last executing test programs: 489.864317ms ago: executing program 2 (id=3): ioctl$sock_netdev_private(0xffffffffffffffff, 0x10008947, &(0x7f00000001c0)="8d557f1b1ff6ccd094c16b42289734959273b57ef1d453bebe85fbbe6c71e6226732bc85836358a4d39599268911f86dd60deaaf0be012c8924161071004458424fe45e65a223795ab2f72dd7a88739efa3ea40606325bd849ea0050a755f48e9c305a74f054f82282c2f6c6e89d4ad03beba67e39a0f5c2ee7c2c887803760e5ab6d2c1000000000000000099582c93c328e23799d0fa063d77979dbb975d233daf204060cb7e7eb30a87904371b9c5d60543fb01255051cc") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) 487.794768ms ago: executing program 1 (id=2): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xffff, 0x0, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$char_usb(r2, &(0x7f00000000c0)="7705414ae77c8f80fd911416207039c60845c8c524322726e781920f6f62b861488729adbcf9f595d0a35e421ba5a45450f2e258eb8d07e073943a002c87d6d1abcb610a5d55a7fdbac53cf7576a6f0b9a5477209feea6097e0065975ddcb7cfd477d0b87101f6e2ad0214cff6fcf48314cf125fcc1ee09ef7f956512506a5892b6243", 0x83) 483.132948ms ago: executing program 3 (id=4): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x1c, 0x0, 0x14) (async) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002bdc96910950b90271f8e010203010902120001c006808509044a0000ff1fde04f4fe9a2fa7b78d8b10451075a86d5291c636f1514fa3a8b9acf6c98f954a70f6c1128db99c5d92ce0102ab5d47d5a09928c91d295b0fe2668f4287acfd2964c8fd2433"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async) syz_usb_control_io$rtl8150(r2, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x40, 0x1, 0x1f, {0x1f, 0xe, "2694d86b6e494cfde5cea240285f6bd968aea824aa9dd26c7a5e46b5e0"}}, &(0x7f0000000100)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "4f9833c17ed4fd387193070fc3ba03b74213df373f2abc876f18cdda058e00b7df3ad0e7768fec9120b1c964abc1103edfb8d959fb8e11b34d186fc1bccd04139a99c93fca9a37a03e13658906c97f41653a3bef06e77f2cf73df2d8b2fdc7232ec5a43b11d741cdc5e84fa5335e8c59c515d5300ce76dc939be855893810e8d72608a78cace463548d27b0c187d574d8372a8f86cfda9f16d29844bc085605ff18add946d05c50f3c33ddfcf54c2065347792c7e01c1451e398260044193fb90ce959699d701c3bc07a64962cee04"}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x20, 0x8, 0x32, "fcadbb5a85ecb93ac2a72a730d9e9e398f3360e8086d2ee8af3e0fa7e8d701a3542b3c0b468aea1a7ad7dd624030e52bb213"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)=ANY=[@ANYBLOB="a2c4da"], &(0x7f0000000340)={0x40, 0x5, 0x2, "fd83"}}) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) 416.18375ms ago: executing program 2 (id=5): syz_clone(0x1000080, &(0x7f0000000000)="59a4024da84c15855371d7e62e6a273ff83326569eef20b3256804201f91ecdf7f14b527c60c373d69ab7453354d20ab2c41dbec34e14187061990ca2aa390983b2ab985869d529646322ee76832395f4fb74e2d445b8fe02d3a50e4670f8f1e93564819ce39816bb2d6bcd3db191b930a4b8f7d0286e56f4f5d16964ff34e3520c28276fa4a2e90ad0e0d00858eb538d4f22110ce58ec2c4d", 0x99, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="37fbf756052396f41024c1058a6931999098f2958a5098108f8c5c0f5f14541333692bb5dd7304ede451b807afcef8df2bc73921b99899e45a362f04fc78a1fd30a28275b33d0330135b517d0bf406053df7411f01760bd6463cf7b826") r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xe) ioctl$KDENABIO(r1, 0x4b36) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@local, 0x0}, &(0x7f0000000240)=0x14) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000280)={0x0, 0x1, 0x6, r3, 0x5}, 0xc) shutdown(r2, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendto$packet(r4, &(0x7f0000000300)="31c87e7af405bc23ab7a474040bb8c2f10ab278d79c30f35fa59493ca847d36874094fdd80a52f187e19ebc5f1e1852cadf8c1f9b3bf72cabc93d0966424e6383615b7439b45f2cfc3d27ec20209f0ed0f2b63938c17cf2981f2348c96eeb353072c6b553f9df976118067cc3931bd840eb0520a999251533d5d85af3a20e01d57bb84aa4aad36e04b5146a276d264b2e0fe0884de85f2711a", 0x99, 0x24000080, &(0x7f00000003c0)={0x11, 0x0, r3, 0x1, 0x5, 0x6, @random="2193ab0afa3f"}, 0x14) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f0000000400), 0x4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000540)=0xe8) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000580)={0x6, 0x10000, 0xfa, 0xc, 0x401}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000005c0)=0x4902, 0x4) write(r2, &(0x7f0000000600)="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", 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001600)=0x8000000000000001) r7 = openat$cgroup_ro(r4, &(0x7f0000001640)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001700)={'ip6tnl0\x00', &(0x7f0000001680)={'syztnl1\x00', r6, 0x2f, 0x1, 0x8, 0x0, 0x48, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7800, 0xf, 0x7}}) r8 = landlock_create_ruleset(&(0x7f0000001740)={0x8, 0x4, 0x0, 0x11a04, 0x1, 0x1}, 0x30, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000001780)={0x81cd9b1e6f96065e, r2}, 0x0) fdatasync(r1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f00000017c0)={0x1, 'macsec0\x00'}, 0x18) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001800), r7) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001840)={0x150, r9, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb87a}, {0x6, 0x11, 0xf76}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x52}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe8c}, {0x6, 0x11, 0xa}}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0xc800) socket$netlink(0x10, 0x3, 0x4) bind$inet6(r4, &(0x7f0000001a40)={0xa, 0x4e23, 0xfffffffd, @empty, 0x1}, 0x1c) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000001a80)=""/4096) 405.66493ms ago: executing program 2 (id=6): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000003c0)={'unconfined', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6}, 0x3e) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) (async) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r11, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) (async) write$tun(r8, &(0x7f0000000380)={@val={0xa, 0xb3f0}, @void, @eth={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x52) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x39d4, 0x0, 0x1, 0x255, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4000, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80000, 0x3, 0x946}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x2, 0x28f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa90c, 0x8200, 0x1, 0x366}}], 0x1, &(0x7f0000000340)={0x2e, 0x7, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x4, 0x0, 0x0}}, 0x0) setns(r7, 0x0) (async) r13 = socket(0x80000000000000a, 0x2, 0x0) (async) ioctl$HIDIOCGRAWINFO(r7, 0x80084803, &(0x7f0000000500)=""/231) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r12, 0x8982, &(0x7f0000000000)) (async) r14 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r14, 0x10f, 0x30, 0x0, 0x610) setsockopt$inet6_group_source_req(r13, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) 326.117871ms ago: executing program 2 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000001200)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x4, 0x11, 0x9ca, 0x81}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x8, 0x2c, 0x65, 0x0, 0xf, 0x6, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x3, 0x9c}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x96, 0x0, 0x1ff}}}}, 0x3a) creat(0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b0000000ec03"], 0xb0}, 0x1, 0x0, 0x0, 0x2006c0d0}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@wrmsr={0x65, 0x20, {0x1b, 0xfee00d00}}, @wrmsr={0x65, 0x20, {0x838, 0x10000}}, @code={0xa, 0x13, {"f4f4"}}], 0x53}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x10, &(0x7f0000000100)='barrier') 325.906301ms ago: executing program 0 (id=9): sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x2, 0xf, 0x0, 0x1, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @empty}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}]}, 0x78}, 0x1, 0x7}, 0x44004) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x10}, 0x0) 304.533642ms ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000865000/0x1000)=nil) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="10ff000000000000000000", 0xb) 210.476955ms ago: executing program 0 (id=11): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0xff4f370c567f0000) 124.320417ms ago: executing program 0 (id=12): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1000}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) 123.038087ms ago: executing program 0 (id=13): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r4}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) sendto$packet(r2, &(0x7f0000000180)="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", 0xfe, 0x10, &(0x7f0000000280)={0x11, 0x7, r4, 0x1, 0x10, 0x6, @multicast}, 0x14) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002980)=""/131, 0x83}], 0x1}}], 0x1, 0x400122a2, 0x0) write$nbd(r2, &(0x7f0000000440)={0x67446698, 0x1, 0x1, 0x0, 0x3, "de32d3bac89a27130bf60655150f860fc3117396d6bfcfe72f38001b66abae9caeb01c83cadf5e9d79e82157d03092b52747daa7832cb3063c246c824a98100088c5ff3f87c11209a5cf5c57bb812474ad44f63aad53917b2e9bc82a0340996d65d43b6cd0643174d846bca788b38df2ac1c7a3a"}, 0x84) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$setperm(0x5, r5, 0x172831) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}], 0x1, 0x23, 0x0) sendto$inet6(r1, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 54.472518ms ago: executing program 2 (id=14): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0xd3) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x15, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r9, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, &(0x7f0000000080)={0x3a, @broadcast, 0x4e23, 0x2, 'nq\x00', 0x30, 0x1, 0x66}, 0x2c) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x1200028, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d5d9dc032aeb23cd7aab2068c8e526572fd1e952390e5865d77ebd01d9607dc6a686abb1b54b24316a2506ef78e7fa60e3154c8317cd2e0e898ab28940178223b07c6ce8ac003f9d03e44a49c5d093d3e17b2cc9ded24dfcde0f7b33374dbf5867df6a2a7a0afc6f6b01d0e089b", @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB="1a0ed3541f9df06209c6e49fe2da7ba04072e8f1e8f2fb8d2d0463c981a0dd6182ecd0e8fb72ddd1971a56ada59fd5c7343a2d54d2dcfa5861f51aeb7f66214561a2e96c6f01e1ef"]) 0s ago: executing program 0 (id=15): socketpair(0x28, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='n\xb3\xd90211\x00'}]}, 0x20}}, 0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14, r4, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r6, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200029001000010902120001050000000904"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 29.365686][ T36] audit: type=1400 audit(1785609701.740:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.366728][ T286] cgroup: Unknown subsys name 'net' [ 29.388355][ T36] audit: type=1400 audit(1785609701.740:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.415637][ T36] audit: type=1400 audit(1785609701.770:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.415824][ T286] cgroup: Unknown subsys name 'devices' [ 29.539936][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.545544][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.637684][ T36] audit: type=1400 audit(1785609702.020:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.660960][ T36] audit: type=1400 audit(1785609702.020:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.685829][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.685848][ T36] audit: type=1400 audit(1785609702.020:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.717625][ T36] audit: type=1400 audit(1785609702.080:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.723617][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.743025][ T36] audit: type=1400 audit(1785609702.080:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.777391][ T36] audit: type=1400 audit(1785609702.100:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.802918][ T36] audit: type=1400 audit(1785609702.100:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.588075][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.595141][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.602365][ T294] bridge_slave_0: entered allmulticast mode [ 30.608901][ T294] bridge_slave_0: entered promiscuous mode [ 30.615274][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.622340][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.629461][ T294] bridge_slave_1: entered allmulticast mode [ 30.635738][ T294] bridge_slave_1: entered promiscuous mode [ 30.666091][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.673174][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.680304][ T293] bridge_slave_0: entered allmulticast mode [ 30.686475][ T293] bridge_slave_0: entered promiscuous mode [ 30.693799][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.700922][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.708031][ T293] bridge_slave_1: entered allmulticast mode [ 30.714200][ T293] bridge_slave_1: entered promiscuous mode [ 30.744342][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.751481][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.758614][ T296] bridge_slave_0: entered allmulticast mode [ 30.764789][ T296] bridge_slave_0: entered promiscuous mode [ 30.774200][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.781311][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.788444][ T296] bridge_slave_1: entered allmulticast mode [ 30.794610][ T296] bridge_slave_1: entered promiscuous mode [ 30.854945][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.862082][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.869189][ T295] bridge_slave_0: entered allmulticast mode [ 30.875356][ T295] bridge_slave_0: entered promiscuous mode [ 30.881956][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.889027][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.896091][ T295] bridge_slave_1: entered allmulticast mode [ 30.902480][ T295] bridge_slave_1: entered promiscuous mode [ 30.998984][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.006067][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.013364][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.020397][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.036428][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.043537][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.050853][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.057905][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.088308][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.095377][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.102704][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.109752][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.149131][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.156195][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.163492][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.170542][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.196393][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.203702][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.211834][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.219025][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.226215][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.234171][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.246361][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.253441][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.278086][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.285130][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.292836][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.299882][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.311146][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.318222][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.351711][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.358770][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.366402][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.373506][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.393329][ T295] veth0_vlan: entered promiscuous mode [ 31.409978][ T293] veth0_vlan: entered promiscuous mode [ 31.427157][ T294] veth0_vlan: entered promiscuous mode [ 31.434304][ T295] veth1_macvtap: entered promiscuous mode [ 31.455965][ T293] veth1_macvtap: entered promiscuous mode [ 31.463237][ T296] veth0_vlan: entered promiscuous mode [ 31.471614][ T294] veth1_macvtap: entered promiscuous mode [ 31.488206][ T296] veth1_macvtap: entered promiscuous mode [ 31.545464][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.715279][ T338] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.787132][ T343] dummy_hcd dummy_hcd.0: remove, state 4 [ 31.792891][ T343] usb usb1: USB disconnect, device number 1 [ 31.810317][ T343] dummy_hcd dummy_hcd.0: stopped [ 31.815310][ T343] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 31.835545][ T345] syz.2.8: attempt to access beyond end of device [ 31.835545][ T345] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 31.849628][ T345] EXT4-fs (loop2): unable to read superblock [ 31.857637][ T31] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 31.868269][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.899323][ T349] rust_binder: Failure in copy_transaction_data: EFAULT [ 31.899353][ T349] rust_binder: 348:349 transaction to 348 failed: EFAULT [ 31.906868][ T349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 32.018099][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 32.036865][ T31] usb 4-1: config 192 has an invalid interface number: 74 but max is 0 [ 32.045633][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.058786][ T31] usb 4-1: config 192 has no interface number 0 [ 32.069140][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 32.075761][ T359] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 32.078729][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 32.090778][ T359] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 32.090801][ T359] CPU: 0 UID: 0 PID: 359 Comm: syz.0.15 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 32.090828][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.090839][ T359] RIP: 0010:dummy_udc_start+0xd1/0x1f0 [ 32.109131][ T45] usb 2-1: Product: syz [ 32.118589][ T359] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 94 00 00 00 e8 64 07 ce fd eb 0c e8 5d 07 ce fd eb 05 e8 56 07 ce fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 30 ca 26 fe 4d 8b 36 4c 89 f7 e8 [ 32.118613][ T359] RSP: 0018:ffffc9000b8ff818 EFLAGS: 00010246 [ 32.118634][ T359] RAX: 0000000000000000 RBX: ffff888113bc8010 RCX: 0000000000080000 [ 32.118649][ T359] RDX: ffffc90001aa2000 RSI: 00000000000006bf RDI: 00000000000006c0 [ 32.118663][ T359] RBP: ffffc9000b8ff840 R08: ffff88810d349300 R09: 0000000000000004 [ 32.118678][ T359] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 32.118691][ T359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 32.118704][ T359] FS: 00007f0421c506c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.129533][ T31] usb 4-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=8e.1f [ 32.134219][ T359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.138498][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.157978][ T359] CR2: 00007f0421150300 CR3: 0000000130bc2000 CR4: 00000000003526b0 [ 32.158004][ T359] Call Trace: [ 32.158011][ T359] [ 32.158019][ T359] ? __cfi_dummy_udc_start+0x10/0x10 [ 32.174242][ T45] usb 2-1: Manufacturer: syz [ 32.180053][ T359] gadget_bind_driver+0x3e1/0x9c0 [ 32.180091][ T359] ? __cfi_gadget_bind_driver+0x10/0x10 [ 32.180120][ T359] really_probe+0x2e1/0x8b0 [ 32.188383][ T31] usb 4-1: Product: syz [ 32.196071][ T359] __driver_probe_device+0x193/0x280 [ 32.214221][ T45] usb 2-1: SerialNumber: syz [ 32.221988][ T359] driver_probe_device+0x54/0x3f0 [ 32.222026][ T359] __driver_attach+0x422/0x5e0 [ 32.222052][ T359] bus_for_each_dev+0x249/0x2d0 [ 32.222074][ T359] ? __cfi___driver_attach+0x10/0x10 [ 32.222102][ T359] ? __cfi_bus_for_each_dev+0x10/0x10 [ 32.229358][ T31] usb 4-1: Manufacturer: syz [ 32.237177][ T359] ? __kasan_kmalloc+0x96/0xb0 [ 32.252991][ T31] usb 4-1: SerialNumber: syz [ 32.256651][ T359] ? _raw_spin_unlock+0x45/0x60 [ 32.256680][ T359] ? klist_add_tail+0x1dd/0x220 [ 32.256701][ T359] driver_attach+0x46/0x50 [ 32.343772][ T359] bus_add_driver+0x393/0x730 [ 32.348488][ T359] driver_register+0x2b7/0x3c0 [ 32.353285][ T359] usb_gadget_register_driver_owner+0xfc/0x270 [ 32.359472][ T359] raw_ioctl+0x144c/0x37a0 [ 32.363926][ T359] ? __cfi_raw_ioctl+0x10/0x10 [ 32.368726][ T359] ? selinux_file_ioctl+0x732/0x1480 [ 32.374041][ T359] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 32.379621][ T359] ? bpf_lsm_file_ioctl+0xd/0x20 [ 32.384590][ T359] ? security_file_ioctl+0x3e/0x110 [ 32.389826][ T359] ? __cfi_raw_ioctl+0x10/0x10 [ 32.394629][ T359] __se_sys_ioctl+0x132/0x1b0 [ 32.399351][ T359] __x64_sys_ioctl+0x7f/0xa0 [ 32.403976][ T359] x64_sys_call+0x1878/0x2ee0 [ 32.408679][ T359] do_syscall_64+0x57/0xf0 [ 32.413127][ T359] ? clear_bhb_loop+0x50/0xa0 [ 32.417846][ T359] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.423766][ T359] RIP: 0033:0x7f0420d9dcab [ 32.428200][ T359] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 32.447829][ T359] RSP: 002b:00007f0421c4df00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.456287][ T359] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f0420d9dcab [ 32.463992][ T45] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 32.464284][ T359] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 32.464303][ T359] RBP: 00007f0421c4efd0 R08: 0000000000000001 R09: 00000000ffffffff [ 32.464319][ T359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.498927][ T359] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 32.506924][ T359] [ 32.509966][ T359] Modules linked in: [ 32.514806][ T359] ---[ end trace 0000000000000000 ]--- [ 32.541372][ T359] RIP: 0010:dummy_udc_start+0xd1/0x1f0 [ 32.554735][ T359] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 94 00 00 00 e8 64 07 ce fd eb 0c e8 5d 07 ce fd eb 05 e8 56 07 ce fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 30 ca 26 fe 4d 8b 36 4c 89 f7 e8 [ 32.585726][ T359] RSP: 0018:ffffc9000b8ff818 EFLAGS: 00010246 [ 32.591889][ T359] RAX: 0000000000000000 RBX: ffff888113bc8010 RCX: 0000000000080000 [ 32.600210][ T359] RDX: ffffc90001aa2000 RSI: 00000000000006bf RDI: 00000000000006c0 [ 32.608241][ T359] RBP: ffffc9000b8ff840 R08: ffff88810d349300 R09: 0000000000000004 [ 32.616296][ T359] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 32.624526][ T359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 32.632625][ T359] FS: 00007f0421c506c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.642291][ T359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.649025][ T359] CR2: 00007fe39dbd6ff8 CR3: 0000000130bc2000 CR4: 00000000003526b0 [ 32.657035][ T359] Kernel panic - not syncing: Fatal exception [ 32.663234][ T359] Kernel Offset: disabled [ 32.667577][ T359] Rebooting in 86400 seconds..