last executing test programs: 4.402899924s ago: executing program 0 (id=48): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, &(0x7f00000000c0)=[{0x4, 0x7ff, 0x19fa}], 0x1, 0x7f, 0x10, 0x4, 0x60, 0x8}) r1 = socket(0x1f, 0x2, 0x40000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x2, 0x2, 0x5000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 4.401720234s ago: executing program 0 (id=49): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = accept$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000240)=0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x10000008, 0x4) sendmmsg$inet6(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="f1a40c60c60fd798d721d99bfa451331e235554b78a19f32b65997d9814c43ca9d72711080a4068e3d4ce687e9cf8f8d330060a06eaf17c96d52e6aaae01f95c68ca8230e9c88257e168523a293c28eaea4768f55d972786ddc0bdad80c9b990e931f045ed646d7a2c6e9eb172ad55498aaef58347b589c3efa2d329fead75f9031f3459d18ef5f8b14a61bf", 0x8c}], 0x1, &(0x7f0000000580)=ANY=[], 0x208}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000007c0)="d57075275ba31ef0993c990e55b65c1eeb8746039057efc2ea428aa249c92ecc1496aace470987027b0e7d3a17d33b0189f3c12a2c9d876c8d7a53311d1e6531a166d6846ee6997329eb4b5cfed4ce6420809bd7992e22748372ef24a324b88d524dd87cade59157db7c95c1fc9a1dc7d09a228370fa7124b56f9449aeb5a6a89d082053c5f17d4a5fa4966715d871ac2b31b9a2e62f6c2749463a0a14ffbb3de1ef2c897ebe", 0xa6}, {&(0x7f0000000880)="38754bc0abb2d7ae542cc0049112beea2406bb7ea28b803cc1388f65268d47413b014ef7d3f30b7e7b5196cf60d57a7b24133f4e91e62e66d6aa3836a18209b140033818a6113cfaac", 0x49}, {&(0x7f0000000900)="8a0e70a59ee7", 0x6}], 0x3}}], 0x2, 0x1c0) recvfrom(r0, 0x0, 0x0, 0x40010062, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4a) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="0bbc63691a30de5e88c0250464c242c4dad725ac2147f68a25c10cabf4d31f15ea8a22d03ce0fd130d3f3467528000b8426b3c9e0c06501ef0f8d842004937164ee290228635d022f20de3544c90fae78a5ad6b6d0dcbc90c3cb", 0x5a}, {&(0x7f0000000080)="b3afade7a24447272675", 0xa}, {&(0x7f00000000c0)="8ba6910e861a0c44e9eb7b8033994447840edf114f52dc2a6dc7b91800fa8303eee57b0dc0166713913c0dfed79814b194af71", 0x33}], 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) accept$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000240)=0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x10000008, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="f1a40c60c60fd798d721d99bfa451331e235554b78a19f32b65997d9814c43ca9d72711080a4068e3d4ce687e9cf8f8d330060a06eaf17c96d52e6aaae01f95c68ca8230e9c88257e168523a293c28eaea4768f55d972786ddc0bdad80c9b990e931f045ed646d7a2c6e9eb172ad55498aaef58347b589c3efa2d329fead75f9031f3459d18ef5f8b14a61bf", 0x8c}], 0x1, &(0x7f0000000580)=ANY=[], 0x208}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000007c0)="d57075275ba31ef0993c990e55b65c1eeb8746039057efc2ea428aa249c92ecc1496aace470987027b0e7d3a17d33b0189f3c12a2c9d876c8d7a53311d1e6531a166d6846ee6997329eb4b5cfed4ce6420809bd7992e22748372ef24a324b88d524dd87cade59157db7c95c1fc9a1dc7d09a228370fa7124b56f9449aeb5a6a89d082053c5f17d4a5fa4966715d871ac2b31b9a2e62f6c2749463a0a14ffbb3de1ef2c897ebe", 0xa6}, {&(0x7f0000000880)="38754bc0abb2d7ae542cc0049112beea2406bb7ea28b803cc1388f65268d47413b014ef7d3f30b7e7b5196cf60d57a7b24133f4e91e62e66d6aa3836a18209b140033818a6113cfaac", 0x49}, {&(0x7f0000000900)="8a0e70a59ee7", 0x6}], 0x3}}], 0x2, 0x1c0) (async) recvfrom(r0, 0x0, 0x0, 0x40010062, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r4) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4a) (async) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="0bbc63691a30de5e88c0250464c242c4dad725ac2147f68a25c10cabf4d31f15ea8a22d03ce0fd130d3f3467528000b8426b3c9e0c06501ef0f8d842004937164ee290228635d022f20de3544c90fae78a5ad6b6d0dcbc90c3cb", 0x5a}, {&(0x7f0000000080)="b3afade7a24447272675", 0xa}, {&(0x7f00000000c0)="8ba6910e861a0c44e9eb7b8033994447840edf114f52dc2a6dc7b91800fa8303eee57b0dc0166713913c0dfed79814b194af71", 0x33}], 0x3) (async) 4.338567366s ago: executing program 0 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0xb, "93b4af02"}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, "8500"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x7}, 0x1c) (async) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000000), 0x4) (async) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e22, @private=0xa010100}, {0x306, @local}, 0xa8, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 'pimreg1\x00'}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008961b12000000002000010902240001000080100904000009030001000921040000012228000905810300020007fe"], 0x0) (async, rerun: 64) r5 = eventfd(0xfffffffa) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) fsetxattr$system_posix_acl(r5, &(0x7f0000002740)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x140, 0x4) close_range(r0, r6, 0x0) 3.812078292s ago: executing program 2 (id=54): ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x1, 'ip6erspan0\x00', {}, 0x6}) syz_usb_connect$uac3(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000201e04df30400001020301090292000301fa8001080b0002010130400904000000010130000a2401062e00080000001324030304040301080104000008000010050011240a010200000000000000000100000009040100000101", @ANYRESHEX], 0x0) 3.126623823s ago: executing program 0 (id=60): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000380)={0xa0003, 0x0, {[0x7fff, 0x80000000, 0x800, 0xff, 0x8, 0x6, 0x8000, 0x7fffffffffffffff]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100)=0xfa, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0xf, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x2000000) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 2.982756998s ago: executing program 0 (id=63): mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) syz_usb_connect$uac3(0x0, 0x98, &(0x7f0000000480)=ANY=[@ANYBLOB='F>', @ANYBLOB="733d03073a3654d1086523f848e8db9c0539f80ebb4762046b2a5e9e0c324508f49bbb7bfdd4ceed7f94e0e054e348474ae3b33e8c078642a37796950b309cfecd88e3744d834f1ac4a6c211e525e13a0d8eafd19637f4c9426d55c57689", @ANYRES64, @ANYRESHEX=r2, @ANYBLOB="77ee47ae0be371a7668efc2fd6d89ff1e63eb90b88023bd19f0461a3c214c29673118671bb884bf8093f39838c42099672ff684dc6a7a83cef017d5571cb33c982aaec59a6ba0741a65c44e35542b1645773b381a9db", @ANYRES32=r0, @ANYRESDEC], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xee, 0x7, 0x7f}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0xc, 0x0, 0x10, 0x1}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="230f050000"], 0x4, [{0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="dc03722fea3039a6dfeda86fc57bae16a0ab75369396f685be071fa781b7ed209159b65828d6ac5b87ee37dc6b9f9b14209938322da7be85dfee2740569efaa7934920542cb1a647f3e7df37ca742c826e63b123db5bd0d9dc7fd76bba20f61df929882dfc6b4ab0a52e9ada9b7ae4f9b17e33fa6061d3260b1d7beafa57834f211256122e50b48d3bd4851702ad038ca5a402750f0669ddeecdd118019f93bd19ec672f5674c0699615e3485fc306d69af2c1c25fef76736c080c048e6699a0a9c8f5773ddab1a22f9a26572a079154c327416e2f2439e2b44342c8"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x98, &(0x7f0000000300)=@string={0x98, 0x3, "09d265309234c056fe8f5177e6699f4d3c5ab4395e430bb71215efafbe1c126d6935a6ee91859f4856e9581dc14b1d527fbcdc9601575032c4bef529e5c85e47486b3a518cf75e8306beb5fdb947eae42573cb3913d8ced112f9f591ddcd0a232989a47051320e076bfae9c10f9bdabd89b89a4d6d33f94b0522604aefdce7e4d314ae1edccc5de30adf909d9ab46d27d2fc9e38d914"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x660}}]}) 2.377316446s ago: executing program 2 (id=74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) setuid(0xee01) r3 = socket$inet6(0xa, 0x2, 0xfff) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0xfffffffd, 0x40280003, 0x2, 0x7, 0x961}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x190c012, &(0x7f0000000240)={[{@nfs_export_on}, {@uuid_null}, {@index_on}, {@verity_on}, {@redirect_dir_off}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.284478609s ago: executing program 2 (id=75): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x2, 0x81) sendfile(r3, r3, 0x0, 0x1200000000000) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8d0300dd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) read(r4, &(0x7f0000000240)=""/2, 0x2) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x20, 0x23, 0xd6, {0xd6, 0x10, "dda3145ee00be6698b47a75665bcc4c3b19d475e5923682ca39bdd246c62a2c12fccc341eaab1e54d75a07e5e29170c65564e0a07e015f4ed7dd49cabb8eb7a8f89b6ce6115ef6bd1c17344e187dd57451973814e41ffc8bef4721f53d1497571f62cfe62d948ed1c36543550f03c0f4d58865aa09b1b3ecc56b9a5cb9eeb4a7b9df838b91ae76424190641730307b4930a52d4175399e8c935103e2ca113f0094cd9ff141d3f669375c0c562bec5a539de67048465e0671ecb127c9fce021c1200e2ba6e4c1127580490bd0726713ee420f631d"}}, &(0x7f0000000100)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "09f8fae4033f3be349df72b121879c0e7435b74690bdf79e575246768e7ce92308e1b55517244f7453f48d943eea6970cea15487e28435afa4614fa86228411ab967c5ad2e80c89add1bf9f26652b128e6ac464331dfdbe7e1337cec"}}, &(0x7f0000000180)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0xb, "a91432b9"}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0xc, "35a7e21a"}, @global=@item_012={0x2, 0x1, 0x9, "b506"}, @global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x0, 0x2, 0x7}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x822}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x16, 0x2a, "abee7b2d21ae2f734b0c0b5ed78d875d4da1f63370045484fef7733a433f1cd3949bcddceaad19d4ab84"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x90}, &(0x7f0000000300)={0x20, 0x1, 0xe9, "4cffb97a45a5d07b4f1759a7b6d933812260e6d1401e047da0fde2d6bdbdedbcb50d3ea48d7ec537c23ece064e5b8ddbd02d93f62e0087fc835123cde628be2ae90cab859c4030bf41b413dec46472cd2bcb441cc4a6876b9e0fb650cada84eeda43eed27564f74d90ac17259c46bdb245d96620ecbdb8eff423c5631ebae6f12f150bbf450adafed5b034841c67c1ef89710e9b7cf3731cd5899ecb36b759a2596d772bf56e95196cb6dd5a31bab77e70696cd02e9e2ddad29593100bd1709521030403b0f49add60af4c6c631677327289e828c4f07eb9e743586a09964d1faf7c9a62394d53d2d3"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xb}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6a001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000480)={0x40, 0xb, 0xb5, {0xb5, 0x31, "7bee1bc3ee6430e9f68ed676a9908c9345436d8584052bf81040b3d21c913fb6cc26f549c80c382afee01caba70b842c0dc0483f039a2a7318ef2195272935e4df5ca90836b97e13988b823f225f2f5637ac427cc626af475b008ad04a10c0d7d867e9f82491897f8f6d024f9fd623a6a28669c593fb2e7e453c310be482b8034e882bb593849ced437bba7e5f255997ad5e817a574e1e3d1b458d5137ce7b041de7e03f4fa0b0a90ad155764ce9a223072da6"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000b00)={0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="000f9f000000ce02000000ec32d9e64aa1755c55d8504218ea437da9fd8f11e3201012952a78cf48c885f6c7c5824d1872aaae8232c22fba6fd2b4a788227060f6f024d8e6d976d11060dba1f54f6fdf07962c57939953ac16183d05eaf49d97f11dd0f4e3d2a7212b804507561b88b2f01066121c5da70607e88d3580528fe4063e8a690b82036991f2ad998ad1567c07e6306b2d65dc"], &(0x7f0000000680)={0xa1, 0x1, 0x400, "607e2ace2de77e95c5239f05623616fe55a4c58d6edd72022f623af226f15c7ecc38b45c074f9e2c0cb314c13f0a392e733afc3373031dfc1f2cad459b6be3e3a2b02c61ee1e46dfa1d6ba833e72250d011ee523640f3f69c4dfeb03247871921a2a3c65d2f035115bd87148050514eedc098a9c665d03b262fa8103e9ebbf0c5e5f52339c5a489b79b26b03a1a4c5b65e9f627ea2dd7fd32a291eeb9e925d599cad873c1c327c31668646dceadd27c5aa3e3b5142bbd3f57ec89fe17cc2179c94d12548425fa72e3e3c80707e35e06e7e53184208ad0df8eeb9ea84fff403c8b95aa0fa5eb0c82fa5dcefe691f0215069adee9c10d4a9d0dbd6d45a37d82b528edfb162e30f4d299df1b26a07a5073019329abb0de4b4a58a0fecab3e8d34f71a014bd0119bea324a6e65d41c99094c9f6260de92ec2ffbd614e9ce4052a3c4b0b35d5c63c93bc93e9bf2d3f5e3c7e46d73fb3d21c6f7adc99afb4c0dbd02931051bdbc470ab1c6d38972e732a2beadc4250ebf1dd63ebe3c106cf5e5f3498fa95b69aff6fe0a6133dc51d0212707059aaf9621aea077307cb9020cb34aae960cd5eb4b21c5e4ac7954e7777074f497a1debb145373a7637299818caacddf327a977015378d5ddeed10a4f02395ac5a1a3ecfb45a267fb740d467f940c6fe666446199b8f2120b7a670ecacb3ba63d67c61e3c26abea6b9547ec2c95d6200822b0aa33e0cefdb3ffd32696eade3ef439094caa5007b006afa91d5841228d188752189b543c0d4c40c9c2c495244941c8450819e60f5a129bdb47ae8d7862bfcf939ec860c74ab41e1cb1bd803030a0ccc820ad96349f9a6f7a377a0cbe449286298422924a05bbcd068a05e8223bc5737d6de2b9ab90de0280d7c98d88f218be67982160ebc034a7151d2ab001e22bdcaa58edcb213fa2a8de122ec3c040aaab6c6118540f4801906363d407ed958b0b4f2f9505a612fa88c65580befe2070ec2de438d048985023ce3e28791bebcbb3c0534d7733b3fbfd86f138edbe3a10bb96d716b0ea2c2f96aacd7099d057d5d05c7c5bb780ff44be0c55c8b3e10140084049dfff4e7f00c409a5aaca78527abc1675ce6f9dfe55a089c13e530c4808415b5dd0c05a7aa3fa77a0253baf29750db8e63926351b8c37ef6212b3e560c4e77244adf4e29254705ac9b0bd8f9d794aae8d6fc5ab5458717b62653b02f5699ec7de5eee9b0729798a90e7e45d215635afd53500dd845e5cbbd13deebb71bd65982a6f0c684ec584f8ee29932e2dbc1ed465714033db7d95f5a2012fda3e3d2712702f1a6eedd39c57fb417cf03e8781eb104334b37a149b301834afe816c690172af405a0b270232fe4c8badae90cb33d19d60644248c213a8d9c77adb4e6516a5b42ad67d9c739c293f35b5e3e83bba508f200c86d23eb36cb98b544b9c89"}, &(0x7f0000000ac0)={0x21, 0x0, 0x3, "815cbc"}}) 1.29136478s ago: executing program 1 (id=86): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x9, 0x7544e3b4, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x1, 0x8, 0x40, 0x9}}) lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x23, 0x3, "cfa7ae"}, 0x23, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)="1b99e6d5243c42a2fed25f9a7d03b5279489c67943f77512c5efe585c41fc06ccab578f6ef7bcf2a860844c472d3ea36a4ded4f02480f0498caee9d78b", 0x3d) mount$incfs(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000), 0x82, 0x0) 1.290913431s ago: executing program 1 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) sched_setscheduler(0x0, 0x1, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) (async) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(0x0, 0x13, 0x0) (async) syz_clone3(&(0x7f000000dd80)={0x20000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 1.28955174s ago: executing program 1 (id=89): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000000040)) ptrace$poke(0x1, r0, &(0x7f00000011c0), 0xfffffffffffffffb) 1.231096242s ago: executing program 1 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 32) writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd90491c3248010000db", 0x1b}, {&(0x7f0000000080)="b00c700000000000000000812560e8ae4712639d", 0x14}, {&(0x7f0000000240)="dbcaa81aa6dd539fbdeb7c06008c25ea39f69e47f2714cf7fb9d892618b8a3cbcefe0000000000", 0x27}, {&(0x7f0000001200)="c036333a6b37f5df242202de849bd26e223f4589172cc804626f4a8b", 0x1c}], 0x4) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_procfs(0x0, 0x0) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, 0x0) (async, rerun: 64) r7 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) (rerun: 64) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000280)={[{0x1, 0x1000, 0x5, 0x0, 0x5, 0x1, 0xd0, 0x8, 0x0, 0x4, 0x91, 0x6, 0x5}, {0x0, 0x594b, 0x81, 0x1, 0x1, 0x6, 0x2, 0xad, 0x4, 0xd, 0x4, 0xd, 0x2}, {0x0, 0x40, 0xd, 0x2, 0x5, 0x0, 0xf9, 0x5, 0x9, 0x40, 0x4, 0x10, 0x7}], 0x2}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1f, 0x0, &(0x7f0000000000)) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_usb_connect$uac3(0x0, 0x9f, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x181) (async, rerun: 32) mkdirat(0xffffffffffffff9c, 0x0, 0x140) (rerun: 32) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="9a000000002901b9840a0000b800280000ba000000000f300f01c8660fd26c100966bad00466b8005066ef660f38809f17d5220fc744240000000000c744240215540000c7442406000000000f011c240f350f5aa964fffffff0801a46", 0x5d}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.135295655s ago: executing program 3 (id=91): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r1 = syz_clone(0x98b668a007681e5d, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x12) r2 = syz_open_procfs(r0, &(0x7f0000000080)='net/igmp6\x00') getdents64(r2, &(0x7f00000000c0)=""/215, 0xd7) 1.105926446s ago: executing program 3 (id=92): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, r0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000f2b000/0x4000)=nil) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10010, r1, 0xffffa000) 1.051232667s ago: executing program 3 (id=93): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, 0x0, 0x0) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x200}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x2, 0x2c, 0xff, @empty, @mcast2, {[], "8a96"}}}}}}, 0x3c) 1.046806298s ago: executing program 3 (id=94): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x2, 0x7fff, 0xfffa}, 0x3a, [0x7ffc, 0x5, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x1ffffffe, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xf, 0x1, 0x0, 0x0, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x95, 0x242, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x340, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x3, 0x9, 0x8, 0x4, 0x14, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0x7203, 0x10000, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x1, 0xff, 0x6, 0x1000005, 0x5f31, 0x8006, 0x4e0, 0x7, 0x4, 0x9, 0x4, 0x6, 0x4, 0xd, 0xffff8005, 0x47, 0x8000, 0xfffffffd, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x4, 0x9, 0x1, 0x3, 0x3, 0xbc46, 0x48c93690, 0x42, 0x3], [0x1, 0x408, 0x4, 0x5, 0xfffffffe, 0x100fc, 0x2, 0x7, 0x5, 0x7fff, 0x0, 0x5, 0x10000, 0x1f9, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x1, 0x4, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x6, 0x6, 0x6, 0xbf, 0x10004002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffc, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x7, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x801ff, 0x2, 0x57, 0x1, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0xc, 0x16, 0xffffffff, 0x80000002, 0xfffffffe, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x9, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1c, 0x2, 0x4, 0x5, 0xb1e, 0xd7, 0x57, 0xffff343e, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write(r0, &(0x7f00000002c0)="240000001a005f0214f9f407000904001f0000010000000000000200000000000000830000", 0x25) 1.007619769s ago: executing program 3 (id=95): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000400)="80006455d3800000", 0x8, 0x800, &(0x7f0000000080)={0xa, 0x6f26, 0x805, @mcast1, 0xffffffff}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0xfffffffe, 0x1000, 0x4, 0xfffffffa}, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0xfffffbff, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="0c65ac26002378e13d7c00b8982458a6765abe1485ec81d87d6a7ab5c085b7e1ecfbb7c1e36b89f361ba0e13680711e98fd0ff873b6cc7a06c1ed5e41cf2a1c981b2c9c384c47ec9c71f7816f52c0640fe784b5c3305903726991d7e5be8d4797ac0b613d06299820a23feb80e696225016458a862d41f4b17c9b6167a46f80797a09010b9e6288b9589cd9787b71efd1d0d1e87786cbe79b38b2a7cd323415a075791d2bccf8daba19d", @ANYRESHEX=r1, @ANYRESOCT=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4030) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x40000097}]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000040)={{0x1}}) epoll_create(0x3) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 919.107182ms ago: executing program 3 (id=96): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) prctl$PR_GET_SPECULATION_CTRL(0x53564d41, 0x0, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000028c0)=""/4103, 0x1007}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f00000002c0)=""/115, 0x6a}], 0x3}, 0x4000}, {{0x0, 0x0, 0x0}, 0x5ef}], 0x4000000000000a9, 0x40000142, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002020000082505a5a4400001020301090241000101000000090400000202060000052406000005240000000d240f0101050000feff02000006240738070009058202000000500409050302"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x8) write$tun(0xffffffffffffffff, 0x0, 0x107c) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) sendmmsg$unix(r1, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x2004c011) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = syz_open_dev$usbfs(0x0, 0x10000001d, 0x8041) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) 838.061934ms ago: executing program 2 (id=97): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) select(0x40, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x7, 0x8, 0x9, 0x5, 0x7}, &(0x7f0000000040)={0x3, 0x1, 0xffff, 0x5, 0x1000, 0x7, 0x10, 0xcc}, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0xffffffd5, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x65}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) ioprio_set$pid(0x3, r0, 0x0) pwrite64(r2, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) 753.482427ms ago: executing program 1 (id=98): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xadbb7000) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x810) 663.31175ms ago: executing program 2 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000040)=0x100000001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000100)) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) syz_io_uring_setup(0x500, &(0x7f0000000180)={0x0, 0x1000, 0x16, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) 662.62833ms ago: executing program 2 (id=100): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x82, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x77, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x6, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000100)={0x40, 0x21, 0x29, {0x29, 0x1, "7d611870cced50a6dc9b9baae6e4fb07347310bcb5381a594bd400"/39}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x7, 0x3a, 0xce3d, 0xfff}, 'syz0\x00', 0xa}) 650.36332ms ago: executing program 1 (id=101): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000002c0)=0xfffe, 0x4) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) 0s ago: executing program 0 (id=102): syz_usb_connect(0x6, 0x8c6, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a240101000000000008240505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 18.834876][ T36] audit: type=1400 audit(1781437080.389:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.836264][ T287] cgroup: Unknown subsys name 'net' [ 18.838148][ T36] audit: type=1400 audit(1781437080.389:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.841625][ T36] audit: type=1400 audit(1781437080.399:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.841785][ T287] cgroup: Unknown subsys name 'devices' [ 18.917897][ T287] cgroup: Unknown subsys name 'hugetlb' [ 18.923505][ T287] cgroup: Unknown subsys name 'rlimit' [ 19.036006][ T36] audit: type=1400 audit(1781437080.589:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.059424][ T36] audit: type=1400 audit(1781437080.599:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.084268][ T36] audit: type=1400 audit(1781437080.599:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.093146][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.116514][ T36] audit: type=1400 audit(1781437080.679:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.141915][ T36] audit: type=1400 audit(1781437080.679:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.172976][ T36] audit: type=1400 audit(1781437080.729:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.173418][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.198517][ T36] audit: type=1400 audit(1781437080.729:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.447777][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.454876][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.462057][ T296] bridge_slave_0: entered allmulticast mode [ 20.468315][ T296] bridge_slave_0: entered promiscuous mode [ 20.474803][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.481895][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.489065][ T296] bridge_slave_1: entered allmulticast mode [ 20.495240][ T296] bridge_slave_1: entered promiscuous mode [ 20.522000][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.529094][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.536216][ T297] bridge_slave_0: entered allmulticast mode [ 20.542512][ T297] bridge_slave_0: entered promiscuous mode [ 20.550713][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.557875][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.564968][ T297] bridge_slave_1: entered allmulticast mode [ 20.571385][ T297] bridge_slave_1: entered promiscuous mode [ 20.619168][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.626261][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.633354][ T295] bridge_slave_0: entered allmulticast mode [ 20.639641][ T295] bridge_slave_0: entered promiscuous mode [ 20.646080][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.653113][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.660219][ T295] bridge_slave_1: entered allmulticast mode [ 20.666556][ T295] bridge_slave_1: entered promiscuous mode [ 20.707553][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.714599][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.721697][ T294] bridge_slave_0: entered allmulticast mode [ 20.727909][ T294] bridge_slave_0: entered promiscuous mode [ 20.734450][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.741545][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.748634][ T294] bridge_slave_1: entered allmulticast mode [ 20.754775][ T294] bridge_slave_1: entered promiscuous mode [ 20.882219][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.889311][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.896616][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.903659][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.913973][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.921048][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.928330][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.935344][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.946520][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.953575][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.960865][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.967907][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.996368][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.003426][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.010716][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.017753][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.041135][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.048655][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.056573][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.063802][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.071267][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.078837][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.086065][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.093244][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.109843][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.116922][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.125801][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.132887][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.158253][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.165290][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.173128][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.180178][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.188389][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.195437][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.203291][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.210349][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.236905][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.243969][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.265090][ T297] veth0_vlan: entered promiscuous mode [ 21.277421][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.284469][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.305564][ T297] veth1_macvtap: entered promiscuous mode [ 21.322197][ T295] veth0_vlan: entered promiscuous mode [ 21.335392][ T296] veth0_vlan: entered promiscuous mode [ 21.355298][ T294] veth0_vlan: entered promiscuous mode [ 21.368518][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 21.371813][ T296] veth1_macvtap: entered promiscuous mode [ 21.390335][ T295] veth1_macvtap: entered promiscuous mode [ 21.420387][ T294] veth1_macvtap: entered promiscuous mode [ 21.480871][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.696192][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 21.836014][ T65] usb 4-1: device descriptor read/64, error -71 [ 21.959786][ T348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=348 comm=syz.1.13 [ 21.972649][ T348] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 22.086036][ T65] usb 4-1: device descriptor read/64, error -71 [ 22.086088][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 22.247122][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 22.258863][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 22.267985][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.276153][ T9] usb 1-1: Product: syz [ 22.280310][ T9] usb 1-1: Manufacturer: syz [ 22.284882][ T9] usb 1-1: SerialNumber: syz [ 22.290560][ T9] usb 1-1: config 0 descriptor?? [ 22.299121][ T9] asix 1-1:0.0: probe with driver asix failed with error -22 [ 22.336055][ T65] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 22.341299][ T354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 22.446079][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.466004][ T65] usb 4-1: device descriptor read/64, error -71 [ 22.500449][ T10] usb 1-1: USB disconnect, device number 2 [ 22.607169][ T31] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 22.617530][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 22.631948][ T31] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 22.641022][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.649052][ T31] usb 2-1: Product: syz [ 22.653240][ T31] usb 2-1: Manufacturer: syz [ 22.657930][ T31] usb 2-1: SerialNumber: syz [ 22.664615][ T31] rtl8150 2-1:1.0: couldn't find required endpoints [ 22.671356][ T31] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 22.686133][ T316] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 22.716094][ T65] usb 4-1: device descriptor read/64, error -71 [ 22.816024][ T316] usb 3-1: device descriptor read/64, error -71 [ 22.826134][ T65] usb usb4-port1: attempt power cycle [ 22.927371][ T10] usb 2-1: USB disconnect, device number 2 [ 23.066033][ T316] usb 3-1: device descriptor read/64, error -71 [ 23.137895][ T366] Zero length message leads to an empty skb [ 23.176488][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 23.197145][ T65] usb 4-1: device descriptor read/8, error -71 [ 23.232637][ T375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.241433][ T375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.251144][ T375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.261982][ T375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.306020][ T316] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 23.327101][ T65] usb 4-1: device descriptor read/8, error -71 [ 23.436005][ T316] usb 3-1: device descriptor read/64, error -71 [ 23.466088][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 23.566010][ T65] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 23.587029][ T65] usb 4-1: device descriptor read/8, error -71 [ 23.616000][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 23.622307][ T31] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 23.632081][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 23.641265][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.649459][ T31] usb 1-1: Product: syz [ 23.653838][ T31] usb 1-1: Manufacturer: syz [ 23.658805][ T31] usb 1-1: SerialNumber: syz [ 23.665681][ T31] r8152-cfgselector 1-1: Unknown version 0x0000 [ 23.671993][ T31] r8152-cfgselector 1-1: config 0 descriptor?? [ 23.678210][ T316] usb 3-1: device descriptor read/64, error -71 [ 23.717141][ T65] usb 4-1: device descriptor read/8, error -71 [ 23.786146][ T316] usb usb3-port1: attempt power cycle [ 23.826057][ T65] usb usb4-port1: unable to enumerate USB device [ 23.845982][ T356] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 23.886528][ T31] r8152-cfgselector 1-1: Unknown version 0x0000 [ 23.892897][ T31] r8152-cfgselector 1-1: bad CDC descriptors [ 23.900184][ T31] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 23.997199][ T356] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 24.008777][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 24.019953][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 24.031169][ T356] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 24.044076][ T356] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 24.053140][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.061830][ T356] usb 2-1: config 0 descriptor?? [ 24.067363][ T384] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 24.125997][ T316] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 24.146937][ T316] usb 3-1: device descriptor read/8, error -71 [ 24.276985][ T316] usb 3-1: device descriptor read/8, error -71 [ 24.507581][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 24.507599][ T36] audit: type=1400 audit(1781437086.069:150): avc: denied { create } for pid=392 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 24.516535][ T316] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 24.576676][ T316] usb 3-1: device descriptor read/8, error -71 [ 24.636018][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 24.675828][ T36] audit: type=1400 audit(1781437086.229:151): avc: denied { ioctl } for pid=383 comm="syz.1.24" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5656 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 24.703718][ T384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.706981][ T316] usb 3-1: device descriptor read/8, error -71 [ 24.713753][ T384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.732976][ T356] usbhid 2-1:0.0: can't add hid device: -71 [ 24.746132][ T356] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 24.763641][ T356] usb 2-1: USB disconnect, device number 3 [ 24.807175][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 24.815355][ T10] usb 1-1: config 0 has no interface number 0 [ 24.821646][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.836328][ T316] usb usb3-port1: unable to enumerate USB device [ 24.842222][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.852695][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 24.869305][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.879509][ T10] usb 1-1: config 0 descriptor?? [ 24.909514][ T36] audit: type=1400 audit(1781437086.469:152): avc: denied { read write } for pid=409 comm="syz.1.30" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 24.932776][ T36] audit: type=1400 audit(1781437086.469:153): avc: denied { open } for pid=409 comm="syz.1.30" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.089597][ T10] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 25.102081][ T10] hid_prodikeys: hid-prodikeys: failed to find output report [ 25.102081][ T10] [ 25.110742][ T36] audit: type=1400 audit(1781437086.669:154): avc: denied { read } for pid=417 comm="syz.0.31" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.134636][ T10] usb 1-1: USB disconnect, device number 4 [ 25.145153][ T36] audit: type=1400 audit(1781437086.669:155): avc: denied { open } for pid=417 comm="syz.0.31" path="net:[4026532299]" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.147395][ T416] fido_id[416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 25.168489][ T36] audit: type=1400 audit(1781437086.689:156): avc: denied { bind } for pid=417 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.266040][ T356] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 25.394964][ T423] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.395309][ T36] audit: type=1400 audit(1781437086.949:157): avc: denied { create } for pid=421 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 25.426420][ T36] audit: type=1400 audit(1781437086.979:158): avc: denied { ioctl } for pid=421 comm="syz.3.32" path="socket:[5746]" dev="sockfs" ino=5746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.450841][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 25.467028][ T356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.477161][ T356] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 25.487982][ T356] usb 2-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 25.497461][ T356] usb 2-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 25.505561][ T356] usb 2-1: Product: syz [ 25.509827][ T356] usb 2-1: Manufacturer: syz [ 25.514516][ T356] usb 2-1: SerialNumber: syz [ 25.520189][ T356] usb 2-1: config 0 descriptor?? [ 25.586055][ T10] usb 1-1: device descriptor read/64, error -71 [ 25.696128][ T396] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 25.726077][ T356] usb 2-1: USB disconnect, device number 4 [ 25.776012][ T316] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 25.826006][ T10] usb 1-1: device descriptor read/64, error -71 [ 25.846033][ T396] usb 4-1: Using ep0 maxpacket: 8 [ 25.851495][ T396] usb 4-1: no configurations [ 25.856311][ T396] usb 4-1: can't read configurations, error -22 [ 25.927025][ T316] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 25.938687][ T316] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 25.949676][ T316] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 25.959531][ T316] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 25.968568][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.986026][ T396] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 26.066039][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 26.136359][ T396] usb 4-1: Using ep0 maxpacket: 8 [ 26.141839][ T396] usb 4-1: no configurations [ 26.146617][ T396] usb 4-1: can't read configurations, error -22 [ 26.152981][ T396] usb usb4-port1: attempt power cycle [ 26.181141][ T36] audit: type=1400 audit(1781437087.739:159): avc: denied { mount } for pid=419 comm="syz.2.33" name="/" dev="overlay" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.185568][ T316] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 26.203331][ T10] usb 1-1: device descriptor read/64, error -71 [ 26.211724][ T316] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input5 [ 26.228681][ T316] usb 3-1: USB disconnect, device number 6 [ 26.466052][ T10] usb 1-1: device descriptor read/64, error -71 [ 26.486038][ T62] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 26.496051][ T396] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 26.516351][ T396] usb 4-1: Using ep0 maxpacket: 8 [ 26.521776][ T396] usb 4-1: no configurations [ 26.526444][ T396] usb 4-1: can't read configurations, error -22 [ 26.576144][ T10] usb usb1-port1: attempt power cycle [ 26.637153][ T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.648164][ T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.658150][ T396] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 26.665688][ T62] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.678621][ T62] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.687709][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.697080][ T62] usb 2-1: config 0 descriptor?? [ 26.708385][ T396] usb 4-1: Using ep0 maxpacket: 8 [ 26.722309][ T396] usb 4-1: no configurations [ 26.727042][ T396] usb 4-1: can't read configurations, error -22 [ 26.733437][ T396] usb usb4-port1: unable to enumerate USB device [ 26.926000][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 26.946974][ T10] usb 1-1: device descriptor read/8, error -71 [ 27.076988][ T10] usb 1-1: device descriptor read/8, error -71 [ 27.104792][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.112275][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.119902][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.127355][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.134737][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.142204][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.149617][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.157034][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.164420][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.172013][ T62] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 27.181233][ T62] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 27.266011][ T316] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 27.304510][ T356] usb 2-1: USB disconnect, device number 5 [ 27.316022][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 27.337141][ T10] usb 1-1: device descriptor read/8, error -71 [ 27.418388][ T316] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 27.427575][ T316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.435560][ T316] usb 3-1: Product: syz [ 27.439928][ T316] usb 3-1: Manufacturer: syz [ 27.444528][ T316] usb 3-1: SerialNumber: syz [ 27.477001][ T10] usb 1-1: device descriptor read/8, error -71 [ 27.586107][ T10] usb usb1-port1: unable to enumerate USB device [ 27.868902][ T316] rtl8150 3-1:1.0: couldn't reset the device [ 27.875000][ T316] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 27.884018][ T316] usb 3-1: USB disconnect, device number 7 [ 28.056016][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.206023][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 28.212174][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.223285][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.233052][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 28.242187][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.250732][ T10] usb 2-1: config 0 descriptor?? [ 28.384272][ T446] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1706180555 (218391111040 ns) > initial count (181296660480 ns). Using initial count to start timer. [ 28.546187][ T316] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 28.696205][ T316] usb 1-1: Using ep0 maxpacket: 32 [ 28.703650][ T316] usb 1-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 28.710680][ T10] koneplus 0003:1E7D:2D51.0003: unbalanced delimiter at end of report description [ 28.712990][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.724065][ T10] koneplus 0003:1E7D:2D51.0003: parse failed [ 28.730156][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 28.736142][ T10] koneplus 0003:1E7D:2D51.0003: probe with driver koneplus failed with error -22 [ 28.743692][ T316] usb 1-1: Product: syz [ 28.756818][ T316] usb 1-1: Manufacturer: syz [ 28.761557][ T316] usb 1-1: SerialNumber: syz [ 28.865982][ T356] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 28.907047][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 28.910307][ T452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.920056][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 28.929121][ T452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.938469][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.947331][ T452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.954424][ T31] usb 3-1: config 0 descriptor?? [ 28.962424][ T452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.968048][ T442] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46 sclass=netlink_xfrm_socket pid=442 comm=syz.0.39 [ 28.981931][ T10] usb 2-1: USB disconnect, device number 6 [ 29.000811][ T316] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 29.010231][ T316] usb 1-1: unit 5 not found! [ 29.010694][ T457] netlink: 104 bytes leftover after parsing attributes in process `syz.1.44'. [ 29.024902][ T451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.026772][ T457] fuse: Unknown parameter '0000000000000000000400000000000000000004' [ 29.040592][ T316] usb 1-1: USB disconnect, device number 9 [ 29.041553][ T451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.057568][ T451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.062314][ T456] udevd[456]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.071481][ T451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.095759][ T356] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 29.104493][ T356] usb 4-1: can't read configurations, error -71 [ 29.166295][ T461] incfs: ino conflict with backing FS 1 [ 29.408827][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.415805][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.423164][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.430232][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.437307][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.444515][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.451756][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.458894][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.466553][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.473485][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.480495][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.487404][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.494330][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.501229][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.508197][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.515077][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.522021][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.528935][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.535825][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.543056][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.550130][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.557199][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.564249][ T31] wacom 0003:056A:00B8.0004: unknown main item tag 0x0 [ 29.572971][ T31] wacom 0003:056A:00B8.0004: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 29.584038][ T31] wacom 0003:056A:00B8.0004: hidraw0: USB HID v0.05 Device [HID 056a:00b8] on usb-dummy_hcd.2-1/input0 [ 29.602787][ T31] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B8.0004/input/input6 [ 29.633697][ T31] usb 3-1: USB disconnect, device number 8 [ 29.676415][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 29.676430][ T36] audit: type=1400 audit(1781437091.239:174): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=469 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.875998][ T316] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 29.946047][ T356] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 30.025999][ T316] usb 1-1: Using ep0 maxpacket: 16 [ 30.032159][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.043059][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.052809][ T316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.065608][ T316] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.074712][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.083351][ T316] usb 1-1: config 0 descriptor?? [ 30.095975][ T356] usb 4-1: Using ep0 maxpacket: 32 [ 30.102934][ T356] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 4 [ 30.112894][ T356] usb 4-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 30.125959][ T356] usb 4-1: config 1 interface 0 has no altsetting 0 [ 30.134004][ T356] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.143329][ T356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.151612][ T356] usb 4-1: Product: syz [ 30.156028][ T356] usb 4-1: Manufacturer: syz [ 30.160738][ T356] usb 4-1: SerialNumber: syz [ 30.169597][ T475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 30.176846][ T475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 30.405992][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 30.484050][ T36] audit: type=1326 audit(1781437092.039:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=491 comm="syz.1.56" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f014399ce59 code=0x7ffc0000 [ 30.518572][ T36] audit: type=1326 audit(1781437092.039:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=491 comm="syz.1.56" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f014399ce59 code=0x7ffc0000 [ 30.525044][ T316] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input9 [ 30.565022][ T36] audit: type=1326 audit(1781437092.039:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=491 comm="syz.1.56" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f014399ce59 code=0x7ffc0000 [ 30.575286][ T316] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 30.590315][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 30.612528][ T10] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 30.619667][ T356] usb 4-1: bad CDC descriptors [ 30.626082][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 30.636980][ T356] usb 4-1: USB disconnect, device number 11 [ 30.643008][ T36] audit: type=1326 audit(1781437092.039:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=491 comm="syz.1.56" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f014399ce59 code=0x7ffc0000 [ 30.672966][ T36] audit: type=1326 audit(1781437092.039:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=491 comm="syz.1.56" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f014399ce59 code=0x7ffc0000 [ 30.700058][ T36] audit: type=1326 audit(1781437092.039:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=491 comm="syz.1.56" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f014399ce59 code=0x7ffc0000 [ 30.725186][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 30.730873][ T36] audit: type=1326 audit(1781437092.039:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=491 comm="syz.1.56" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f014399ce59 code=0x7ffc0000 [ 30.760700][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.767620][ T36] audit: type=1326 audit(1781437092.039:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=491 comm="syz.1.56" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f014399ce59 code=0x7ffc0000 [ 30.776005][ T10] usb 3-1: Product: syz [ 30.794271][ T36] audit: type=1326 audit(1781437092.039:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=491 comm="syz.1.56" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f014399ce59 code=0x7ffc0000 [ 30.816010][ T10] usb 3-1: Manufacturer: syz [ 30.828775][ T479] usb 1-1: USB disconnect, device number 10 [ 30.858111][ T10] usb 3-1: SerialNumber: syz [ 30.864989][ T513] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 31.002908][ T543] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 31.079021][ T10] usb 3-1: unit 8 not found! [ 31.085709][ T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 31.100462][ T10] usb 3-1: USB disconnect, device number 9 [ 31.326014][ T479] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 31.395997][ T396] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 31.456032][ T479] usb 1-1: device descriptor read/64, error -71 [ 31.555984][ T396] usb 4-1: Using ep0 maxpacket: 32 [ 31.562590][ T396] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.571463][ T396] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 31.583912][ T396] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 31.593017][ T396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.603572][ T396] usb 4-1: Product: syz [ 31.607807][ T396] usb 4-1: Manufacturer: syz [ 31.612492][ T396] usb 4-1: SerialNumber: syz [ 31.695993][ T479] usb 1-1: device descriptor read/64, error -71 [ 31.825764][ T396] usb 4-1: unit 255 not found! [ 31.834989][ T396] usb 4-1: USB disconnect, device number 12 [ 31.843374][ T456] udevd[456]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.926009][ T356] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 31.945997][ T479] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 32.076012][ T356] usb 3-1: Using ep0 maxpacket: 32 [ 32.081191][ T479] usb 1-1: device descriptor read/64, error -71 [ 32.088521][ T356] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.099623][ T356] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.111052][ T356] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 32.120145][ T356] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 32.128502][ T356] usb 3-1: Product: syz [ 32.132720][ T356] usb 3-1: Manufacturer: syz [ 32.139804][ T356] hub 3-1:4.0: USB hub found [ 32.336006][ T479] usb 1-1: device descriptor read/64, error -71 [ 32.341196][ T582] usb usb7: usbfs: process 582 (syz.3.80) did not claim interface 0 before use [ 32.344827][ T356] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 32.476058][ T479] usb usb1-port1: attempt power cycle [ 32.594605][ T653] netlink: 'syz.3.83': attribute type 29 has an invalid length. [ 32.643248][ T662] SELinux: Context 줨 is not valid (left unmapped). [ 32.726093][ T356] usb 3-1: USB disconnect, device number 10 [ 32.816030][ T479] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 32.837049][ T479] usb 1-1: device descriptor read/8, error -71 [ 32.967588][ T479] usb 1-1: device descriptor read/8, error -71 [ 33.206037][ T479] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 33.236834][ T479] usb 1-1: device descriptor read/8, error -71 [ 33.245990][ T356] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 33.367080][ T479] usb 1-1: device descriptor read/8, error -71 [ 33.396000][ T356] usb 4-1: Using ep0 maxpacket: 8 [ 33.402219][ T356] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 33.412131][ T356] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 33.422291][ T356] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 33.432096][ T356] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 33.443866][ T356] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 33.452957][ T356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.461007][ T356] usb 4-1: Product: syz [ 33.465167][ T356] usb 4-1: Manufacturer: syz [ 33.469785][ T356] usb 4-1: SerialNumber: syz [ 33.477662][ T356] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 33.486078][ T479] usb usb1-port1: unable to enumerate USB device [ 33.492972][ T356] usb-storage 4-1:1.0: USB Mass Storage device detected [ 33.500732][ T356] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 33.536022][ T396] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 33.693699][ T356] usb 4-1: USB disconnect, device number 13 [ 33.695972][ T396] usb 3-1: Using ep0 maxpacket: 16 [ 33.707376][ T396] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 33.716557][ T396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.725102][ T396] usb 3-1: config 0 descriptor?? [ 33.968496][ T294] ------------[ cut here ]------------ [ 33.974149][ T294] WARNING: CPU: 1 PID: 294 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 33.982146][ T294] Modules linked in: [ 33.986116][ T294] CPU: 1 UID: 0 PID: 294 Comm: syz-executor Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 33.997788][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.007876][ T294] RIP: 0010:drop_nlink+0xce/0x110 [ 34.012934][ T294] Code: 04 00 00 be 08 00 00 00 e8 6f 06 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 4f 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 34.032680][ T294] RSP: 0018:ffffc9000b61fc60 EFLAGS: 00010293 [ 34.038786][ T294] RAX: ffffffff81f271be RBX: ffff88811c1c8b98 RCX: ffff8881043a0000 [ 34.046801][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.054775][ T294] RBP: ffffc9000b61fc88 R08: 0000000000000003 R09: 0000000000000004 [ 34.063485][ T294] R10: dffffc0000000000 R11: fffff520016c3f7c R12: dffffc0000000000 [ 34.071825][ T294] R13: 1ffff1102383917c R14: ffff88811c1c8be0 R15: 0000000000000000 [ 34.079908][ T294] FS: 000055556739b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.088911][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.095511][ T294] CR2: 00005555673be958 CR3: 000000010435a000 CR4: 00000000003526b0 [ 34.103519][ T294] Call Trace: [ 34.106858][ T294] [ 34.109798][ T294] shmem_rmdir+0x5f/0x90 [ 34.114053][ T294] vfs_rmdir+0x3e3/0x560 [ 34.118334][ T294] incfs_kill_sb+0x109/0x230 [ 34.122937][ T294] deactivate_locked_super+0xd5/0x2a0 [ 34.128352][ T294] deactivate_super+0xb8/0xe0 [ 34.133056][ T294] cleanup_mnt+0x406/0x4a0 [ 34.134188][ T396] elecom 0003:056E:011C.0006: unknown main item tag 0x7 [ 34.137519][ T294] __cleanup_mnt+0x1d/0x40 [ 34.146721][ T396] elecom 0003:056E:011C.0006: unknown global tag 0xd [ 34.148874][ T294] task_work_run+0x1e5/0x260 [ 34.160136][ T294] ? __cfi_task_work_run+0x10/0x10 [ 34.163323][ T396] elecom 0003:056E:011C.0006: item 0 0 1 13 parsing failed [ 34.165264][ T294] ? __x64_sys_umount+0x12e/0x180 [ 34.165291][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 34.173002][ T396] elecom 0003:056E:011C.0006: probe with driver elecom failed with error -22 [ 34.177554][ T294] ? __kasan_check_read+0x15/0x20 [ 34.177583][ T294] resume_user_mode_work+0x35/0x50 [ 34.201848][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 34.207371][ T294] do_syscall_64+0x63/0xf0 [ 34.211801][ T294] ? clear_bhb_loop+0x50/0xa0 [ 34.216509][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.222414][ T294] RIP: 0033:0x7f90ae99e097 [ 34.226876][ T294] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 34.246504][ T294] RSP: 002b:00007ffd0d5d8448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.254913][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f90ae99e097 [ 34.262920][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0d5d8500 [ 34.270919][ T294] RBP: 00007ffd0d5d8500 R08: 00007ffd0d5d9500 R09: 00000000ffffffff [ 34.278914][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0d5d9590 [ 34.286919][ T294] R13: 00007f90aea321ca R14: 00000000000078fc R15: 00007ffd0d5d95d0 [ 34.294914][ T294] [ 34.297954][ T294] ---[ end trace 0000000000000000 ]--- [ 34.303498][ T294] ================================================================== [ 34.311583][ T294] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 34.317823][ T294] Write of size 4 at addr 0000000000000168 by task syz-executor/294 [ 34.325802][ T294] [ 34.328114][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 34.328133][ T294] Tainted: [W]=WARN [ 34.328142][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.328149][ T294] Call Trace: [ 34.328153][ T294] [ 34.328158][ T294] __dump_stack+0x21/0x30 [ 34.328176][ T294] dump_stack_lvl+0x140/0x1c0 [ 34.328190][ T294] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.328205][ T294] print_report+0x3d/0x70 [ 34.328219][ T294] kasan_report+0x162/0x1a0 [ 34.328232][ T294] ? ihold+0x24/0x70 [ 34.328244][ T294] ? _raw_spin_unlock+0x45/0x60 [ 34.328258][ T294] ? ihold+0x24/0x70 [ 34.328269][ T294] kasan_check_range+0x25a/0x2b0 [ 34.328282][ T294] __kasan_check_write+0x18/0x20 [ 34.328292][ T294] ihold+0x24/0x70 [ 34.328303][ T294] vfs_rmdir+0x26a/0x560 [ 34.328317][ T294] incfs_kill_sb+0x109/0x230 [ 34.328328][ T294] deactivate_locked_super+0xd5/0x2a0 [ 34.328343][ T294] deactivate_super+0xb8/0xe0 [ 34.328356][ T294] cleanup_mnt+0x406/0x4a0 [ 34.328369][ T294] __cleanup_mnt+0x1d/0x40 [ 34.328380][ T294] task_work_run+0x1e5/0x260 [ 34.328394][ T294] ? __cfi_task_work_run+0x10/0x10 [ 34.328406][ T294] ? __x64_sys_umount+0x12e/0x180 [ 34.328416][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 34.328425][ T294] ? __kasan_check_read+0x15/0x20 [ 34.328435][ T294] resume_user_mode_work+0x35/0x50 [ 34.328445][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 34.328458][ T294] do_syscall_64+0x63/0xf0 [ 34.328471][ T294] ? clear_bhb_loop+0x50/0xa0 [ 34.328482][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.328499][ T294] RIP: 0033:0x7f90ae99e097 [ 34.328508][ T294] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 34.328517][ T294] RSP: 002b:00007ffd0d5d8448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.328529][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f90ae99e097 [ 34.328536][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0d5d8500 [ 34.328543][ T294] RBP: 00007ffd0d5d8500 R08: 00007ffd0d5d9500 R09: 00000000ffffffff [ 34.328550][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0d5d9590 [ 34.328557][ T294] R13: 00007f90aea321ca R14: 00000000000078fc R15: 00007ffd0d5d95d0 [ 34.328566][ T294] [ 34.328569][ T294] ================================================================== [ 34.572423][ T294] Disabling lock debugging due to kernel taint [ 34.578678][ T294] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 34.579119][ T31] usb 3-1: USB disconnect, device number 11 [ 34.586482][ T294] #PF: supervisor write access in kernel mode [ 34.586498][ T294] #PF: error_code(0x0002) - not-present page [ 34.586508][ T294] PGD 800000010cf1b067 P4D 800000010cf1b067 PUD 0 [ 34.586532][ T294] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 34.616964][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Tainted: G B W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 34.630077][ T294] Tainted: [B]=BAD_PAGE, [W]=WARN [ 34.635079][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.645117][ T294] RIP: 0010:ihold+0x2a/0x70 [ 34.649616][ T294] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 34.669205][ T294] RSP: 0018:ffffc9000b61fca0 EFLAGS: 00010246 [ 34.675256][ T294] RAX: ffff8881043a0000 RBX: 0000000000000000 RCX: ffff8881043a0000 [ 34.683212][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.691167][ T294] RBP: ffffc9000b61fcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 34.699126][ T294] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff88811c1c8ba4 [ 34.707088][ T294] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.715045][ T294] FS: 000055556739b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.723960][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.730533][ T294] CR2: 0000000000000168 CR3: 000000010435a000 CR4: 00000000003526b0 [ 34.738506][ T294] DR0: 0000000000007fff DR1: 0000000080000000 DR2: 0000000000000800 [ 34.746473][ T294] DR3: 00000000000000ff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 34.754455][ T294] Call Trace: [ 34.757728][ T294] [ 34.760734][ T294] vfs_rmdir+0x26a/0x560 [ 34.764967][ T294] incfs_kill_sb+0x109/0x230 [ 34.769545][ T294] deactivate_locked_super+0xd5/0x2a0 [ 34.774910][ T294] deactivate_super+0xb8/0xe0 [ 34.779572][ T294] cleanup_mnt+0x406/0x4a0 [ 34.783976][ T294] __cleanup_mnt+0x1d/0x40 [ 34.788375][ T294] task_work_run+0x1e5/0x260 [ 34.792947][ T294] ? __cfi_task_work_run+0x10/0x10 [ 34.798044][ T294] ? __x64_sys_umount+0x12e/0x180 [ 34.803068][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 34.808420][ T294] ? __kasan_check_read+0x15/0x20 [ 34.813431][ T294] resume_user_mode_work+0x35/0x50 [ 34.818525][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 34.823973][ T294] do_syscall_64+0x63/0xf0 [ 34.828392][ T294] ? clear_bhb_loop+0x50/0xa0 [ 34.833078][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.838959][ T294] RIP: 0033:0x7f90ae99e097 [ 34.843356][ T294] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 34.862944][ T294] RSP: 002b:00007ffd0d5d8448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.871343][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f90ae99e097 [ 34.879298][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0d5d8500 [ 34.887254][ T294] RBP: 00007ffd0d5d8500 R08: 00007ffd0d5d9500 R09: 00000000ffffffff [ 34.895212][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0d5d9590 [ 34.903166][ T294] R13: 00007f90aea321ca R14: 00000000000078fc R15: 00007ffd0d5d95d0 [ 34.911123][ T294] [ 34.914124][ T294] Modules linked in: [ 34.918013][ T294] CR2: 0000000000000168 [ 34.922145][ T294] ---[ end trace 0000000000000000 ]--- [ 34.927576][ T294] RIP: 0010:ihold+0x2a/0x70 [ 34.932065][ T294] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 34.951676][ T294] RSP: 0018:ffffc9000b61fca0 EFLAGS: 00010246 [ 34.957751][ T294] RAX: ffff8881043a0000 RBX: 0000000000000000 RCX: ffff8881043a0000 [ 34.965746][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.973705][ T294] RBP: ffffc9000b61fcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 34.981674][ T294] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff88811c1c8ba4 [ 34.989641][ T294] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.997596][ T294] FS: 000055556739b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.006507][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.013082][ T294] CR2: 0000000000000168 CR3: 000000010435a000 CR4: 00000000003526b0 [ 35.021042][ T294] DR0: 0000000000007fff DR1: 0000000080000000 DR2: 0000000000000800 [ 35.028997][ T294] DR3: 00000000000000ff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 35.036958][ T294] Kernel panic - not syncing: Fatal exception [ 35.043249][ T294] Kernel Offset: disabled [ 35.047558][ T294] Rebooting in 86400 seconds..