last executing test programs: 5.408301017s ago: executing program 0 (id=1): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB='\n'], 0x0) 4.153466505s ago: executing program 0 (id=15): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x2710}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$unix(r2, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x40000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x3}, 0x4) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 3.99434141s ago: executing program 0 (id=17): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904"], 0x0) 3.861966743s ago: executing program 2 (id=18): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x20}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @remote, 0x3}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001a000100000000000000000001cf042e89150a00fc003a2a5e247b0000000c001b803a0000007d0000008857a7e8c34f12d5c61b9494e81215bd9b891fda351212985ec9cf0353679d2b5bd25be5fd9e44c0e40d1348151b8d70233d4d5b8c0ab495bbc9dc8320eb416718fa7c0c8721e7f51abd3ea9904ab11d7061cd5b4478bda7533abbec540b1ff530b37161cd11c004ff772f86345bc18dc88b1d86a965045c352e76afeb4c9d9ebb36d49536d501e12f4909ebb9baec97f20437ca92bce7b5092eb3f8093e6cff7d0ef938f6ac1c6369751974b508bd63337596e29532"], 0x28}], 0x1}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="0207015502"], 0x10}}, 0x40) 3.481855485s ago: executing program 1 (id=19): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1b0) lseek(r3, 0xfffffffffffffffe, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x487, 0x0, 0x4}]}) 3.363263859s ago: executing program 1 (id=21): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0xb, "1c0800"}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_012={0x2, 0x2, 0x8, "3994"}, @local=@item_4={0x3, 0x2, 0x2, "b09ea549"}, @global=@item_4={0x3, 0x1, 0xa, "9ce4f38d"}]}}, 0x0}, 0x0) 3.240033342s ago: executing program 3 (id=24): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4000fffffffa) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x3000) (async) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x3000) lseek(r0, 0xfffffffffffffffc, 0x3) 3.239748352s ago: executing program 3 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x7fffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.181861634s ago: executing program 3 (id=26): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000440)={@val={0x70, 0x6004}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @multicast2, @multicast1}, {0x0, 0x883e, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) (async) openat(0xffffffffffffffff, 0x0, 0x20080, 0x199) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.019078909s ago: executing program 2 (id=27): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) finit_module(r1, 0x0, 0x1) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000080)=0x2c) writev(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)='L', 0x1}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x80582, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff2) ioctl$TUNGETVNETLE(r2, 0x40047452, 0x0) (async) ioctl$TUNGETVNETLE(r2, 0x40047452, 0x0) close(r0) 2.783894787s ago: executing program 2 (id=28): unshare(0x6020400) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000080)) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x1804010, &(0x7f0000000100)={[{@huge_advise}, {@quota}], [{@smackfsroot={'smackfsroot', 0x3d, ')@)^'}}, {@dont_measure}, {@subj_role}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x30, 0x39, 0x38, 0x0, 0x66, 0x65, 0x35], 0x2d, [0x33, 0x35, 0x63, 0x65], 0x2d, [0x61, 0x66, 0x65, 0x30], 0x2d, [0x66, 0x37, 0x0, 0x34], 0x2d, [0x31, 0x32, 0x64, 0x34, 0x33, 0x38, 0x56, 0x30]}}}]}) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb654, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x81, 0xc5, 0x80}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \b(\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x631}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7340}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040800) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x0, 0x56c, 0x5, 0x0, 0x0, [{{r0}, 0x1ff}, {{r0}, 0x4}, {{r0}, 0x8}, {{r0}, 0x2}, {{r0}, 0x4}]}) 2.783416876s ago: executing program 0 (id=29): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x104f, &(0x7f0000000000)={0x0, 0x4aad, 0x100, 0x1, 0x102}, &(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f00000002c0)=0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x154, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xea5, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x110}}}, &(0x7f0000000300)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60000600) r12 = dup(r11) syz_ublk_add_dev(r2, r3, r7, r4, &(0x7f0000000540)={0x2e, 0x24, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x4, 0x70b, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x80}}}, &(0x7f00000005c0)=0x0) syz_ublk_setup_queues(r12, r13, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2000, 0x3, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb3b8, 0x3, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x1, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29d6, 0x8200, 0x85, 0xffffffff, 0x0, r12}}], 0x1, &(0x7f0000000340)={0x2e, 0x16, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r15) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r16 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) r18 = ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r17, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r18, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x80}) ioctl$KVM_RUN(r18, 0xae80, 0x0) 2.33947314s ago: executing program 0 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x2) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x131) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x847f432ceaaa6d9c, &(0x7f00000002c0), 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) r5 = syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fsopen(&(0x7f0000000080)='efivarfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000000)='\xd8\x00', &(0x7f0000000040)="15c9", 0x2) setsockopt$inet6_int(r6, 0x29, 0x11, 0x0, 0x0) r8 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r9 = syz_usb_connect$uac2(0x3, 0xf5, &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES32=r1], &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x6, 0x88, 0x6, 0x10, 0x3}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x8, [{0x40, &(0x7f0000000dc0)=@string={0x40, 0x3, "9aa41c79e1b93c586b46a8a62a42b973f21187b860af4f4721888120c7942a2416decc686fcd9e991acff016359ed919486e7c247e70e3a3fa539c601427"}}, {0xdf, &(0x7f0000000500)=@string={0xdf, 0x3, "10d5b1b6a660e8645a9df256068616c50d823aa45125e70ab751113a2e90343a314221cf95c4100a6201f7e73e5be940b1d407ceae9ee0e268a0f9f1d596a2868ce1c43758ee42e039cdaddb812b06b9072951cd0ba47776151f8a804161d9606d5ca339a29dc904e4380bf365fe410e0fcf68702f60d8900f8770c2c0df057c7e809883d9350bfe5e0d2bb9598414829c094d7a5b267e36af44b74a39bef45412ba21956e5bed8d0195793bc9aa4e13dad67198221cfb2ab22017e48866d7daffab57b8252c4e34f652152c34fe5db9c53250ddd945322c3b86c1caed"}}, {0xda, &(0x7f0000000b40)=ANY=[@ANYBLOB="da037a41077ba12d9ae871cf268c84ab056ef855c950f673255aecdcc9140938487a116e2f5a8148c3bb03c2f559219b6db13e5b95e2da22deca70134a0f069f959ecf402740cea84696a175fee252068011d228c6f562f99de9f2ee6b8cdff7ca738366d13eed5ff296ab273eb8702f0e1af978ec6015d92da1c16623a1f1bb714f4936f65884a39a8606b76004fe8cadc67b604b3f2140ff786e1b0084eb3130b9df11c6d6f89daf732224f717fef69aaf1af784cf17058ba8f12843488bde0f6b167e9192a655bfd1550603297277514589ed43f15a881600a4e8e6e356c2b0f1192378cd2661becf16a9a0903ea48f51a885ae9c1f01f1630a7679675415"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x800}}, {0xe8, &(0x7f0000000e40)=ANY=[@ANYBLOB="e8032045213e7141657bc58b3ce37f8825c72c4a00da63e2cfd0f1450de354db9b55ed7b60e0bc10e00f146ae76ea0363f228f007834eede1b2962640d8c27e52af56483479a4dd58bf3591489cb85564d5b854c6b58c9d44eda18e6453b066e78cdfed41e9319511dee91c04d7b0eae55a659fbc1b6fd54b74cccf16b5323e2e5dfa716d107ce48488ba466f01e4b28deac8b08ba12d4d5cb439bf36482d010d8271946172482e579caf0ca5838a042e7f3eb3c0861bb562f838f5dd78a068cb5efec5f159ebda1bb7693a747ad90ddc15f277e7f37690d5aea0056ea41234a279f587e8337b52a9bd80138", @ANYRES32=r0, @ANYRESDEC=r4, @ANYRESDEC=r0, @ANYRES8=r0]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x406}}, {0x58, &(0x7f0000000640)=@string={0x58, 0x3, "6241bc2adc432236e4afd20dda50d4defe51a0ae96023d61cb8694755df624fd49a158474c49e1654731659f597f740b33e4a6bfbe3c3f830c8d71650e5fd750c7aefc700abb04727c9f90a15cae882fafc8c402100c"}}]}) syz_usb_control_io$uac2(r9, &(0x7f00000007c0)={0x14, &(0x7f0000000700)={0x0, 0x6, 0x76, {0x76, 0x22, "cf7ccc284a26066b5a2c2bacbff64c07a9069e0df820b1f93a14e057bf4d0cbcc3f385ee395d5b81e4bd53526b0d47c5be31e8d468deb51ac295982921165f0ab60d557f40fd3a6d95195d830baeb3349241bc1feab7853ac0f0e7dd61c8b2e2c8b4c490e05193435589087816aa18c4798be7e7"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000800)={0x0, 0x6, 0xe3, "6ba6a0026a0c2a2969b5fac900fcd2f86e06a91d9e53c919736b6a12db1ba45179566fc98e44f97688658b9d18914d9a99e0d1e5daa89441b320a207f52f1678657f4c9a139dce0eecafd56f0c94a7c36a0b63218da12028247eaa34374d42c5c7e4aea510df883642d862546183ed1cd7f0c2c345f5e3cb67d27897135a0180afa454413a6166c02b9af2a1c43f481da01a7524b07cd6fcd8b09b2fe25583ffc165519271ea65a3cc8e19fa8917acd5adc76eab9643c5955dc693fffdf72667775772063dce545c6cf0d9ce95bae78b525c7908d6df2bf4d5720383219ab043c11eed"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x28}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000980)={0x20, 0x81, 0x3, "58d2bb"}, &(0x7f00000009c0)={0x20, 0x82, 0x2, "ce56"}, &(0x7f0000000a00)={0x20, 0x83, 0x1, 'b'}, &(0x7f0000000a40)=ANY=[@ANYBLOB="208420000000b4db5fff"], &(0x7f0000000a80)={0x20, 0x85, 0x3, "abff61"}}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x5}) 1.716114719s ago: executing program 1 (id=31): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0xa, 0x4) unshare(0x400) userfaultfd(0x0) syz_usb_connect$midi(0x3, 0x3e, &(0x7f00000039c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x283, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x6, 0x20, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x5, [], [{{0x9, 0x5, 0xc, 0x8, 0x200, 0x0, 0xfd, 0x4a, {0x4}}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x4, 0x8, 0x7, {0x4}}}]}}}}}]}}, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_buf(r1, 0x118, 0x29, 0x0, &(0x7f00000003c0)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5, 0x0, 0xf000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) eventfd2(0x10000, 0x80003) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @mcast2, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="15b74493720c0de31200bd02d00a9d55bb63fdc868996af2ef5217bccb2490006937d98c46ba294fb7c48a5a"], 0x28}, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x8, 0xa09, 0x6}) read$ublk_bdev(r6, &(0x7f00000002c0)=""/213, 0xd5) 1.590170582s ago: executing program 3 (id=32): unshare(0x60000600) (async) unshare(0x60000600) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x1589, {{0xa, 0x4e24, 0x3, @mcast2, 0x7}}, {{0xa, 0x4e22, 0x400, @empty, 0x81}}}, 0x108) socket(0x10, 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 1.549985844s ago: executing program 3 (id=33): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3500000005000000"], 0x35) ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000000)) setresuid(0xee01, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[=', 0x2}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r3, r4}}}], 0x20, 0x40044}}], 0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) socket$key(0xf, 0x3, 0x2) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000040)=ANY=[], 0x78) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x41}], 0x1, 0x382, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x40440, 0x0) ioctl$TIOCGSID(r6, 0x5429, 0x0) 1.534854124s ago: executing program 3 (id=34): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/usb/hiddev#\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D\x00\b'], 0x16c}}, 0x0) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "098700"}, @local=@item_4={0x3, 0x2, 0x4, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) setresuid(0x0, 0x0, 0xffffffffffffffff) syz_usb_control_io(r2, 0x0, 0x0) (async) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) 1.148008416s ago: executing program 2 (id=35): syz_usb_connect(0x6, 0xb6, &(0x7f00000001c0)=ANY=[@ANYBLOB="120109000000874040201f7200f2010203010902a400018104004f0904500b05a97a37020a24010a0b06020102092403050703020496062404029cfe09050b0040008000fce85f97af82a7ce1932dc70000464040507250123"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000000c0)=@string={0x0, 0x3, "89a1d1cf433340707ef4d8a6908e7df7febe2fcea691ce9256bf73ac1e1aa96fe503481565228e604181b8c1c39aeaa7ff88bc60296a21"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1409}}, {0xffffffffffffff39, &(0x7f0000000300)=@string={0xd8, 0x3, "5fac44402cb03fefe1a68a91e5c3eae18ce16dcf18fc7ccc51a646b74c71c0bca5e2e5782d31c8aa1b5fb4d9ae18afa07aa9769aeec173892b7af43886901acd310d1c15fdd444d005ce6f8353459bc7d43879fa6f0a8a2d40ef615bea2c5d08e4f8a8638184f48e77dc577d4977d3c406b1f8ebfacf237c44bcea9bf33b137c5fb7523153739156882c997d0519ad4fe0deb995b790ef2a4a89d9f6a2cdb0877231cd6157c633f42652a95499c60d4ca4c6ad63a474dabdf159d2a93fe9129a1cbce00266c35d9d54e3b157df9431cbc9528c6303fa"}}]}) 681.18881ms ago: executing program 2 (id=36): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) (async) rt_sigtimedwait(&(0x7f0000000240)={[0x5]}, 0x0, &(0x7f0000000280), 0x8) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, 0x0, 0x0) 667.72243ms ago: executing program 2 (id=37): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001600)='ip6gre0\x00') syz_usb_connect$midi(0x3, 0x32, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x8, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x7, 0x2, 0xff, {0x5, 0x25, 0x1, 0x1, "12"}}}]}}}}}]}}, 0x0) 511.978565ms ago: executing program 1 (id=38): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) (async) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001900)={r1, 0xfffffffe, {0x0, 0x0, 0x0, 0x200000000000ff, 0x0, 0x0, 0x12, 0x1a, 0x5, "6bd2ce84b1234138db25fff329199f845cce66b4619a5cd1dd6771351d0560c8c7623269e2ceb9df767d094e235ccadc2575f2c5ad3488dce807e1d99b9b562c", "65752d7c9cd1f9e7a28243618850777a00002f185a2f13122eaddbaf7d33f29700", "8233c0523a11f24983a7e1e0bf155d140add627ea5de9116423140975f3ffe75", [0xaa, 0xffffffffffffffff]}}) (async) r4 = geteuid() setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x7fff}, {0xc7, 0x2000000}], r4}, 0x18, 0x3) (async) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x8, 0x1) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000300000003000000000000000203010902240002010ed007090f0004040301020109210000500122880709058103200006e908", @ANYRES64=r0], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19.69849ms ago: executing program 1 (id=39): mkdir(&(0x7f0000000000)='./bus\x00', 0x120) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x103500, 0x0) setuid(0xee01) pivot_root(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') fchown(r0, 0x0, 0x0) 0s ago: executing program 1 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x4000044) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 21.526771][ T36] audit: type=1400 audit(1781430775.959:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.527888][ T286] cgroup: Unknown subsys name 'net' [ 21.549506][ T36] audit: type=1400 audit(1781430775.959:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.576852][ T36] audit: type=1400 audit(1781430775.989:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.576962][ T286] cgroup: Unknown subsys name 'devices' [ 21.701290][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.706898][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.819620][ T36] audit: type=1400 audit(1781430776.249:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.842823][ T36] audit: type=1400 audit(1781430776.259:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.867691][ T36] audit: type=1400 audit(1781430776.259:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.876249][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.899630][ T36] audit: type=1400 audit(1781430776.329:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.925031][ T36] audit: type=1400 audit(1781430776.339:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.976981][ T36] audit: type=1400 audit(1781430776.409:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.977480][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.002603][ T36] audit: type=1400 audit(1781430776.409:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.159220][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.168450][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.175711][ T293] bridge_slave_0: entered allmulticast mode [ 23.181995][ T293] bridge_slave_0: entered promiscuous mode [ 23.188420][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.195478][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.202558][ T293] bridge_slave_1: entered allmulticast mode [ 23.208842][ T293] bridge_slave_1: entered promiscuous mode [ 23.303452][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.310576][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.317646][ T295] bridge_slave_0: entered allmulticast mode [ 23.324091][ T295] bridge_slave_0: entered promiscuous mode [ 23.333018][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.340179][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.347271][ T295] bridge_slave_1: entered allmulticast mode [ 23.353513][ T295] bridge_slave_1: entered promiscuous mode [ 23.383827][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.390907][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.397963][ T297] bridge_slave_0: entered allmulticast mode [ 23.404254][ T297] bridge_slave_0: entered promiscuous mode [ 23.422197][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.429255][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.436439][ T297] bridge_slave_1: entered allmulticast mode [ 23.442643][ T297] bridge_slave_1: entered promiscuous mode [ 23.493801][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.500880][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.507932][ T299] bridge_slave_0: entered allmulticast mode [ 23.514238][ T299] bridge_slave_0: entered promiscuous mode [ 23.530715][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.537774][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.545036][ T299] bridge_slave_1: entered allmulticast mode [ 23.551288][ T299] bridge_slave_1: entered promiscuous mode [ 23.613129][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.620206][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.627508][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.634569][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.661771][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.668832][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.676130][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.683187][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.692079][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.700365][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.707643][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.714684][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.760370][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.767718][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.775329][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.782541][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.790476][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.797696][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.809766][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.816841][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.830243][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.837289][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.862670][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.869737][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.882116][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.889155][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.901290][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.908344][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.932159][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.939200][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.953026][ T293] veth0_vlan: entered promiscuous mode [ 23.977216][ T293] veth1_macvtap: entered promiscuous mode [ 23.988150][ T297] veth0_vlan: entered promiscuous mode [ 24.009139][ T297] veth1_macvtap: entered promiscuous mode [ 24.016336][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.033553][ T295] veth0_vlan: entered promiscuous mode [ 24.045327][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.052431][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.060601][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.067655][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.108683][ T295] veth1_macvtap: entered promiscuous mode [ 24.127221][ T299] veth0_vlan: entered promiscuous mode [ 24.169871][ T299] veth1_macvtap: entered promiscuous mode [ 24.182586][ T330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.262171][ T332] process 'syz.2.3' launched '/dev/fd/10' with NULL argv: empty string added [ 24.289887][ T340] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1706180555 (218391111040 ns) > initial count (181296660480 ns). Using initial count to start timer. [ 24.314730][ T340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 24.409663][ T324] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.468841][ T347] input: syz1 as /devices/virtual/input/input4 [ 24.503109][ T350] capability: warning: `syz.2.10' uses deprecated v2 capabilities in a way that may be insecure [ 24.546096][ T356] syz.2.13: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 24.563845][ T356] CPU: 0 UID: 0 PID: 356 Comm: syz.2.13 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 24.563872][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 24.563885][ T356] Call Trace: [ 24.563891][ T356] [ 24.563897][ T356] __dump_stack+0x21/0x30 [ 24.563928][ T356] dump_stack_lvl+0x140/0x1c0 [ 24.563949][ T356] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.563972][ T356] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 24.563994][ T356] dump_stack+0x19/0x20 [ 24.564015][ T356] warn_alloc+0x1e7/0x2c0 [ 24.564037][ T356] ? kasan_save_free_info+0x4a/0x60 [ 24.564050][ T356] ? __cfi_warn_alloc+0x10/0x10 [ 24.564071][ T356] ? __get_vm_area_node+0x201/0x3d0 [ 24.564095][ T356] ? packet_set_ring+0x745/0x28c0 [ 24.564118][ T356] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 24.564143][ T356] ? packet_set_ring+0x679/0x28c0 [ 24.564164][ T356] ? do_sock_setsockopt+0x27c/0x410 [ 24.564185][ T356] ? __x64_sys_setsockopt+0x1b7/0x250 [ 24.564208][ T356] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 24.564233][ T356] ? __asan_memset+0x39/0x50 [ 24.564250][ T356] ? __alloc_pages_noprof+0xe0/0x7e0 [ 24.564283][ T356] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 24.564308][ T356] ? packet_set_ring+0x745/0x28c0 [ 24.564330][ T356] vzalloc_noprof+0x103/0x1d0 [ 24.564345][ T356] ? packet_set_ring+0x745/0x28c0 [ 24.564367][ T356] ? __cfi_vzalloc_noprof+0x10/0x10 [ 24.564383][ T356] ? packet_set_ring+0x679/0x28c0 [ 24.564407][ T356] packet_set_ring+0x745/0x28c0 [ 24.564429][ T356] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 24.564451][ T356] ? check_stack_object+0x12b/0x150 [ 24.564466][ T356] ? packet_mmap+0x590/0x590 [ 24.564486][ T356] ? __check_object_size+0xe0/0x830 [ 24.564503][ T356] ? __cfi___check_object_size+0x10/0x10 [ 24.564521][ T356] ? __kasan_check_write+0x18/0x20 [ 24.564540][ T356] packet_setsockopt+0xdb5/0x1510 [ 24.564561][ T356] ? __cfi_packet_setsockopt+0x10/0x10 [ 24.564584][ T356] ? selinux_socket_setsockopt+0x324/0x3d0 [ 24.564608][ T356] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 24.564632][ T356] ? do_futex+0x32a/0x510 [ 24.564656][ T356] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 24.564677][ T356] ? security_socket_setsockopt+0x3d/0x100 [ 24.564701][ T356] ? __cfi_packet_setsockopt+0x10/0x10 [ 24.564723][ T356] do_sock_setsockopt+0x27c/0x410 [ 24.564746][ T356] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 24.564769][ T356] __x64_sys_setsockopt+0x1b7/0x250 [ 24.564788][ T356] x64_sys_call+0x2adc/0x2ee0 [ 24.564805][ T356] do_syscall_64+0x57/0xf0 [ 24.564827][ T356] ? clear_bhb_loop+0x50/0xa0 [ 24.564845][ T356] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.564872][ T356] RIP: 0033:0x7fdba979ce59 [ 24.564900][ T356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.564914][ T356] RSP: 002b:00007fdbaa6a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 24.564935][ T356] RAX: ffffffffffffffda RBX: 00007fdba9a15fa0 RCX: 00007fdba979ce59 [ 24.564948][ T356] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005 [ 24.564960][ T356] RBP: 00007fdba9832d6f R08: 000000000000001c R09: 0000000000000000 [ 24.564972][ T356] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 24.564982][ T356] R13: 00007fdba9a16038 R14: 00007fdba9a15fa0 R15: 00007ffe8eec8b58 [ 24.564996][ T356] [ 24.565024][ T356] Mem-Info: [ 24.566447][ T324] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.586377][ T356] active_anon:5973 inactive_anon:0 isolated_anon:0 [ 24.586377][ T356] active_file:5534 inactive_file:2277 isolated_file:0 [ 24.586377][ T356] unevictable:0 dirty:1410 writeback:0 [ 24.586377][ T356] slab_reclaimable:3747 slab_unreclaimable:71073 [ 24.586377][ T356] mapped:23829 shmem:163 pagetables:806 [ 24.586377][ T356] sec_pagetables:0 bounce:0 [ 24.586377][ T356] kernel_misc_reclaimable:0 [ 24.586377][ T356] free:1546444 free_pcp:2313 free_cma:0 [ 24.587074][ T324] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.590197][ T356] Node 0 active_anon:23892kB inactive_anon:0kB active_file:22136kB inactive_file:9108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95316kB dirty:5640kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:4344kB pagetables:3224kB sec_pagetables:0kB all_unreclaimable? no [ 24.597072][ T324] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 24.601844][ T333] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.607483][ T324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.613173][ T356] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963284kB mlocked:0kB bounce:0kB free_pcp:5120kB local_pcp:5120kB free_cma:0kB [ 24.618721][ T324] usb 1-1: Product: syz [ 24.621660][ T356] lowmem_reserve[]: [ 24.626983][ T324] usb 1-1: Manufacturer: syz [ 24.631855][ T356] 0 [ 24.643454][ T324] usb 1-1: SerialNumber: syz [ 24.652546][ T356] 3921 [ 24.857974][ T324] usb 1-1: 0:2 : does not exist [ 24.860575][ T356] 3921 [ 24.866622][ T324] usb 1-1: unit 9 not found! [ 24.874096][ T356] [ 24.886051][ T324] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 24.890579][ T356] Normal free:3232412kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21796kB inactive_anon:0kB active_file:22136kB inactive_file:9108kB unevictable:0kB writepending:5640kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2312kB local_pcp:248kB free_cma:0kB [ 24.904169][ T324] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 24.904244][ T356] lowmem_reserve[]: [ 24.916646][ T324] usb 1-1: 4:0: cannot get min/max values for control 5 (id 4) [ 24.959062][ T356] 0 [ 25.018142][ T324] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 25.055143][ T356] 0 [ 25.062338][ T324] usb 1-1: 4:0: cannot get min/max values for control 7 (id 4) [ 25.064961][ T333] usb 2-1: Using ep0 maxpacket: 8 [ 25.069900][ T324] usb 1-1: 4:0: cannot get min/max values for control 8 (id 4) [ 25.074135][ T356] 0 [ 25.074150][ T356] DMA32: 5*4kB [ 25.078981][ T324] usb 1-1: 4:0: cannot get min/max values for control 9 (id 4) [ 25.081774][ T356] (M) 4*8kB (M) 4*16kB [ 25.086775][ T324] usb 1-1: 4:0: cannot get min/max values for control 10 (id 4) [ 25.099127][ T333] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 25.136975][ T324] usb 1-1: USB disconnect, device number 2 [ 25.140160][ T356] (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 25.221729][ T333] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.234369][ T356] Normal: 64*4kB (UME) 17*8kB (UME) 21*16kB (UME) 24*32kB (UME) 132*64kB (UME) 72*128kB (UME) 35*256kB (UME) 17*512kB (UME) 12*1024kB (UME) 7*2048kB (UM) 774*4096kB (M) = 3233752kB [ 25.244151][ T333] usb 2-1: config 0 has no interface number 0 [ 25.262067][ T356] 8005 total pagecache pages [ 25.272809][ T356] 0 pages in swap cache [ 25.276972][ T356] Free swap = 124996kB [ 25.280869][ T333] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 25.281557][ T356] Total swap = 124996kB [ 25.294042][ T333] usb 2-1: New USB device strings: Mfr=1, Product=232, SerialNumber=77 [ 25.303109][ T333] usb 2-1: Product: syz [ 25.305813][ T356] 2097051 pages RAM [ 25.307785][ T333] usb 2-1: Manufacturer: syz [ 25.312104][ T356] 0 pages HighMem/MovableOnly [ 25.316195][ T333] usb 2-1: SerialNumber: syz [ 25.320807][ T356] 352264 pages reserved [ 25.326495][ T333] usb 2-1: config 0 descriptor?? [ 25.331076][ T356] 0 pages cma reserved [ 25.339745][ T356] Memory allocations: [ 25.343758][ T356] 0 B 0 init/main.c:1477 func:do_initcalls [ 25.351208][ T356] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 25.359379][ T356] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 25.367168][ T356] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 25.375448][ T356] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 25.383458][ T356] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 25.393233][ T356] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 25.401880][ T356] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 25.410073][ T356] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 25.418075][ T356] 0 B 0 init/initramfs.c:101 func:find_link [ 25.545146][ T324] usb 2-1: USB disconnect, device number 2 [ 25.809588][ T333] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 25.960675][ T333] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.972581][ T333] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 25.981708][ T333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.989762][ T333] usb 1-1: Product: syz [ 25.993957][ T333] usb 1-1: Manufacturer: syz [ 25.998569][ T333] usb 1-1: SerialNumber: syz [ 26.004222][ T333] usb 1-1: config 0 descriptor?? [ 26.010108][ T333] plusb 1-1:0.0: probe with driver plusb failed with error -22 [ 26.074986][ T374] ======================================================= [ 26.074986][ T374] WARNING: The mand mount option has been deprecated and [ 26.074986][ T374] and is ignored by this kernel. Remove the mand [ 26.074986][ T374] option from the mount to silence this warning. [ 26.074986][ T374] ======================================================= [ 26.200260][ T384] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.213734][ T324] usb 1-1: USB disconnect, device number 3 [ 26.419625][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.579586][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 26.586270][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.597288][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.607130][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.609562][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.620180][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.637145][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.637492][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 26.637505][ T36] audit: type=1400 audit(1781430781.069:148): avc: denied { append } for pid=397 comm="syz.2.27" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.645901][ T45] usb 2-1: config 0 descriptor?? [ 26.721649][ T36] audit: type=1400 audit(1781430781.159:149): avc: denied { create } for pid=401 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.729082][ T402] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 26.746783][ T36] audit: type=1400 audit(1781430781.159:150): avc: denied { getopt } for pid=401 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.772051][ T36] audit: type=1400 audit(1781430781.159:151): avc: denied { mounton } for pid=401 comm="syz.2.28" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 26.796715][ T36] audit: type=1400 audit(1781430781.199:152): avc: denied { setopt } for pid=403 comm="syz.0.29" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.800539][ T10] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 26.825503][ T10] usb 4-1: config 0 has no interface number 0 [ 26.829536][ T36] audit: type=1400 audit(1781430781.209:153): avc: denied { map } for pid=403 comm="syz.0.29" path="socket:[4570]" dev="sockfs" ino=4570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 26.831923][ T10] usb 4-1: config 0 interface 41 has no altsetting 0 [ 26.874487][ T10] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 26.884929][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.893199][ T10] usb 4-1: Product: syz [ 26.897495][ T10] usb 4-1: Manufacturer: syz [ 26.902345][ T10] usb 4-1: SerialNumber: syz [ 26.909820][ T10] usb 4-1: config 0 descriptor?? [ 27.009532][ T324] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.086837][ T45] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 27.097005][ T45] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 27.160713][ T324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 27.171890][ T324] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 27.185040][ T324] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 27.198020][ T324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.219705][ T324] usb 3-1: config 0 descriptor?? [ 27.234569][ T36] audit: type=1400 audit(1781430781.669:154): avc: denied { mount } for pid=412 comm="syz.0.30" name="/" dev="ramfs" ino=4022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 27.256581][ T36] audit: type=1400 audit(1781430781.669:155): avc: denied { create } for pid=412 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.275847][ T36] audit: type=1400 audit(1781430781.669:156): avc: denied { bind } for pid=412 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.296412][ T45] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 27.297021][ T36] audit: type=1400 audit(1781430781.669:157): avc: denied { name_bind } for pid=412 comm="syz.0.30" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 27.306036][ T45] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 27.340307][ T45] microsoft 0003:045E:07DA.0001: no inputs found [ 27.346758][ T45] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 27.359328][ T45] usb 2-1: USB disconnect, device number 3 [ 27.378588][ T416] fido_id[416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 27.403307][ T10] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 27.417956][ T10] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 27.429436][ T10] usb 4-1: USB disconnect, device number 2 [ 27.549627][ T408] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.627150][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.634756][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.642276][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.649796][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.657270][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.664780][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.672284][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.679796][ T408] usb 1-1: device descriptor read/64, error -71 [ 27.686078][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.693766][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.701274][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.708736][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.716268][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.723770][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.731292][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.738767][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.746270][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.753782][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.761282][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.768778][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.776309][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.784091][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.791657][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.799171][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.806793][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.814338][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.821931][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.829755][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.838241][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.845804][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.853562][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.861228][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.868739][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.876276][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.883873][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.891396][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.898895][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.906572][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.914118][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.922842][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.935321][ T324] thrustmaster 0003:044F:B654.0002: unknown main item tag 0x0 [ 27.943741][ T324] thrustmaster 0003:044F:B654.0002: hidraw0: USB HID v0.05 Device [HID 044f:b654] on usb-dummy_hcd.2-1/input0 [ 27.955656][ T324] thrustmaster 0003:044F:B654.0002: no inputs found [ 27.962508][ T408] usb 1-1: device descriptor read/64, error -71 [ 28.069598][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.209544][ T408] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 28.220836][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.229154][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 28.241175][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 28.250679][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.258779][ T9] usb 2-1: Product: syz [ 28.262996][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.270587][ T9] usb 2-1: Manufacturer: syz [ 28.275206][ T9] usb 2-1: SerialNumber: syz [ 28.339562][ T408] usb 1-1: device descriptor read/64, error -71 [ 28.346454][ T324] usb 3-1: USB disconnect, device number 2 [ 28.429571][ T10] usb 4-1: device descriptor read/64, error -71 [ 28.579580][ T408] usb 1-1: device descriptor read/64, error -71 [ 28.669536][ T10] usb 4-1: device descriptor read/64, error -71 [ 28.689665][ T408] usb usb1-port1: attempt power cycle [ 28.919571][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.993770][ T9] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 08, bLength 9, bSynchAddress 07 [ 29.006194][ T437] support for cryptoloop has been removed. Use dm-crypt instead. [ 29.010902][ T9] usb 2-1: USB disconnect, device number 4 [ 29.028474][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.049859][ T10] usb 4-1: device descriptor read/64, error -71 [ 29.049869][ T408] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 29.080667][ T408] usb 1-1: device descriptor read/8, error -71 [ 29.139592][ T324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.211064][ T408] usb 1-1: device descriptor read/8, error -71 [ 29.289936][ T324] usb 3-1: Using ep0 maxpacket: 8 [ 29.297579][ T324] usb 3-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 29.306689][ T324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.309579][ T10] usb 4-1: device descriptor read/64, error -71 [ 29.314840][ T324] usb 3-1: Product: syz [ 29.325434][ T324] usb 3-1: Manufacturer: syz [ 29.330047][ T324] usb 3-1: SerialNumber: syz [ 29.429638][ T10] usb usb4-port1: attempt power cycle [ 29.449857][ T408] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 29.470511][ T408] usb 1-1: device descriptor read/8, error -71 [ 29.538492][ T324] usb 3-1: MIDIStreaming interface descriptor not found [ 29.545699][ T293] ------------[ cut here ]------------ [ 29.550927][ T324] usb 3-1: USB disconnect, device number 3 [ 29.551244][ T293] WARNING: CPU: 0 PID: 293 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 29.551289][ T293] Modules linked in: [ 29.551301][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 29.551320][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.551330][ T293] RIP: 0010:drop_nlink+0xce/0x110 [ 29.551351][ T293] Code: 04 00 00 be 08 00 00 00 e8 6f 06 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 4f 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 29.551365][ T293] RSP: 0018:ffffc90006a7fc60 EFLAGS: 00010293 [ 29.551380][ T293] RAX: ffffffff81f271be RBX: ffff888134a19e30 RCX: ffff8881066bcc00 [ 29.551392][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.551403][ T293] RBP: ffffc90006a7fc88 R08: 0000000000000003 R09: 0000000000000004 [ 29.551416][ T293] R10: dffffc0000000000 R11: fffff52000d4ff7c R12: dffffc0000000000 [ 29.551428][ T293] R13: 1ffff110269433cf R14: ffff888134a19e78 R15: 0000000000000000 [ 29.551442][ T293] FS: 00005555642ec500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.551458][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.551482][ T293] CR2: 000055556430f958 CR3: 000000012afd6000 CR4: 00000000003526b0 [ 29.551499][ T293] Call Trace: [ 29.551506][ T293] [ 29.551514][ T293] shmem_rmdir+0x5f/0x90 [ 29.551540][ T293] vfs_rmdir+0x3e3/0x560 [ 29.551564][ T293] incfs_kill_sb+0x109/0x230 [ 29.551584][ T293] deactivate_locked_super+0xd5/0x2a0 [ 29.551608][ T293] deactivate_super+0xb8/0xe0 [ 29.551631][ T293] cleanup_mnt+0x406/0x4a0 [ 29.551652][ T293] __cleanup_mnt+0x1d/0x40 [ 29.551672][ T293] task_work_run+0x1e5/0x260 [ 29.551696][ T293] ? __cfi_task_work_run+0x10/0x10 [ 29.551718][ T293] ? __x64_sys_umount+0x12e/0x180 [ 29.551734][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 29.551752][ T293] ? __kasan_check_read+0x15/0x20 [ 29.551770][ T293] resume_user_mode_work+0x35/0x50 [ 29.551788][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 29.551811][ T293] do_syscall_64+0x63/0xf0 [ 29.551834][ T293] ? clear_bhb_loop+0x50/0xa0 [ 29.551853][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.572443][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.581273][ T293] RIP: 0033:0x7f4ab3d9e097 [ 29.581297][ T293] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 29.621234][ T408] usb 1-1: device descriptor read/8, error -71 [ 29.623469][ T293] RSP: 002b:00007ffcefb215b8 EFLAGS: 00000246 [ 29.749631][ T408] usb usb1-port1: unable to enumerate USB device [ 29.749847][ T293] ORIG_RAX: 00000000000000a6 [ 29.838801][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4ab3d9e097 [ 29.846795][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcefb21670 [ 29.855011][ T293] RBP: 00007ffcefb21670 R08: 00007ffcefb22670 R09: 00000000ffffffff [ 29.863426][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcefb22700 [ 29.871424][ T293] R13: 00007f4ab3e321ca R14: 0000000000007348 R15: 00007ffcefb22740 [ 29.879624][ T293] [ 29.882651][ T293] ---[ end trace 0000000000000000 ]--- [ 29.888223][ T293] ================================================================== [ 29.896293][ T293] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 29.902534][ T293] Write of size 4 at addr 0000000000000168 by task syz-executor/293 [ 29.910502][ T293] [ 29.912819][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 29.912841][ T293] Tainted: [W]=WARN [ 29.912844][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.912851][ T293] Call Trace: [ 29.912856][ T293] [ 29.912862][ T293] __dump_stack+0x21/0x30 [ 29.912882][ T293] dump_stack_lvl+0x140/0x1c0 [ 29.912898][ T293] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.912922][ T293] print_report+0x3d/0x70 [ 29.912945][ T293] kasan_report+0x162/0x1a0 [ 29.912964][ T293] ? ihold+0x24/0x70 [ 29.912977][ T293] ? _raw_spin_unlock+0x45/0x60 [ 29.912991][ T293] ? ihold+0x24/0x70 [ 29.913002][ T293] kasan_check_range+0x25a/0x2b0 [ 29.913015][ T293] __kasan_check_write+0x18/0x20 [ 29.913025][ T293] ihold+0x24/0x70 [ 29.913036][ T293] vfs_rmdir+0x26a/0x560 [ 29.913051][ T293] incfs_kill_sb+0x109/0x230 [ 29.913062][ T293] deactivate_locked_super+0xd5/0x2a0 [ 29.913076][ T293] deactivate_super+0xb8/0xe0 [ 29.913090][ T293] cleanup_mnt+0x406/0x4a0 [ 29.913103][ T293] __cleanup_mnt+0x1d/0x40 [ 29.913114][ T293] task_work_run+0x1e5/0x260 [ 29.913129][ T293] ? __cfi_task_work_run+0x10/0x10 [ 29.913141][ T293] ? __x64_sys_umount+0x12e/0x180 [ 29.913150][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 29.913160][ T293] ? __kasan_check_read+0x15/0x20 [ 29.913170][ T293] resume_user_mode_work+0x35/0x50 [ 29.913185][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 29.913198][ T293] do_syscall_64+0x63/0xf0 [ 29.913212][ T293] ? clear_bhb_loop+0x50/0xa0 [ 29.913223][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.913238][ T293] RIP: 0033:0x7f4ab3d9e097 [ 29.913248][ T293] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 29.913258][ T293] RSP: 002b:00007ffcefb215b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.913272][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4ab3d9e097 [ 29.913279][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcefb21670 [ 29.913286][ T293] RBP: 00007ffcefb21670 R08: 00007ffcefb22670 R09: 00000000ffffffff [ 29.913293][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcefb22700 [ 29.913300][ T293] R13: 00007f4ab3e321ca R14: 0000000000007348 R15: 00007ffcefb22740 [ 29.913309][ T293] [ 29.913313][ T293] ================================================================== [ 29.949559][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.951308][ T293] Disabling lock debugging due to kernel taint [ 29.970584][ T10] usb 4-1: device descriptor read/8, error -71 [ 29.973384][ T293] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 30.100563][ T10] usb 4-1: device descriptor read/8, error -71 [ 30.105968][ T293] #PF: supervisor write access in kernel mode [ 30.105985][ T293] #PF: error_code(0x0002) - not-present page [ 30.105997][ T293] PGD 800000010c757067 P4D 800000010c757067 PUD 0 [ 30.209107][ T293] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 30.215166][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Tainted: G B W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 30.228268][ T293] Tainted: [B]=BAD_PAGE, [W]=WARN [ 30.233271][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.243319][ T293] RIP: 0010:ihold+0x2a/0x70 [ 30.247843][ T293] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 30.267617][ T293] RSP: 0018:ffffc90006a7fca0 EFLAGS: 00010246 [ 30.273710][ T293] RAX: ffff8881066bcc00 RBX: 0000000000000000 RCX: ffff8881066bcc00 [ 30.281679][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.289661][ T293] RBP: ffffc90006a7fcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 30.297644][ T293] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff888134a19e3c [ 30.305698][ T293] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 30.313708][ T293] FS: 00005555642ec500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.322634][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.329253][ T293] CR2: 0000000000000168 CR3: 000000012afd6000 CR4: 00000000003526b0 [ 30.337244][ T293] DR0: 000000007fffffff DR1: 00000000000001f8 DR2: 0000000000000004 [ 30.345207][ T293] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 30.349697][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 30.353348][ T293] Call Trace: [ 30.353360][ T293] [ 30.353369][ T293] vfs_rmdir+0x26a/0x560 [ 30.371302][ T293] incfs_kill_sb+0x109/0x230 [ 30.375882][ T293] deactivate_locked_super+0xd5/0x2a0 [ 30.380591][ T10] usb 4-1: device descriptor read/8, error -71 [ 30.381250][ T293] deactivate_super+0xb8/0xe0 [ 30.392062][ T293] cleanup_mnt+0x406/0x4a0 [ 30.396468][ T293] __cleanup_mnt+0x1d/0x40 [ 30.400873][ T293] task_work_run+0x1e5/0x260 [ 30.405450][ T293] ? __cfi_task_work_run+0x10/0x10 [ 30.410547][ T293] ? __x64_sys_umount+0x12e/0x180 [ 30.415554][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 30.420910][ T293] ? __kasan_check_read+0x15/0x20 [ 30.425921][ T293] resume_user_mode_work+0x35/0x50 [ 30.431193][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 30.436648][ T293] do_syscall_64+0x63/0xf0 [ 30.441052][ T293] ? clear_bhb_loop+0x50/0xa0 [ 30.445715][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.451597][ T293] RIP: 0033:0x7f4ab3d9e097 [ 30.456004][ T293] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 30.476209][ T293] RSP: 002b:00007ffcefb215b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.484622][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4ab3d9e097 [ 30.492583][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcefb21670 [ 30.500544][ T293] RBP: 00007ffcefb21670 R08: 00007ffcefb22670 R09: 00000000ffffffff [ 30.508504][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcefb22700 [ 30.510613][ T10] usb 4-1: device descriptor read/8, error -71 [ 30.516557][ T293] R13: 00007f4ab3e321ca R14: 0000000000007348 R15: 00007ffcefb22740 [ 30.516583][ T293] [ 30.516590][ T293] Modules linked in: [ 30.537660][ T293] CR2: 0000000000000168 [ 30.541970][ T293] ---[ end trace 0000000000000000 ]--- [ 30.547431][ T293] RIP: 0010:ihold+0x2a/0x70 [ 30.551946][ T293] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 30.571575][ T293] RSP: 0018:ffffc90006a7fca0 EFLAGS: 00010246 [ 30.577637][ T293] RAX: ffff8881066bcc00 RBX: 0000000000000000 RCX: ffff8881066bcc00 [ 30.585608][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.593580][ T293] RBP: ffffc90006a7fcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 30.601549][ T293] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff888134a19e3c [ 30.609538][ T293] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 30.617589][ T293] FS: 00005555642ec500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.626517][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.629668][ T10] usb usb4-port1: unable to enumerate USB device [ 30.633109][ T293] CR2: 0000000000000168 CR3: 000000012afd6000 CR4: 00000000003526b0 [ 30.633131][ T293] DR0: 000000007fffffff DR1: 00000000000001f8 DR2: 0000000000000004 [ 30.655364][ T293] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 30.663328][ T293] Kernel panic - not syncing: Fatal exception [ 30.669715][ T293] Kernel Offset: disabled [ 30.674028][ T293] Rebooting in 86400 seconds..