30.985098][ T538] sock: sock_timestamping_bind_phc: sock not bind to device [ 30.997150][ T347] usb 4-1: Using ep0 maxpacket: 16 [ 31.007757][ T347] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 31.018240][ T347] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 31.028581][ T347] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.029379][ T434] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.044314][ T347] usb 4-1: config 1 interface 0 has no altsetting 0 [ 31.058033][ T434] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 31.067550][ T347] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 31.077948][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.086008][ T347] usb 4-1: Product: syz [ 31.090709][ T347] usb 4-1: Manufacturer: syz [ 31.095358][ T347] usb 4-1: SerialNumber: syz [ 31.151847][ T541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 31.196150][ T518] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.250211][ T552] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 31.262470][ T552] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 31.270654][ T552] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 31.278838][ T552] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 31.286611][ T552] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 31.294488][ T552] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 31.307636][ T552] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 31.315628][ T347] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 31.330336][ T552] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 31.338313][ T552] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 31.346021][ T552] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 31.404268][ T330] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 31.414570][ T330] asix 2-1:2.88: probe with driver asix failed with error -71 [ 31.424422][ T330] usb 2-1: USB disconnect, device number 4 [ 31.517419][ T347] usb 4-1: USB disconnect, device number 5 [ 31.525630][ T347] usblp0: removed [ 31.915971][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 31.916019][ T36] audit: type=1400 audit(1774102537.540:216): avc: denied { getopt } for pid=554 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.970595][ T36] audit: type=1400 audit(1774102537.600:217): avc: denied { create } for pid=558 comm="syz.1.72" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 31.991782][ T36] audit: type=1400 audit(1774102537.610:218): avc: denied { mounton } for pid=558 comm="syz.1.72" path="/15/file0" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.017141][ T36] audit: type=1400 audit(1774102537.640:219): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.053792][ T564] syz_tun: entered allmulticast mode [ 32.062520][ T568] : renamed from bridge_slave_1 (while UP) [ 32.327196][ T330] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 32.347166][ T347] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.478306][ T330] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 32.486724][ T330] usb 1-1: config 0 has no interface number 0 [ 32.493058][ T330] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 32.505593][ T347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.517062][ T330] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 32.526154][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.534175][ T347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.544046][ T347] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.557037][ T330] usb 1-1: Product: syz [ 32.561331][ T330] usb 1-1: Manufacturer: syz [ 32.566041][ T330] usb 1-1: SerialNumber: syz [ 32.570688][ T347] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.580374][ T347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.588716][ T330] usb 1-1: config 0 descriptor?? [ 32.594039][ T579] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 32.594914][ T347] usb 2-1: config 0 descriptor?? [ 32.608877][ T330] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, f6:bd:89:ab:08:a2 [ 32.634843][ T36] audit: type=1400 audit(1774102538.260:220): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.655977][ T36] audit: type=1400 audit(1774102538.270:221): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.677647][ T36] audit: type=1400 audit(1774102538.270:222): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.699217][ T36] audit: type=1400 audit(1774102538.270:223): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.727320][ T36] audit: type=1400 audit(1774102538.270:224): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.759011][ T36] audit: type=1400 audit(1774102538.310:225): avc: denied { read } for pid=589 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.784788][ T599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 33.025938][ T347] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 33.036535][ T347] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 33.047203][ T347] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 33.128656][ T434] usb 1-1: USB disconnect, device number 8 [ 33.134893][ T434] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 33.146272][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.157136][ T45] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 33.167528][ T45] usb 3-1: selecting invalid altsetting 0 [ 33.174917][ T45] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 33.183474][ T45] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 33.192522][ T45] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 33.198828][ T45] usb 3-1: selecting invalid altsetting 0 [ 33.224031][ T45] usb 3-1: USB disconnect, device number 7 [ 33.272041][ T617] input: syz0 as /devices/virtual/input/input7 [ 33.322149][ T347] usb 2-1: USB disconnect, device number 5 [ 33.327147][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 33.342401][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.353402][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.373967][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.389697][ T31] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 33.399142][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.409077][ T31] usb 4-1: config 0 descriptor?? [ 33.697380][ T330] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 33.819180][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.828180][ T31] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 33.837865][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.845668][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.849060][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.853135][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.871541][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.879442][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.884872][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.887015][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.904339][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.909331][ T330] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 33.911890][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.928887][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.930087][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.936209][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.936238][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.945959][ T330] usb 3-1: config 0 descriptor?? [ 33.964617][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.972154][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 33.993606][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input8 [ 34.007577][ T31] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 34.031895][ T31] usb 4-1: USB disconnect, device number 6 [ 34.042116][ T663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 34.051061][ T663] erspan0: entered promiscuous mode [ 34.063941][ T663] GUP no longer grows the stack in syz.1.91 (663): 200000005000-200000008000 (200000004000) [ 34.074553][ T663] CPU: 0 UID: 0 PID: 663 Comm: syz.1.91 Not tainted syzkaller #0 27d789fd165073930717a3126c57ec3d616cfd74 [ 34.074589][ T663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 34.074602][ T663] Call Trace: [ 34.074608][ T663] [ 34.074615][ T663] __dump_stack+0x21/0x30 [ 34.074649][ T663] dump_stack_lvl+0x140/0x1c0 [ 34.074681][ T663] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.074708][ T663] ? find_vma+0xd3/0x120 [ 34.074737][ T663] dump_stack+0x19/0x20 [ 34.074762][ T663] __get_user_pages+0x1e18/0x22b0 [ 34.074786][ T663] ? __kasan_check_write+0x18/0x20 [ 34.074812][ T663] ? __calc_delta+0x280/0x280 [ 34.074852][ T663] ? down_read_killable+0x7f/0x100 [ 34.074874][ T663] ? populate_vma_page_range+0x220/0x220 [ 34.074897][ T663] __gup_longterm_locked+0xc5a/0x1600 [ 34.074922][ T663] ? __pte_offset_map+0x1b0/0x230 [ 34.074947][ T663] gup_fast_fallback+0x12e9/0x14e0 [ 34.074967][ T663] ? save_fpregs_to_fpstate+0x196/0x220 [ 34.074992][ T663] ? get_user_pages_fast_only+0xc0/0xc0 [ 34.075013][ T663] ? _raw_spin_unlock+0x45/0x60 [ 34.075038][ T663] ? __switch_to_asm+0x3d/0x70 [ 34.075066][ T663] get_user_pages_fast+0x73/0xb0 [ 34.075088][ T663] get_futex_key+0x25f/0x940 [ 34.075111][ T663] ? __cfi_get_futex_key+0x10/0x10 [ 34.075135][ T663] futex_wait_setup+0xae/0x260 [ 34.075160][ T663] ? __cfi___futex_queue+0x10/0x10 [ 34.075181][ T663] ? __cfi_futex_wait_setup+0x10/0x10 [ 34.075208][ T663] ? __asan_memcpy+0x5a/0x80 [ 34.075234][ T663] __futex_wait+0x134/0x3e0 [ 34.075261][ T663] ? __cfi___futex_wait+0x10/0x10 [ 34.075287][ T663] ? __cfi_futex_wake_mark+0x10/0x10 [ 34.075313][ T663] ? futex_wake+0x666/0x950 [ 34.075337][ T663] ? futex_setup_timer+0xb4/0xd0 [ 34.075358][ T663] futex_wait+0x129/0x7b0 [ 34.075385][ T663] ? __cfi_futex_wait+0x10/0x10 [ 34.075412][ T663] ? mas_walk+0x3f7/0x650 [ 34.075442][ T663] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 34.075470][ T663] ? mas_find+0x358/0x5f0 [ 34.075488][ T663] do_futex+0x32a/0x510 [ 34.075510][ T663] ? do_vmi_munmap+0x245/0x2e0 [ 34.075540][ T663] ? __cfi_do_futex+0x10/0x10 [ 34.075564][ T663] ? __vm_munmap+0x2de/0x390 [ 34.075592][ T663] __se_sys_futex+0x13c/0x320 [ 34.075617][ T663] ? __x64_sys_futex+0x110/0x110 [ 34.075643][ T663] ? __kasan_check_write+0x18/0x20 [ 34.075670][ T663] __x64_sys_futex+0xe9/0x110 [ 34.075695][ T663] x64_sys_call+0x227f/0x2ee0 [ 34.075723][ T663] do_syscall_64+0x57/0xf0 [ 34.075747][ T663] ? clear_bhb_loop+0x50/0xa0 [ 34.075773][ T663] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.075798][ T663] RIP: 0033:0x7f9ca939c799 [ 34.075817][ T663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.075834][ T663] RSP: 002b:00007f9caa1dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 34.075871][ T663] RAX: ffffffffffffffda RBX: 00007f9ca9615fa0 RCX: 00007f9ca939c799 [ 34.075888][ T663] RDX: 0000000001000000 RSI: 0000000000000009 RDI: 0000200000004000 [ 34.075903][ T663] RBP: 00007f9ca9432c99 R08: 0000000000000000 R09: 0000000000000001 [ 34.075918][ T663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.075932][ T663] R13: 00007f9ca9616038 R14: 00007f9ca9615fa0 R15: 00007fffc2757bd8 [ 34.075950][ T663] [ 34.425169][ T665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.425200][ T665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.431950][ T665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.438498][ T665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.445074][ T665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.451616][ T665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.458777][ T665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.466599][ T665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.473142][ T665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.479636][ T665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.486137][ T665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.492666][ T665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.499865][ T295] ------------[ cut here ]------------ [ 34.511968][ T295] WARNING: CPU: 1 PID: 295 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 34.521433][ T295] Modules linked in: [ 34.525345][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 27d789fd165073930717a3126c57ec3d616cfd74 [ 34.537302][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 34.547496][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 34.553436][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4e 78 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8c bb 5a 03 cc e8 c6 4f 3f ff <0f> 0b e9 3e ff ff ff e8 ba 4f 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 34.573384][ T295] RSP: 0018:ffffc9000b767b48 EFLAGS: 00010293 [ 34.579522][ T295] RAX: ffffffff8248559a RBX: 0000000000000000 RCX: ffff88812b8d9300 [ 34.587624][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.595629][ T295] RBP: ffffc9000b767b70 R08: ffff888144f5ec3f R09: 1ffff110289ebd87 [ 34.603750][ T295] R10: dffffc0000000000 R11: ffffed10289ebd88 R12: 0000000000000000 [ 34.611788][ T295] R13: dffffc0000000000 R14: ffff888144f5eba0 R15: ffff888112942dd0 [ 34.619924][ T295] FS: 0000555570642500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.629096][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.635802][ T295] CR2: 0000000000000000 CR3: 00000001033ee000 CR4: 00000000003526b0 [ 34.643850][ T295] Call Trace: [ 34.647303][ T295] [ 34.650379][ T295] ovl_do_remove+0x81b/0xda0 [ 34.655067][ T295] ? ovl_set_redirect+0x780/0x780 [ 34.660141][ T295] ? down_write+0xee/0x2b0 [ 34.664716][ T295] ? __cfi_down_write+0x10/0x10 [ 34.669623][ T295] ovl_rmdir+0x1e/0x30 [ 34.673788][ T295] vfs_rmdir+0x3e3/0x560 [ 34.678077][ T295] incfs_kill_sb+0x109/0x230 [ 34.682693][ T295] deactivate_locked_super+0xd5/0x2a0 [ 34.688296][ T295] deactivate_super+0xb8/0xe0 [ 34.693260][ T295] cleanup_mnt+0x406/0x4a0 [ 34.697750][ T295] __cleanup_mnt+0x1d/0x40 [ 34.702183][ T295] task_work_run+0x1e8/0x260 [ 34.706802][ T295] ? __cfi_task_work_run+0x10/0x10 [ 34.711938][ T295] ? __x64_sys_umount+0x12e/0x180 [ 34.716984][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 34.722470][ T295] ? __kasan_check_read+0x15/0x20 [ 34.727549][ T295] resume_user_mode_work+0x35/0x50 [ 34.732711][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 34.738326][ T295] do_syscall_64+0x63/0xf0 [ 34.742765][ T295] ? clear_bhb_loop+0x50/0xa0 [ 34.747560][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.753485][ T295] RIP: 0033:0x7f0dfcb9d9d7 [ 34.757966][ T295] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 34.777803][ T295] RSP: 002b:00007ffd7e67a348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.786503][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0dfcb9d9d7 [ 34.794546][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7e67a400 [ 34.802577][ T295] RBP: 00007ffd7e67a400 R08: 00007ffd7e67b400 R09: 00000000ffffffff [ 34.810767][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd7e67b490 [ 34.819293][ T295] R13: 00007f0dfcc32050 R14: 00000000000086a5 R15: 00007ffd7e67b4d0 [ 34.827442][ T295] [ 34.830518][ T295] ---[ end trace 0000000000000000 ]--- [ 34.836779][ T295] ------------[ cut here ]------------ [ 34.842397][ T295] WARNING: CPU: 0 PID: 295 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 34.851891][ T295] Modules linked in: [ 34.855812][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 27d789fd165073930717a3126c57ec3d616cfd74 [ 34.869241][ T295] Tainted: [W]=WARN [ 34.873109][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 34.883279][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 34.888968][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4e 78 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8c bb 5a 03 cc e8 c6 4f 3f ff <0f> 0b e9 3e ff ff ff e8 ba 4f 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 34.908797][ T295] RSP: 0018:ffffc9000b767b48 EFLAGS: 00010293 [ 34.914903][ T295] RAX: ffffffff8248559a RBX: 0000000000000000 RCX: ffff88812b8d9300 [ 34.922905][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.931002][ T295] RBP: ffffc9000b767b70 R08: ffff888144f5ec3f R09: 1ffff110289ebd87 [ 34.939021][ T295] R10: dffffc0000000000 R11: ffffed10289ebd88 R12: 0000000000000000 [ 34.947144][ T295] R13: dffffc0000000000 R14: ffff888144f5eba0 R15: ffff888112942dd0 [ 34.955126][ T295] FS: 0000555570642500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.964080][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.970741][ T295] CR2: 000000110c34a9ae CR3: 00000001033ee000 CR4: 00000000003526b0 [ 34.978771][ T295] Call Trace: [ 34.982071][ T295] [ 34.985007][ T295] ovl_do_remove+0x81b/0xda0 [ 34.989703][ T295] ? ovl_set_redirect+0x780/0x780 [ 34.994855][ T295] ? down_write+0xee/0x2b0 [ 34.999526][ T295] ? __cfi_down_write+0x10/0x10 [ 35.004661][ T295] ovl_rmdir+0x1e/0x30 [ 35.008772][ T295] vfs_rmdir+0x3e3/0x560 [ 35.013046][ T295] incfs_kill_sb+0x1a0/0x230 [ 35.017683][ T295] deactivate_locked_super+0xd5/0x2a0 [ 35.023170][ T295] deactivate_super+0xb8/0xe0 [ 35.028010][ T295] cleanup_mnt+0x406/0x4a0 [ 35.032443][ T295] __cleanup_mnt+0x1d/0x40 [ 35.037265][ T295] task_work_run+0x1e8/0x260 [ 35.042058][ T295] ? __cfi_task_work_run+0x10/0x10 [ 35.047397][ T295] ? __x64_sys_umount+0x12e/0x180 [ 35.052484][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 35.057895][ T295] ? __kasan_check_read+0x15/0x20 [ 35.062943][ T295] resume_user_mode_work+0x35/0x50 [ 35.068093][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 35.073570][ T295] do_syscall_64+0x63/0xf0 [ 35.078017][ T295] ? clear_bhb_loop+0x50/0xa0 [ 35.082718][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.088653][ T295] RIP: 0033:0x7f0dfcb9d9d7 [ 35.093085][ T295] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 35.112865][ T295] RSP: 002b:00007ffd7e67a348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 35.121361][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0dfcb9d9d7 [ 35.129382][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7e67a400 [ 35.137661][ T295] RBP: 00007ffd7e67a400 R08: 00007ffd7e67b400 R09: 00000000ffffffff [ 35.145725][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd7e67b490 [ 35.153739][ T295] R13: 00007f0dfcc32050 R14: 00000000000086a5 R15: 00007ffd7e67b4d0 [ 35.161842][ T295] [ 35.164881][ T295] ---[ end trace 0000000000000000 ]--- [ 36.464237][ T31] usb 3-1: USB disconnect, device number 8