last executing test programs: 5.431747729s ago: executing program 0 (id=336): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004b80)=ANY=[@ANYBLOB="24000000120001000000000000000000100000000c000000000000000000000c"], 0x24}], 0x1}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xb8}}, 0x4008800) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000002240)='-', 0x1, 0x4004085, 0x0, 0x0) recvfrom(r5, 0x0, 0x0, 0x63, 0x0, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000085e049d784f000000000109022400010000800f0904000004030000000921faff09012207000905810300"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002207000000a1"], 0x0}, 0x0) ptrace$setregs(0xd, r4, 0x100, &(0x7f0000000240)="7b6ddd951ce4eef691063a401d46950323b282b366840621dd0feb4a3a49913e913767c07fa1627a39fab8cfc1cfd7c48cf6187a56d6c1425120a9e886025d2e3c94e22aeeb81136b97e9c326addb7a9a01ea1ae659247b4bfc52a85ddf68ad50151d631405a6f8d10ad7222acd04dff6cdb537ad1046f822def639e66d0f52815f5c7cb5f3bde9adff0804f0835919e4fadbf4400849be49e48a5be144a1aef0b") r7 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x8, 0xd, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 4.978883816s ago: executing program 1 (id=337): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0xfffffffd, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, 0x0) getsockopt(r0, 0x2, 0x2, &(0x7f00000001c0)=""/160, &(0x7f0000000040)=0xa0) socket$packet(0x11, 0x2, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000280)={@void, @void, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x95, 0x67, 0xe0, 0x3, 0x2f, 0x0, @private=0xa010101, @private=0xa010102}, {0xa000, 0x86dd, 0x81, 0x0, @opaque="aa97d7b28ae2ddb02de0c8e2f692a7c40c88128fbd41849cd67a9cf7b345004431740321603907a8330b3b8e8d42acfa97e054bced8c66c7d26f511e587e935228fe97247ac9d30076f04acf6d5c2f46441eb2cccb10b10e75ad2430077ab9f3ae190069af93e590579f04ad2eccb77ff7bb0bcad833841df3"}}}}}}, 0xa3) 4.867053513s ago: executing program 1 (id=338): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x80) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$RTC_AIE_OFF(r5, 0x7002) fchdir(0xffffffffffffffff) r6 = inotify_init() ioctl$KVM_GET_TSC_KHZ_vm(r4, 0xaea3) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r7, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00', 0x10}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x800, 0x100102, 0x36, "b0bf00"}) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x4008000) ioctl$TCXONC(r8, 0x540a, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000140)=0xa) inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0x703) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) splice(r3, 0x0, r1, 0x0, 0x408c8, 0xe) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 3.999954624s ago: executing program 1 (id=345): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x18, 0xfbfb}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xb, 0x20, @void}}}}}}}}, 0x32) 3.976329435s ago: executing program 1 (id=346): arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4a8103, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) 3.920284478s ago: executing program 1 (id=347): r0 = syz_clone(0xa8801000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0], 0x1}, 0x58) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f00000002c0)) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10440, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x100000c, 0x4a0b1, r1, 0x8d6dd000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@remote, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xfffffffffffffef6) r5 = syz_io_uring_complete(0x0) getpeername$inet(r3, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="db001a809a0800c700ac1414bb040042800400c48008000f00", @ANYRES32=r4, @ANYBLOB="dd96b0914081f80824ee422618b84b48d0c24b222bc310d372324fa80b054507e4f81110ff0f91b7704bc397a26a4af8f6d4ace91873681ac9dc12745fce6a08802e596de0cbbc1f2120a2b5ab45be9f85df19e14f43f41dcff4b9cce9b90d1b69e592fb1877f0dacc3daef0ea408f2f4e92d296760ce2fb546ead7b9dad868a8bcb8a83406ff2fc45012e7351bf7596bf534d05484e56050895623a4fd86e2d9df09f04b54142ffcbd01acaecee24d1ce40cf9c135178bf26010400438000a4011b8008001100", @ANYRES32=r5, @ANYBLOB="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"], 0x129c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000004) syz_clone(0xa8801000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0], 0x1}, 0x58) (async) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f00000002c0)) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10440, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x100000c, 0x4a0b1, r1, 0x8d6dd000) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@remote, @in6=@ipv4={""/10, ""/2, @broadcast}}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xfffffffffffffef6) (async) syz_io_uring_complete(0x0) (async) getpeername$inet(r3, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="db001a809a0800c700ac1414bb040042800400c48008000f00", @ANYRES32=r4, @ANYBLOB="dd96b0914081f80824ee422618b84b48d0c24b222bc310d372324fa80b054507e4f81110ff0f91b7704bc397a26a4af8f6d4ace91873681ac9dc12745fce6a08802e596de0cbbc1f2120a2b5ab45be9f85df19e14f43f41dcff4b9cce9b90d1b69e592fb1877f0dacc3daef0ea408f2f4e92d296760ce2fb546ead7b9dad868a8bcb8a83406ff2fc45012e7351bf7596bf534d05484e56050895623a4fd86e2d9df09f04b54142ffcbd01acaecee24d1ce40cf9c135178bf26010400438000a4011b8008001100", @ANYRES32=r5, @ANYBLOB="f45757c6a29372a868d95351ab4414e5814925b9ae2456935adb763f02e3b6e79df28bf8dfe0b0a1695b4da49d58db83d92e1a00556ff3f945c806a9be9fe04cf4cd54a8e1b6dbc7a9ccdd34a131b12e73c5c18ac6f1f3c142009f4d122f56a62ef690336f421c630a7b6433e9fbc3c1558619e86dddbc8295f75ca6223ed693f1807ca4bc0c0738e026db2852cc7f067f27e8e3dc32e1c62737ce23e639889108168635272a6264bf607f226e527db075f7b93361ce45e5326c3e013eced34383b892ea810ff83c5b07202d6648e7fa083ff29af66f3e4ddad0abf817995b660476f71e297bf2c8709cbdea22143e93cc72dc3f8b9f536bff03223767f6ccaf81702263c91c1bc3eaae3d34289e64e21b66fb48cd9391950ccabf53412a2d965893cff9582dc213a5f6204530802b764d3214129020a1ecc740afff4512d96c04c824406f9330436eb145548224654ecc5727557b1b3ff683d224b922759977849ccf0db9991a63bd41360c23610c8c41c4b0c4156c2f69a65901b30e0a2648640a99a1cc55072aab4f2e431b9ad6788eb4bc1c04009e80"], 0x129c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000004) (async) 3.846463913s ago: executing program 1 (id=348): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x3ae4c21, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x463}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="e2cab5afe61dd3c8daf2a0acd86ba0cd607d5b8bd38aa84b89c9b1ab6181ec2793c53c7934107c92afffea961ee00526811b1d08714fd46a845016c24638f9db3283c2b5d4cd784b6aa245dadf8daa169b103094328f676642ec52baa465ed78c4c5abe101e323529b024317139c873aed1843047a90ebfba1d4d9fa2e7a42d49b0582a1045094fc5c1cf1faf409912aeccad25a98b6748b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="001602000000f610c3037321a56cc85bc79ed9264cac79ceb75d02de05b14815"], 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(0xee01) unshare(0x28000600) syz_usb_control_io(r4, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) write$binfmt_format(r2, &(0x7f0000006240)='-1\x00', 0x3) fstat(r1, 0x0) ioctl$TCFLSH(r0, 0x40087101, 0x20001100) 2.423296617s ago: executing program 0 (id=354): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x18, 0xfbfb}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xb, 0x20, @void}}}}}}}}, 0x32) 2.398765258s ago: executing program 0 (id=355): syz_clone3(&(0x7f0000000240)={0x0, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000002c0), {}, &(0x7f0000000300)=""/192, 0xfffffffffffffe2a, &(0x7f00000001c0)=""/23, &(0x7f0000000200), 0x7}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000340)=@arm64={0x80, 0x9, 0xb, '\x00', 0x55}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x2, &(0x7f0000000100)="813f0ea6", 0x4) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0xff, 0xe, 0x7, 0x100, 0x3}}}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="39185d00040400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) sync() setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r7, 0xa1054000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x3000002, 0x1110, r7, 0x0) modify_ldt$read(0x0, &(0x7f00000004c0)=""/181, 0xb5) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f00000003c0)=@sha1={0x1, "7dcad9eac7449ed1d96373a566fc8be01773879c"}, 0x15, 0x1) 2.048409429s ago: executing program 3 (id=356): setfsuid(0xee00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r1) ioprio_set$uid(0x3, r1, 0x4000) setfsuid(r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001040), 0x2002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) sendmmsg$inet6(r3, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x50}}], 0x2, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="b5432cbd7000fcdbdf250100"], 0x34}}, 0x40) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper], 0x6c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699d"}) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c81, 0xffffffffffffffb6) 2.047980179s ago: executing program 3 (id=357): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40afd03000000", 0x41d) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x2a, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x12}]}, 0x24}], 0x1}, 0x0) syz_usb_connect(0x0, 0x8c6, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503984e7c5c289846497fff8a3578cebe91e670a187bd895eb10baaab31d2b73dd4037f33bb"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x6, 0x4ad, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x16, 0xe4, 0xf4, 0x8, 0x545, 0x8002, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49b, 0x3, 0x2, 0xf, 0x10, 0x7, [{{0x9, 0x4, 0x4a, 0x1, 0x9, 0x4b, 0x1b, 0x4e, 0x7, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0xf8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x25, 0x4, 0xa, 0xc8}, @as_header={0x7, 0x24, 0x1, 0x2, 0xfd, 0x5}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0xa, 0xfe, "993046afbe99e1"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x401, 0x8, 0x15, "d24a765ee4"}]}], [{{0x9, 0x5, 0x3, 0x1, 0x40, 0x9, 0xf, 0x5}}, {{0x9, 0x5, 0x4, 0x221497886b5e2d7f, 0x10, 0x4b, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7ff}, @generic={0x1e, 0x7, "28287be5686f5776f434da16d61a4e1e528cf3dc3af5cde4f51b07d8"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0xe, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xfd, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8e, 0x2}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x8a, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x7, 0x1, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1ed}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x6}]}}, {{0x9, 0x5, 0xf, 0xd, 0x200, 0x6, 0x2, 0x0, [@generic={0xfd, 0x5, "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"}, @generic={0x1f, 0x7, "f9fa3fc1f465e860988552f97df5e2ed54f5798c938a9008dbdb6e20d9"}]}}, {{0x9, 0x5, 0x80, 0x13, 0x200, 0x5, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x1, 0x2, 0x40}}]}}, {{0x9, 0x4, 0x3, 0xa2, 0x1, 0x1a, 0x91, 0x80, 0x2, [], [{{0x9, 0x5, 0xd, 0x0, 0x20, 0x8, 0x0, 0x1, [@generic={0x2b, 0x23, "85fbecf1ef6b0f9c5de9d2bcd0e650a7b08703a89f469942d2535df31babad7180f9bd20a4cffa514d"}]}}]}}, {{0x9, 0x4, 0xde, 0x3, 0x7, 0xfb, 0x19, 0x7d, 0x0, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "c9af"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3ff, 0x1ff, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0xb, 0x3, 0xfc, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x0, 0x7, 0x3, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x4d, 0x1ff}]}], [{{0x9, 0x5, 0xa, 0x0, 0x8, 0x7, 0x5, 0x7, [@generic={0x46, 0xe, "edc7beba54487a8ec7ac6845652a7b4c02089ea6e0331afaa0927fd7366f83ba2f6a97624126239e3dffc71354023fda5b8691c7a0845b98428624f483fdb9936d45be92"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x6, 0xf7, 0x0, [@generic={0xb2, 0xf, "d543ddc435bff70b4722abfb2de1107e78065364c519a5bcc9c87b68d42bb853cb868df7e79a7e855d62f0c437acce87aba0bc2decdb68c80a2e70664d590641cb16b6cc3cd66b953bb97fa89948481f2eb1aaf232dcc6563a9f6ecbc88be800b2c30abb57d9e23a686497a828c2c84602b5a8a95d3a7811fd33c0a136610cd5379758467c05d0f3299ea28db7d197f6d71f739572a1ffb1a5040ce053ffb0c6e97a4c67cf59a9f42e4df1da1bb334e1"}, @generic={0x4c, 0x8, "044a9cb3e134f663ef69b6da482762421ff4d97c1f1b02d0e45ca0f3f41bafcd1dd53bcadb806a96ac779f0d3ba6ab1d5988d50e68ca6cea86f79f529336a903c5121133a7942f6f020c"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x9, 0x8, 0xa}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x6, 0x80, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0xa}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x8, 0x4, 0x7, [@generic={0x75, 0x9, "b7ec3d9abbe839c011cf402a6abdf4f4fd3b82690e6c0121141c21aeb923abe9c7d7a1c78e661c16d6a42fda68eaebaa69c5f0768a74c31c95e8b821a4e498f9a91c8395eab6a1f19f387ee0e2abd013427bb5cb9cce9f504c36a6a180c9ccf4e5fc4dbaef23b22f403ce0747ffab3ae736536"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x3, 0x8, 0x1, [@generic={0x12, 0x10, "11ea13977c0c2255c05fef12587fc939"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xa, 0xd, 0x1b, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7d}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x100, 0x2c, 0x5, 0x2, 0x20, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xf9, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x443}}, {0x5c, &(0x7f0000000880)=@string={0x5c, 0x3, "7d4f7eccdd8812682caf110c6d005112b15b15f65d854929cc87bf2489043a084e8b657c0a0636b319559049a5b1e16f4398a04a6db40a2468a18287e54139afe1363505618cb37bc5b29688c763f99dd8cb9d305610c75e398f"}}]}) 1.932314606s ago: executing program 2 (id=359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x18, 0xfbfb}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x7f00, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa014, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xb, 0x0, @void}}}}}}}}, 0x32) 1.792307944s ago: executing program 2 (id=360): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x1, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000002c0)=0xc) (rerun: 64) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000004000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x33]}}}}]}) (async) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)=0x6) (async) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f0000000100)) (async, rerun: 64) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7f, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xd, 0x14}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0xa1, 0x8}}]}}}]}}]}}, 0x0) (rerun: 64) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0xb, {0xb, 0xd, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r4], 0x0) (async, rerun: 32) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@uexit={0x0, 0x18, 0x9}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x81, 0x4, 0x7, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x4, 0x9655}}, @uexit={0x0, 0x18, 0x4f}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x0, 0x7fffffff}}, @wr_drn={0x68, 0x20, {0x1, 0x5}}, @nested_load_code={0x12e, 0x80, {0x1, "66baf80cb82cd76b81ef66bafc0ced8f0810ef0fde3e656466420f381c88000000000f001166baf80cb88050c183ef66bafc0c66ed66430f382b43f748b800000080000000000f23d80f21f835800000000f23f8c4212de5fbc461c97dbd89000000c4a1377d1c17"}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_load_syzos={0x136, 0x98, {0x0, 0x4, [@rdmsr={0x66, 0x18, {0x98f}}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x6, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x6270, 0x1}}]}}, @wr_crn={0x67, 0x20, {0x4, 0x1000}}], 0x258}) (rerun: 32) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000001c0)="660f383aa2fcff660f01df640f090f01bce3e566b80a0000000f23d00f21f86635100000090f23f80fc774000f01190f01df2ef7a00700b8ae008ed8", 0x3c}], 0x1, 0x43, &(0x7f0000000300)=[@dstype0={0x6, 0x4}, @cstype0={0x4, 0x9}], 0x2) 1.791954614s ago: executing program 2 (id=361): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil) mount$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="401606000000f3d9de652c5982187632f95f97dcf18f3e6beeb8e0deab86510616c4839df70c247f5650e8b01d923cf366605561a30673ea30ff422c1fb24067914366e2d6524e1341cc5cde24d97a"], 0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xfffffccc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e0009002abd70000ddbdffe8400000008000104359c494f148b5c8e2d689a03f498aaa3265186fd48adf59e78c4c8873ca85a9791d8af443ff065454559c0b66b99ecc5a660c8edeba3ac41fb79eed417b37963f3314fa6b2f373b1e2de37b84d06f62c28eb741c8ad204f1992917add23c1cb951e6d0120525271e", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x24048881}, 0x4000) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xfffffccc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e0009002abd70000ddbdffe8400000008000104359c494f148b5c8e2d689a03f498aaa3265186fd48adf59e78c4c8873ca85a9791d8af443ff065454559c0b66b99ecc5a660c8edeba3ac41fb79eed417b37963f3314fa6b2f373b1e2de37b84d06f62c28eb741c8ad204f1992917add23c1cb951e6d0120525271e", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x24048881}, 0x4000) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0080860300"/14], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000400)={0x14, &(0x7f0000000280)={0x40, 0xa, 0x64, {0x64, 0x2, "c49d769e9b1cd1455aa48589d6e688c80a59e1b3a622fb3d8d7bd21a9c4f5d5efa7c1621a5b22f32ff82caa7711409b9e5701134002079999a22347c9859c27d408e10ad2417501a954f33ab33c6ef09b938f7067deef74d12fe1bdb4172b7af2d2f"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "89d9e1b61b0deefd779e1a283945490ad6c942d38f9eda04"}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000440)={0x0, 0x10, 0xbe, "5c605fe938e3b7769bf5c77787e49402d6f3f540dff0b18f2ffea28301b2dc3b35e45a9fc76c7a65de56456cd7792b934def35e1a89efaa7cf193fd4c2af8db4dc8431b79bbb4cf59d5bcb35b6eed6d18af72fb5a9810743e558c5e9c4abd921f62205b383263f799f3a20bf271cf4f014b45083435c27af6dc2669a719de6a3ec41f1acef6753a0e3a1990bf650bab5ec5a769caec827fea20d6e85d758fddf4753c20ca43e74e42a7b4062f2f60f22ccd2292101232c2e2d935b79937a"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x0, 0x6, {0x4, "0f2dfad7"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0xf0}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x7}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) (async) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000180)) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r8, 0x3d, r3}, 0x10) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r8, 0x3d, r3}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r8, 0x3c, r3}, 0xffffffffffffff74) (async) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r8, 0x3c, r3}, 0xffffffffffffff74) 1.746854496s ago: executing program 2 (id=362): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="3300000002"], 0x33) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendfile(r1, r0, &(0x7f0000000200)=0x6, 0xccf) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000240), &(0x7f0000000280)={0x0, 0xfb, 0x112, 0x1, 0x81, "e49416fd2ee4a176a8bcd6b7e97eddc5", "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"}, 0x112, 0x3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000100), 0x0, 0x0, 0x1) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req3={0x4, 0x9, 0x1, 0x3, 0xbcbe, 0x7fffffff, 0x6}, 0x1c) syz_usb_control_io(r3, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) 813.860541ms ago: executing program 3 (id=363): socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x18, 0xfbfb}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xb, 0x20, @void}}}}}}}}, 0x32) 760.098645ms ago: executing program 0 (id=364): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ftruncate(r0, 0x4) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000)=0x44, 0x4) 759.235245ms ago: executing program 3 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unshare(0x62040200) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160006000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) fstatfs(r1, &(0x7f0000000040)=""/44) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='6\x00']) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0206000815000000fe0e000000000000070019000000000002004e21ac1414bb00000000000000000a004e22fffffff9ff02000000000000000000000000000100010000000000000500050032ef00000a"], 0xa8}, 0x1, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1c0) removexattr(&(0x7f0000000180)='./file1/file4/file7\x00', &(0x7f00000001c0)=@known='user.syz\x00') (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\a\x00', "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x11a, 0x4, 0x0, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) landlock_restrict_self(r5, 0x0) (async) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x3ffffffffffffffd}, 0x0) (async) landlock_create_ruleset(&(0x7f00000000c0)={0x1ac8}, 0x18, 0x3) (async) setreuid(0xee01, 0x0) 759.084295ms ago: executing program 0 (id=366): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001040), 0x2002, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x40) ioctl$KVM_RUN(r1, 0xae80, 0x0) 746.261066ms ago: executing program 0 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000546000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc090, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x90, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x8, 0xfb, 0x1, {0x22, 0xe21}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x40, 0x1}}}}}]}}]}}, 0xfffffffffffffffc) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r4, 0x0) ppoll(&(0x7f0000000140)=[{r4, 0x2400}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 720.642807ms ago: executing program 3 (id=368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x18, 0xfbfb}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0xe000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa014, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xb, 0x0, @void}}}}}}}}, 0x32) 592.297225ms ago: executing program 3 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x0, 0x1a, 0xf, {0xf, 0x21, "ccc0eb1b717f7bd30c15ad250d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 76.492985ms ago: executing program 2 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x25000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x4e21, 0x4b, 0x2}, {0x0, 0x0, 0x4, 0x34a, 0x0, 0x0, 0x9c0, 0x6}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@private0, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@ip_retopts={{0x10}}], 0x10}, 0x40000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 2 (id=371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffff) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800fbfbff0f00ffffff00000000400008004500002000670000032f907800001fe1e0000001a01486dd000c9078210b0000"], 0x32) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x9, 0xf9, 0x9e, 0x979b}]}, 0x10) 0s ago: executing program 2 (id=372): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000002240)=@phonet={0x23, 0xf, 0x1, 0x7f}, 0x80, &(0x7f0000003780)=[{&(0x7f00000022c0)="2173b1a94166a12a8e3f772b0b2cda7118621715a592a21476d62fa3ed167dfee09bd839fe684830f60848a52062558902fc2bb8f474bc617e2c9dc016aed0bf358825351351978528e56788a632e9de0dec4c5d95f9e6779967c7a31c885dc2e3abffcfc682e1c8d7a7e2bda1f9edd1c2607d333c453e8aa5b4f1ab1f37137860bd5206e9771eb1805da4ef5005cf85bdb1dfe30c1ad15b40ab264715963c20f443941715cec87af9c29b41642f692c13076192a502a805f4926672a72c8ef054dd78402507f992856fc208c5d62477b102acfa0a15d2472b819dac0d9b3a47f0f840035b", 0xe5}, {&(0x7f00000023c0)="bf0eee20777b79ea66e55b0507482f5408e8faf95bd6755708cac055d12dab6820d43327999455a66a496d895709ca8c27e2c71f265238f36f5ab70b6b5ed2c8757e8f34263a5882a06dd3293e475919caf0b89ca0f78bc6bb0b34ac2be05d950caaede8", 0x64}, {&(0x7f0000000000)="f08f", 0x2}, {&(0x7f0000002440)="d73a6d5bc6e7c3d0d494b483921bd1ede96b3d8a4610d8cd9ab9c85d699c3012fc173a2adc950351b895eef05662e023c07232fddc7168fffd3adc390d386d224c551ced588c1a7e5e4958a10f6f6535f699cd847d9f967cd55e1fa94565597a19100cd1827de01419af7040add7b232c05173d1be4a0b9284e2782cdb51494dbe1ef1ae4b36", 0x86}, {&(0x7f0000002500)="4f46777b222dadd2d9bb5df62837be650b54d2ab4de490ac0927323f3557daa5d96839b8f8feed483bda59e0d79c71ab4974c2e05c2e2ef96a987eb5bce0f675edcefee64383ec62410e16fe0aa813732164315de9cb1985bad76c64181b3e7a30bb7d9a2a609941c49355d01a1578afc1f18a8b0234b9384ca4680619caace57fe72363404ff8ed7865fc9a3d12cffcae05cce6aa30777f8c80b36076b3c6e318b7a8f841d62e7a44473032243a23b4", 0xb0}, {&(0x7f00000025c0)="ed811ad4987dd4b02a79327fadcef912c2326e8174e4da45d3bf14c1b04827658d5bccfb2fdd1167ec4442b20533200355443520fdfad8e479643b810d078132a12a0bee78ffdb1885aff62aca975ad8e92d5733c5dccf710bef25e3e67fd503285a0539c8a434fb081c704d54a12b48164064f95f758421f4db76bb090f067c40198aa4f0f041cfeb4749449e3a3ac8a0589c5436f3fc1dee78c5a6cc99657f00933d8d0135883a989bb6b5aead69542a9eec27e72a1f977a523993baf31a2163f53067e170199c3eca14714e2519fa554b5805e7e3b5c53d394164403a25526cd1caa602b7058cde615d392134a17427", 0xf1}, {&(0x7f00000026c0)="d55254f632f0abd9003b9b5716cc6b1476d45e1221ebc1da1b40d3d9fc222e45b5f613e05b18627681afbe89b879b845bce23fa02c9690e85565cbba805e49b6676c675877c411dd6bcd908a9f855631373824b5797cb6f317fbf8d795814ecc60aafcb78aeeaef364a7d167115750a488e2c928fe266e842c3f21e4728e8ffbd39628b19b9e9945ab744b70ae6fbb7d096b46069ed4ef906b7950b353f34c4bf663c1ff19f6dace261766151aeaa65a7327a24853805975f61211e0a12e411066bd927e63d05a1cc0037f15a10e2e99310e5c5eccd12cde6c222cd21a62e378a3bccafa73da3cc0bac3e8f956837952707f626b821d2fb6510f390c95efbd2de810ce04968674d05b8566ff5ef2b63b57acbfb80e4d2f250abbb935827666add90a2a2e2c3663709c0cca5edc30dc66925a5f19f926c447f669d322ca0771a5be21ded9de3f658c975b32b164b1d6c942e720c8ce2b8af4f5237589cc75b4d1757f6957d9b39f6b0035ede558af56e749345b2631bc6d5cc15eb9939a7fd8c58862279ce713e81ecd54a4ae403e8abed8e4fd15f6dd519e79cc77a1b5e38fb877e24fc06bd956fd97ecacf1dd5ee1c54ad17c47ae1021a46581ef5043711d6b374399ae38796440f4cc163a3aa6680ab49bb89a9bd31daebeeb4c965505078e0fb52f513a428d36ed729e6deca406d368e48bb541bd1fdbfaf48c8951f3d7af456d9c51e348c4fc50b68e39a0d37dbf62704b66a04d3c227ec4d9909e4b199d657643390b48e1ea1924dd1c2ab3de481df3a668f940a8b296b5061faa3436c34a471f9c523b8a05821cbc3ff394ae735cc4aebc3a3c7887c139cf594e194eab1b97dd52b87a048a30917a8b56388a2aa5d4918a439b8ebbabd40fe90886f50cdd5d15b63f9333ef0c7fe7710d52c494a7c703533377fc3d84980e250d89f5f12b3f3c75d907bbbc6b095617270c14c6f19c98c93c21cc6df990c342732c2a4270478906355c03854c37e900a79416a54e016b97d5a6fe907f16b188c8caa23ba0dd4d53393419c922095cfa05108311f956bcce2529d3f8b03e26f26038f0fd372ae4a5ac1b8b45f2610aa773f84d4ad7e8b5f0d23dbdba0e61973068e1e4e47cf4efae37fa69fc26feda7a9fcce54aacc2d5100b38264d0d46f7f77e0d2b8204e8ed1a43360062767eae5da32486a642adb3a2ba82f1dc14bb29522fb0c297842bc84443af0dd30c28382e4c0554a558da4feca0e89f0e46e9c6fd02bce56434d002bdc1a60c2ac77633eb1ae4ed87663d760edc03db2958dfa2b1797ef882b685a0e19299049398b64a73d7e35237d84b070ba064fcb1dfe193238cdbde8a455af4727cdc8ccda3e6751cf1ca137477cb6ebac3a3b9c5e405cb838080599e08759d52abbdc4cbe524c4f1c752897a209ef243318ad292959aaa12dd95c9faf4491627a77c276be55d2f045142fe3aceb37192b5cec0f1c6e2b14d199164858d7096ed69367eb287249bd1d7d0eb987f348f8a8155a928e872943080a75bf400dc130f52986e14c0acb3e49c85e19467909d2fd76211fb57030700507ad4cc13dffe97ea7e7e4193a3f5c926ad702407cf9168927fd28b98e6b9d67a66a2ba1b9b145b3481d2b9332305f1b1e1040357db38fcfe6958a2e0ce95de2050a737cf86d9c94a67085e46151f954628f255476442db1e0b20c6cc6810998d258f6eceb69dc085a4ef2c425a6ce95b1606845ed6e5370d0a9737a2b3cf7ea3e6d6f1d18c82ad4ef692c544cb77d8d5441500650bc9d1caa7fb4964f44ad27bbc44b4ba5d13cc4bec473e9cecb1d21ef25bba978c12534874ea20fba89fa2307b856e8257baa6efb8540c28afe358e22f37b286f8086b9368c7fec838ad649c790c8c76cd88c9be9b1ecb32446c994003b8544abdaa393926901f52e79e141d8d8218be4b354a4b62a7045c61aa7bf89ec5abb4c9cfd0d4a7398ca32ad35eaa0a91ec19f67dc963fc7cf889726158a35fb14f7cf1ab1f935bcfdfff2b1b84ffdc6309eb45f57c32ffcbcf208f2c3802a7f7eae48228934b3b431d1a6f674f4608bf76800fa8868b2bde2cee05975d9ee2cae7491ea23da925b3351508586fa5417a3a546194a6dd19355fadd59eea62906e3c2e479b5eb12a20eba5e77cf157cec7cb8506ed5c6acf3b93ffaf6721b6cef41dffc268b330479d271f2f103eadfd7da1148cfe8f2fd5428d0671c5906d44f0fc39f0127e4aa87d3812f33263d93bcd3f28244bb3295833ac238d2975b725f42c2a6910ba54912eb466dd574a2e0afead9e61e452b56091767c82ebef571bc851cb30ddea180b536ee60eafc30c5d23531c4ab63807535ac0b13ffcaa2e96a21121a880fe1e0c24646a1ea2e1fffe54b22b8f01feb7026f8f8cb30fb809e070ca998974ccdf44fa23d2278f7cb3d7730bc9e31a1312c97dd7c00f388dfcb62cc74511783b065db67612a7dc11c3419ce6835e79d7bf7bdee6591af90950aa44d2168d5d920f36bb152e43b3bf3b0ac83ec20710e5c6ba886600c57cc21a49230e2fc8e20b678a9508fc1048f447463dc3d39d82ee581f73df828c196b55b381db78f9c30b9ac70ce440d6ef68774335c289bb9d6174dc6ec20389cb08a8ee3b334af1f5165b24a197a06d5fa532fbd9ae893d355ba69bcfcaa018af763d8ac49639b1b42dc79f808c1e1b251c6bdc894aa986d7cda36c177c1ec96791f2430faa4c25b64aa0ce5222f85fa398243a2219deaa723f9a3cd856a9d7b7e3e5b8539f6fd6c83a244821c2762ac82c458cf92f15ced4bf2f874857847ca2881b798227d598b4eebb4b562101946de3988da345bdc2dbdc37825540e973008070759019d82f7d0d328e5bde12759ff8e6b3b330170b099092db06dba45b7cb66632f4acc1eb9a5c210ad7a3d66814c3cadabfa31ed84e6d3646b7840d936de7d7122d86e276db2c140b5589e8dbfbbfacd0eed53d0da0a125d027babadfc051f8e67f630a251a4e8c95c714a9807b23d66fb9c139374e60e596b8a147088f16732618d970f2f066a344c3effab0565c73ba2cd9223840e402092d87fde3ac92605cd8c23abc04217620a5296f502c40cdbf8237ce98d9e0a3d47b75af22d45bbe18664c82ef64c6d1c8f03e330021e6ede365f10054287e9bb6be9d44621a1f470edec45ff3b8edcb83f52e65343faee53ecc9f728bd1bb42150c0860fe3f9c793a9fc4ee3ec1f9e85ce7c05e8b55007fc527bca8d92d350fa21ee791212da9d9577e4db98cd7e8d58cfed80334d7308dd93ebd90dbfeac269fe198b20ef61179f7a105b5971354caedbcca2ceaa5302873f9b0e45c4d9aa7f3f2aea4e2e54b69f1a204629ba0afd8e0e555fe6e9ffb5bc024426a1b0ae00815fcc8da2642956cfa7ee88a1c42b6ea7b9eb4b18ffdd65cb0eaeb77f3e149851724467b131cab10f495a5d3e544dbab0fee6d5ded4c23d5951e627ed71d79fde5e3a8b33b59d42e09f2cc29c4ae3404446c1ce30fc7065698c6f089b74a0b61a1929157e3765e71b2799fa2b582f01d1c42ddb86a7e86fbd158874b36c15c5ae2ff13f8ccc631f2f5e819c428d6718a94380567049663d69c547d6e607e5c36c1b39197166f3ab8d36496927114527d30649412594e7335d286941b8e4c06701ee48354a6bdf2a91001135544cabaf87dc0e32c20f28e9e1d3d5fc890744bd7202da63e2c6a16a6b98cd1e062697f2903d1042343dbcbff1d21ba0f6c2b328adebc8ab17a25052e506de52d05772ceae0b8d230eee90d702c9d9dc1d88978fca2ffac481e77d4e98937cc62531ff554daa00d2177d3c97bffcad3b2738769abd2caa94d1d3f440a55f828879926aa0ec5fa8d282e5e3044e7cb2c04782494cbbce6b32472253b2d6e7237e37a1dee5025908d42ad3fea199e8c9cd7e39985f94ba340c165fcdee3d49492434f57377dff0c6f64240c93f1742db7b19d0879460509e7283b5f557c3de9d66cd3264f242600e791b8fd5c1e1ec465ebbaefb0083ccda9f72d7996811397e687d47b1789654c4ab79355a33176af739f27000cd0058621e16bbd6bc93ee12c9e898a5ca7bee08c31932ceadbcd7535aa0e97782147eb622651ecb4227d6adb47e75501bf89b6c0bf88abb2df6d0dfdc02cb29ecbcc786be126ff630511315235d52d5466b96c2b96ed4fa048e23a1c28afeec7e8478945ef07c23cba1d032c6e52235f4a9128c817ec199b052e97634491792fbf0b8dd4b46bc4cb2ac3d05549462e0f1069719743214981eb175ae92bc4c3a305746b0ba15e5850deaf435f811bbe4495e8b8012d0d89d2740136126a61c8551c60a7c0aabef93b9ce441567b60d20dbeb221ecf6ef42b6ed432e738eb7de88f0b7b857ca08176f0f98bd671a6daa0dcc4b19861375b37467d99be21d4830d5fa897945167dc547981a8f749c76998aa1080aed2578cf94081dbb508d1ce5c01e5a4f77a2a0cee5bd3f6407a7be6015a886dbfebc75c42287a911856993eec51fa30c0b667c7b55c2e08163418be6ab1b8bafa48cd3b59e804271f9e3a9200474945faa580103f559d4b31a7e912f17cbba4cac88cad2c25adcd813999984ae3e071cd9433cf148eb7213c569bbbe640f77debec39d7834f7c760912ed2bf2ab10f16bab6baf6320b22e3bd3d4aba187ea6818d827427d44fa882f5d309846a175f91061f6c5293276d2abdab900bd71a16eecfef09ee3d22681145cfa0f49dcaa466465f1b2b6f245f7a11edaca62eae8144fa040af2300d9b34944bb3f3a458708cdbec10549748fb6cde327480add407f8de692311b6bcc5d24112a5f0df90aaef322985cd4bd2f1f42823b36c0ae61e41e130a0fded0382a54fc2976e69517630d32b350b46361e8f995ae5ab782b6cedc39fbb20accb7254208a4197b6b0a1ac9010493f7edc626e0f836d06c8c35520903e85ebdfc3ce0a5e29160a515eb61d72fd757ff540c4b71ffbee9b4337f5c7db62efefd1b5f96fd4f11c59893187e2bfe5c3017d46281a96665b2725e31d3baca8065a3e15463e0c6c2b12a35f07eb719445b1e2f153d5f047f769cffb4028a9f2390757c1bfd06e4f25c0cae3a7eba23bb3d51901f3bd5a8cfdaf04073c3ca967a99d16877f49a5d5b150aca31a8ce5585c5ad1df50fbb6b00af7888d1171b9e975e2c9997f0ed640fbca9d0e7cc7a39c635eae9bfe1c4ea1e5b3ae92b297e6226b3bba8e006482e0023c5cc19f750cea470f0d85c0e9bfbd6da53bb56bfd4349dfaa7220d101ade28bbaa601a4b104416503b8c75be7f09724cc38bebb8fd208dfdd479b98b2fb2b692d242213ccc3310d6aa91f27d6b11d892bb2d83ab4dae8c297069f524a21b3e9b3bae743012e58de44b2b1365db15fd8c77515e02c6e939a6181c0b722fd4087609cb942c894aeabfcb413c960bd9d9c42dd5dabb3743b67080bbeca676e8acca5a7d6181a6ce6e481f3cad5853a2a0d8acf42c165ae40b3e8cce16285ec2d4b2860141df6f2645ddca9386a3c86f090c9ce5225a70f5a8030aa7a6145cebf34740fe71e1891263b080a36c33cba674cd2e4b3fd4cb6ad8ba18116ac43ebee96827d53f8f8f6024ddb60190912522f8631ebdd06997916dc771ca8b9553472b012fdac4147e9549e76f26e8db0332262398fadf9831b28531cbf7e999cfa9687035ce3aeeeb858d62aaf3990c1d6af9773144264f4fd632ffa6e2bc47798498cf37d29080ddf0ff309cd252feca5065e61df27d507a0ea788a0f250557e8", 0x1000}, {&(0x7f00000036c0)="7816c1703cb8d2183ee42fc6a56a474f24f1dad306199a8bbf821d278ad3a7eea0937a1eb1e9ba5d48d076e9625d250fdc9d9ef37c5bd5b537ec39aa77568496bb5624814b7142312ef5fbf8ec4854710c7e50ca9ff9bf9bf1ef7776a9b1023329d53e963c550b6222fe4f518dc52804704f10c80aca2e93caca07328be02717b68c9fa0876a82a4a275d407d0e99e", 0x8f}], 0x8, &(0x7f0000003800)=[{0xc0, 0x111, 0x5, "e8047f32d5056aecf1d671ad576ca36f053e6a389f0f1efb305e36670f717d64f02eecff480b759d1f7e8701b7bd9ae73edf4935950e7b9411249390b9b09e12a1d9ecf434b3b871df44733c7f2f14833505eec8a8e9264b56bfba662a9e26dcce30c1046384d8da4905ed31526b0df6ee0cbf304e33a694791c951ab4d7972af20f986c7238be9d05138443aae759cf4513ff5ac6da4854067481c0fd9b1b979d4b11e0f71f9ecc4c5aa088676e"}, {0xa8, 0x101, 0x0, "14e5d3c4f2e617f93873a9f12b4f46e4794bf573afba50341446f3df90d589b3d2a45d1720ed65bedb596ad0da88697daeef4c215d9f4f415d996bf75977f24de13b524e8604fac0341c12ffafa7b08206be7c489ccd1de99f78cd4e85faad7a4672071c28b9b2722e3ab37920be27af216b67419dd3ae37cb3d01d1b345582b4aab1f0918630186d6d462c6888d0772965f00"}, {0xe8, 0x109, 0x1, "3a4c3187bbbc90e5388449f6e518ec74ea3010a0f435acd5b74f5afe316951b25d07f4029c21adafeb08078c750f1c13fd225eec4f46455444986dda8a82acaed72dbb01350ef26e6e5ef118d1077c84cee72864fa7d4fe52c87c09efbadf007cc263fb6c5e5b0ad6cc631de01df96106d0cbf4be7fd11a821adbd6480c3cde306234dfe13d6b5f6cce2da07bc3493730bf43b9d8c02a6e897d7c71b0169476e787ce6d984a5830d964ac698e130274d7ef93dbe236d814381fde708898e1e7dff724f7bc55a6d371444c69aa2abf724c491"}, {0x50, 0x111, 0x10001, "23c93186327a50fe310ca5053a18f354b75d52e6df96cc50c27eec6ad270746fec80182f671236c363d40d71abf5c25bdfdd3d263e07f96914fd88a88a88"}, {0x70, 0x84, 0x9, "441e521b3f89eb31b25d27fa2772899dd96b4ad346e7d5aba52b8e91338380e000f6f2573a47c67eb75f67480c0075728d2183f193f70799b065ab1a3ee71e60a7ee0c0956f160001174e0a66f45a4f6381bba62b53d9d322ecab6"}, {0xb0, 0x115, 0x5, "ccfcec3505a1a328618256809c4f9c27ee0617fa6ebb5ffaaf1e4dff41032f74132ce160660d45c941790c0cf257825416b6dbdbc3d0120e2291e75f685b7b365bb17ab96ec4e4eb9a713909288848590d8e813cccae77638e2d69f5177f36e698a22819ac33ae3522c6715bd15be763d383eaae2f50a0c71ae91ad6c779ac9fee83731e94319a36258e7f6030f1f71023c310e0da8ab76db00f1591cdaffad7"}], 0x3c0}, 0xb7c2da3c37d2643e) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003bc0)=ANY=[@ANYBLOB="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"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r3, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0xe9db8df3, @local, 0x2}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0xe9db8df3, @local, 0x2}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r4, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.210' (ED25519) to the list of known hosts. [ 343.776127][ T36] audit: type=1400 audit(1770920369.480:64): avc: denied { mounton } for pid=284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 343.779398][ T284] cgroup: Unknown subsys name 'net' [ 343.798950][ T36] audit: type=1400 audit(1770920369.480:65): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 343.826300][ T36] audit: type=1400 audit(1770920369.510:66): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 343.826807][ T284] cgroup: Unknown subsys name 'devices' [ 344.007118][ T284] cgroup: Unknown subsys name 'hugetlb' [ 344.012768][ T284] cgroup: Unknown subsys name 'rlimit' [ 344.108499][ T36] audit: type=1400 audit(1770920369.810:67): avc: denied { setattr } for pid=284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.131714][ T36] audit: type=1400 audit(1770920369.810:68): avc: denied { mounton } for pid=284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 344.156628][ T36] audit: type=1400 audit(1770920369.810:69): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 344.181124][ T286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 344.189953][ T36] audit: type=1400 audit(1770920369.890:70): avc: denied { relabelto } for pid=286 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 344.215682][ T36] audit: type=1400 audit(1770920369.890:71): avc: denied { write } for pid=286 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 344.245947][ T36] audit: type=1400 audit(1770920369.950:72): avc: denied { read } for pid=284 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 344.271610][ T36] audit: type=1400 audit(1770920369.950:73): avc: denied { open } for pid=284 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 344.272275][ T284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 345.118834][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.125957][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.133061][ T294] bridge_slave_0: entered allmulticast mode [ 345.140064][ T294] bridge_slave_0: entered promiscuous mode [ 345.158174][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.165346][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.172442][ T294] bridge_slave_1: entered allmulticast mode [ 345.178967][ T294] bridge_slave_1: entered promiscuous mode [ 345.229110][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.236292][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.243365][ T292] bridge_slave_0: entered allmulticast mode [ 345.249769][ T292] bridge_slave_0: entered promiscuous mode [ 345.261851][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.268963][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.276114][ T291] bridge_slave_0: entered allmulticast mode [ 345.282406][ T291] bridge_slave_0: entered promiscuous mode [ 345.288779][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.295855][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.302925][ T292] bridge_slave_1: entered allmulticast mode [ 345.309351][ T292] bridge_slave_1: entered promiscuous mode [ 345.323354][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.330528][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.337664][ T291] bridge_slave_1: entered allmulticast mode [ 345.343916][ T291] bridge_slave_1: entered promiscuous mode [ 345.427890][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.434982][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.442065][ T293] bridge_slave_0: entered allmulticast mode [ 345.448453][ T293] bridge_slave_0: entered promiscuous mode [ 345.456752][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.464078][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.471246][ T293] bridge_slave_1: entered allmulticast mode [ 345.477590][ T293] bridge_slave_1: entered promiscuous mode [ 345.560361][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.567455][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.574807][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.581845][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.591741][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.598819][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.606172][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.613222][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.627853][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.634944][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.642240][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.649318][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.719866][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.726956][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.734465][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.741505][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.750538][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.758072][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.765866][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.773032][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.780738][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.788074][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.795820][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.803028][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.815913][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.822979][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.830677][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.837725][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.845498][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.852537][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.866712][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.873754][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.901830][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.908948][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.926131][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.933194][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.952791][ T291] veth0_vlan: entered promiscuous mode [ 345.981313][ T294] veth0_vlan: entered promiscuous mode [ 345.991275][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.998405][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.009012][ T291] veth1_macvtap: entered promiscuous mode [ 346.017153][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.024234][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.046822][ T292] veth0_vlan: entered promiscuous mode [ 346.065546][ T294] veth1_macvtap: entered promiscuous mode [ 346.073688][ T292] veth1_macvtap: entered promiscuous mode [ 346.106748][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 346.138970][ T293] veth0_vlan: entered promiscuous mode [ 346.150160][ T334] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 346.181173][ T293] veth1_macvtap: entered promiscuous mode [ 346.276011][ T344] ======================================================= [ 346.276011][ T344] WARNING: The mand mount option has been deprecated and [ 346.276011][ T344] and is ignored by this kernel. Remove the mand [ 346.276011][ T344] option from the mount to silence this warning. [ 346.276011][ T344] ======================================================= [ 346.313269][ T344] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 346.487220][ T358] 9p: Unknown access argument : -22 [ 346.634277][ T67] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 346.644681][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 346.785427][ T67] usb 2-1: config 0 interface 0 altsetting 132 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 346.794358][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 346.798633][ T67] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.808221][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 346.811040][ T67] usb 2-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 346.821992][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.829335][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.840052][ T10] usb 1-1: Product: syz [ 346.848732][ T10] usb 1-1: Manufacturer: syz [ 346.853392][ T10] usb 1-1: SerialNumber: syz [ 346.857982][ T67] usb 2-1: config 0 descriptor?? [ 346.867527][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 346.876412][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 347.004287][ T333] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 347.134597][ T333] usb 3-1: device descriptor read/64, error -71 [ 347.263079][ T67] wacom 0003:056A:0064.0001: unknown main item tag 0x0 [ 347.275232][ T67] wacom 0003:056A:0064.0001: unknown main item tag 0x0 [ 347.282874][ T67] wacom 0003:056A:0064.0001: Unknown device_type for 'HID 056a:0064'. Assuming pen. [ 347.295918][ T46] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 347.306260][ T67] wacom 0003:056A:0064.0001: hidraw0: USB HID v4.0a Device [HID 056a:0064] on usb-dummy_hcd.1-1/input0 [ 347.326790][ T67] input: Wacom PenPartner2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0064.0001/input/input4 [ 347.349019][ T368] deleting an unspecified loop device is not supported. [ 347.357165][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 347.374260][ T333] usb 3-1: device descriptor read/64, error -71 [ 347.614281][ T333] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 347.744289][ T333] usb 3-1: device descriptor read/64, error -71 [ 347.984348][ T333] usb 3-1: device descriptor read/64, error -71 [ 348.010105][ T46] usb 2-1: USB disconnect, device number 2 [ 348.094401][ T333] usb usb3-port1: attempt power cycle [ 348.134311][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 348.284367][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 348.290940][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.302631][ T10] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 348.311755][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.319956][ T10] usb 1-1: Product: syz [ 348.324148][ T10] usb 1-1: Manufacturer: syz [ 348.328818][ T10] usb 1-1: SerialNumber: syz [ 348.334263][ T10] usb 1-1: config 0 descriptor?? [ 348.340205][ T10] net1080 1-1:0.0: probe with driver net1080 failed with error -22 [ 348.371557][ T387] process 'syz.1.17' launched './file0' with NULL argv: empty string added [ 348.434501][ T333] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 348.455328][ T333] usb 3-1: device descriptor read/8, error -71 [ 348.540094][ T10] usb 1-1: USB disconnect, device number 3 [ 348.585891][ T333] usb 3-1: device descriptor read/8, error -71 [ 348.824338][ T333] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 348.845546][ T333] usb 3-1: device descriptor read/8, error -71 [ 348.975471][ T333] usb 3-1: device descriptor read/8, error -71 [ 349.048559][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 349.048596][ T36] audit: type=1400 audit(1770920374.750:128): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 349.084340][ T333] usb usb3-port1: unable to enumerate USB device [ 349.101558][ T36] audit: type=1400 audit(1770920374.800:129): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 349.136681][ T36] audit: type=1400 audit(1770920374.840:130): avc: denied { setattr } for pid=391 comm="syz.1.19" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 349.220781][ T36] audit: type=1400 audit(1770920374.920:131): avc: denied { create } for pid=397 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 349.242104][ T36] audit: type=1400 audit(1770920374.920:132): avc: denied { write } for pid=397 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 349.262889][ T36] audit: type=1400 audit(1770920374.920:133): avc: denied { read } for pid=397 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 349.291298][ T400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=400 comm=syz.0.22 [ 349.299361][ T36] audit: type=1400 audit(1770920374.920:134): avc: denied { create } for pid=397 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.305223][ T400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=400 comm=syz.0.22 [ 349.326247][ T36] audit: type=1400 audit(1770920374.920:135): avc: denied { write } for pid=397 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.348722][ T400] netlink: 'syz.0.22': attribute type 27 has an invalid length. [ 349.374445][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.381786][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.389183][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 349.395862][ T369] Bluetooth: hci0: command 0x1003 tx timeout [ 349.424233][ T276] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 349.540268][ T36] audit: type=1400 audit(1770920375.240:136): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 349.576272][ T276] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.586529][ T276] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.596321][ T36] audit: type=1400 audit(1770920375.300:137): avc: denied { create } for pid=412 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 349.605651][ T276] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 349.625145][ T276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 349.633475][ T276] usb 2-1: SerialNumber: syz [ 349.843941][ T427] netlink: 68 bytes leftover after parsing attributes in process `syz.2.34'. [ 349.855583][ T276] usb 2-1: 0:2 : does not exist [ 349.867711][ T276] usb 2-1: USB disconnect, device number 3 [ 349.900315][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 349.924308][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 350.095439][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.113557][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.133691][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.156851][ T46] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.174222][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.193394][ T46] usb 4-1: config 0 descriptor?? [ 350.609123][ T46] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 350.617075][ T46] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 350.624781][ T46] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 350.632266][ T46] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 350.640356][ T46] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 350.647837][ T46] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 350.655682][ T46] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 350.743062][ T46] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 350.801353][ T276] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 350.877944][ T46] usb 4-1: USB disconnect, device number 2 [ 350.938108][ T474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 350.955351][ T276] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.979154][ T276] usb 2-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb [ 350.988845][ T276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.997249][ T276] usb 2-1: Product: syz [ 351.002014][ T276] usb 2-1: Manufacturer: syz [ 351.009139][ T276] usb 2-1: SerialNumber: syz [ 351.016784][ T276] usb 2-1: config 0 descriptor?? [ 351.200101][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.207775][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.215263][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.222752][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.229393][ T276] usb 2-1: USB disconnect, device number 4 [ 351.231129][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.243605][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.251070][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.258615][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.266148][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.273584][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.281051][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.288517][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.296078][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.303504][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.311625][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.319108][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.326567][ T46] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 351.334890][ T46] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 351.411518][ T490] netlink: 60 bytes leftover after parsing attributes in process `syz.3.62'. [ 351.435867][ T492] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 352.054309][ T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 352.226032][ T46] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 352.245056][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.264731][ T46] usb 2-1: config 0 descriptor?? [ 352.534291][ T46] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 352.724303][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 352.732287][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 352.741716][ T46] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 352.754776][ T46] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 352.765608][ T46] usb 3-1: config 1 interface 0 has no altsetting 0 [ 352.775795][ T46] usb 3-1: string descriptor 0 read error: -22 [ 352.790903][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.800934][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.821003][ T536] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 352.828926][ T536] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 353.055429][ T46] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 353.071607][ T46] usb 3-1: USB disconnect, device number 6 [ 354.066222][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 354.066241][ T36] audit: type=1400 audit(1770920379.770:173): avc: denied { read } for pid=564 comm="syz.3.95" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 354.094814][ T36] audit: type=1400 audit(1770920379.780:174): avc: denied { open } for pid=564 comm="syz.3.95" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 354.118451][ T36] audit: type=1400 audit(1770920379.780:175): avc: denied { ioctl } for pid=564 comm="syz.3.95" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 354.173179][ T36] audit: type=1400 audit(1770920379.870:176): avc: denied { ioctl } for pid=566 comm="syz.3.96" path="socket:[5172]" dev="sockfs" ino=5172 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 354.197698][ T36] audit: type=1400 audit(1770920379.870:177): avc: denied { bind } for pid=566 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 354.234543][ T36] audit: type=1400 audit(1770920379.940:178): avc: denied { create } for pid=568 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 354.254049][ T36] audit: type=1400 audit(1770920379.940:179): avc: denied { bind } for pid=568 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 354.273796][ T36] audit: type=1400 audit(1770920379.940:180): avc: denied { name_bind } for pid=568 comm="syz.3.97" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 354.295129][ T36] audit: type=1400 audit(1770920379.940:181): avc: denied { node_bind } for pid=568 comm="syz.3.97" saddr=::ffff:172.20.20.60 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 354.345234][ T36] audit: type=1400 audit(1770920380.000:182): avc: denied { connect } for pid=570 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 354.445572][ T575] kvm: pic: non byte write [ 354.832185][ T276] usb 2-1: USB disconnect, device number 5 [ 354.975377][ T598] Zero length message leads to an empty skb [ 354.994581][ T598] capability: warning: `syz.1.109' uses deprecated v2 capabilities in a way that may be insecure [ 355.014230][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 355.164229][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 355.175101][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.185265][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 355.196557][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.206531][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.216415][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.229478][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 355.238736][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.250501][ T10] usb 3-1: config 0 descriptor?? [ 355.468716][ T10] usb 3-1: USB disconnect, device number 7 [ 355.523426][ T617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 356.055728][ T639] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 356.065886][ T639] kvm: pic: non byte read [ 356.070521][ T639] kvm: pic: level sensitive irq not supported [ 356.070570][ T639] kvm: pic: non byte read [ 356.081364][ T639] kvm: pic: level sensitive irq not supported [ 356.081478][ T639] kvm: pic: non byte read [ 356.094289][ T67] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 356.247046][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.274392][ T67] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 356.296347][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.324027][ T67] usb 2-1: config 0 descriptor?? [ 356.448094][ T658] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 356.448188][ T658] rust_binder: Read failure Err(EFAULT) in pid:53 [ 356.459300][ T658] rust_binder: Error while translating object. [ 356.466169][ T658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 356.472712][ T658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:53 [ 356.762222][ T67] lg-g15 0003:046D:C222.0004: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 356.961861][ T67] usb 2-1: USB disconnect, device number 6 [ 357.176870][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 357.197032][ T685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 357.225588][ T689] rust_binder: got new transaction with bad transaction stack [ 357.225632][ T689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 357.345441][ T10] usb 3-1: config 0 has no interfaces? [ 357.364855][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.380370][ T697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=697 comm=syz.3.154 [ 357.392659][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.401595][ T10] usb 3-1: Product: syz [ 357.406005][ T10] usb 3-1: Manufacturer: syz [ 357.410643][ T10] usb 3-1: SerialNumber: syz [ 357.419483][ T10] usb 3-1: config 0 descriptor?? [ 357.566098][ T715] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 357.614244][ T67] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 357.635219][ T46] usb 3-1: USB disconnect, device number 8 [ 357.766722][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.778944][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.796727][ T67] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.814618][ T67] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.823748][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.834727][ T67] usb 1-1: config 0 descriptor?? [ 358.144254][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 358.194320][ T744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 358.251924][ T67] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 358.261391][ T67] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 358.269200][ T67] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 358.276912][ T67] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 358.284691][ T67] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 358.297861][ T67] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 358.304329][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 358.306755][ T67] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 358.319085][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 358.331945][ T67] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 358.333629][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 358.375943][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.386799][ T10] usb 2-1: config 0 descriptor?? [ 358.525738][ T276] usb 1-1: USB disconnect, device number 4 [ 358.542675][ T764] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 358.542701][ T764] rust_binder: Read failure Err(EFAULT) in pid:137 [ 358.551247][ T764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 358.558124][ T764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 358.582285][ T766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'. [ 358.807152][ T10] hid (null): unknown global tag 0xd [ 358.812623][ T10] hid (null): unknown global tag 0xe [ 358.818401][ T10] hid (null): unknown global tag 0xc [ 359.016389][ T10] usb 2-1: USB disconnect, device number 7 [ 359.543596][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 359.556423][ T36] audit: type=1400 audit(1770920385.240:210): avc: denied { write } for pid=804 comm="syz.0.203" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 359.872275][ T36] audit: type=1400 audit(1770920385.570:211): avc: denied { append } for pid=807 comm="syz.0.204" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 359.935112][ T36] audit: type=1400 audit(1770920385.640:212): avc: denied { nlmsg_read } for pid=812 comm="syz.3.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 359.968633][ T36] audit: type=1400 audit(1770920385.670:213): avc: denied { write } for pid=815 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 360.304376][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 360.454226][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 360.460594][ T10] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 360.469088][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.479368][ T10] usb 4-1: config 1 has no interface number 0 [ 360.485644][ T10] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 360.498913][ T10] usb 4-1: config 1 interface 105 has no altsetting 0 [ 360.507333][ T10] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 360.516648][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.524819][ T10] usb 4-1: Product: syz [ 360.529101][ T10] usb 4-1: Manufacturer: syz [ 360.533750][ T10] usb 4-1: SerialNumber: syz [ 360.719755][ T36] audit: type=1326 audit(1770920386.420:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=830 comm="syz.0.215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa08e79bf79 code=0x0 [ 360.746145][ T10] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 360.782756][ T36] audit: type=1400 audit(1770920386.480:215): avc: denied { bind } for pid=835 comm="syz.1.217" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.803534][ T36] audit: type=1400 audit(1770920386.480:216): avc: denied { node_bind } for pid=835 comm="syz.1.217" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 360.868349][ T36] audit: type=1400 audit(1770920386.570:217): avc: denied { write } for pid=840 comm="syz.1.219" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 360.915726][ T36] audit: type=1400 audit(1770920386.620:218): avc: denied { setopt } for pid=844 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 361.194241][ T46] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 361.346621][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.355786][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.363787][ T46] usb 2-1: Product: syz [ 361.367995][ T46] usb 2-1: Manufacturer: syz [ 361.372612][ T46] usb 2-1: SerialNumber: syz [ 361.628980][ T36] audit: type=1400 audit(1770920387.330:219): avc: denied { name_bind } for pid=861 comm="syz.0.229" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 362.384818][ T46] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 362.391468][ T46] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 362.585264][ T46] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 362.592678][ T46] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 362.787504][ T46] usb 2-1: USB disconnect, device number 8 [ 362.794278][ T46] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 363.067727][ T333] usb 4-1: USB disconnect, device number 3 [ 363.124279][ T276] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 363.264344][ T433] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 363.274260][ T276] usb 3-1: Using ep0 maxpacket: 32 [ 363.280577][ T276] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 363.292033][ T276] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.298702][ T276] usb 3-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 363.307921][ T276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.320994][ T276] usb 3-1: config 0 descriptor?? [ 363.414227][ T433] usb 1-1: Using ep0 maxpacket: 8 [ 363.425215][ T433] usb 1-1: config 0 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.436312][ T433] usb 1-1: config 0 interface 0 has no altsetting 0 [ 363.443064][ T433] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 363.452365][ T433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.464351][ T433] usb 1-1: config 0 descriptor?? [ 363.484266][ T333] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 363.635537][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.646663][ T333] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.659554][ T333] usb 4-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 363.668643][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.677943][ T333] usb 4-1: config 0 descriptor?? [ 363.744274][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 363.878969][ T433] uclogic 0003:28BD:0075.0007: interface is invalid, ignoring [ 363.888850][ T333] usb 4-1: string descriptor 0 read error: -71 [ 363.896923][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 363.901306][ T333] usbhid 4-1:0.0: can't add hid device: -71 [ 363.909442][ T333] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 363.911356][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 363.921131][ T333] usb 4-1: USB disconnect, device number 4 [ 363.935645][ T10] usb 2-1: config 1 has no interface number 1 [ 363.941857][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 363.952723][ T276] usbhid 3-1:0.0: can't add hid device: -71 [ 363.958759][ T276] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 363.966618][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 363.980510][ T276] usb 3-1: USB disconnect, device number 9 [ 363.987223][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.001135][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.010260][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.018411][ T10] usb 2-1: Product: syz [ 364.022575][ T10] usb 2-1: Manufacturer: syz [ 364.027214][ T10] usb 2-1: SerialNumber: syz [ 364.078925][ T943] usb 1-1: USB disconnect, device number 5 [ 364.531983][ T951] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 364.644258][ T333] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 364.731713][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 364.731734][ T36] audit: type=1400 audit(1770920390.430:240): avc: denied { ioctl } for pid=958 comm="syz.0.258" path="socket:[7411]" dev="sockfs" ino=7411 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 364.795662][ T333] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 364.803861][ T333] usb 4-1: config 0 has no interface number 0 [ 364.810072][ T333] usb 4-1: config 0 interface 41 has no altsetting 0 [ 364.818837][ T333] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 364.827991][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.836072][ T333] usb 4-1: Product: syz [ 364.840264][ T333] usb 4-1: Manufacturer: syz [ 364.844923][ T333] usb 4-1: SerialNumber: syz [ 364.853058][ T333] usb 4-1: config 0 descriptor?? [ 364.924281][ T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 365.074226][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 365.081193][ T333] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 365.090744][ T46] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 365.099641][ T333] usb 4-1: USB disconnect, device number 5 [ 365.105540][ T46] usb 3-1: config 0 has no interface number 0 [ 365.114376][ T46] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 365.123474][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.131543][ T46] usb 3-1: Product: syz [ 365.135771][ T46] usb 3-1: Manufacturer: syz [ 365.140417][ T46] usb 3-1: SerialNumber: syz [ 365.146079][ T46] usb 3-1: config 0 descriptor?? [ 365.152109][ T46] smsc95xx v2.0.0 [ 365.353589][ T957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.362372][ T957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.772438][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 365.783339][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 365.792932][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 365.803938][ T46] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 365.813265][ T46] usb 3-1: USB disconnect, device number 10 [ 365.844285][ T333] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 365.954230][ T276] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 365.995486][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 366.005313][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 70, changing to 7 [ 366.016295][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 26112, setting to 1024 [ 366.028964][ T333] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 366.038101][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.046161][ T333] usb 4-1: Product: syz [ 366.050360][ T333] usb 4-1: Manufacturer: syz [ 366.055011][ T333] usb 4-1: SerialNumber: syz [ 366.060477][ T333] usb 4-1: config 0 descriptor?? [ 366.104273][ T276] usb 1-1: Using ep0 maxpacket: 16 [ 366.110693][ T276] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.121095][ T276] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.131653][ T276] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.140870][ T276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.149024][ T276] usb 1-1: Product: syz [ 366.153290][ T276] usb 1-1: Manufacturer: syz [ 366.157932][ T276] usb 1-1: SerialNumber: syz [ 366.293208][ T36] audit: type=1400 audit(1770920391.990:241): avc: denied { create } for pid=973 comm="syz.2.264" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 366.319713][ T36] audit: type=1400 audit(1770920392.020:242): avc: denied { unlink } for pid=291 comm="syz-executor" name="file7" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 366.338770][ T976] netlink: 328 bytes leftover after parsing attributes in process `syz.2.265'. [ 366.353087][ T976] netlink: 328 bytes leftover after parsing attributes in process `syz.2.265'. [ 366.361332][ T36] audit: type=1400 audit(1770920392.040:243): avc: denied { create } for pid=975 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 366.381445][ T36] audit: type=1400 audit(1770920392.040:244): avc: denied { setopt } for pid=975 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 366.407231][ T36] audit: type=1400 audit(1770920392.110:245): avc: denied { create } for pid=979 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 366.426566][ T36] audit: type=1400 audit(1770920392.110:246): avc: denied { setopt } for pid=979 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 366.499614][ T10] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 366.519427][ T10] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 366.528932][ T333] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 05, bLength 9, bSynchAddress a4 [ 366.533067][ T10] usb 2-1: USB disconnect, device number 9 [ 366.553844][ T276] usb 1-1: 0:2 : does not exist [ 366.558906][ T333] usb 4-1: USB disconnect, device number 6 [ 366.569053][ T276] usb 1-1: unit 9 not found! [ 366.579330][ T276] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 366.592144][ T276] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 366.605675][ T36] audit: type=1400 audit(1770920392.310:247): avc: denied { nlmsg_write } for pid=986 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 366.626704][ T36] audit: type=1400 audit(1770920392.310:248): avc: denied { audit_write } for pid=986 comm="syz.1.268" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 366.635379][ T276] usb 1-1: USB disconnect, device number 6 [ 366.657586][ T36] audit: type=1107 audit(1770920392.310:249): pid=986 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 366.964012][ T998] kvm: MWAIT instruction emulated as NOP! [ 366.964528][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 366.988646][ T998] VFS: Mount too revealing [ 367.028397][ T1004] support for the xor transformation has been removed. [ 367.033156][ T1002] syz.0.274 uses obsolete (PF_INET,SOCK_PACKET) [ 367.079143][ T1009] netlink: 'syz.3.277': attribute type 13 has an invalid length. [ 367.087476][ T1009] erspan0: refused to change device tx_queue_len [ 367.125518][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.136539][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.146540][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 367.155726][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.168138][ T10] usb 2-1: config 0 descriptor?? [ 367.324253][ T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 367.380122][ T10] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 367.454238][ T46] usb 4-1: device descriptor read/64, error -71 [ 367.694259][ T46] usb 4-1: device descriptor read/64, error -71 [ 367.934242][ T46] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 368.074245][ T46] usb 4-1: device descriptor read/64, error -71 [ 368.284239][ T333] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 368.314260][ T46] usb 4-1: device descriptor read/64, error -71 [ 368.424322][ T46] usb usb4-port1: attempt power cycle [ 368.435447][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.446382][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.456202][ T333] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 368.469146][ T333] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.478217][ T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.487261][ T333] usb 1-1: config 0 descriptor?? [ 368.764269][ T46] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 368.785151][ T46] usb 4-1: device descriptor read/8, error -71 [ 368.915343][ T46] usb 4-1: device descriptor read/8, error -71 [ 369.154292][ T46] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 369.175375][ T46] usb 4-1: device descriptor read/8, error -71 [ 369.305451][ T46] usb 4-1: device descriptor read/8, error -71 [ 369.415037][ T46] usb usb4-port1: unable to enumerate USB device [ 369.424227][ T1035] cgroup: Bad value for 'name' [ 369.425530][ T1036] cgroup: Bad value for 'name' [ 369.434238][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.596582][ T333] usbhid 1-1:0.0: can't add hid device: -71 [ 369.602620][ T333] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 369.611701][ T333] usb 1-1: USB disconnect, device number 7 [ 369.623974][ T46] usb 2-1: USB disconnect, device number 10 [ 369.674238][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 369.836671][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.847013][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 369.859035][ T10] usb 3-1: language id specifier not provided by device, defaulting to English [ 369.869450][ T10] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 369.878606][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.886705][ T10] usb 3-1: Product: syz [ 369.890867][ T10] usb 3-1: Manufacturer: 튿痡縆អ婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債霦삣Ể틉孜 [ 369.904319][ T10] usb 3-1: SerialNumber: syz [ 370.044283][ T333] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 370.112884][ T10] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 370.121081][ T10] usb 3-1: USB disconnect, device number 11 [ 370.152911][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 370.152931][ T36] audit: type=1400 audit(1770920395.850:260): avc: denied { mounton } for pid=1052 comm="syz.3.291" path="/91/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 370.181229][ T36] audit: type=1400 audit(1770920395.850:261): avc: denied { mount } for pid=1052 comm="syz.3.291" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 370.194325][ T333] usb 1-1: Using ep0 maxpacket: 8 [ 370.204245][ T276] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 370.209897][ T333] usb 1-1: config 7 has an invalid interface number: 37 but max is 0 [ 370.223602][ T333] usb 1-1: config 7 has no interface number 0 [ 370.229766][ T333] usb 1-1: config 7 interface 37 has no altsetting 0 [ 370.237879][ T333] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=50.72 [ 370.246978][ T333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.255014][ T333] usb 1-1: Product: syz [ 370.259202][ T333] usb 1-1: Manufacturer: syz [ 370.263792][ T333] usb 1-1: SerialNumber: syz [ 370.364333][ T276] usb 2-1: Invalid ep0 maxpacket: 64 [ 370.472236][ T1046] ext4: Unknown parameter 'discArdYg@>W~MsZ.DYuhιENcYB}Se<jv%'Kho 4ʶ_ewf}Gπ0es|' [ 370.489816][ T333] usb 1-1: USB disconnect, device number 8 [ 370.496288][ T276] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 370.629883][ T36] audit: type=1400 audit(1770920396.330:262): avc: denied { listen } for pid=1055 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 370.649395][ T36] audit: type=1400 audit(1770920396.330:263): avc: denied { setopt } for pid=1055 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 370.658930][ T276] usb 2-1: Invalid ep0 maxpacket: 64 [ 370.671731][ T36] audit: type=1400 audit(1770920396.330:264): avc: denied { accept } for pid=1055 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 370.686893][ T276] usb usb2-port1: attempt power cycle [ 370.695440][ T36] audit: type=1400 audit(1770920396.350:265): avc: denied { write } for pid=1055 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 370.719047][ T36] audit: type=1400 audit(1770920396.420:266): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 370.739259][ T36] audit: type=1400 audit(1770920396.440:267): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 370.777583][ T1060] netlink: 5 bytes leftover after parsing attributes in process `syz.2.292'. [ 370.786890][ T1060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.054287][ T276] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 371.074603][ T276] usb 2-1: Invalid ep0 maxpacket: 64 [ 371.204254][ T333] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 371.204254][ T276] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 371.234670][ T276] usb 2-1: Invalid ep0 maxpacket: 64 [ 371.240099][ T276] usb usb2-port1: unable to enumerate USB device [ 371.254238][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 371.355406][ T333] usb 4-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 371.366513][ T333] usb 4-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 371.379463][ T333] usb 4-1: config 0 interface 0 has no altsetting 0 [ 371.386198][ T333] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 371.395372][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.404221][ T333] usb 4-1: config 0 descriptor?? [ 371.409547][ T1066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.416790][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 371.423938][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.434191][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.445441][ T46] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 371.454548][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.462576][ T46] usb 1-1: Product: syz [ 371.466790][ T46] usb 1-1: Manufacturer: syz [ 371.471440][ T46] usb 1-1: SerialNumber: syz [ 371.477302][ T46] usb 1-1: config 0 descriptor?? [ 371.513536][ T36] audit: type=1400 audit(1770920397.210:268): avc: denied { ioctl } for pid=1069 comm="syz.2.297" path="cgroup:[4026532307]" dev="nsfs" ino=4026532307 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 371.626244][ T36] audit: type=1400 audit(1770920397.330:269): avc: denied { create } for pid=1079 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 371.761513][ T276] usb 1-1: USB disconnect, device number 9 [ 371.831288][ T333] usbhid 4-1:0.0: can't add hid device: -71 [ 371.843218][ T333] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 371.852199][ T333] usb 4-1: USB disconnect, device number 11 [ 372.164248][ T46] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 372.314293][ T46] usb 3-1: Invalid ep0 maxpacket: 16 [ 372.444335][ T46] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 372.479068][ T1105] erofs: dax options not supported [ 372.604226][ T46] usb 3-1: Invalid ep0 maxpacket: 16 [ 372.609944][ T46] usb usb3-port1: attempt power cycle [ 372.954234][ T46] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 372.974628][ T46] usb 3-1: Invalid ep0 maxpacket: 16 [ 373.104257][ T46] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 373.124684][ T46] usb 3-1: Invalid ep0 maxpacket: 16 [ 373.130191][ T46] usb usb3-port1: unable to enumerate USB device [ 373.324371][ T943] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 373.424239][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 373.469769][ T1117] netlink: 104 bytes leftover after parsing attributes in process `syz.3.314'. [ 373.476033][ T943] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 373.490274][ T943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 373.497040][ T943] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 373.506393][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.518331][ T943] usb 2-1: config 0 descriptor?? [ 373.574259][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 373.580649][ T46] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 373.589047][ T46] usb 1-1: config 0 has no interface number 0 [ 373.595669][ T46] usb 1-1: config 0 interface 196 has no altsetting 0 [ 373.604155][ T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 373.613488][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.621579][ T46] usb 1-1: Product: syz [ 373.625983][ T46] usb 1-1: Manufacturer: syz [ 373.630614][ T46] usb 1-1: SerialNumber: syz [ 373.640257][ T46] usb 1-1: config 0 descriptor?? [ 373.847382][ T1111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.856226][ T1111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.866336][ T1111] tmpfs: Too small a size for current use [ 373.873264][ T1111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.881972][ T1111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.892072][ T46] ipheth 1-1:0.196: Unable to find endpoints [ 373.901132][ T46] usb 1-1: USB disconnect, device number 10 [ 374.239715][ T1124] tmpfs: Unknown parameter 'noinode32' [ 374.291110][ T1128] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 374.554241][ T276] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 374.644244][ T433] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 374.704229][ T276] usb 4-1: Using ep0 maxpacket: 32 [ 374.710656][ T276] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 374.718933][ T276] usb 4-1: config 9 has no interface number 0 [ 374.725200][ T276] usb 4-1: config 9 interface 57 has no altsetting 0 [ 374.733666][ T276] usb 4-1: New USB device found, idVendor=066b, idProduct=0105, bcdDevice= 1.00 [ 374.742802][ T276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.750851][ T276] usb 4-1: Product: syz [ 374.755061][ T276] usb 4-1: Manufacturer: syz [ 374.759686][ T276] usb 4-1: SerialNumber: syz [ 374.767556][ T276] ums-sddr09 4-1:9.57: USB Mass Storage device detected [ 374.805529][ T433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 374.816599][ T433] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 374.826851][ T433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.835599][ T276] ums-sddr09 4-1:9.57: probe with driver ums-sddr09 failed with error -22 [ 374.845072][ T433] usb 1-1: config 0 descriptor?? [ 374.850361][ T1132] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 374.967405][ T1130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.319'. [ 374.977985][ T276] usb 4-1: USB disconnect, device number 12 [ 375.234243][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 375.364245][ T9] usb 3-1: device descriptor read/64, error -71 [ 375.524293][ T46] usb 1-1: USB disconnect, device number 11 [ 375.604261][ T9] usb 3-1: device descriptor read/64, error -71 [ 375.794250][ T333] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 375.844222][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 375.947204][ T333] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.956442][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.964491][ T333] usb 4-1: Product: syz [ 375.968722][ T333] usb 4-1: Manufacturer: syz [ 375.973337][ T333] usb 4-1: SerialNumber: syz [ 375.984265][ T9] usb 3-1: device descriptor read/64, error -71 [ 376.045268][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 376.045291][ T36] audit: type=1400 audit(1770920401.740:292): avc: denied { create } for pid=1148 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 376.060713][ T943] usbhid 2-1:0.0: can't add hid device: -71 [ 376.077311][ T943] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 376.086965][ T943] usb 2-1: USB disconnect, device number 15 [ 376.180748][ T1156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=1156 comm=syz.1.328 [ 376.224270][ T9] usb 3-1: device descriptor read/64, error -71 [ 376.260894][ T1159] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 376.274217][ T36] audit: type=1400 audit(1770920401.970:293): avc: denied { name_bind } for pid=1158 comm="syz.1.329" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 376.338798][ T9] usb usb3-port1: attempt power cycle [ 376.408877][ T36] audit: type=1400 audit(1770920402.110:294): avc: denied { read write } for pid=1163 comm="syz.1.330" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 376.432378][ T36] audit: type=1400 audit(1770920402.110:295): avc: denied { open } for pid=1163 comm="syz.1.330" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 376.455929][ T36] audit: type=1400 audit(1770920402.110:296): avc: denied { map } for pid=1163 comm="syz.1.330" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 376.479524][ T36] audit: type=1400 audit(1770920402.110:297): avc: denied { execute } for pid=1163 comm="syz.1.330" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 376.503761][ T36] audit: type=1400 audit(1770920402.110:298): avc: denied { ioctl } for pid=1163 comm="syz.1.330" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 376.529003][ T36] audit: type=1400 audit(1770920402.210:299): avc: denied { ioctl } for pid=1163 comm="syz.1.330" path="socket:[9293]" dev="sockfs" ino=9293 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 376.694270][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 376.715482][ T9] usb 3-1: device descriptor read/8, error -71 [ 376.845467][ T9] usb 3-1: device descriptor read/8, error -71 [ 377.023336][ T333] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 377.029952][ T333] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 377.084226][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 377.115310][ T9] usb 3-1: device descriptor read/8, error -71 [ 377.223071][ T333] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 377.231547][ T333] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 377.242823][ T46] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 377.252489][ T9] usb 3-1: device descriptor read/8, error -71 [ 377.374366][ T9] usb usb3-port1: unable to enumerate USB device [ 377.393598][ T36] audit: type=1400 audit(1770920403.090:300): avc: denied { connect } for pid=1198 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 377.419643][ T36] audit: type=1400 audit(1770920403.120:301): avc: denied { getopt } for pid=1198 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 377.444983][ T333] usb 4-1: USB disconnect, device number 13 [ 377.451536][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.462064][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 377.475203][ T333] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 377.485952][ T46] usb 1-1: New USB device found, idVendor=045e, idProduct=789d, bcdDevice= 0.4f [ 377.500909][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.518601][ T46] usb 1-1: config 0 descriptor?? [ 377.927044][ T46] hid-generic 0003:045E:789D.000A: unknown main item tag 0x0 [ 377.934663][ T46] hid-generic 0003:045E:789D.000A: unknown main item tag 0x0 [ 377.942068][ T46] hid-generic 0003:045E:789D.000A: unknown main item tag 0x0 [ 377.949546][ T46] hid-generic 0003:045E:789D.000A: unknown main item tag 0x0 [ 377.957016][ T46] hid-generic 0003:045E:789D.000A: unknown main item tag 0x0 [ 377.964458][ T46] hid-generic 0003:045E:789D.000A: unbalanced collection at end of report description [ 377.974260][ T46] hid-generic 0003:045E:789D.000A: probe with driver hid-generic failed with error -22 [ 378.314240][ T46] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 378.464271][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 378.472459][ T46] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 378.481037][ T46] usb 4-1: config 2 has no interface number 0 [ 378.487381][ T46] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 378.497648][ T46] usb 4-1: config 2 interface 88 has no altsetting 0 [ 378.506084][ T46] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 378.515734][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.523977][ T46] usb 4-1: Product: syz [ 378.528525][ T46] usb 4-1: Manufacturer: syz [ 378.533297][ T46] usb 4-1: SerialNumber: syz [ 378.544908][ T1226] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.752824][ T1226] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.784257][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 378.784821][ T46] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 378.811684][ T46] asix 4-1:2.88: probe with driver asix failed with error -71 [ 378.821206][ T46] usb 4-1: USB disconnect, device number 14 [ 378.954215][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 378.960572][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 378.969070][ T9] usb 2-1: config 0 has no interface number 0 [ 378.975408][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 378.987695][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 378.997002][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.005229][ T9] usb 2-1: Product: syz [ 379.009429][ T9] usb 2-1: Manufacturer: syz [ 379.014239][ T943] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 379.022228][ T9] usb 2-1: SerialNumber: syz [ 379.034510][ T9] usb 2-1: config 0 descriptor?? [ 379.040080][ T1242] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 379.114254][ T46] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 379.184243][ T943] usb 3-1: Using ep0 maxpacket: 16 [ 379.190758][ T943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.202249][ T943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.212118][ T943] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 379.226619][ T943] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 379.235879][ T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.246256][ T943] usb 3-1: config 0 descriptor?? [ 379.251684][ T1242] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 379.275453][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.286479][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.296483][ T46] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 379.306120][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.315107][ T46] usb 4-1: config 0 descriptor?? [ 379.463911][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 379.474820][ T9] asix 2-1:0.188: probe with driver asix failed with error -61 [ 379.524307][ T1257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.532915][ T1257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.541505][ T1257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.550262][ T1257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.681413][ T943] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input11 [ 379.697113][ T943] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 379.762235][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 379.768391][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 379.777417][ T46] usb 4-1: USB disconnect, device number 15 [ 379.930787][ T9] usb 1-1: USB disconnect, device number 12 [ 379.980289][ T1263] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 380.304305][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 380.399647][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.410032][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.413922][ T276] usb 3-1: USB disconnect, device number 20 [ 380.464300][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 380.471110][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.483794][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.495198][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 380.504421][ T9] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 380.513118][ T9] usb 1-1: Product: syz [ 380.517960][ T9] usb 1-1: Manufacturer: syz [ 380.531870][ T9] hub 1-1:4.0: USB hub found [ 380.536694][ T943] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 380.550433][ T1279] tmpfs: Unsupported parameter 'mpol' [ 380.572475][ T1285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.582084][ T1285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.694252][ T943] usb 4-1: Using ep0 maxpacket: 32 [ 380.700908][ T943] usb 4-1: unable to get BOS descriptor or descriptor too short [ 380.709866][ T943] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 380.718388][ T943] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 380.729569][ T943] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 380.739994][ T9] hub 1-1:4.0: 5 ports detected [ 380.745040][ T943] usb 4-1: config 128 has no interface number 0 [ 380.751360][ T943] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 124, changing to 10 [ 380.763151][ T943] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 18072, setting to 1024 [ 380.775022][ T9] hub 1-1:4.0: insufficient power available to use all downstream ports [ 380.783591][ T943] usb 4-1: config 128 interface 127 has no altsetting 0 [ 380.792107][ T943] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 380.801298][ T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.809340][ T943] usb 4-1: Product: syz [ 380.813570][ T943] usb 4-1: Manufacturer: syz [ 380.818496][ T943] usb 4-1: SerialNumber: syz [ 380.824356][ T1269] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 380.944281][ T276] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 380.997146][ T9] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 381.006859][ T9] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 381.036996][ T9] usb 1-1: USB disconnect, device number 13 [ 381.048713][ T943] usb 4-1: USB disconnect, device number 16 [ 381.061490][ T984] udevd[984]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 381.095557][ T276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.106647][ T276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.116502][ T276] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 381.125692][ T276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.134751][ T276] usb 3-1: config 0 descriptor?? [ 381.598829][ T1302] netlink: 'syz.3.365': attribute type 4 has an invalid length. [ 381.607736][ T1302] netlink: 'syz.3.365': attribute type 6 has an invalid length. [ 381.615691][ T1302] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.365'. [ 381.734365][ T1313] overlay: filesystem on ./file0 not supported as upperdir [ 381.742882][ T276] usbhid 3-1:0.0: can't add hid device: -71 [ 381.749616][ T276] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 381.760585][ T276] usb 3-1: USB disconnect, device number 21 [ 381.894308][ T943] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 381.984251][ T333] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 382.024259][ T943] usb 1-1: device descriptor read/64, error -71 [ 382.136681][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.147688][ T333] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 382.156792][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.165562][ T333] usb 4-1: config 0 descriptor?? [ 382.264347][ T943] usb 1-1: device descriptor read/64, error -71 [ 382.297731][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 382.297751][ T36] audit: type=1400 audit(1770920408.000:309): avc: denied { append } for pid=1316 comm="syz.2.370" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 382.298331][ T1317] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 382.440229][ T1322] ================================================================== [ 382.454793][ T1322] BUG: KASAN: slab-use-after-free in pick_link+0x4f0/0xe80 [ 382.462308][ T1322] Read of size 8 at addr ffff888111e35610 by task syz.2.372/1322 [ 382.470165][ T1322] [ 382.472544][ T1322] CPU: 0 UID: 0 PID: 1322 Comm: syz.2.372 Not tainted syzkaller #0 ecbc8af4db0b1e168e71992ad8df1de57efedc45 [ 382.472580][ T1322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 382.472598][ T1322] Call Trace: [ 382.472617][ T1322] [ 382.472625][ T1322] __dump_stack+0x21/0x30 [ 382.472702][ T1322] dump_stack_lvl+0x140/0x1c0 [ 382.472730][ T1322] ? __cfi_dump_stack_lvl+0x10/0x10 [ 382.472758][ T1322] ? __cfi__printk+0x10/0x10 [ 382.472784][ T1322] print_address_description+0x71/0x210 [ 382.472805][ T1322] print_report+0x4a/0x70 [ 382.472844][ T1322] kasan_report+0x162/0x1a0 [ 382.473035][ T1322] ? pick_link+0x4f0/0xe80 [ 382.473062][ T1322] ? pick_link+0x4f0/0xe80 [ 382.473142][ T1322] __asan_report_load8_noabort+0x18/0x20 [ 382.473255][ T1322] pick_link+0x4f0/0xe80 [ 382.473283][ T1322] step_into+0xc68/0xf60 [ 382.473311][ T1322] ? __kasan_check_read+0x15/0x20 [ 382.473349][ T1322] ? read_word_at_a_time+0x1a/0x40 [ 382.473421][ T1322] ? set_root+0x420/0x420 [ 382.473445][ T1322] ? lookup_fast+0x167/0x530 [ 382.473464][ T1322] ? inode_permission+0xf3/0x4c0 [ 382.473527][ T1322] link_path_walk+0x753/0xec0 [ 382.473554][ T1322] ? stack_depot_save_flags+0x38/0x800 [ 382.473651][ T1322] __filename_parentat+0x22a/0x650 [ 382.473684][ T1322] ? x64_sys_call+0x2974/0x2ee0 [ 382.473716][ T1322] ? do_syscall_64+0x57/0xf0 [ 382.473835][ T1322] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 382.473915][ T1322] ? vfs_path_parent_lookup+0x70/0x70 [ 382.473958][ T1322] ? check_stack_object+0x81/0x150 [ 382.474044][ T1322] ? __virt_addr_valid+0x2a6/0x380 [ 382.474172][ T1322] ? __check_object_size+0x527/0x830 [ 382.474201][ T1322] do_unlinkat+0xfe/0x5a0 [ 382.474225][ T1322] ? __cfi_do_unlinkat+0x10/0x10 [ 382.474250][ T1322] ? getname_flags+0x208/0x700 [ 382.474271][ T1322] ? fpregs_restore_userregs+0x11c/0x260 [ 382.474306][ T1322] __x64_sys_unlinkat+0xda/0xf0 [ 382.474330][ T1322] x64_sys_call+0x2974/0x2ee0 [ 382.474364][ T1322] do_syscall_64+0x57/0xf0 [ 382.474395][ T1322] ? clear_bhb_loop+0x50/0xa0 [ 382.474427][ T1322] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 382.474450][ T1322] RIP: 0033:0x7f111839bf79 [ 382.474486][ T1322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.474507][ T1322] RSP: 002b:00007f111928e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 382.474540][ T1322] RAX: ffffffffffffffda RBX: 00007f1118615fa0 RCX: 00007f111839bf79 [ 382.474562][ T1322] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 382.474574][ T1322] RBP: 00007f11184327e0 R08: 0000000000000000 R09: 0000000000000000 [ 382.474585][ T1322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.474596][ T1322] R13: 00007f1118616038 R14: 00007f1118615fa0 R15: 00007ffd56dab3d8 [ 382.474627][ T1322] [ 382.474637][ T1322] [ 382.541956][ T67] usb 2-1: USB disconnect, device number 16 [ 382.544637][ T1322] Allocated by task 1322: [ 382.544653][ T1322] kasan_save_track+0x3e/0x80 [ 382.588214][ T333] zeroplus 0003:0C12:0005.000C: item fetching failed at offset 0/3 [ 382.593052][ T1322] kasan_save_alloc_info+0x40/0x50 [ 382.593090][ T1322] __kasan_slab_alloc+0x73/0x90 [ 382.604941][ T333] zeroplus 0003:0C12:0005.000C: parse failed [ 382.607774][ T1322] kmem_cache_alloc_lru_noprof+0x1c2/0x410 [ 382.614838][ T333] zeroplus 0003:0C12:0005.000C: probe with driver zeroplus failed with error -22 [ 382.619426][ T1322] alloc_inode+0xa9/0x270 [ 382.779304][ T67] usb 4-1: USB disconnect, device number 17 [ 382.779568][ T1322] new_inode+0x25/0x1e0 [ 382.824945][ T1322] bpf_symlink+0x65/0x200 [ 382.829400][ T1322] vfs_symlink+0x3ee/0x620 [ 382.833856][ T1322] do_symlinkat+0x1ba/0x400 [ 382.838366][ T1322] __x64_sys_symlinkat+0x99/0xb0 [ 382.843307][ T1322] x64_sys_call+0x1f79/0x2ee0 [ 382.848002][ T1322] do_syscall_64+0x57/0xf0 [ 382.852449][ T1322] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 382.858401][ T1322] [ 382.860725][ T1322] Freed by task 1323: [ 382.864708][ T1322] kasan_save_track+0x3e/0x80 [ 382.869407][ T1322] kasan_save_free_info+0x4a/0x60 [ 382.874463][ T1322] __kasan_slab_free+0x5f/0x80 [ 382.879241][ T1322] kmem_cache_free+0x1bd/0x4f0 [ 382.884030][ T1322] free_inode_nonrcu+0x20/0x30 [ 382.888851][ T1322] bpf_destroy_inode+0x14e/0x180 [ 382.893806][ T1322] evict+0x7f2/0xac0 [ 382.897859][ T1322] iput+0x635/0x8d0 [ 382.901685][ T1322] do_unlinkat+0x3d2/0x5a0 [ 382.906139][ T1322] __x64_sys_unlinkat+0xda/0xf0 [ 382.911006][ T1322] x64_sys_call+0x2974/0x2ee0 [ 382.915799][ T1322] do_syscall_64+0x57/0xf0 [ 382.920256][ T1322] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 382.926182][ T1322] [ 382.928513][ T1322] The buggy address belongs to the object at ffff888111e35380 [ 382.928513][ T1322] which belongs to the cache inode_cache of size 704 [ 382.942569][ T1322] The buggy address is located 656 bytes inside of [ 382.942569][ T1322] freed 704-byte region [ffff888111e35380, ffff888111e35640) [ 382.956377][ T1322] [ 382.958719][ T1322] The buggy address belongs to the physical page: [ 382.965250][ T1322] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111e34 [ 382.974102][ T1322] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 382.982615][ T1322] flags: 0x4000000000000040(head|zone=1) [ 382.988276][ T1322] page_type: f5(slab) [ 382.992271][ T1322] raw: 4000000000000040 ffff88810167f780 ffffea000456a200 0000000000000004 [ 383.000872][ T1322] raw: 0000000000000000 0000000000130013 00000001f5000000 0000000000000000 [ 383.009466][ T1322] head: 4000000000000040 ffff88810167f780 ffffea000456a200 0000000000000004 [ 383.018142][ T1322] head: 0000000000000000 0000000000130013 00000001f5000000 0000000000000000 [ 383.026821][ T1322] head: 4000000000000002 ffffea0004478d01 ffffffffffffffff 0000000000000000 [ 383.035527][ T1322] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 383.044195][ T1322] page dumped because: kasan: bad access detected [ 383.050637][ T1322] page_owner tracks the page as allocated [ 383.056369][ T1322] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 838, tgid 837 (syz.1.218), ts 360830334077, free_ts 360031972881 [ 383.080599][ T1322] post_alloc_hook+0x3b8/0x3f0 [ 383.085462][ T1322] prep_new_page+0x1c/0x110 [ 383.089974][ T1322] get_page_from_freelist+0x496e/0x4a20 [ 383.095526][ T1322] __alloc_pages_noprof+0x35f/0x7e0 [ 383.100732][ T1322] alloc_slab_page+0x6b/0x1e0 [ 383.105517][ T1322] allocate_slab+0x69/0x420 [ 383.110029][ T1322] ___slab_alloc+0x5a2/0x8d0 [ 383.114668][ T1322] kmem_cache_alloc_lru_noprof+0x295/0x410 [ 383.120507][ T1322] alloc_inode+0xa9/0x270 [ 383.124857][ T1322] new_inode+0x25/0x1e0 [ 383.129025][ T1322] __debugfs_create_file+0x14c/0x4b0 [ 383.134394][ T1322] debugfs_create_file+0x4e/0x70 [ 383.139342][ T1322] kvm_create_vm_debugfs+0x48e/0xb50 [ 383.144651][ T1322] kvm_dev_ioctl+0xb64/0x14d0 [ 383.149341][ T1322] __se_sys_ioctl+0x132/0x1b0 [ 383.154057][ T1322] __x64_sys_ioctl+0x7f/0xa0 [ 383.158677][ T1322] page last free pid 336 tgid 336 stack trace: [ 383.164836][ T1322] free_unref_page+0xbcf/0xf80 [ 383.169622][ T1322] __free_pages+0x6b/0x3b0 [ 383.174053][ T1322] __free_slab+0xb5/0x110 [ 383.178393][ T1322] free_slab+0x18/0xe0 [ 383.182476][ T1322] __put_partials+0x11b/0x150 [ 383.187162][ T1322] put_cpu_partial+0x91/0xc0 [ 383.191780][ T1322] __slab_free+0x1cf/0x2a0 [ 383.196321][ T1322] ___cache_free+0xc9/0xe0 [ 383.200762][ T1322] qlist_free_all+0xb5/0x130 [ 383.205407][ T1322] kasan_quarantine_reduce+0x14f/0x180 [ 383.210889][ T1322] __kasan_slab_alloc+0x28/0x90 [ 383.215759][ T1322] kmem_cache_alloc_noprof+0x1bf/0x410 [ 383.221238][ T1322] getname_flags+0xc5/0x700 [ 383.225750][ T1322] user_path_at+0x2b/0x60 [ 383.230091][ T1322] do_faccessat+0x557/0xcb0 [ 383.234669][ T1322] __x64_sys_faccessat2+0x9e/0xb0 [ 383.239737][ T1322] [ 383.242061][ T1322] Memory state around the buggy address: [ 383.247697][ T1322] ffff888111e35500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 383.255764][ T1322] ffff888111e35580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 383.263828][ T1322] >ffff888111e35600: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 383.271893][ T1322] ^ [ 383.276491][ T1322] ffff888111e35680: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 383.284553][ T1322] ffff888111e35700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 383.292618][ T1322] ================================================================== [ 383.301222][ T1322] Disabling lock debugging due to kernel taint [ 383.310326][ T36] audit: type=1400 audit(1770920409.010:310): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 383.332612][ T36] audit: type=1400 audit(1770920409.010:311): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.356949][ T36] audit: type=1400 audit(1770920409.010:312): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.382292][ T36] audit: type=1400 audit(1770920409.010:313): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.403704][ T943] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 383.411415][ T36] audit: type=1400 audit(1770920409.010:314): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 383.432051][ T36] audit: type=1400 audit(1770920409.010:315): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 383.455068][ T36] audit: type=1400 audit(1770920409.010:316): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 383.477656][ T36] audit: type=1400 audit(1770920409.010:317): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 383.624273][ T943] usb 1-1: device descriptor read/64, error -71 [ 383.864303][ T943] usb 1-1: device descriptor read/64, error -71 [ 383.974407][ T943] usb usb1-port1: attempt power cycle [ 384.314246][ T943] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 384.335381][ T943] usb 1-1: device descriptor read/8, error -71 [ 384.465471][ T943] usb 1-1: device descriptor read/8, error -71