last executing test programs: 4.850042161s ago: executing program 4 (id=149): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001500)=""/77, 0x0}) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 4.09105027s ago: executing program 0 (id=162): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) 4.07925448s ago: executing program 0 (id=163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 3.989178642s ago: executing program 4 (id=164): ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000680)={0x0, 0x1000, ""/4096}) syz_usb_connect$uac1(0x0, 0x78, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x7, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1000, 0x10}, [@selector_unit={0x6, 0x24, 0x5, 0x5, 0x0, "bb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x0, 0x1, {0x7, 0x25, 0x1, 0x8, 0xff, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x10, 0x5, 0x8, {0x7, 0x25, 0x1, 0xc, 0x3, 0xfffd}}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3.974921102s ago: executing program 0 (id=166): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "c11dde40"}]}}, 0x0}, 0x0) 3.146725243s ago: executing program 2 (id=170): mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc45}) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) pipe(&(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.094866684s ago: executing program 2 (id=173): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000001180)=0x100, 0x2) 3.070351995s ago: executing program 2 (id=175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001", @ANYRESOCT=r2, @ANYRES16], 0x50}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc40102030109021200010000000009"], 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.997794737s ago: executing program 1 (id=179): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f00000011c0), 0xfffffffffffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0xd5) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) unshare(0x60000600) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x3) 2.160705977s ago: executing program 4 (id=181): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r0, 0xfff, 0x0) 2.103027608s ago: executing program 1 (id=183): memfd_create(0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x5385, &(0x7f0000000100)=0x3) 2.082708719s ago: executing program 4 (id=184): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x81) 2.02472442s ago: executing program 1 (id=185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="0f01df0f3235004000000f30b9fa000000430f79a279a2300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba00e500000f30660fc775023a0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x59}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.02456167s ago: executing program 4 (id=186): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x400, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0xc, 0x20, 0xfd, 0x1000000}], 0x6}) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x80000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.02425946s ago: executing program 3 (id=187): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 1.996994951s ago: executing program 3 (id=188): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 1.975905251s ago: executing program 1 (id=189): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) write(r1, 0x0, 0x0) 1.970683762s ago: executing program 4 (id=190): clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x8, 0x6, 0x2, 0x8000000000000000, 0x9, 0x945, 0x652, 0xc, 0x7, 0x225c17d03, 0x10000000000162d8, 0x9a3f, 0xffff, 0xb, 0x7ffffffffffffc, 0xcc8, 0x800006, 0x2, 0x94d6, 0x3, 0x6, 0xfffffffffffffff9, 0x0, 0xffffffffffff9d04, 0x7f, 0x4}) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0xd, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.911770873s ago: executing program 1 (id=191): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a0509"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.882138974s ago: executing program 3 (id=192): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001500)=""/77, 0x0}) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.404714475s ago: executing program 2 (id=193): mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0) chdir(&(0x7f0000000040)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) chdir(&(0x7f0000000100)='./file0\x00') listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, 0x0) 1.312445678s ago: executing program 2 (id=194): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 1.071040794s ago: executing program 2 (id=195): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x5385, &(0x7f0000000100)=0x3) 1.046237274s ago: executing program 32 (id=195): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x5385, &(0x7f0000000100)=0x3) 1.033353914s ago: executing program 3 (id=197): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x81) 983.882006ms ago: executing program 3 (id=198): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 983.411076ms ago: executing program 3 (id=199): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x7d, 0xfc, 0x1, {0x22, 0x24}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xd, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 952.329476ms ago: executing program 0 (id=200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0xb, 0x100003, 0x0, 0x5, 0x5d9, 0x4, 0xc9, 0x5, 0x82, 0x2, 0x401, 0x7, 0x76, 0xea, 0x8, 0x3], 0x10000, 0x285f40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 239.397254ms ago: executing program 5 (id=196): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) lseek(0xffffffffffffffff, 0xfff, 0x0) 179.566885ms ago: executing program 5 (id=201): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0x49e2, 0x2}}, 0x28) 179.319615ms ago: executing program 5 (id=202): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 141.752886ms ago: executing program 1 (id=203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0xccd) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x6, 0x0, &(0x7f0000000300)="269ffc1f84e4"}) 59.079868ms ago: executing program 0 (id=204): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x400, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0xc, 0x20, 0xfd, 0x1000000}], 0x6}) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x80000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011600100f5fe009d2f", 0x19) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 5 (id=206): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x0) ioctl$BLKCLOSEZONE(r0, 0x40101287, &(0x7f0000000100)={0x3, 0x7f}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000000c0)="d46de0f33ba324660bb976f4c57a432a3c589f8635492925be043a3099253d876d466b3d9630477f7bfbd4") kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.586753][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 14.586766][ T24] audit: type=1400 audit(1784912416.110:59): avc: denied { transition } for pid=217 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.598277][ T24] audit: type=1400 audit(1784912416.110:60): avc: denied { noatsecure } for pid=217 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.605722][ T24] audit: type=1400 audit(1784912416.130:61): avc: denied { write } for pid=217 comm="sh" path="pipe:[1367]" dev="pipefs" ino=1367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.626646][ T24] audit: type=1400 audit(1784912416.130:62): avc: denied { rlimitinh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.647732][ T24] audit: type=1400 audit(1784912416.130:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. [ 22.202759][ T24] audit: type=1400 audit(1784912423.730:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.206391][ T271] cgroup: Unknown subsys name 'net' [ 22.225672][ T24] audit: type=1400 audit(1784912423.730:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.253440][ T24] audit: type=1400 audit(1784912423.760:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.254007][ T271] cgroup: Unknown subsys name 'devices' [ 22.429122][ T271] cgroup: Unknown subsys name 'hugetlb' [ 22.434910][ T271] cgroup: Unknown subsys name 'rlimit' [ 22.588508][ T24] audit: type=1400 audit(1784912424.120:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.611734][ T24] audit: type=1400 audit(1784912424.120:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.627826][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.637078][ T24] audit: type=1400 audit(1784912424.120:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.668278][ T24] audit: type=1400 audit(1784912424.180:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.693705][ T24] audit: type=1400 audit(1784912424.180:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.694443][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.719303][ T24] audit: type=1400 audit(1784912424.200:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.719320][ T24] audit: type=1400 audit(1784912424.200:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.468067][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.475433][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.483147][ T279] device bridge_slave_0 entered promiscuous mode [ 23.500479][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.507605][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.515132][ T279] device bridge_slave_1 entered promiscuous mode [ 23.565941][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.573102][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.580598][ T281] device bridge_slave_0 entered promiscuous mode [ 23.589627][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.596692][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.604149][ T280] device bridge_slave_0 entered promiscuous mode [ 23.611214][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.618644][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.626299][ T280] device bridge_slave_1 entered promiscuous mode [ 23.635116][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.642267][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.649882][ T281] device bridge_slave_1 entered promiscuous mode [ 23.688733][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.695806][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.703324][ T283] device bridge_slave_0 entered promiscuous mode [ 23.710458][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.717616][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.724994][ T283] device bridge_slave_1 entered promiscuous mode [ 23.783891][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.791033][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.798692][ T282] device bridge_slave_0 entered promiscuous mode [ 23.819385][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.826467][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.834156][ T282] device bridge_slave_1 entered promiscuous mode [ 23.946280][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.953377][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.960693][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.967755][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.991848][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.998976][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.006499][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.013590][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.036733][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.043851][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.051175][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.058232][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.068596][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.075659][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.082965][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.090023][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.133764][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.140863][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.148303][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.155355][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.171214][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.178657][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.185865][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.193241][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.200595][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.208150][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.215520][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.223422][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.230662][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.238115][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.245395][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.280146][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.288976][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.296007][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.303966][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.311532][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.320138][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.328402][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.335440][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.342918][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.351193][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.358283][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.365682][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.373929][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.380975][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.388377][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.396358][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.405208][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.417148][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.427656][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.435714][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.451907][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.459502][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.467867][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.474914][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.482446][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.490861][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.497921][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.530034][ T282] device veth0_vlan entered promiscuous mode [ 24.539032][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.547962][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.556323][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.564828][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.572478][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.581121][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.589463][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.596497][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.604072][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.612497][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.619576][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.627344][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.635348][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.655292][ T282] device veth1_macvtap entered promiscuous mode [ 24.666127][ T279] device veth0_vlan entered promiscuous mode [ 24.673130][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.681992][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.690394][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.697730][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.707330][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.715851][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.724162][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.731353][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.738974][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.747169][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.755342][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.763166][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.771595][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.779701][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.788704][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.796659][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.805330][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.813979][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.822067][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.830350][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.838179][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.851386][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.859855][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.873655][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.882124][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.890775][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.900248][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.913157][ T280] device veth0_vlan entered promiscuous mode [ 24.925348][ T281] device veth0_vlan entered promiscuous mode [ 24.931931][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.939908][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.948541][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.956419][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.964952][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.972591][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.980315][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.988043][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.996090][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.004487][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.020317][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.032666][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.041198][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.055570][ T281] device veth1_macvtap entered promiscuous mode [ 25.065589][ T280] device veth1_macvtap entered promiscuous mode [ 25.073091][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.082188][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.090678][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.099083][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.106703][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.115035][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.123334][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.131750][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.140419][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.148096][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.155642][ T283] device veth0_vlan entered promiscuous mode [ 25.162566][ T279] device veth1_macvtap entered promiscuous mode [ 25.179745][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.187582][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.196258][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.204839][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.214070][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.230465][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.239445][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.249407][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.258327][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.276094][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 25.287717][ T282] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.311007][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.323330][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.332971][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.341210][ T306] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.358038][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.366385][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.383384][ T283] device veth1_macvtap entered promiscuous mode [ 25.428133][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.436473][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.469526][ T318] usb usb9: usbfs: process 318 (syz.1.7) did not claim interface 0 before use [ 25.485708][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.519212][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.691927][ T349] usb usb9: usbfs: process 349 (syz.1.20) did not claim interface 0 before use [ 25.917183][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.965436][ T381] usb usb9: usbfs: process 381 (syz.1.33) did not claim interface 0 before use [ 26.167518][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 26.297271][ T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 26.367244][ T284] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.377648][ T303] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.457347][ T20] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 26.466672][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.475414][ T20] usb 3-1: Product: syz [ 26.479800][ T20] usb 3-1: Manufacturer: syz [ 26.484625][ T20] usb 3-1: SerialNumber: syz [ 26.494122][ T20] usb 3-1: config 0 descriptor?? [ 26.520566][ T424] kvm [423]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 26.529921][ T424] kvm [423]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 26.544275][ T424] APIC base relocation is unsupported by KVM [ 26.607217][ T284] usb 2-1: Using ep0 maxpacket: 8 [ 26.607805][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.744935][ T20] usb 3-1: USB disconnect, device number 2 [ 26.757327][ T303] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 26.765900][ T303] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 26.776247][ T303] usb 1-1: config 220 has no interface number 2 [ 26.782699][ T303] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 26.796255][ T303] usb 1-1: config 220 interface 0 has no altsetting 0 [ 26.803414][ T303] usb 1-1: config 220 interface 76 has no altsetting 0 [ 26.810343][ T303] usb 1-1: config 220 interface 1 has no altsetting 0 [ 26.897624][ T284] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 26.907232][ T284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.915244][ T284] usb 2-1: Product: syz [ 26.919522][ T284] usb 2-1: Manufacturer: syz [ 26.924147][ T284] usb 2-1: SerialNumber: syz [ 26.977937][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 26.989190][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.000264][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.007477][ T303] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 27.010080][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 27.020161][ T303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.040230][ T303] usb 1-1: Product: syz [ 27.044412][ T303] usb 1-1: Manufacturer: syz [ 27.049117][ T303] usb 1-1: SerialNumber: syz [ 27.107290][ T5] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 27.116434][ T5] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 27.124667][ T5] usb 5-1: Manufacturer: syz [ 27.130025][ T5] usb 5-1: config 0 descriptor?? [ 27.397398][ T303] usb 1-1: selecting invalid altsetting 0 [ 27.398403][ T398] udc-core: couldn't find an available UDC or it's busy [ 27.403321][ T303] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 27.410638][ T398] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.424838][ T303] uvcvideo: No valid video chain found. [ 27.479621][ T303] usb 1-1: USB disconnect, device number 2 [ 27.519031][ T454] fuse: Bad value for 'fd' [ 27.556945][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 27.556966][ T24] audit: type=1400 audit(1784912429.080:124): avc: denied { create } for pid=460 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.592670][ T24] audit: type=1400 audit(1784912429.080:125): avc: denied { bind } for pid=460 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.614023][ T5] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 27.621599][ T24] audit: type=1400 audit(1784912429.080:126): avc: denied { listen } for pid=460 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.624721][ T5] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 27.642305][ T24] audit: type=1400 audit(1784912429.080:127): avc: denied { connect } for pid=460 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.669395][ T284] usb 2-1: clock source 0 is not valid, cannot use [ 27.676591][ T5] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 27.819948][ T5] usb 5-1: USB disconnect, device number 2 [ 27.877220][ T403] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.887366][ T284] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 27.893729][ T284] usb 2-1: 1:1: freq mismatch (RO clock): req 48000, clock runs @0 [ 27.937371][ T284] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 27.946295][ T284] usb 2-1: clock source 0 is not valid, cannot use [ 27.967222][ T284] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 27.973897][ T284] usb 2-1: 1:1: freq mismatch (RO clock): req 48000, clock runs @0 [ 27.985910][ T284] usb 2-1: USB disconnect, device number 2 [ 28.107217][ T302] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 28.117198][ T403] usb 3-1: Using ep0 maxpacket: 8 [ 28.187646][ T431] udevd[431]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.237231][ T403] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 28.364103][ T24] audit: type=1400 audit(1784912429.890:128): avc: denied { unlink } for pid=480 comm="syz.4.75" name="#1" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 28.373148][ T481] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 28.396456][ T24] audit: type=1400 audit(1784912429.890:129): avc: denied { mount } for pid=480 comm="syz.4.75" name="/" dev="overlay" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.420147][ T403] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 28.429753][ T403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.438026][ T403] usb 3-1: Product: syz [ 28.442221][ T403] usb 3-1: Manufacturer: syz [ 28.447514][ T24] audit: type=1400 audit(1784912429.890:130): avc: denied { remount } for pid=480 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.469520][ T485] fuse: Bad value for 'fd' [ 28.474038][ T403] usb 3-1: SerialNumber: syz [ 28.479613][ T403] usb 3-1: config 0 descriptor?? [ 28.509279][ T302] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 28.535806][ T302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 28.562734][ T302] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 28.587184][ T302] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 28.610835][ T302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.629787][ T302] usb 1-1: config 0 descriptor?? [ 28.647248][ T475] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 28.707364][ T24] audit: type=1400 audit(1784912430.240:131): avc: denied { create } for pid=499 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.739262][ T284] usb 3-1: USB disconnect, device number 3 [ 28.937187][ T15] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.057196][ T403] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.157240][ T302] usbhid 1-1:0.0: can't add hid device: -71 [ 29.163340][ T302] usbhid: probe of 1-1:0.0 failed with error -71 [ 29.170840][ T302] usb 1-1: USB disconnect, device number 3 [ 29.297777][ T15] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 29.306171][ T15] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 29.317028][ T15] usb 4-1: config 220 has no interface number 2 [ 29.323654][ T15] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 29.337075][ T15] usb 4-1: config 220 interface 0 has no altsetting 0 [ 29.344028][ T15] usb 4-1: config 220 interface 76 has no altsetting 0 [ 29.350962][ T15] usb 4-1: config 220 interface 1 has no altsetting 0 [ 29.388981][ T517] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 29.417242][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.428757][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.438560][ T403] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.451725][ T403] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.461333][ T403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.470124][ T403] usb 2-1: config 0 descriptor?? [ 29.507293][ T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.527319][ T15] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 29.536492][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.545415][ T15] usb 4-1: Product: syz [ 29.550053][ T15] usb 4-1: Manufacturer: syz [ 29.554688][ T15] usb 4-1: SerialNumber: syz [ 29.766586][ T24] audit: type=1326 audit(1784912431.290:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=526 comm="syz.0.93" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38a3dc0e99 code=0x0 [ 29.791323][ T5] usb 5-1: device descriptor read/64, error -71 [ 29.927287][ T15] usb 4-1: selecting invalid altsetting 0 [ 29.933173][ T15] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 29.940165][ T15] uvcvideo: No valid video chain found. [ 29.948793][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 29.956567][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 29.964447][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 29.972129][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 29.979839][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 29.989374][ T15] usb 4-1: USB disconnect, device number 2 [ 29.995601][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.004788][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.017501][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.025042][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.033004][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.040674][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.048875][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.056384][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.064141][ T403] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.072107][ T403] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 30.082533][ T403] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 30.187191][ T5] usb 5-1: device descriptor read/64, error -71 [ 30.328038][ T538] fuse: Bad value for 'fd' [ 30.457225][ T5] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 30.557194][ T403] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.717192][ T303] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.727325][ T5] usb 5-1: device descriptor read/64, error -71 [ 30.797182][ T403] usb 3-1: Using ep0 maxpacket: 16 [ 30.917272][ T403] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 30.930404][ T403] usb 3-1: config 0 interface 0 has no altsetting 0 [ 30.937028][ T403] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 30.946209][ T403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.955373][ T403] usb 3-1: config 0 descriptor?? [ 30.960429][ T303] usb 4-1: Using ep0 maxpacket: 8 [ 31.077296][ T303] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 31.117227][ T5] usb 5-1: device descriptor read/64, error -71 [ 31.237294][ T303] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 31.237301][ T5] usb usb5-port1: attempt power cycle [ 31.251878][ T303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.259927][ T303] usb 4-1: Product: syz [ 31.264103][ T303] usb 4-1: Manufacturer: syz [ 31.268738][ T303] usb 4-1: SerialNumber: syz [ 31.274137][ T303] usb 4-1: config 0 descriptor?? [ 31.397221][ T302] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 31.524253][ T501] usb 4-1: USB disconnect, device number 3 [ 31.657320][ T5] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 31.707477][ T403] usbhid 3-1:0.0: can't add hid device: -71 [ 31.713476][ T403] usbhid: probe of 3-1:0.0 failed with error -71 [ 31.720092][ T303] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 31.728849][ T403] usb 3-1: USB disconnect, device number 4 [ 31.827264][ T5] usb 5-1: device descriptor read/8, error -71 [ 32.097288][ T5] usb 5-1: device descriptor read/8, error -71 [ 32.097300][ T303] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 32.097356][ T303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 32.127192][ T303] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 32.164459][ T303] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 32.174229][ T303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.188546][ T303] usb 1-1: config 0 descriptor?? [ 32.207275][ T553] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 32.316815][ T24] audit: type=1400 audit(1784912433.840:133): avc: denied { read write } for pid=576 comm="syz.2.113" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 32.344465][ T580] Zero length message leads to an empty skb [ 32.597195][ T302] usb 2-1: device descriptor read/64, error -71 [ 32.677178][ T5] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 32.747201][ T303] usbhid 1-1:0.0: can't add hid device: -71 [ 32.753253][ T303] usbhid: probe of 1-1:0.0 failed with error -71 [ 32.764953][ T303] usb 1-1: USB disconnect, device number 4 [ 32.767437][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 32.887186][ T501] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 32.897329][ T5] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 32.997392][ T302] usb 2-1: device firmware changed [ 33.002751][ T15] usb 2-1: USB disconnect, device number 3 [ 33.057491][ T5] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 33.066914][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.074978][ T5] usb 5-1: Product: syz [ 33.079288][ T5] usb 5-1: Manufacturer: syz [ 33.083932][ T5] usb 5-1: SerialNumber: syz [ 33.090146][ T5] usb 5-1: config 0 descriptor?? [ 33.157228][ T15] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.187233][ T20] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.247499][ T501] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.258722][ T501] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 33.271956][ T501] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.278725][ T501] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 33.287820][ T501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.296461][ T501] usb 3-1: config 0 descriptor?? [ 33.331142][ T302] usb 5-1: USB disconnect, device number 6 [ 33.427228][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 33.477269][ T5] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.517269][ T15] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 33.525832][ T15] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 33.536197][ T15] usb 2-1: config 220 has no interface number 2 [ 33.542764][ T15] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 33.555954][ T15] usb 2-1: config 220 interface 0 has no altsetting 0 [ 33.557453][ T20] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 33.563079][ T15] usb 2-1: config 220 interface 76 has no altsetting 0 [ 33.576713][ T20] usb 4-1: config 0 interface 0 has no altsetting 0 [ 33.582760][ T15] usb 2-1: config 220 interface 1 has no altsetting 0 [ 33.590222][ T20] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 33.605354][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.614136][ T20] usb 4-1: config 0 descriptor?? [ 33.747240][ T5] usb 1-1: device descriptor read/64, error -71 [ 33.753790][ T15] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 33.763127][ T501] hid (null): global environment stack underflow [ 33.769599][ T501] hid (null): report_id 2126720596 is invalid [ 33.776628][ T501] hid-generic 0003:1038:12B6.0003: unknown main item tag 0x2 [ 33.784180][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.792253][ T15] usb 2-1: Product: syz [ 33.796433][ T15] usb 2-1: Manufacturer: syz [ 33.801267][ T501] hid-generic 0003:1038:12B6.0003: global environment stack underflow [ 33.809493][ T501] hid-generic 0003:1038:12B6.0003: item 0 4 1 11 parsing failed [ 33.817203][ T15] usb 2-1: SerialNumber: syz [ 33.822676][ T501] hid-generic: probe of 0003:1038:12B6.0003 failed with error -22 [ 33.938846][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 33.938857][ T24] audit: type=1400 audit(1784912435.470:136): avc: denied { create } for pid=607 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.964959][ T24] audit: type=1400 audit(1784912435.470:137): avc: denied { connect } for pid=607 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.968792][ T303] usb 3-1: USB disconnect, device number 5 [ 34.167229][ T5] usb 1-1: device descriptor read/64, error -71 [ 34.187309][ T15] usb 2-1: selecting invalid altsetting 0 [ 34.193104][ T15] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 34.199601][ T15] uvcvideo: No valid video chain found. [ 34.239078][ T15] usb 2-1: USB disconnect, device number 4 [ 34.337245][ T20] usbhid 4-1:0.0: can't add hid device: -71 [ 34.343706][ T20] usbhid: probe of 4-1:0.0 failed with error -71 [ 34.351589][ T20] usb 4-1: USB disconnect, device number 4 [ 34.437225][ T5] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.603781][ T623] kvm [622]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0xc1 data 0xe50000000000 [ 34.613999][ T623] kvm [622]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0xc2 data 0xe50000000000 [ 34.627489][ T623] kvm [622]: vcpu6, guest rIP: 0x9139 ignored wrmsr: 0x11e data 0xe500be702111 [ 34.640566][ T623] kvm [622]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0x186 data 0xe50000000000 [ 34.650807][ T623] kvm [622]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0x187 data 0xe50000000000 [ 34.707210][ T5] usb 1-1: device descriptor read/64, error -71 [ 34.769011][ T24] audit: type=1326 audit(1784912436.300:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=627 comm="syz.1.133" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ff0a39e99 code=0x0 [ 35.107165][ T15] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.114801][ T5] usb 1-1: device descriptor read/64, error -71 [ 35.173409][ T642] kvm [641]: vcpu1, guest rIP: 0x914e disabled perfctr wrmsr: 0x187 data 0xffff0000 [ 35.183074][ T642] kvm [641]: vcpu1, guest rIP: 0x9150 disabled perfctr wrmsr: 0x187 data 0xffff0000 [ 35.192787][ T642] kvm [641]: vcpu1, guest rIP: 0x914e disabled perfctr wrmsr: 0x186 data 0xffff0000 [ 35.202456][ T642] kvm [641]: vcpu1, guest rIP: 0x9150 disabled perfctr wrmsr: 0x186 data 0xffff0000 [ 35.215638][ T642] kvm [641]: vcpu1, guest rIP: 0x914e ignored wrmsr: 0x11e data 0xffff0000 [ 35.224492][ T642] kvm [641]: vcpu1, guest rIP: 0x9150 ignored wrmsr: 0x11e data 0xffff0000 [ 35.236228][ T642] kvm [641]: vcpu1, guest rIP: 0x914e disabled perfctr wrmsr: 0xc2 data 0xffff0000 [ 35.237651][ T5] usb usb1-port1: attempt power cycle [ 35.245988][ T642] kvm [641]: vcpu1, guest rIP: 0x9150 disabled perfctr wrmsr: 0xc2 data 0xffff0000 [ 35.367142][ T15] usb 4-1: Using ep0 maxpacket: 8 [ 35.389095][ T24] audit: type=1400 audit(1784912436.920:139): avc: denied { setopt } for pid=648 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.487321][ T15] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 35.525714][ T24] audit: type=1400 audit(1784912437.050:140): avc: denied { watch watch_reads } for pid=660 comm="syz.4.146" path="/31/file0" dev="overlay" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.667220][ T15] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 35.676368][ T5] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.684168][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.695306][ T15] usb 4-1: Product: syz [ 35.699650][ T15] usb 4-1: Manufacturer: syz [ 35.706780][ T15] usb 4-1: SerialNumber: syz [ 35.716854][ T15] usb 4-1: config 0 descriptor?? [ 35.727205][ T20] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.752798][ T24] audit: type=1400 audit(1784912437.280:141): avc: denied { read append } for pid=681 comm="syz.1.154" name="event1" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.776727][ T24] audit: type=1400 audit(1784912437.280:142): avc: denied { open } for pid=681 comm="syz.1.154" path="/dev/input/event1" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.801986][ T24] audit: type=1400 audit(1784912437.300:143): avc: denied { ioctl } for pid=681 comm="syz.1.154" path="/dev/input/event1" dev="devtmpfs" ino=256 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.830636][ T24] audit: type=1400 audit(1784912437.360:144): avc: denied { write } for pid=683 comm="syz.1.155" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.847772][ T5] usb 1-1: device descriptor read/8, error -71 [ 35.967226][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 35.976408][ T52] usb 4-1: USB disconnect, device number 5 [ 36.087270][ T20] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 36.097365][ T15] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.100554][ T20] usb 3-1: config 0 interface 0 has no altsetting 0 [ 36.114590][ T20] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 36.123927][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.127491][ T5] usb 1-1: device descriptor read/8, error -71 [ 36.134987][ T20] usb 3-1: config 0 descriptor?? [ 36.237328][ T24] audit: type=1400 audit(1784912437.770:145): avc: denied { read } for pid=687 comm="syz.0.157" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.467314][ T15] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.479007][ T15] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.577625][ T15] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 36.586821][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.595029][ T15] usb 2-1: SerialNumber: syz [ 36.777283][ T52] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 36.867275][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 36.873443][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 36.881736][ T20] usb 3-1: USB disconnect, device number 6 [ 36.888434][ T15] usb 2-1: 0:2 : does not exist [ 36.927228][ T5] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.938759][ T15] usb 2-1: USB disconnect, device number 5 [ 37.047187][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 37.147734][ T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.157916][ T5] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.173824][ T5] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 37.182880][ T5] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 37.192094][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.201066][ T5] usb 1-1: config 0 descriptor?? [ 37.207271][ T52] usb 5-1: unable to get BOS descriptor or descriptor too short [ 37.424708][ T733] fuse: Bad value for 'fd' [ 37.527214][ T52] usb 5-1: string descriptor 0 read error: -22 [ 37.533497][ T52] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 37.542890][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.599882][ T52] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.717199][ T20] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.817260][ T52] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 37.860438][ T52] usb 5-1: USB disconnect, device number 7 [ 37.977225][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 38.097397][ T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 38.257231][ T20] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 38.266536][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.274880][ T20] usb 3-1: Product: syz [ 38.279236][ T20] usb 3-1: Manufacturer: syz [ 38.283869][ T20] usb 3-1: SerialNumber: syz [ 38.293721][ T20] usb 3-1: config 0 descriptor?? [ 38.325042][ T748] kvm: MONITOR instruction emulated as NOP! [ 38.328242][ T751] ====================================================== [ 38.328242][ T751] WARNING: the mand mount option is being deprecated and [ 38.328242][ T751] will be removed in v5.15! [ 38.328242][ T751] ====================================================== [ 38.462571][ T766] fuse: Bad value for 'fd' [ 38.472459][ T761] kvm [759]: vcpu6, guest rIP: 0x9139 ignored wrmsr: 0x11e data 0xe500be702111 [ 38.561109][ T303] usb 3-1: USB disconnect, device number 7 [ 38.787203][ T20] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 38.797292][ T403] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.082511][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 39.082523][ T24] audit: type=1400 audit(1784912440.610:157): avc: denied { write } for pid=780 comm="syz.2.193" name="/" dev="incremental-fs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.112044][ T24] audit: type=1400 audit(1784912440.610:158): avc: denied { add_name } for pid=780 comm="syz.2.193" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.132814][ T24] audit: type=1400 audit(1784912440.610:159): avc: denied { create } for pid=780 comm="syz.2.193" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.148106][ T20] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 39.157543][ T24] audit: type=1400 audit(1784912440.610:160): avc: denied { associate } for pid=780 comm="syz.2.193" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.168330][ T403] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 39.187735][ T24] audit: type=1400 audit(1784912440.610:161): avc: denied { mounton } for pid=780 comm="syz.2.193" path="/36/bus/file0" dev="incremental-fs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.199997][ T20] usb 5-1: config 0 interface 0 has no altsetting 0 [ 39.220846][ T24] audit: type=1400 audit(1784912440.640:162): avc: denied { remove_name } for pid=281 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.226135][ T403] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 39.251153][ T24] audit: type=1400 audit(1784912440.640:163): avc: denied { unlink } for pid=281 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.260806][ T20] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 39.285324][ T24] audit: type=1400 audit(1784912440.730:164): avc: denied { rmdir } for pid=281 comm="syz-executor" name=".index" dev="incremental-fs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.294694][ T403] usb 2-1: config 220 has no interface number 2 [ 39.323151][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.331613][ T403] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 39.345357][ T20] usb 5-1: config 0 descriptor?? [ 39.350415][ T403] usb 2-1: config 220 interface 0 has no altsetting 0 [ 39.357269][ T403] usb 2-1: config 220 interface 76 has no altsetting 0 [ 39.364141][ T403] usb 2-1: config 220 interface 1 has no altsetting 0 [ 39.485045][ T786] fuse: Bad value for 'fd' [ 39.520153][ T284] usb 1-1: USB disconnect, device number 8 [ 39.527597][ T403] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 39.536782][ T403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.550334][ T403] usb 2-1: Product: syz [ 39.554562][ T403] usb 2-1: Manufacturer: syz [ 39.560478][ T403] usb 2-1: SerialNumber: syz [ 39.594562][ T24] audit: type=1326 audit(1784912441.120:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=791 comm="syz.0.200" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38a3dc0e99 code=0x0 [ 39.606580][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.625871][ T789] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.633805][ T789] device bridge_slave_0 entered promiscuous mode [ 39.642676][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.650007][ T789] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.657727][ T789] device bridge_slave_1 entered promiscuous mode [ 39.711057][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.718169][ T789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.725451][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.732583][ T789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.760985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.767816][ T303] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.776149][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.785517][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.798088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.806325][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.813591][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.823338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.831637][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.838775][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.848126][ T20] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 39.855113][ T20] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 39.863483][ T20] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 39.870614][ T20] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 39.877709][ T20] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 39.884697][ T20] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 39.892108][ T20] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 39.899715][ T20] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 39.906739][ T20] saitek 0003:06A3:0621.0004: unknown global tag 0xd [ 39.913514][ T20] saitek 0003:06A3:0621.0004: item 0 2 1 13 parsing failed [ 39.921142][ T20] saitek 0003:06A3:0621.0004: parse failed [ 39.921447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.927307][ T20] saitek: probe of 0003:06A3:0621.0004 failed with error -22 [ 39.942323][ T403] usb 2-1: selecting invalid altsetting 0 [ 39.948218][ T403] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 39.956284][ T403] uvcvideo: No valid video chain found. [ 39.965390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.983421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.994041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.002881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.007329][ T303] usb 4-1: Using ep0 maxpacket: 8 [ 40.011439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.023627][ T300] device bridge_slave_1 left promiscuous mode [ 40.029913][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.037589][ T300] device bridge_slave_0 left promiscuous mode [ 40.043153][ T403] usb 2-1: USB disconnect, device number 6 [ 40.051408][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.062821][ T300] device veth1_macvtap left promiscuous mode [ 40.069175][ T300] device veth0_vlan left promiscuous mode [ 40.085334][ T52] usb 5-1: USB disconnect, device number 8 [ 40.137250][ T303] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 40.150443][ T303] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 40.159624][ T303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.163033][ T789] device veth0_vlan entered promiscuous mode [ 40.174991][ T303] usb 4-1: config 0 descriptor?? [ 40.186163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.196301][ T789] device veth1_macvtap entered promiscuous mode [ 40.208927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.217880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.347704][ T24] audit: type=1400 audit(1784912441.880:166): avc: denied { sys_admin } for pid=806 comm="syz.1.203" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 40.513732][ T815] ================================================================== [ 40.522180][ T815] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x85/0xa0 [ 40.530115][ T815] Write of size 8 at addr ffff88810b14ed90 by task syz.5.206/815 [ 40.537881][ T815] [ 40.540264][ T815] CPU: 1 PID: 815 Comm: syz.5.206 Not tainted syzkaller #0 [ 40.547512][ T815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 40.557681][ T815] Call Trace: [ 40.561193][ T815] __dump_stack+0x21/0x24 [ 40.565590][ T815] dump_stack_lvl+0x1a7/0x208 [ 40.570416][ T815] ? show_regs_print_info+0x18/0x18 [ 40.575676][ T815] ? thaw_kernel_threads+0x220/0x220 [ 40.581158][ T815] print_address_description+0x7f/0x2c0 [ 40.587118][ T815] ? rcu_segcblist_enqueue+0x85/0xa0 [ 40.592435][ T815] kasan_report+0x100/0x140 [ 40.596999][ T815] ? rcu_segcblist_enqueue+0x85/0xa0 [ 40.602320][ T815] __asan_report_store8_noabort+0x17/0x20 [ 40.608078][ T815] rcu_segcblist_enqueue+0x85/0xa0 [ 40.613233][ T815] call_rcu+0x4df/0x1090 [ 40.617521][ T815] ? rcu_gp_kthread_wake+0x90/0x90 [ 40.622672][ T815] ? __kasan_check_write+0x14/0x20 [ 40.627960][ T815] ? __wake_up_bit+0x120/0x120 [ 40.632791][ T815] security_inode_free+0xb4/0xd0 [ 40.638029][ T815] __destroy_inode+0x175/0x4f0 [ 40.643215][ T815] evict+0x7e8/0x940 [ 40.647140][ T815] ? mode_strip_sgid+0x150/0x150 [ 40.652288][ T815] ? _raw_spin_lock+0x94/0xf0 [ 40.657000][ T815] ? _raw_spin_trylock_bh+0x150/0x150 [ 40.662409][ T815] ? __kasan_check_read+0x11/0x20 [ 40.667458][ T815] ? __kasan_check_write+0x14/0x20 [ 40.672619][ T815] iput+0x654/0x7e0 [ 40.676481][ T815] dentry_unlink_inode+0x2d5/0x390 [ 40.681901][ T815] __dentry_kill+0x45b/0x660 [ 40.686533][ T815] dentry_kill+0xc0/0x2a0 [ 40.690906][ T815] dput+0x42/0x80 [ 40.694789][ T815] __fput+0x4bd/0x730 [ 40.698843][ T815] ____fput+0x15/0x20 [ 40.702990][ T815] task_work_run+0x127/0x190 [ 40.707860][ T815] exit_to_user_mode_loop+0xcb/0xe0 [ 40.713117][ T815] exit_to_user_mode_prepare+0x76/0xa0 [ 40.718630][ T815] syscall_exit_to_user_mode+0x1d/0x40 [ 40.724581][ T815] do_syscall_64+0x3d/0x40 [ 40.729134][ T815] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.735072][ T815] RIP: 0033:0x7fdf88a2fe99 [ 40.739663][ T815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.759413][ T815] RSP: 002b:00007ffea7db8b38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 40.769359][ T815] RAX: 0000000000000000 RBX: 00007ffea7db8c20 RCX: 00007fdf88a2fe99 [ 40.777540][ T815] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 40.785707][ T815] RBP: 0000000000009e20 R08: 0000000000000001 R09: 0000000000000000 [ 40.793752][ T815] R10: 0000001b2ce20000 R11: 0000000000000246 R12: 00007ffea7db8c60 [ 40.802030][ T815] R13: 00007fdf88cb7fac R14: 0000000000009e58 R15: 00007fdf88cb7fa0 [ 40.810513][ T815] [ 40.812987][ T815] Allocated by task 817: [ 40.817384][ T815] __kasan_kmalloc+0xd4/0x100 [ 40.822116][ T815] __kmalloc+0x19f/0x330 [ 40.826395][ T815] l2tp_session_create+0x39/0xb60 [ 40.831449][ T815] pppol2tp_connect+0xbf5/0x1640 [ 40.836626][ T815] __sys_connect+0x3ce/0x450 [ 40.841459][ T815] __x64_sys_connect+0x7a/0x90 [ 40.846258][ T815] do_syscall_64+0x31/0x40 [ 40.850722][ T815] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.856628][ T815] [ 40.858980][ T815] Freed by task 300: [ 40.862930][ T815] kasan_set_track+0x4a/0x70 [ 40.867688][ T815] kasan_set_free_info+0x23/0x40 [ 40.872689][ T815] ____kasan_slab_free+0x125/0x160 [ 40.878254][ T815] __kasan_slab_free+0x11/0x20 [ 40.883050][ T815] slab_free_freelist_hook+0xc5/0x190 [ 40.888607][ T815] kfree+0xc0/0x270 [ 40.892727][ T815] l2tp_session_put+0xb2/0x1a0 [ 40.897546][ T815] l2tp_session_delete+0x3a9/0x4a0 [ 40.902804][ T815] l2tp_tunnel_del_work+0x180/0x3d0 [ 40.908190][ T815] process_one_work+0x6fd/0xbc0 [ 40.913182][ T815] worker_thread+0xa8e/0x13c0 [ 40.917914][ T815] kthread+0x324/0x3b0 [ 40.922159][ T815] ret_from_fork+0x1f/0x30 [ 40.926601][ T815] [ 40.928950][ T815] Last potentially related work creation: [ 40.934711][ T815] kasan_save_stack+0x3a/0x60 [ 40.939433][ T815] __kasan_record_aux_stack+0xd2/0x100 [ 40.944940][ T815] kasan_record_aux_stack_noalloc+0xb/0x10 [ 40.950788][ T815] call_rcu+0x11a/0x1090 [ 40.955083][ T815] pppol2tp_release+0x1e3/0x2b0 [ 40.960076][ T815] sock_close+0xb8/0x200 [ 40.964494][ T815] __fput+0x2dc/0x730 [ 40.968504][ T815] ____fput+0x15/0x20 [ 40.972639][ T815] task_work_run+0x127/0x190 [ 40.977724][ T815] exit_to_user_mode_loop+0xcb/0xe0 [ 40.983159][ T815] exit_to_user_mode_prepare+0x76/0xa0 [ 40.988657][ T815] syscall_exit_to_user_mode+0x1d/0x40 [ 40.994141][ T815] do_syscall_64+0x3d/0x40 [ 40.998587][ T815] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.004916][ T815] [ 41.007268][ T815] The buggy address belongs to the object at ffff88810b14ec00 [ 41.007268][ T815] which belongs to the cache kmalloc-512 of size 512 [ 41.021467][ T815] The buggy address is located 400 bytes inside of [ 41.021467][ T815] 512-byte region [ffff88810b14ec00, ffff88810b14ee00) [ 41.035225][ T815] The buggy address belongs to the page: [ 41.040905][ T815] page:ffffea00042c5300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b14c [ 41.051168][ T815] head:ffffea00042c5300 order:2 compound_mapcount:0 compound_pincount:0 [ 41.059552][ T815] flags: 0x4000000000010200(slab|head) [ 41.065055][ T815] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 41.073880][ T815] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 41.082506][ T815] page dumped because: kasan: bad access detected [ 41.088951][ T815] page_owner tracks the page as allocated [ 41.094863][ T815] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 282, ts 24023761905, free_ts 23987045654 [ 41.114041][ T815] prep_new_page+0x176/0x190 [ 41.118915][ T815] get_page_from_freelist+0x225f/0x23f0 [ 41.124493][ T815] __alloc_pages_nodemask+0x29a/0x640 [ 41.129910][ T815] new_slab+0x84/0x3f0 [ 41.134043][ T815] ___slab_alloc+0x2f8/0x4c0 [ 41.138664][ T815] __slab_alloc+0x63/0xa0 [ 41.143029][ T815] kmem_cache_alloc_trace+0x1a8/0x2e0 [ 41.148705][ T815] ipv6_add_addr+0x408/0xd90 [ 41.153331][ T815] inet6_addr_add+0x453/0x970 [ 41.158051][ T815] inet6_rtm_newaddr+0x6e1/0x9c0 [ 41.163122][ T815] rtnetlink_rcv_msg+0x9e9/0xca0 [ 41.168329][ T815] netlink_rcv_skb+0x1e9/0x430 [ 41.173547][ T815] rtnetlink_rcv+0x1c/0x20 [ 41.178031][ T815] netlink_unicast+0x86c/0xa30 [ 41.182830][ T815] netlink_sendmsg+0x949/0xb70 [ 41.187620][ T815] __sys_sendto+0x467/0x620 [ 41.192141][ T815] page last free stack trace: [ 41.196863][ T815] __free_pages_ok+0x80b/0x830 [ 41.201813][ T815] __free_pages+0xd8/0x390 [ 41.206296][ T815] __free_slab+0xcf/0x190 [ 41.210668][ T815] unfreeze_partials+0x150/0x180 [ 41.216214][ T815] put_cpu_partial+0xc1/0x180 [ 41.220927][ T815] __slab_free+0x2c9/0x3a0 [ 41.225602][ T815] ___cache_free+0x10e/0x130 [ 41.230306][ T815] qlink_free+0x50/0x90 [ 41.234636][ T815] qlist_free_all+0x5f/0xb0 [ 41.239486][ T815] kasan_quarantine_reduce+0x14a/0x160 [ 41.244982][ T815] __kasan_slab_alloc+0x2f/0xe0 [ 41.249882][ T815] slab_post_alloc_hook+0x5d/0x2f0 [ 41.255180][ T815] kmem_cache_alloc_trace+0x155/0x2e0 [ 41.260884][ T815] ____ip_mc_inc_group+0x1b7/0x8b0 [ 41.266180][ T815] ip_mc_up+0x112/0x1f0 [ 41.270415][ T815] inetdev_event+0xbf2/0x1010 [ 41.275122][ T815] [ 41.277500][ T815] Memory state around the buggy address: [ 41.283154][ T815] ffff88810b14ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.291268][ T815] ffff88810b14ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.299472][ T815] >ffff88810b14ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.307547][ T815] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 41.312152][ T815] ffff88810b14ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.320246][ T815] ffff88810b14ee80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.328324][ T815] ================================================================== [ 41.336411][ T815] Disabling lock debugging due to kernel taint [ 41.597274][ T303] usbhid 4-1:0.0: can't add hid device: -71 [ 41.603356][ T303] usbhid: probe of 4-1:0.0 failed with error -71 [ 41.623637][ T303] usb 4-1: USB disconnect, device number 6 [ 42.057814][ T300] device bridge_slave_1 left promiscuous mode [ 42.063980][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.071508][ T300] device bridge_slave_0 left promiscuous mode [ 42.077736][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.085564][ T300] device veth1_macvtap left promiscuous mode [ 42.091785][ T300] device veth0_vlan left promiscuous mode [ 43.138095][ T300] device bridge_slave_1 left promiscuous mode [ 43.144245][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.151753][ T300] device bridge_slave_0 left promiscuous mode [ 43.157980][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.165956][ T300] device bridge_slave_1 left promiscuous mode [ 43.172369][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.179856][ T300] device bridge_slave_0 left promiscuous mode [ 43.185975][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.193983][ T300] device bridge_slave_1 left promiscuous mode [ 43.200162][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.207666][ T300] device bridge_slave_0 left promiscuous mode [ 43.213801][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.222312][ T300] device veth1_macvtap left promiscuous mode [ 43.228377][ T300] device veth0_vlan left promiscuous mode [ 43.234253][ T300] device veth1_macvtap left promiscuous mode [ 43.240314][ T300] device veth0_vlan left promiscuous mode [ 43.246196][ T300] device veth1_macvtap left promiscuous mode [ 43.252398][ T300] device veth0_vlan left promiscuous mode