last executing test programs: 4.43631778s ago: executing program 3 (id=112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x58000, 0x3, 0xffffff81, 0xfcff, 0x0, [{0x9, 0x0, 0x10, '\x00', 0xf}, {0x8, 0x7f, 0x1, '\x00', 0x1}, {0x0, 0xa0, 0xe, '\x00', 0x8}, {0xa7, 0x5, 0x2, '\x00', 0xe}, {0x6e, 0xf, 0xca, '\x00', 0xc5}, {0x9a, 0x9, 0x1d}, {0x6, 0x6, 0x4, '\x00', 0x8}, {0x0, 0x6, 0x40, '\x00', 0x1}, {0xf9, 0x4, 0x9}, {0x6, 0x8, 0x73, '\x00', 0x5}, {0xfa, 0x9, 0x80, '\x00', 0x4e}, {0x36, 0xf8, 0x9, '\x00', 0x78}, {0x40, 0x1c, 0xf0, '\x00', 0x5}, {0x1, 0x43, 0x2, '\x00', 0x9}, {0xd, 0xe, 0x3}, {0x4e, 0x2, 0x28, '\x00', 0xff}, {0xf, 0x0, 0xe5, '\x00', 0x7}, {0x40, 0x2, 0x4, '\x00', 0xc}, {0x8, 0x4, 0x8, '\x00', 0x4}, {0x6, 0x0, 0x6, '\x00', 0x47}, {0x9, 0x3, 0x8}, {0x2, 0x71, 0x5, '\x00', 0xff}, {0x3, 0x5, 0x9, '\x00', 0x5}, {0x5, 0x64, 0xf5, '\x00', 0x9}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x401, 0x0, 0x5, 0x20, 0x3, 0x100000000, 0x106c, 0xff, 0x8000000000000, 0x80000004000080, 0x0, 0x1, 0x0, 0x4, 0x0, 0x8000], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.260934459s ago: executing program 3 (id=113): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000006e80)={0x0, 0x0, &(0x7f0000006e40)={&(0x7f0000006d80)={0x10, 0x464, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x24080}, 0x20000080) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, 0xffffffff, 0x66e) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x725e65a6, 0x0) (async) splice(r3, 0x0, r4, 0x0, 0x725e65a6, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRESOCT=r4], 0xfffffd88) (async) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRESOCT=r4], 0xfffffd88) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2000) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) read$snapshot(r5, &(0x7f0000000380)=""/140, 0x8c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_usb_connect(0x2, 0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000038b51140866b11c2ca2501020301090232000104000002090479030208066249090506004000fd20080725018001060009050e10"], 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.954723244s ago: executing program 3 (id=114): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="48b8a5f8c0551b1936450f23d80f21f835400000600f23f848b800000000000000800f23c00f21f83503000e000f23f866baf80cb0f52881ef66bafc0cedf3470f09660feea806000000460f01c00f01dfc42261bf000f01c2b9e20a0000b800200000ba000000000f30", 0x6a}], 0x1, 0x79, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af24, &(0x7f0000000100)={0x1}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000080)={{r2}, 0x0, 0x0, 0x0, 0x7, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 3.790121493s ago: executing program 2 (id=118): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0xb883, 0xb2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30d50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc20d81a8ca55ba139c01802c4dae4162e43acff03ad02", [0x7fffffffffffffff, 0x7]}}) write$tun(r2, &(0x7f00000004c0)=ANY=[], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 3.721553996s ago: executing program 2 (id=119): syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6049, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x50, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x76, {0x9, 0x21, 0x40, 0x12, 0x1, {0x22, 0xf12}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x5, 0xd4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x9, 0x8}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x30, 0x7, 0x80, 0x40, 0x1}, 0x26, &(0x7f00000002c0)={0x5, 0xf, 0x26, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "16d71731861d197fadad4b651c1a9437"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x49, 0x2}]}, 0x6, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x439}}, {0xd7, &(0x7f0000000440)=@string={0xd7, 0x3, "2968659d8e3589155bd2dde457fb776998292696ea903886416162e7b89f279e8c714d5d0f3647a5f772155eaa5fe3beee865af9c54867e1430f2d387801caa4c44e48eec3b83ca8d8d2fe930abff10823b2ef0efb848d746c936d0a991ec5b69e10c47de2193d62b2f8edba639ddb2e6011d5cf5c4f40db14a64c44eaa15a0a4bab1314fbc3d30abcef2e5d2fcaf665c437c357263a50e8e34a252d78c8f5b0e9ace1b2dbdb4e23d0c48236c06539225fb6e27b4961f3e72af99f87d9d2bbc6ef8507ae288297e6019fb53449ed1ecd67a5ace468"}}, {0x4b, &(0x7f0000000540)=@string={0x4b, 0x3, "5e5dbaf0b242fd33f82ce27c024b228a24462eb837f81dd534b0a7672f823f715c36a9b7e18efcbae8ea8b571d9eb34206f96d864339b39de0000a957fc0c0db7c019301e7a3bb5995"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x860}}]}) (async) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r1 = socket(0x10, 0x803, 0x0) splice(r1, 0x0, r0, &(0x7f0000000040)=0x4, 0x100000001, 0x2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x400c008}, 0x8090) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_virt_wifi\x00', 0x0}) (rerun: 32) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f775f6f746865722c001d3d3d4e9cdf3c7943a9c559f06ebf1baed22787aead92a88a5d5ea3269108811497c214474a9b094b569d62ee0fdd206d5d20f2f6086c71e613bd420c423324a1249eaea1dda45e08db684a7b41b4820e5098e9a2f72c079fe255d364c7ee3bb3782d531cefff9f3b37602ed26aadb2df48da9116a338bb692b30376041a6dda12a284e1ffc18cdc3c101968a44e530e79bcec494cc8cd8e19861f1aeaaec323643b1f166524a643839d22c9514ec5c708b136f591972"]) (async) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) (async, rerun: 64) lstat(&(0x7f0000000000)='./file0\x00', 0x0) (rerun: 64) 3.608926981s ago: executing program 2 (id=120): pipe2$9p(&(0x7f0000000400), 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc000000190001000000000010000000fe8000000000000000000000000000bbfe8000000000000000000000000000246e22000bffff00200a0080a037000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056ff00000000000009000000000000008000000000000000000000000000000000000000b66b6e00020000000000000004000500"], 0xbc}, 0x1, 0x0, 0x0, 0x810}, 0x80c4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='syz1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440100000102010100000000000000000100000a0c000280060003400000000008000440000000070a000b00512e393331000000340001801400018008000100640101000800020064010100060003400004000006000340000100000c000280050001002f000000080008400000000388000a80640002800c00028005000100880000000c00028005000100fe80000000000000000000000000003c14000400fe80000000000000000000000000002706000340000300001400018008000100ac1414bb08000200ac1e010108000140000000001800028014000180080001000000000008000200000000000600074000000000440003802c00018014000300fe8000000000000000000000000000bb14000400fe80000000000000000000000000003306000340000200000c0002800500"], 0x144}, 0x1, 0x0, 0x0, 0x40080c4}, 0x40090) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaab66, 0x11, 0x0, 0x61) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) (async, rerun: 64) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) close_range(r6, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001000000127bd7000fddbdf250a01010200000000000000000009555a6c14142a0000000000000000000000004e2400094e2400080200002016000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="ac1414aa000000000000000000000000000004d46c0000000a0101010000000000000000000000000d000000000000000200000000000000ff000000000000000301000000000000000001000000000003000000000000000500000000000000ff03000000000000faffffffffffffff0300000000000000010000000000000004000000000000000600000005000000060000002bbd700000000000020001054100000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$vga_arbiter(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="64653eb832d4910f34b86e6500"], 0xd) (async) socket$netlink(0x10, 0x3, 0x0) 3.504762376s ago: executing program 2 (id=123): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETCARRIER(r3, 0x400454e2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='reno', 0x4) recvfrom(r4, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000380)="dcb1ff1fdb909b826a513d90e44b7c48e37a0a7de5985ef7f4bc8b10fed694620f4232bd5574f4e5590f1abd397b979a7d6a33b8683df0ca3cf057068616f7235c225e7a28c42a34afb098b66ef2f99390d00bc93881ac764d825766cccecac3abda3de897acd044e43373c0d6617ff5c3e526a137edf72eb0e82227df62", 0x7e, r2}, 0x68) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 3.340908694s ago: executing program 2 (id=124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffc000) (async) brk(0x200000ffc000) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000140), &(0x7f00000001c0)={[0xc]}, 0x8) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_usb_connect$midi(0x0, 0xca, &(0x7f0000000400)=ANY=[@ANYBLOB="120110010000004030144b474000010203010902b80001010600080904000007010300010905071a400003090414250110b41c10ebbbe4e1460bde1e498aba8ae809050e0020000360091d25010ca980056ead29da65343c5d5f0905090300040406ce1325010f57d49c000e088542c6ace0b544c03c09050603103f0206060d2501098ab7b20ca96ea708b609050d0820000708081225010e253e15b96c94ee0ac854c2b9125b090506104000040eff052501019609050c1020009500100c2501082b1152cc0eb301d4"], &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x1, 0x0, 0x9, 0x10, 0xf7}, 0x1c, &(0x7f00000001c0)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "3be7d1cd0b30f5497df2dbc0d4687678"}, @ptm_cap={0x3}]}, 0x4, [{0x1b, &(0x7f0000000240)=@string={0x1b, 0x3, "5bbdfbf7f178534f02ff9e3bb696b5a1f3547b3b4f2bab0232"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x92, &(0x7f0000000580)=ANY=[@ANYBLOB="9203e7443e206bd6db3dbabaa90ac4d325015d273fb7dc83fc5b18b8b66a67c60e00000000000000b8a1a760018a516e9883d15d35ddc4ea158e13bcc39e5d39b8ab21deda7e2ebbcaa764103dd1c4bada8def457528322e3f5d8c589a5da2586d9042f02440aa42003024647d36cebbc6e2c998639f52958ef1ae1b697cf8455b4fa6f1f9063b236bf922ad76cbab22d1e0"]}, {0x29, &(0x7f0000000500)=@string={0x29, 0x3, "c1b147a6d9952e7e94ff9362e240a540528d75c4ce5ee2f58e7141e795132fecffe102c298c4f8"}}]}) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) (async) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) open$dir(&(0x7f00000006c0)='./file0\x00', 0x4000, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580100001000130426bd700040000000ac1414bb000000000000000000000000ac1e01010000000000000000000000004e2000074e1f00000a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000040"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) (async) r4 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000280)=ANY=[]) (async) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000280)=ANY=[]) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, &(0x7f0000000bc0)={0x20, 0x23, 0x2, {0x2, 0xa}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, &(0x7f0000000bc0)={0x20, 0x23, 0x2, {0x2, 0xa}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000700)={{&(0x7f0000629000/0x1000)=nil, 0x1000}}) (async) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000700)={{&(0x7f0000629000/0x1000)=nil, 0x1000}}) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f4, 0x0, 0x4}]}) (async) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f4, 0x0, 0x4}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 3.051436859s ago: executing program 3 (id=125): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2642, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept(r0, &(0x7f00000000c0)=@ethernet, &(0x7f0000000040)=0x80) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r2], 0x0) 1.921328605s ago: executing program 0 (id=132): unshare(0x64000400) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = dup(0xffffffffffffffff) unshare(0x24020400) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) (async) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, 0x0) (async) inotify_init1(0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x6, 0x1, 0x0, 0x5, 0x81, 0xfff9}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) (async) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x6}}) (async) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0xe1742, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0x4, 0x9, 0xe, 0x2}, 0x2b, [0x6, 0x8, 0x1, 0x2, 0x10001, 0x5, 0x3ff, 0x6, 0xe, 0xa93, 0x5, 0x7, 0x1ff, 0x5ce1, 0x3, 0x100, 0x267, 0x212, 0x8, 0x3, 0x4, 0x3ff, 0x1, 0x1000, 0x3ff, 0x8, 0x4, 0x0, 0x6, 0x200, 0x10000, 0x2e, 0x9, 0x800, 0x2000000, 0x0, 0x0, 0x3, 0x2, 0x6, 0xfffffffe, 0x1, 0x80000001, 0x5, 0x5, 0x1, 0x400, 0x1, 0xfbf2, 0x0, 0x5, 0x2, 0x77, 0x9, 0x100, 0x16a, 0x2, 0x8, 0xb6a, 0x0, 0x1ff, 0xe, 0x80, 0x2542], [0x1, 0x8, 0x157, 0x7, 0xe3, 0x160000, 0x4, 0x9, 0x4, 0x3, 0x1, 0x5, 0xa00000, 0x4, 0xffff0000, 0x10001, 0x63b, 0x10, 0x8, 0x9, 0x400, 0x7, 0x0, 0x4, 0x8, 0x7, 0x3, 0x5, 0x80000000, 0x1, 0x6, 0xffffffa7, 0xe0000000, 0x7c, 0x7, 0xfffffffe, 0x8079, 0x6, 0x9, 0x8, 0x1000, 0x4, 0x6, 0x1, 0xa, 0x1, 0x5, 0x3, 0xd4b, 0xdfa, 0xa, 0x5, 0x9, 0x5, 0x1, 0x9e, 0x4, 0x4, 0x0, 0x8, 0x80000001, 0xffffffff, 0x84a, 0x5], [0x407, 0x7, 0x0, 0x5, 0x5, 0x1df, 0x8, 0x6, 0x45c00000, 0xfffffff9, 0x0, 0x4, 0x8, 0x62, 0x0, 0x1, 0x3, 0xf87, 0x3, 0x0, 0x400, 0x10, 0x7, 0x4, 0x61c8, 0x5, 0x1c0, 0x9, 0x3, 0x4, 0xf, 0x80, 0x2, 0x1, 0xb4a2, 0x92bc, 0x5, 0x4, 0x3, 0x1, 0xe, 0x9, 0x9, 0x590, 0x9d5c, 0x81, 0x0, 0x1, 0x9, 0x9, 0x0, 0x6, 0x2, 0x7ff, 0x81, 0x7, 0x7, 0x9, 0x8001, 0x18, 0x1, 0x93e, 0x401, 0x810], [0x100, 0x3, 0xfffffffa, 0x0, 0x6, 0x8, 0x3ff, 0x4, 0x9, 0x5, 0x7, 0x1, 0x0, 0x8, 0x4, 0x6, 0x400, 0x4, 0x2, 0x1000, 0xbfc, 0x2, 0x8, 0x7fffffff, 0x800, 0x8000, 0x12, 0xffff9268, 0x1ba, 0x5, 0x3, 0xffff, 0x400, 0x400, 0x1af4, 0x7bb1, 0xb3d, 0xfffffffd, 0x7fff, 0x0, 0x80000000, 0xce, 0x198, 0x1, 0xffffff9a, 0x4, 0xf14, 0x9, 0x7ff, 0x7, 0x886, 0x1, 0x7, 0x7, 0x1000, 0x0, 0x2, 0x5, 0x20000000, 0xa3f5, 0x36, 0x7fff, 0xd3cf, 0x5]}, 0x45c) (async) write(r10, &(0x7f0000000000)="88de80841d87", 0x6) (async) close_range(r8, 0xffffffffffffffff, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0xf78, 0x2, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xe, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x789, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0x9, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x62b, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfffffff8, 0x9, 0x402, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3000000, 0x9, 0x0, 0x9, 0x6, 0xb, 0xff, 0x1, 0x9, 0x4fbd, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0xfd, 0x10000, 0x7, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0x4, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9600, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.856965747s ago: executing program 3 (id=133): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x80000000, 0x10301) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000200)={0xaa5f, 0x2, 0x1, 0x1}) r2 = socket(0x11, 0x3, 0x4000000) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x40000000200, 0x101301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x10, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590029}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0xcd8) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a"], 0x0) close(r7) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) bind$packet(r2, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000140)=0x1e) sendmsg$netlink(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000054}, 0x0) 1.856841038s ago: executing program 0 (id=134): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f0000000080), 0x0, 0xfe, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2010400, &(0x7f00000001c0)={[{@name={'name', 0x3d, '\x00\x00\x00\x00\x00'}}]}) 1.853977788s ago: executing program 0 (id=135): r0 = userfaultfd(0x801) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x2, @mcast2}, 0x1c) r2 = socket(0x1a, 0x4, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001900010000000000fbdbdf251d010900500012804900f880e02b4221d3c744305f542a963097bf883548fe5ae164e5e6f4e0fb772aa1dc9e0330c9c8d1a98a1e02167abc021907e655c6053ebde9f7c472a700000008000e007f00000100"/108], 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000bc1000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x2ec37000) r3 = socket$inet(0x2, 0x4, 0x1) bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) write(r3, &(0x7f0000000080)="08008edf773c8000", 0xfd) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_read(r4, 0x2, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ix:\x88\xfe\xf7\x01') ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.725102654s ago: executing program 1 (id=137): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) (async) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000001c0)=0x7) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x5f8f4c58, 0x1, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x20, 0x2}}, 0x50) (rerun: 32) shutdown(r0, 0x0) syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0x30, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x26, 0x3}, [@processing_unit={0x11, 0x24, 0x8, 0x3, 0x1, [0x0, 0x0, 0x3, 0x2, 0x1, 0x0]}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x302, 0x1, 0x3, 0xd, 0x7, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x8, 0xd7, 0x3, 0x3, 0x0, 0x75cd, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x33, 0xfe, 0x5}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xd3, &(0x7f00000000c0)=@string={0xd3, 0x3, "20bfe43509b09be426727e8f039aaf14093dba3dff3951ea8674c098f07d46f23529800a27df74fd00af36bc02145c76a2bec1a5956f8df6b0ab4e1b497a0f7367d3b456f3c78bf73f155a80e7b836c6279a88f5d2058c77ea67c2a56ec8f23aa3fdf77b77fa29e0378a9bf9a39eaf50a6d5e69fbedc76874ddee42800b94d89d54ce01824e9b9803ecd584b39dbf8697a4b7cf4c67817112020f71cb041c2ebc9c9293e20dc45dcabb2345e3c7d8794f543578ecc3cdd819449970cb21136da04b364f7f6792ce7cae0e72a9ca2ba1bba"}}, {0x45, &(0x7f0000000300)=@string={0x45, 0x3, "b1823ae370c773fc8b6707999fadf27e62813c0d45fe3eef29f14766f68a0ca3de0318175d3fb50fef4e1331950a926c979f749c65588da411709f69b84f34ffc55873"}}, {0x9c, &(0x7f0000000480)=ANY=[@ANYBLOB="9c039d3bfe0084b16fbcbf4c73895a18ce821f32c9cb437e50a1ef26daaa372b51bf61a5504596c115f5d46eda4878ccd00a08af209a29e49930d8f5385edf2de7094ae2d2f746d7594184279807d2ba47f639d8ccf4d7717f5eed18bc46595b5ae63b94c7e46c5846571c143aeb27f79fa23a70a192425de334c7fbf29f9e1754e072526a2ec4116327fb3032d81e1f6f36b12768551189387609be"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1401}}]}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000540)={0xdf, 0x0, 0x6000}) 1.256993047s ago: executing program 0 (id=138): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b40)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x800c2, &(0x7f0000000080)={@_ha_fsid={[0x5, 0xebc]}, {0x46, 0xb, 0x6, 0x19c4}}, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x8}, 0xc, &(0x7f0000000dc0)=[{0x3, 0x7fff, &(0x7f0000000140)='$\x00', &(0x7f0000000180)="e2e5131823f1ba94a4d043d073e2af6abd1ccfae25cf520038bca9fda21c24b98592f1b7f3de35dc5f9476ad4f8161039897ab390c59d36fa1310f48db0b1f13bb993b8c410a27a34b3d64a9dbb17347eabc05eeccc562de3087763f3ec032e8b89b88a8842429247fe312eed1c51da77aa36de7b77e8068d398449e44b5d39938eb8ad5493bb6f06375e718", 0x8c, 0x20}, {0x3, 0x0, &(0x7f0000000240)='\x00', &(0x7f0000000280)="0a0e7c8757b055ce285f9461f2f6278a675020eaaeb6ab20964faa0d6a9a66e2db8c59df62aed6c6ab6d3969c220d06c69f3a50ab0f69173ee7feb950c18aa9177f9e85f7cb2d31308e3908c35e31ec00a5ec39f8b5bd2525ef1c94f79", 0x5d, 0x4}, {0x2, 0xfffffff0, &(0x7f0000000300)=')\xce,+\x00', &(0x7f0000000340)="59c1de541398f85df8b02d98ae0652d581ad6f9549c765eec43a539cb330cdc78ffdb11f19339b92f64adee30487526979f0ce7d3443c4778d6844d30df3355e89999fb9cf0c16d4732d1b58da7511c4132c63e3298869ea63c1c6711c581385e4adf53f2a745c861d7d508f399f2376198288611c622cb01ce526ec005084624193951b4448cafa82b7da28ae46d0f9b1f8ab2543299570446bafb3274f7f4a2172", 0xa2, 0x2}, {0x0, 0x5f9d, &(0x7f0000000400)='-\x00', &(0x7f0000000440)="79c815307b20c1baa989e3a26092f32134633897dcc3529e8945cdc3f4ab95da3ae3f18c0253ee11b1ced76f82ceaf66678e1153e456cb9fc8cca313bc82667789b80583baebc9ca6c79d802ab95206350263b574faec069679d629a849e72c625f330354a5bbb9a7b57e002b762fa1b3bd529b8691f99c7", 0x78, 0x22}, {0x3, 0x8, &(0x7f00000004c0)='\r\xde\x00', &(0x7f0000000500)="56bc887d32e6277466d802d8182de9ccb1f6d4e17c48203f205ae7caa895e7e7458ceb6481b5598d1e819f817b2f962c3e229ca9a337d8bf316450aa2c35d5897d512133158f5d61e8619fee84912b9ab147adecaeb99a69eb93c615214467c8ecfd23a7e8a29d544c3ba1687553d76da85ecd0fbc2fdb68dc3dfd48c5ac6f4e7f54437dae2e94106b4b43c143205dad05cd2473497abe3ace45e3832add5562d2b986252eee45b5129c7cee4b39a62b22ab05c2934911e4c321c8a38b5733be118488f83d080ee23cbb476ffa4038624ffddf4c58b17aaab57f6619691cc5f93ef66b5d8ab5580d0525a2ce75fd1a27341e0a08", 0xf4, 0x20}, {0x1, 0xfffffff1, &(0x7f0000000600)=':^{$\'/\'$Y{\'&,.+^\x00', &(0x7f0000000640)="2309f2ebf41f64aa73656021319f1c923e588509b6cf75424c5e380789bd79bac2d7b0b298be8e7ddbd017d7117b60da08ebda9b05f15c081771802d0520ede386dbc5df8ed660cec5c0f9c0d9150155dd8e82ab063f046ac49d0e7831e56e391a9214baf41909d349f7bae48ee66dedf6", 0x71, 0x38}, {0x2, 0x4, &(0x7f00000006c0)='(%\x00', &(0x7f0000000700)="faf39ce8654501bca2b4e41aeb5e3c721ad3980ac299c97d3013f18ae233ec5e9b4282b9077bce94d0ad79390cf01ce71e5809f99914c6e6cb47da8c6e8d2097a53981b02076385fb8ac55174e7d81693ea5273b02ea28774fe3eff2f3a14f8a8543603a104814323964b22034eb7c579d943dab4f59941f5d17adb14b6432dd6b2d4c8b2dd3f9f2183cc0cc175352ac32a91dbf9d17aa2631cbca901e2efd2351bc9aefde9c64708551bc4d5ff7509bbbc2d2946f83ed37e9f37cf23686923e6f830756f475ba14826a6e643198984666a587bab78190bd56", 0xd9, 0x38}, {0x2, 0xfffffffc, &(0x7f0000000800)='[-.](^#*{**\x00', &(0x7f0000000840)="a8be5e94db2b1f46cf4b54863b04a06dbba37ec5ad975ddda04e57d3a72852a62f849a4655334040e892d00a6dd57f72e3b86ddd0c0853354ae340a4931f5d60bd258614227c3a4d78752e3048a46d4b050aeb5cc957d6415328a4c23cd58df8817c4063b3a86981c83d671fc3482a", 0x6f, 0x1}, {0x3, 0xd, &(0x7f00000008c0), &(0x7f0000000900)="9e807704f391864ca5bab6830b3830104888b9f5c66b438b8d8ee26a2c6f477863cb021cf597aa7a726a36bf03617875f34a14d96587e8cb8f96d0b42b85be2b907087f6d209b5c3003c5b4f4c90a789bbaf64740ca520980db6efded2d9ec8ea7bb99901d551ebd66d76dcd523a007a24d0442a5b1738372bb53dc4c97ca67ae768d4d9fe45adf3aac42eeea8c351734ed044281918420f6ac9ea0e5bb138e193f9e70df632380116c2903bb90b51b43975dc59af44b1c9f17998596dd7555642520a0fd7fec85a90f15cd07b90bd91d6bb45b87d8b67b9137b90cce6488da56444256b1201a1decf2df2", 0xeb, 0x12}, {0x1, 0xb, &(0x7f00000008c0)='\x00', &(0x7f0000000c00)="4e986a21909dec2f", 0x8, 0xa}, {0x1, 0x400, &(0x7f0000000c40)=')\xce,+\x00', &(0x7f0000000c80)="ae04a3c64406f2a147b5e3e3e87de6d4a27ec9a81bad289dd446e22e3a7fa1082b97685714d4f95e626df805078a9a94ab", 0x31, 0x8}, {0x3, 0x5, &(0x7f0000000cc0)='-\x00', &(0x7f0000000d00)="68c34e832a6f04603168f99130893d60918156fdbe81cb6819345f0e789a4ee883e9c1bc0f0fbdee89c70e25ba336b0a4ff63044606f50932203022fd1ecaf8ef2b4ed37716514b7eb17e68b20bc305ca30f60058fd92598bcf5021503d211a2beb3e94c70650e3b3cc122c6b969d4490721d321f9b121dc6c3d0857e21d1a86ca0dc34c7b17ff32eaf8a5da56abf585d216b83cea1c5acf7627d62164", 0x9d, 0xa}]}) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000bc0)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x16c0, 0x5e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xf0, 0xc9, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0xfffc, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x48}}}}}]}}]}}, 0x0) 604.74218ms ago: executing program 3 (id=139): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000300)=[@wrmsr={0x65, 0x20, {0x40000091, 0x3}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x1, 0x5, 0x31237648, 0x80000006, 0x82, 0x4}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x2c, 0x3) r4 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000007580)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1}, 0x7fffffff}], 0x1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x8, 0x80d, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80a, 0x4, 0xa7, 0x7, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x328, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x7ffe, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x20008, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xc, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 362.656712ms ago: executing program 1 (id=140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x28) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x7, 0x8dc, 0xffffffbf, {}, {r1, r2/1000+10000}, {0x2, 0x1, 0x1}, 0x1, @can={{0x3ff, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "2064e7609a783858"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0x14, 0x0, 0x2, 0x303, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000020000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x44800) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000020301"], 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000000040)=""/98, 0x62}], 0xa, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x0, 0x3938700}) 280.206436ms ago: executing program 1 (id=141): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_pidfd_open(0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 279.875946ms ago: executing program 2 (id=142): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000003140)={'sit0\x00', 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x61) copy_file_range(r1, 0x0, r1, 0x0, 0x1000000001ff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xd, r2, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f00000023c0)={{0x12, 0x1, 0x110, 0x68, 0x7a, 0x3d, 0x40, 0x19d2, 0x1255, 0x91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x8, 0x38, 0x6, "", [{{0x9, 0x4, 0x9, 0x3, 0x0, 0x2, 0x6, 0x0, 0x9}}]}}]}}, 0x0) 265.944476ms ago: executing program 1 (id=143): r0 = socket(0x6, 0x0, 0x3e) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xd85d82, 0x0) 212.942829ms ago: executing program 1 (id=144): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r1}, @fd, @fda={0x66646185, 0xa, 0x1, 0xd}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mount$incfs(0x0, 0x0, &(0x7f0000000000), 0x2020, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x80000002}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) renameat(r1, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000400)='./bus/file0\x00') sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x448}, 0x1, 0x0, 0x0, 0x80}, 0x880) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x14b20000}, 0x1c) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x0, 0x3, 0x77, 0x0, 0x9}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000a80)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) chdir(&(0x7f0000000140)='./bus\x00') r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001700)={'bridge0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xd965, 0x800, &(0x7f0000000180)={0xc9, 0x3, r6, 0x1, 0x0, 0x6, @local}, 0x14) recvmmsg(r5, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/160, 0xa0}], 0x1}, 0x1}], 0x1, 0x2, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 45.427817ms ago: executing program 0 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x10000000) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {0xffe}, 0x6}) 44.988937ms ago: executing program 0 (id=146): r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x145) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0x0, 0x0, 0xee01) utimes(&(0x7f0000000200)='./file0\x00', 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000040)={0x20, 0x34, 0xf, {0xf, 0x7, "c5984a926bc1433e2ed91f1d86"}}, &(0x7f0000000140)={0x0, 0x3, 0xf3, @string={0xf3, 0x3, "7bbc05a293951190558746304432ff5b195ce85e635b4b917859b61bf6fe0e2d82d2086f10acdea5a3bda37f7d39e933852367994b6e48f8344cfd9c589199ab1eea504469cbd204216e258fbd345289580ab8860cfac3c123099f845b13b76aafb271c860ecf818f9766a3a5f6449dd5852cd5995fc1a25cd5dd18a50dc553036c58662bb480f1184b3d7e847330b6f1e0a6f8f52b507b1243815562cad3c858d704bf4ae81010c8001babdb6ec5e5e54f4bb6bebe13cc04bb1774c8a85e3ea0379cca08493614541b2a867f1958a77d7afc9e53105e5aec7f9b8d577b265e6b7a584f38c929edb8d4ec9d23f94e28229"}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x40, 0x17, 0xa9, "30aa97c7a29bbb15c60e9583bf22411f9a170865fc80ccccf0598353b471483063c9a79e6ce69365b691b6322ace3b5a1395e7c5c388e0aad6a12a717941c714a04130eec77f81bdb130f931143ce0d8a86c37eaa3fe4836dbc0c2b929acd4d61580688d24f772500e818b2d52a6aa3e2b242f13254f2e21a6595fc1ecb8c23683e2c31df04e5eab34bbf31c30cfde7117dc7f0ce0b59de9cf480fc7d8da6288fbfb1d91b43cbb69c4"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0xc0, 0x5, 0x4, "9d642267"}, &(0x7f0000000500)={0x40, 0x5, 0x3, "6631fa"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x401, 0xa08, 0xfffffffc, 0xb, 0x441, 0x5, 0x7fff, 0xfa97, 0x200, 0xd, 0x1fe, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect$midi(0x4, 0xd5, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x1, 0x1, 0x81, 0xa0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x6, [@midi_out_jack={0xd, 0x24, 0x3, 0x5, 0xc, 0x3, [{0x81, 0x3}, {0x5, 0x1}, {0x0, 0xc}], 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xbb, 0x1}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_out_jack={0x1b, 0x24, 0x3, 0x1, 0xf8, 0xa, [{0x0, 0x1}, {0xc4, 0x2}, {0x2, 0x2}, {0x5, 0x10}, {0x1, 0xfe}, {0x6f, 0x4}, {0x7, 0xeb}, {0x97, 0x3}, {0x4, 0x1}, {0x6, 0x7}], 0x17}, @ms_header={0x7, 0x24, 0x1, 0x8694, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0xf, 0x2, [{0x0, 0x9}, {0x4, 0x6}], 0x50}], [{{0x9, 0x5, 0xb, 0x8, 0x40, 0x42, 0x7, 0xd7, {0x5, 0x25, 0x1, 0x1, "b7"}}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x6, 0x9, 0x2, {0x6, 0x25, 0x1, 0x2, "5a04"}}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0x9, 0x7, {0x11, 0x25, 0x1, 0xd, "63e0d2aef1ba9044087d93ee9a"}}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x8, 0xab, 0x5, {0xf, 0x25, 0x1, 0xb, "24357be22ace8a114400b6"}}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x5, 0x7, 0x3, {0xb, 0x25, 0x1, 0x7, "1e722b33df6063"}}}]}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x201, 0xb, 0x6, 0xb, 0x40, 0x40}, 0xc, &(0x7f00000006c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x8, 0x3}]}, 0x9, [{0x29, &(0x7f0000000700)=@string={0x29, 0x3, "2da228eaf89cd9800317e0bcfbe01cd72e2daa896fd67ed16701f8ad53a618c6b3f8b66ea2e26c"}}, {0x85, &(0x7f0000000740)=@string={0x85, 0x3, "2169bbe23dcfcfae6287b32018b696f90fad071ac115733f1c1c5fa6cabb2dc5bbc3c1357de86b41b76c946046051a30b49f474ab599a17fedc3e4ea8206f48e69fc952a7ec236a7d669ea903f251d73f5e45b312c0d91aea361f2468d78ba954ebf009d5312cccfb32148f3cbdbf85dfd898f3afe207442d608de2855df1117ced247"}}, {0x20, &(0x7f0000000800)=@string={0x20, 0x3, "0de4fbc516933cd01aecd8b3dd856b25ab3be2626389fe578c26d2de54a1"}}, {0x79, &(0x7f0000000840)=@string={0x79, 0x3, "ac71f0493940d5399c567f50c1b6b5b9e5b9bf6c65c77329ddd7e6327a604f421b68ccf6a04032cfe33764a596de7429ac1b93d76c87e7710e7d3737ed67d984877600daf4671bae64798d5572340023c659b97cd299c01bc9b1f4420fdd8bd1aa3aa16cfaebf5a861a4c9110b34fb2fe23841635e5666"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x455}}, {0x81, &(0x7f0000000940)=@string={0x81, 0x3, "7de67e2c7136835db6f141b73e8461d1846fe6f9108d1b3caee862a56da531e16e062720e6cb6e32396e13f6eeaabd9332bf8dec35360ab5334e08a7e6a491117435c8ec019e76205c044fa12b988c84e008e2a142dd8e71dc35a5b7da8d1a0f6f55204c6636000d656947de699cb32d59feb34ee19732a6d7f344bb3f9213"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_control_io$uac3(r2, &(0x7f0000000bc0)={0x14, &(0x7f0000000b40)={0x40, 0x1, 0x24, {0x24, 0x23, "c2871af182cd43c9a70d25e86b7a87229f6db5469cac5703b86e9033dcb9ff884066"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000c00)={0x40, 0xc, 0x8a, "03839ddd6d2009c08668ecb34b331e46591738eee731c47465d18a027cb25ca738407a976636b82afb31a91817b04bede0831613873f017f99b90804ecc4f2e21728ea3ae25f494865b0084060183510eb62c932c38d11d74113f21d8a4411e64029a08f6fe303239b3de19cf5c7170661538c426c9407f64b7df54f6a684eb060bfd62ff989217f86e2"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x3b}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000d40)={0x20, 0x81, 0x1, "8a"}, &(0x7f0000000d80)={0x20, 0x82, 0x3, "9ed852"}, &(0x7f0000000dc0)={0x20, 0x83, 0x1, '6'}, &(0x7f0000000e00)={0x20, 0x84, 0x3, "6fa8c1"}, &(0x7f0000000e40)={0x20, 0x85, 0x3, "0f800d"}}) 0s ago: executing program 1 (id=147): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) (async) r4 = dup3(r3, r2, 0x0) renameat2(r0, &(0x7f0000000280)='\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) syz_usb_connect$uac2(0x3, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000201e040030400001020301090292000301104002080b000201ff2004090400000001012000092401020009220000102402060502060403070000000503b50924070502000403000904010000010220000904010101010220001024010a04000200000004010400000609050109ff0302f5fd082501000c08010109040200000900200009040201010102200009058209400005077f082501800f010900"], 0x0) (async) syz_usb_connect$uac2(0x3, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000201e040030400001020301090292000301104002080b000201ff2004090400000001012000092401020009220000102402060502060403070000000503b50924070502000403000904010000010220000904010101010220001024010a04000200000004010400000609050109ff0302f5fd082501000c08010109040200000900200009040201010102200009058209400005077f082501800f010900"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x1e, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x130, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1068, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2000000000033}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x400000001, 0x8}, @flat=@binder={0x73622a85, 0x1000, 0x2}}, &(0x7f0000000240)={0x0, 0xfffffe78, 0x50}}, 0x1000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000b00)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000b80)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. [ 23.745256][ T36] audit: type=1400 audit(1774162035.910:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.746389][ T282] cgroup: Unknown subsys name 'net' [ 23.768013][ T36] audit: type=1400 audit(1774162035.910:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.795402][ T36] audit: type=1400 audit(1774162035.930:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.795566][ T282] cgroup: Unknown subsys name 'devices' [ 23.976150][ T282] cgroup: Unknown subsys name 'hugetlb' [ 23.981762][ T282] cgroup: Unknown subsys name 'rlimit' [ 24.115525][ T36] audit: type=1400 audit(1774162036.280:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.138718][ T36] audit: type=1400 audit(1774162036.280:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.146594][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.163724][ T36] audit: type=1400 audit(1774162036.280:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.195342][ T36] audit: type=1400 audit(1774162036.340:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.220870][ T36] audit: type=1400 audit(1774162036.340:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.247427][ T36] audit: type=1400 audit(1774162036.410:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.273091][ T36] audit: type=1400 audit(1774162036.410:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.273387][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.102442][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.109688][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.116861][ T292] bridge_slave_0: entered allmulticast mode [ 25.123080][ T292] bridge_slave_0: entered promiscuous mode [ 25.141280][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.148480][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.155626][ T289] bridge_slave_0: entered allmulticast mode [ 25.161801][ T289] bridge_slave_0: entered promiscuous mode [ 25.168061][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.175144][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.182314][ T292] bridge_slave_1: entered allmulticast mode [ 25.188711][ T292] bridge_slave_1: entered promiscuous mode [ 25.211283][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.218409][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.225657][ T289] bridge_slave_1: entered allmulticast mode [ 25.231860][ T289] bridge_slave_1: entered promiscuous mode [ 25.264451][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.271526][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.278666][ T290] bridge_slave_0: entered allmulticast mode [ 25.284890][ T290] bridge_slave_0: entered promiscuous mode [ 25.291274][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.298342][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.305440][ T290] bridge_slave_1: entered allmulticast mode [ 25.311760][ T290] bridge_slave_1: entered promiscuous mode [ 25.365356][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.372425][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.379585][ T291] bridge_slave_0: entered allmulticast mode [ 25.385902][ T291] bridge_slave_0: entered promiscuous mode [ 25.392474][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.399585][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.406687][ T291] bridge_slave_1: entered allmulticast mode [ 25.413144][ T291] bridge_slave_1: entered promiscuous mode [ 25.525809][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.532871][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.540197][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.547266][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.566310][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.573386][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.580676][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.587713][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.596675][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.603818][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.611133][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.618180][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.645596][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.652662][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.659961][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.667001][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.698925][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.706588][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.713936][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.721360][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.729173][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.736388][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.743588][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.751045][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.761262][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.768322][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.787856][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.794929][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.802746][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.809810][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.818154][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.825637][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.859403][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.866493][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.874051][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.881081][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.889619][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.896665][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.910919][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.917998][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.938789][ T292] veth0_vlan: entered promiscuous mode [ 25.965654][ T292] veth1_macvtap: entered promiscuous mode [ 25.979398][ T289] veth0_vlan: entered promiscuous mode [ 26.011966][ T289] veth1_macvtap: entered promiscuous mode [ 26.026756][ T291] veth0_vlan: entered promiscuous mode [ 26.034580][ T290] veth0_vlan: entered promiscuous mode [ 26.041564][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.069732][ T291] veth1_macvtap: entered promiscuous mode [ 26.088716][ T290] veth1_macvtap: entered promiscuous mode [ 26.097999][ T310] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.434224][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.604187][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 26.610652][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.644541][ T9] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 26.653782][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.664036][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.673604][ T9] usb 4-1: config 0 descriptor?? [ 26.694183][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.825517][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.834075][ T45] usb 2-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 26.844039][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 26.844401][ T45] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 26.858795][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 56, changing to 7 [ 26.870054][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.870060][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8544, setting to 1024 [ 26.870093][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.882903][ T45] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 26.908297][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.913351][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.932454][ T45] usb 2-1: Product: syz [ 26.937560][ T45] usb 2-1: Manufacturer: syz [ 26.942777][ T45] usb 2-1: SerialNumber: syz [ 26.943698][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.966702][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.984900][ T10] usb 3-1: config 0 descriptor?? [ 27.194073][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 27.200260][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 27.215306][ T340] rust_binder: 316 RLIMIT_NICE not set [ 27.216494][ T10] usb 3-1: USB disconnect, device number 2 [ 27.346498][ T342] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 27.355189][ T342] netlink: 'syz.0.11': attribute type 16 has an invalid length. [ 27.362875][ T342] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.11'. [ 27.424722][ T9] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 27.431938][ T9] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 27.439864][ T9] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 27.447225][ T9] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 27.455376][ T9] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 27.462646][ T9] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 27.472233][ T347] input: syz1 as /devices/virtual/input/input4 [ 27.478925][ T9] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 27.487755][ T9] zeroplus 0003:0C12:0030.0001: item fetching failed at offset 10/41 [ 27.504184][ T9] zeroplus 0003:0C12:0030.0001: parse failed [ 27.510211][ T9] zeroplus 0003:0C12:0030.0001: probe with driver zeroplus failed with error -22 [ 27.655385][ T307] usb 4-1: USB disconnect, device number 2 [ 27.725722][ T350] capability: warning: `syz.2.13' uses 32-bit capabilities (legacy support in use) [ 27.738703][ T350] rust_binder: 11: no such ref 4294967295 [ 27.770742][ T45] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 27.781178][ T45] usb 2-1: incorrect wMaxPacketSize 0x1400 for BADD profile [ 27.791596][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.807293][ T45] usb 2-1: USB disconnect, device number 2 [ 27.810169][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.084400][ T306] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 28.214075][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.235471][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.247276][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.257109][ T306] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 28.266266][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.280211][ T306] usb 3-1: config 0 descriptor?? [ 28.365412][ T45] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 28.373495][ T45] usb 2-1: config 0 has no interface number 0 [ 28.379870][ T45] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.391376][ T45] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.401397][ T45] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 28.410550][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.419764][ T45] usb 2-1: config 0 descriptor?? [ 28.497181][ T306] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 28.501689][ T377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.504761][ T306] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 28.514053][ T377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.520676][ T306] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 28.536623][ T306] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 28.544202][ T306] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 28.551931][ T306] hid-generic 0003:04F3:0755.0002: failed to start in urb: -90 [ 28.560544][ T306] hid-generic 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 28.575379][ T306] usb 3-1: USB disconnect, device number 3 [ 28.600747][ T381] fido_id[381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 28.605679][ T380] input: syz1 as /devices/virtual/input/input5 [ 28.621326][ T380] input: failed to attach handler leds to device input5, error: -6 [ 28.650051][ T384] process 'syz.2.24' launched './file0' with NULL argv: empty string added [ 28.654132][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.704053][ T325] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 28.815215][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 28.826297][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 28.836258][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 28.837564][ T45] prodikeys 0003:041E:2801.0003: unknown main item tag 0x1 [ 28.847723][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.853660][ T45] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 28.872793][ T45] hid_prodikeys: hid-prodikeys: failed to find output report [ 28.872793][ T45] [ 28.875448][ T325] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 28.896253][ T325] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 28.907198][ T325] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 28.921099][ T325] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.930178][ T325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.938222][ T325] usb 4-1: SerialNumber: syz [ 29.058797][ T357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.067405][ T357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.075834][ T325] usb 2-1: USB disconnect, device number 3 [ 29.144256][ T375] rust_binder: Write failure EFAULT in pid:17 [ 29.144576][ T36] kauditd_printk_skb: 9177 callbacks suppressed [ 29.144592][ T36] audit: type=1400 audit(1774162041.310:9251): avc: denied { write } for pid=374 comm="syz.3.22" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.145159][ T375] rust_binder: Write failure EFAULT in pid:17 [ 29.181775][ T45] usb 4-1: USB disconnect, device number 3 [ 29.191841][ T36] audit: type=1400 audit(1774162041.350:9252): avc: denied { read } for pid=395 comm="syz.3.27" dev="nsfs" ino=4026532348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.215943][ T36] audit: type=1400 audit(1774162041.350:9253): avc: denied { open } for pid=395 comm="syz.3.27" path="net:[4026532348]" dev="nsfs" ino=4026532348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.249779][ T401] netlink: 'syz.3.28': attribute type 4 has an invalid length. [ 29.260546][ T401] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.28'. [ 29.261780][ T36] audit: type=1400 audit(1774162041.350:9254): avc: denied { create } for pid=395 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 29.290293][ T36] audit: type=1400 audit(1774162041.450:9255): avc: denied { name_bind } for pid=403 comm="syz.2.30" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 29.328386][ T36] audit: type=1400 audit(1774162041.490:9256): avc: denied { read } for pid=408 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.363020][ T411] netlink: 'syz.2.32': attribute type 11 has an invalid length. [ 29.370816][ T411] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.32'. [ 29.388569][ T413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 29.439666][ T36] audit: type=1400 audit(1774162041.600:9257): avc: denied { create } for pid=412 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.460728][ T36] audit: type=1400 audit(1774162041.620:9258): avc: denied { setopt } for pid=412 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.724118][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.844247][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.854242][ T45] usb 4-1: device descriptor read/64, error -71 [ 29.972903][ T423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 29.982153][ T36] audit: type=1400 audit(1774162042.140:9259): avc: denied { accept } for pid=367 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.014027][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 30.020214][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.031155][ T36] audit: type=1400 audit(1774162042.180:9260): avc: denied { read } for pid=430 comm="syz.2.37" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.054520][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.065602][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 30.074803][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.083627][ T31] usb 2-1: config 0 descriptor?? [ 30.124090][ T45] usb 4-1: device descriptor read/64, error -71 [ 30.364066][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.444083][ T325] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 30.494041][ T45] usb 4-1: device descriptor read/64, error -71 [ 30.504208][ T31] logitech 0003:046D:C20E.0004: rdesc size test failed for formula gp [ 30.512786][ T31] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 30.519995][ T31] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 30.527365][ T31] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 30.534630][ T31] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 30.541770][ T31] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 30.548927][ T31] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 30.556096][ T31] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 30.563258][ T31] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 30.570724][ T31] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 30.577906][ T31] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 30.585114][ T31] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 30.593028][ T31] logitech 0003:046D:C20E.0004: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.1-1/input0 [ 30.615189][ T325] usb 3-1: config 251 has an invalid interface number: 89 but max is 0 [ 30.623599][ T325] usb 3-1: config 251 has no interface number 0 [ 30.630090][ T325] usb 3-1: config 251 interface 89 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 30.641287][ T325] usb 3-1: config 251 interface 89 has no altsetting 0 [ 30.649688][ T325] usb 3-1: New USB device found, idVendor=9bfa, idProduct=c467, bcdDevice=9b.33 [ 30.658856][ T325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.666889][ T325] usb 3-1: Product: syz [ 30.671139][ T325] usb 3-1: Manufacturer: syz [ 30.675793][ T325] usb 3-1: SerialNumber: syz [ 30.744026][ T45] usb 4-1: device descriptor read/64, error -71 [ 30.753462][ T397] usb 2-1: USB disconnect, device number 4 [ 30.854180][ T45] usb usb4-port1: attempt power cycle [ 30.900127][ T437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.908924][ T437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.947012][ T325] usb 3-1: bad CDC descriptors [ 30.955671][ T325] usb 3-1: USB disconnect, device number 4 [ 31.194042][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.215106][ T45] usb 4-1: device descriptor read/8, error -71 [ 31.345181][ T45] usb 4-1: device descriptor read/8, error -71 [ 31.368918][ T9] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 31.378054][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input6 [ 31.393548][ T9] usb 1-1: USB disconnect, device number 2 [ 31.534080][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.566605][ T462] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 31.584116][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.584320][ T463] netlink: 'syz.0.47': attribute type 27 has an invalid length. [ 31.611023][ T45] usb 4-1: device descriptor read/8, error -71 [ 31.684388][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 31.690960][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.699451][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 190, changing to 7 [ 31.711862][ T31] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 31.721068][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.729109][ T31] usb 2-1: Product: syz [ 31.733260][ T31] usb 2-1: Manufacturer: syz [ 31.737883][ T31] usb 2-1: SerialNumber: syz [ 31.745122][ T45] usb 4-1: device descriptor read/8, error -71 [ 31.854557][ T45] usb usb4-port1: unable to enumerate USB device [ 31.874034][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 31.951354][ T31] usb 2-1: USB disconnect, device number 5 [ 31.992525][ T441] udevd[441]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.004038][ T9] usb 1-1: device descriptor read/64, error -71 [ 32.254063][ T9] usb 1-1: device descriptor read/64, error -71 [ 32.394434][ T465] mmap: syz.2.48 (465) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.494041][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 32.624029][ T9] usb 1-1: device descriptor read/64, error -71 [ 32.664087][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.704063][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.814028][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 32.814040][ T325] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 32.820344][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.836879][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 32.850993][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 32.860083][ T45] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 32.868495][ T45] usb 3-1: Product: syz [ 32.872689][ T45] usb 3-1: Manufacturer: syz [ 32.878076][ T31] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 32.887487][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.894022][ T9] usb 1-1: device descriptor read/64, error -71 [ 32.902385][ T45] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 32.910896][ T31] usb 2-1: config 0 descriptor?? [ 32.984045][ T325] usb 4-1: Using ep0 maxpacket: 16 [ 32.990391][ T325] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.001331][ T325] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 33.014335][ T325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 33.020968][ T325] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 33.030369][ T9] usb usb1-port1: attempt power cycle [ 33.036084][ T325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.045388][ T325] usb 4-1: config 0 descriptor?? [ 33.318526][ T471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.327147][ T471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.336827][ T31] usb 2-1: Cannot read MAC address [ 33.342027][ T31] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 33.354392][ T31] usb 2-1: USB disconnect, device number 6 [ 33.374064][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 33.395197][ T9] usb 1-1: device descriptor read/8, error -71 [ 33.454128][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.461246][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.468577][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.475788][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.482815][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.489960][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.497158][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.504322][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.511073][ T473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.511391][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.521943][ T473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.526856][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.542260][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.549576][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.556741][ T9] usb 1-1: device descriptor read/8, error -71 [ 33.563048][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.570145][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.577248][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.584309][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.591418][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.598539][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.605620][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.612668][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.619755][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.626849][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.633873][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.640954][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.648015][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.655007][ T469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.655120][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.664641][ T469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.670788][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.681787][ T469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.685261][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.694821][ T469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.700618][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.715379][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.722442][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.729514][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.736733][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.743774][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.750854][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.757974][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.765066][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.772113][ T325] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 33.779940][ T325] sunplus 0003:04FC:05D8.0005: hidraw0: USB HID v0.08 Device [HID 04fc:05d8] on usb-dummy_hcd.3-1/input0 [ 33.794102][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 33.802319][ T325] usb 4-1: USB disconnect, device number 8 [ 33.825209][ T9] usb 1-1: device descriptor read/8, error -71 [ 33.853640][ T476] ======================================================= [ 33.853640][ T476] WARNING: The mand mount option has been deprecated and [ 33.853640][ T476] and is ignored by this kernel. Remove the mand [ 33.853640][ T476] option from the mount to silence this warning. [ 33.853640][ T476] ======================================================= [ 33.889548][ T476] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.952028][ T476] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.960615][ T9] usb 1-1: device descriptor read/8, error -71 [ 33.968600][ T476] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 33.976644][ T476] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 33.984922][ T476] overlayfs: d_ino too big (11, ino=9223372036854775879, xinobits=3) [ 33.993073][ T476] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 34.001945][ T476] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 34.010917][ T476] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 34.019602][ T476] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 34.028274][ T476] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 34.036651][ T476] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 34.045010][ T476] overlayfs: d_ino too big (instances, ino=4611686018427389032, xinobits=3) [ 34.074162][ T9] usb usb1-port1: unable to enumerate USB device [ 34.244038][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 34.323794][ T486] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.394045][ T31] usb 2-1: device descriptor read/64, error -71 [ 34.634044][ T31] usb 2-1: device descriptor read/64, error -71 [ 34.641093][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.649419][ T493] bridge_slave_0 (unregistering): left allmulticast mode [ 34.656822][ T493] bridge_slave_0 (unregistering): left promiscuous mode [ 34.663842][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.709036][ T496] tipc: Started in network mode [ 34.713938][ T496] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 34.723160][ T496] tipc: Enabled bearer , priority 10 [ 34.745995][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 34.746014][ T36] audit: type=1400 audit(1774162046.910:9285): avc: denied { read write } for pid=497 comm="syz.0.61" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.775114][ T36] audit: type=1400 audit(1774162046.910:9286): avc: denied { open } for pid=497 comm="syz.0.61" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.797921][ T36] audit: type=1400 audit(1774162046.910:9287): avc: denied { map } for pid=497 comm="syz.0.61" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.820707][ T36] audit: type=1400 audit(1774162046.910:9288): avc: denied { execute } for pid=497 comm="syz.0.61" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.894051][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 34.984046][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.013547][ T511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 35.024141][ T31] usb 2-1: device descriptor read/64, error -71 [ 35.025099][ T511] Zero length message leads to an empty skb [ 35.114038][ T9] usb 1-1: device descriptor read/64, error -71 [ 35.264076][ T31] usb 2-1: device descriptor read/64, error -71 [ 35.354046][ T9] usb 1-1: device descriptor read/64, error -71 [ 35.374133][ T31] usb usb2-port1: attempt power cycle [ 35.426215][ T10] usb 3-1: USB disconnect, device number 5 [ 35.441644][ T36] audit: type=1400 audit(1774162047.600:9289): avc: denied { create } for pid=515 comm="syz.2.67" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.594099][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.724047][ T9] usb 1-1: device descriptor read/64, error -71 [ 35.734047][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 35.754987][ T31] usb 2-1: device descriptor read/8, error -71 [ 35.774007][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.844084][ T45] tipc: Node number set to 4269801492 [ 35.886123][ T31] usb 2-1: device descriptor read/8, error -71 [ 35.892354][ T36] audit: type=1400 audit(1774162048.050:9290): avc: denied { read write } for pid=519 comm="syz.3.68" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.915565][ T36] audit: type=1400 audit(1774162048.050:9291): avc: denied { open } for pid=519 comm="syz.3.68" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.938458][ T36] audit: type=1400 audit(1774162048.050:9292): avc: denied { ioctl } for pid=519 comm="syz.3.68" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.944016][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 35.968989][ T10] usb 3-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 35.979307][ T9] usb 1-1: device descriptor read/64, error -71 [ 35.987094][ T10] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 35.996264][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.004691][ T10] usb 3-1: Product: syz [ 36.008979][ T10] usb 3-1: Manufacturer: syz [ 36.013787][ T10] usb 3-1: SerialNumber: syz [ 36.019885][ T10] usb 3-1: config 0 descriptor?? [ 36.026564][ T10] usb 3-1: bad CDC descriptors [ 36.031466][ T10] usb 3-1: unsupported MDLM descriptors [ 36.094114][ T9] usb usb1-port1: attempt power cycle [ 36.124027][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 36.145056][ T31] usb 2-1: device descriptor read/8, error -71 [ 36.225917][ T36] audit: type=1400 audit(1774162048.390:9293): avc: denied { read } for pid=515 comm="syz.2.67" name="file0" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.226325][ T325] usb 3-1: USB disconnect, device number 6 [ 36.248368][ T36] audit: type=1400 audit(1774162048.390:9294): avc: denied { open } for pid=515 comm="syz.2.67" path="/23/file0" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.295214][ T31] usb 2-1: device descriptor read/8, error -71 [ 36.314048][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 36.404142][ T31] usb usb2-port1: unable to enumerate USB device [ 36.434109][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 36.455225][ T9] usb 1-1: device descriptor read/8, error -71 [ 36.464120][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 36.470416][ T10] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.481391][ T10] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 36.494335][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 36.501072][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 36.510169][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.518759][ T10] usb 4-1: config 0 descriptor?? [ 36.585084][ T9] usb 1-1: device descriptor read/8, error -71 [ 36.824024][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 36.856567][ T9] usb 1-1: device descriptor read/8, error -71 [ 36.920116][ T534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.72'. [ 36.931355][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 36.940915][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 36.948890][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 36.956424][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 36.963499][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 36.970883][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 36.978125][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 36.985447][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 36.992509][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 36.999981][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.007464][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.015038][ T9] usb 1-1: device descriptor read/8, error -71 [ 37.021358][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.028783][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.036045][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.043213][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.050505][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.071806][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.079112][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.090062][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.097582][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.104838][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.112000][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.119417][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.126901][ T9] usb usb1-port1: unable to enumerate USB device [ 37.136739][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.144536][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.151703][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.159076][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.166455][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.173706][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.184421][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.191501][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.198887][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.206170][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.213390][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.221270][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.228569][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.237110][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.244357][ T10] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 37.252535][ T10] sunplus 0003:04FC:05D8.0006: hidraw0: USB HID v0.08 Device [HID 04fc:05d8] on usb-dummy_hcd.3-1/input0 [ 37.279963][ T10] usb 4-1: USB disconnect, device number 9 [ 37.674037][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 37.824003][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 37.834197][ T31] usb 2-1: config index 0 descriptor too short (expected 46593, got 71) [ 37.843073][ T31] usb 2-1: config 0 has too many interfaces: 158, using maximum allowed: 32 [ 37.852307][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.869177][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 158 [ 37.878603][ T31] usb 2-1: config 0 has no interface number 0 [ 37.887060][ T31] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 37.896410][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.904613][ T31] usb 2-1: Product: syz [ 37.908936][ T31] usb 2-1: Manufacturer: syz [ 37.913550][ T31] usb 2-1: SerialNumber: syz [ 37.915091][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 37.928866][ T31] usb 2-1: config 0 descriptor?? [ 37.936789][ T31] usb 2-1: Found UVC 0.00 device syz (046c:14e0) [ 37.937168][ T561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.943191][ T31] usb 2-1: No valid video chain found. [ 38.064047][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.202177][ T544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.214011][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 38.224217][ T544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.235288][ T31] usb 2-1: USB disconnect, device number 11 [ 38.286703][ T577] kvm: emulating exchange as write [ 38.314067][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.354124][ T10] usb 1-1: device descriptor read/64, error -71 [ 38.564792][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.594075][ T10] usb 1-1: device descriptor read/64, error -71 [ 38.694102][ T325] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.701710][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.834063][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 38.854029][ T325] usb 3-1: Using ep0 maxpacket: 8 [ 38.860311][ T325] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 38.868773][ T325] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 38.879171][ T325] usb 3-1: config 135 has no interface number 0 [ 38.885572][ T325] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 38.897250][ T325] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 38.913481][ T325] usb 3-1: config 135 interface 230 has no altsetting 0 [ 38.921882][ T325] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 38.931031][ T325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.939065][ T325] usb 3-1: Product: syz [ 38.943302][ T325] usb 3-1: Manufacturer: syz [ 38.947945][ T325] usb 3-1: SerialNumber: syz [ 38.954079][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.964022][ T10] usb 1-1: device descriptor read/64, error -71 [ 39.003453][ T597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 39.064171][ T9] usb usb4-port1: attempt power cycle [ 39.154025][ T325] usb 3-1: USB disconnect, device number 7 [ 39.204708][ T10] usb 1-1: device descriptor read/64, error -71 [ 39.314291][ T10] usb usb1-port1: attempt power cycle [ 39.404158][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 39.425333][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.558741][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.654056][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 39.675214][ T10] usb 1-1: device descriptor read/8, error -71 [ 39.794063][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 39.814163][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 39.822708][ T10] usb 1-1: device descriptor read/8, error -71 [ 39.835222][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.945326][ T31] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 39.954031][ T325] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 39.957060][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 39.965951][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.975492][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 39.992860][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 40.001933][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.010958][ T602] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 40.074102][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 40.084184][ T9] usb usb4-port1: unable to enumerate USB device [ 40.095336][ T10] usb 1-1: device descriptor read/8, error -71 [ 40.115189][ T325] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 40.126038][ T325] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 40.137692][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 40.147499][ T325] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.162137][ T325] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 40.171252][ T325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.179303][ T325] usb 3-1: Product: syz [ 40.183489][ T325] usb 3-1: Manufacturer: syz [ 40.188139][ T325] usb 3-1: SerialNumber: syz [ 40.193496][ T325] usb 3-1: config 0 descriptor?? [ 40.225309][ T10] usb 1-1: device descriptor read/8, error -71 [ 40.334220][ T10] usb usb1-port1: unable to enumerate USB device [ 40.401401][ T604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 40.411369][ T45] usb 3-1: USB disconnect, device number 8 [ 40.668683][ T606] rust_binder: Write failure EFAULT in pid:71 [ 40.824437][ T31] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 40.838095][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input7 [ 40.890710][ T610] netlink: 'syz.0.95': attribute type 58 has an invalid length. [ 41.064066][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 41.215576][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.223920][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 41.232811][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 41.245508][ T10] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 41.254697][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.262716][ T10] usb 4-1: Product: syz [ 41.266915][ T10] usb 4-1: Manufacturer: syz [ 41.271531][ T10] usb 4-1: SerialNumber: syz [ 41.284099][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 41.434029][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 41.441178][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 41.452130][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.463114][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.473036][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 41.486188][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 41.492413][ T10] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 41.495313][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.506281][ T10] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 41.519982][ T10] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 41.520535][ T31] usb 1-1: config 0 descriptor?? [ 41.532193][ T10] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 41.540451][ T306] usb 2-1: USB disconnect, device number 12 [ 41.541436][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 41.542666][ T10] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 41.577832][ T10] usb 4-1: USB disconnect, device number 14 [ 41.595504][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.874040][ T306] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 41.894084][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 41.984032][ T325] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.024227][ T10] usb 4-1: device descriptor read/64, error -71 [ 42.045081][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.056047][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.065916][ T306] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 42.074997][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.083770][ T306] usb 2-1: config 0 descriptor?? [ 42.136298][ T325] usb 3-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 1023 [ 42.146489][ T325] usb 3-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 96 [ 42.156475][ T325] usb 3-1: config 1 interface 0 has no altsetting 0 [ 42.166622][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 42.169183][ T325] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.172785][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 42.189394][ T325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.189421][ T325] usb 3-1: Product: ᆫ [ 42.193290][ T624] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 42.199610][ T31] usb 1-1: USB disconnect, device number 15 [ 42.204455][ T624] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 42.274017][ T10] usb 4-1: device descriptor read/64, error -71 [ 42.426998][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 42.427020][ T36] audit: type=1400 audit(1774162054.590:9305): avc: denied { listen } for pid=623 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.427573][ T624] netlink: 'syz.2.98': attribute type 27 has an invalid length. [ 42.472441][ T624] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.479771][ T624] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.515906][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 42.519250][ T306] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x7 [ 42.530791][ T306] arvo 0003:1E7D:30D4.0007: item fetching failed at offset 4/7 [ 42.539888][ T306] arvo 0003:1E7D:30D4.0007: parse failed [ 42.545704][ T306] arvo 0003:1E7D:30D4.0007: probe with driver arvo failed with error -22 [ 42.654111][ T10] usb 4-1: device descriptor read/64, error -71 [ 42.692112][ T325] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 42.701730][ T325] usb 3-1: USB disconnect, device number 9 [ 42.809483][ T306] usb 2-1: USB disconnect, device number 13 [ 42.859586][ T36] audit: type=1400 audit(1774162055.020:9306): avc: denied { block_suspend } for pid=632 comm="syz.0.101" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.893262][ T36] audit: type=1400 audit(1774162055.050:9307): avc: denied { write } for pid=635 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.894015][ T10] usb 4-1: device descriptor read/64, error -71 [ 42.955781][ T636] netlink: 57 bytes leftover after parsing attributes in process `syz.0.102'. [ 42.964851][ T637] netlink: 57 bytes leftover after parsing attributes in process `syz.0.102'. [ 42.974299][ T636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 43.024154][ T10] usb usb4-port1: attempt power cycle [ 43.339202][ T306] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 43.339926][ T648] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 43.352754][ T648] syzkaller1: Linktype set failed because interface is up [ 43.364047][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 43.385414][ T10] usb 4-1: device descriptor read/8, error -71 [ 43.474036][ T307] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 43.494012][ T306] usb 1-1: Using ep0 maxpacket: 8 [ 43.500314][ T306] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 43.511575][ T306] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 43.523490][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 43.534741][ T10] usb 4-1: device descriptor read/8, error -71 [ 43.534889][ T306] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.556078][ T306] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 43.565401][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.573455][ T306] usb 1-1: Product: syz [ 43.577798][ T306] usb 1-1: Manufacturer: syz [ 43.582451][ T306] usb 1-1: SerialNumber: syz [ 43.588080][ T306] usb 1-1: config 0 descriptor?? [ 43.595657][ T306] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 43.655227][ T307] usb 3-1: config 1 has an invalid interface number: 93 but max is 0 [ 43.663598][ T307] usb 3-1: config 1 has no interface number 0 [ 43.669761][ T307] usb 3-1: config 1 interface 93 has no altsetting 0 [ 43.676614][ T307] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 43.685906][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.774041][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 43.804842][ T31] usb 1-1: USB disconnect, device number 16 [ 43.898975][ T307] usb 3-1: string descriptor 0 read error: -71 [ 43.912552][ T307] gl620a 3-1:1.93: probe with driver gl620a failed with error -22 [ 43.924617][ T307] usb 3-1: USB disconnect, device number 10 [ 43.932626][ T36] audit: type=1400 audit(1774162056.090:9308): avc: denied { audit_write } for pid=667 comm="syz.3.113" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 44.224001][ T10] usb 4-1: device not accepting address 18, error -71 [ 44.231420][ T10] usb usb4-port1: unable to enumerate USB device [ 44.306371][ T36] audit: type=1326 audit(1774162056.470:9309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=672 comm="syz.3.114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb39999c799 code=0x0 [ 44.355228][ T36] audit: type=1400 audit(1774162056.520:9310): avc: denied { setopt } for pid=679 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.355869][ T680] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 44.375102][ T36] audit: type=1400 audit(1774162056.520:9311): avc: denied { watch watch_reads } for pid=679 comm="syz.0.116" path="/19/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 44.384498][ T680] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 44.451732][ T36] audit: type=1400 audit(1774162056.610:9312): avc: denied { read write } for pid=672 comm="syz.3.114" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.478103][ T36] audit: type=1400 audit(1774162056.610:9313): avc: denied { open } for pid=672 comm="syz.3.114" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.513290][ T36] audit: type=1400 audit(1774162056.610:9314): avc: denied { ioctl } for pid=672 comm="syz.3.114" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.542618][ T692] veth0_virt_wifi: entered allmulticast mode [ 44.568300][ T689] veth0_virt_wifi: left allmulticast mode [ 44.717502][ T705] veth0_to_batadv: mtu greater than device maximum [ 45.094034][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 45.245182][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.256354][ T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 45.265666][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.274895][ T31] usb 3-1: config 0 descriptor?? [ 45.424032][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 45.482309][ T712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.490945][ T712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.523910][ T721] netlink: 'syz.0.127': attribute type 12 has an invalid length. [ 45.575318][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.585661][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.586224][ T725] mmap: syz.1.129 (725): VmData 29208576 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 45.596426][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 45.611432][ T725] cgroup: Bad value for 'name' [ 45.616079][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.616104][ T10] usb 4-1: Product: syz [ 45.616119][ T10] usb 4-1: Manufacturer: syz [ 45.616173][ T10] usb 4-1: SerialNumber: syz [ 45.650160][ T725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=725 comm=syz.1.129 [ 45.702980][ T31] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 45.712847][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input9 [ 45.788083][ T31] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 45.820493][ T10] usb 4-1: 0:2 : does not exist [ 45.828626][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 45.852980][ T10] usb 4-1: USB disconnect, device number 19 [ 45.868694][ T441] udevd[441]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.341293][ T742] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.364974][ T744] cgroup: Bad value for 'name' [ 46.404739][ T749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=749 comm=syz.1.136 [ 46.421292][ T749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=749 comm=syz.1.136 [ 46.433849][ T749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=749 comm=syz.1.136 [ 46.446580][ T749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=749 comm=syz.1.136 [ 46.459289][ T749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=749 comm=syz.1.136 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 46.654284][ T325] usb 4-1: new high-speed USB device number 20 using dummy_hcd OK [ 46.804070][ T325] usb 4-1: Using ep0 maxpacket: 32 Stopping iptables: [ 46.819859][ T325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.831626][ T325] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 46.834017][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 46.848038][ T325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 OK[ 46.856521][ T325] usb 4-1: Product: syz [ 46.860760][ T325] usb 4-1: Manufacturer: syz [ 46.865631][ T325] usb 4-1: SerialNumber: syz [ 46.872081][ T325] usb 4-1: config 0 descriptor?? Stopping system message bus: [ 46.883882][ T325] usb 4-1: bad CDC descriptors [ 46.889924][ T325] usb 4-1: unsupported MDLM descriptors done [ 47.005549][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 47.016112][ T31] usb 2-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 47.025453][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.033557][ T31] usb 2-1: Product: 㮝þ놄뱯䲿襳ᡚ苎㈟쯉繃ꅐ⛯꫚⬷뽑ꕡ䕐솖滔䣚챸ૐ꼈騠゙常⷟১흆䅙➄ޘ뫒燗广ᣭ䚼孙鐻塬坆ᐜꊟ瀺銡嵂㓣﯇鿲ឞ割⹪ᇄ❣・἞㙯➱啨褑瘸븉 [ 47.057612][ T31] usb 2-1: Manufacturer: 花읰ﱳ枋餇궟绲腢഼﹅晇諶ꌌϞ᜘㽝ྵ仯ㄓક沒龗鱴塥꒍瀑榟侸Ｔ壅 killall: can't kill pid 441: No such process [ 47.090070][ T31] usb 2-1: SerialNumber: ᐁ [ 47.095785][ T325] usb 4-1: USB disconnect, device number 20 Stopping klogd: OK Stopping acpid: [ 47.184050][ T307] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 47.304498][ T31] usb 2-1: 1:1 : bogus bTerminalLink 8 [ 47.310475][ T31] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 47.318205][ T31] usb 2-1: unit 13 not found! [ 47.326125][ T31] usb 2-1: USB disconnect, device number 14 [ 47.335328][ T307] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 47.346337][ T307] usb 1-1: config 1 interface 0 has no altsetting 0 [ 47.354439][ T307] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 47.363495][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.371540][ T307] usb 1-1: Product: syz [ 47.375821][ T307] usb 1-1: Manufacturer: syz [ 47.380417][ T307] usb 1-1: SerialNumber: syz [ 47.385968][ T785] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 47.599046][ T307] usbhid 1-1:1.0: can't add hid device: -71 [ 47.605087][ T307] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 47.613663][ T307] usb 1-1: USB disconnect, device number 17 [ 47.679767][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 47.679788][ T36] audit: type=1400 audit(1774162059.840:9345): avc: denied { read } for pid=798 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.882984][ T805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.140'. [ 47.916476][ T307] usb 3-1: USB disconnect, device number 11 [ 47.930445][ T36] audit: type=1400 audit(1774162060.090:9346): avc: denied { create } for pid=806 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 47.988997][ T36] audit: type=1400 audit(1774162060.130:9347): avc: denied { create } for pid=811 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 48.028949][ T816] rust_binder: Error while translating object. [ 48.029029][ T816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 48.041990][ T816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:121 [ 48.064901][ T36] audit: type=1400 audit(1774162060.230:9348): avc: denied { bind } for pid=815 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.134002][ T36] audit: type=1400 audit(1774162060.230:9349): avc: denied { name_bind } for pid=815 comm="syz.1.144" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 48.164338][ T36] audit: type=1400 audit(1774162060.230:9350): avc: denied { node_bind } for pid=815 comm="syz.1.144" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 OK [ 48.209091][ T36] audit: type=1400 audit(1774162060.230:9351): avc: denied { sys_module } for pid=815 comm="syz.1.144" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.231711][ T292] ------------[ cut here ]------------ [ 48.237284][ T292] WARNING: CPU: 1 PID: 292 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 48.245339][ T292] Modules linked in: [ 48.249261][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Not tainted syzkaller #0 4cdc09a83674403ae09eb79c4caea2b8730b48e4 [ 48.261075][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 48.271177][ T292] RIP: 0010:drop_nlink+0xce/0x110 [ 48.276271][ T292] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 e5 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 48.295944][ T292] RSP: 0018:ffffc9000b6bfc60 EFLAGS: 00010293 [ 48.302030][ T292] RAX: ffffffff81f1c2ae RBX: ffff88810cb6bbf0 RCX: ffff8881234f3900 [ 48.310094][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.318121][ T292] RBP: ffffc9000b6bfc88 R08: 0000000000000003 R09: 0000000000000004 [ 48.326149][ T292] R10: dffffc0000000000 R11: fffff520016d7f7c R12: dffffc0000000000 [ 48.334167][ T292] R13: 1ffff1102196d787 R14: ffff88810cb6bc38 R15: 0000000000000000 [ 48.342166][ T292] FS: 000055557412f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 48.350489][ T36] audit: type=1400 audit(1774162060.230:9352): avc: denied { read } for pid=815 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.351322][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.377200][ T292] CR2: 0000555574152948 CR3: 0000000123246000 CR4: 00000000003526b0 [ 48.385300][ T292] Call Trace: [ 48.388605][ T292] Stopping syslogd[ 48.391642][ T292] shmem_rmdir+0x5f/0x90 : [ 48.397422][ T292] vfs_rmdir+0x3e0/0x560 [ 48.401754][ T292] incfs_kill_sb+0x109/0x230 [ 48.406393][ T292] deactivate_locked_super+0xd5/0x2a0 [ 48.411797][ T292] deactivate_super+0xb8/0xe0 [ 48.416526][ T292] cleanup_mnt+0x406/0x4a0 stopped /sbin/sy[ 48.420967][ T292] __cleanup_mnt+0x1d/0x40 slogd (pid 92)[ 48.428174][ T292] task_work_run+0x1e8/0x260 [ 48.433776][ T292] ? __cfi_task_work_run+0x10/0x10 [ 48.433908][ T36] audit: type=1400 audit(1774162060.290:9353): avc: denied { execmem } for pid=815 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.439105][ T292] ? __x64_sys_umount+0x12e/0x180 [ 48.463163][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 48.468612][ T292] ? __kasan_check_read+0x15/0x20 [ 48.473680][ T292] resume_user_mode_work+0x35/0x50 [ 48.478843][ T292] syscall_exit_to_user_mode+0x63/0xb0 OK[ 48.484348][ T292] do_syscall_64+0x63/0xf0 [ 48.488967][ T292] ? clear_bhb_loop+0x50/0xa0 [ 48.493675][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.499707][ T292] RIP: 0033:0x7fad4ab9d9d7 [ 48.504224][ T292] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 48.523879][ T292] RSP: 002b:00007ffffec5c928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 48.532359][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fad4ab9d9d7 [ 48.540391][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffec5c9e0 [ 48.546484][ T36] audit: type=1400 audit(1774162060.370:9354): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.548403][ T292] RBP: 00007ffffec5c9e0 R08: 00007ffffec5d9e0 R09: 00000000ffffffff [ 48.576560][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffec5da70 [ 48.584588][ T292] R13: 00007fad4ac32050 R14: 000000000000bc2b R15: 00007ffffec5dab0 [ 48.592591][ T292] [ 48.595666][ T292] ---[ end trace 0000000000000000 ]--- [ 48.601778][ T292] ================================================================== [ 48.609869][ T292] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 48.616138][ T292] Write of size 4 at addr 0000000000000168 by task syz-executor/292 [ 48.624137][ T292] [ 48.626480][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Tainted: G W syzkaller #0 4cdc09a83674403ae09eb79c4caea2b8730b48e4 [ 48.626516][ T292] Tainted: [W]=WARN [ 48.626524][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 48.626535][ T292] Call Trace: [ 48.626542][ T292] [ 48.626549][ T292] __dump_stack+0x21/0x30 [ 48.626578][ T292] dump_stack_lvl+0x140/0x1c0 [ 48.626604][ T292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.626631][ T292] print_report+0x3d/0x70 [ 48.626656][ T292] kasan_report+0x162/0x1a0 [ 48.626677][ T292] ? ihold+0x24/0x70 [ 48.626694][ T292] ? _raw_spin_unlock+0x45/0x60 [ 48.626718][ T292] ? ihold+0x24/0x70 [ 48.626735][ T292] kasan_check_range+0x25a/0x2b0 [ 48.626755][ T292] __kasan_check_write+0x18/0x20 [ 48.626780][ T292] ihold+0x24/0x70 [ 48.626797][ T292] vfs_rmdir+0x26a/0x560 [ 48.626820][ T292] incfs_kill_sb+0x109/0x230 [ 48.626846][ T292] deactivate_locked_super+0xd5/0x2a0 [ 48.626868][ T292] deactivate_super+0xb8/0xe0 [ 48.626888][ T292] cleanup_mnt+0x406/0x4a0 [ 48.626905][ T292] __cleanup_mnt+0x1d/0x40 [ 48.626921][ T292] task_work_run+0x1e8/0x260 [ 48.626944][ T292] ? __cfi_task_work_run+0x10/0x10 [ 48.626966][ T292] ? __x64_sys_umount+0x12e/0x180 [ 48.626989][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 48.627012][ T292] ? __kasan_check_read+0x15/0x20 [ 48.627037][ T292] resume_user_mode_work+0x35/0x50 [ 48.627072][ T292] syscall_exit_to_user_mode+0x63/0xb0 [ 48.627094][ T292] do_syscall_64+0x63/0xf0 [ 48.627117][ T292] ? clear_bhb_loop+0x50/0xa0 [ 48.627142][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.627167][ T292] RIP: 0033:0x7fad4ab9d9d7 [ 48.627186][ T292] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 48.627204][ T292] RSP: 002b:00007ffffec5c928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 48.627226][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fad4ab9d9d7 [ 48.627241][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffec5c9e0 [ 48.627254][ T292] RBP: 00007ffffec5c9e0 R08: 00007ffffec5d9e0 R09: 00000000ffffffff [ 48.627269][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffec5da70 [ 48.627284][ T292] R13: 00007fad4ac32050 R14: 000000000000bc2b R15: 00007ffffec5dab0 [ 48.627301][ T292] [ 48.627308][ T292] ================================================================== [ 48.872211][ T307] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 48.893349][ T292] Disabling lock debugging due to kernel taint [ 48.914949][ T292] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 48.922801][ T292] #PF: supervisor write access in kernel mode [ 48.928890][ T292] #PF: error_code(0x0002) - not-present page [ 48.934870][ T292] PGD 800000010bfd7067 P4D 800000010bfd7067 PUD 0 [ 48.941385][ T292] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 48.947454][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Tainted: G B W syzkaller #0 4cdc09a83674403ae09eb79c4caea2b8730b48e4 [ 48.960563][ T292] Tainted: [B]=BAD_PAGE, [W]=WARN [ 48.965577][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 48.975632][ T292] RIP: 0010:ihold+0x2a/0x70 [ 48.980141][ T292] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 48.999927][ T292] RSP: 0018:ffffc9000b6bfca0 EFLAGS: 00010246 [ 49.005997][ T292] RAX: ffff8881234f3900 RBX: 0000000000000000 RCX: ffff8881234f3900 [ 49.013973][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.021944][ T292] RBP: ffffc9000b6bfcb0 R08: ffffffff88b97947 R09: 1ffffffff1172f28 [ 49.029917][ T292] R10: dffffc0000000000 R11: fffffbfff1172f29 R12: ffff88810cb6bbfc [ 49.037889][ T292] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 49.045961][ T292] FS: 000055557412f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.054907][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.061491][ T292] CR2: 0000000000000168 CR3: 0000000123246000 CR4: 00000000003526b0 [ 49.069466][ T292] Call Trace: [ 49.072743][ T292] [ 49.075673][ T292] vfs_rmdir+0x26a/0x560 [ 49.079927][ T292] incfs_kill_sb+0x109/0x230 [ 49.084533][ T292] deactivate_locked_super+0xd5/0x2a0 [ 49.089908][ T292] deactivate_super+0xb8/0xe0 [ 49.094590][ T292] cleanup_mnt+0x406/0x4a0 [ 49.099009][ T292] __cleanup_mnt+0x1d/0x40 [ 49.103426][ T292] task_work_run+0x1e8/0x260 [ 49.108022][ T292] ? __cfi_task_work_run+0x10/0x10 [ 49.113141][ T292] ? __x64_sys_umount+0x12e/0x180 [ 49.118171][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 49.123545][ T292] ? __kasan_check_read+0x15/0x20 [ 49.128664][ T292] resume_user_mode_work+0x35/0x50 [ 49.133782][ T292] syscall_exit_to_user_mode+0x63/0xb0 [ 49.139249][ T292] do_syscall_64+0x63/0xf0 [ 49.143670][ T292] ? clear_bhb_loop+0x50/0xa0 [ 49.148354][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.154255][ T292] RIP: 0033:0x7fad4ab9d9d7 [ 49.158673][ T292] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 49.178282][ T292] RSP: 002b:00007ffffec5c928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 49.186697][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fad4ab9d9d7 [ 49.194667][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffec5c9e0 [ 49.202636][ T292] RBP: 00007ffffec5c9e0 R08: 00007ffffec5d9e0 R09: 00000000ffffffff [ 49.210610][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffec5da70 [ 49.218585][ T292] R13: 00007fad4ac32050 R14: 000000000000bc2b R15: 00007ffffec5dab0 [ 49.226561][ T292] [ 49.229577][ T292] Modules linked in: [ 49.233468][ T292] CR2: 0000000000000168 [ 49.237632][ T292] ---[ end trace 0000000000000000 ]--- [ 49.243102][ T292] RIP: 0010:ihold+0x2a/0x70 [ 49.247630][ T292] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 49.267251][ T292] RSP: 0018:ffffc9000b6bfca0 EFLAGS: 00010246 [ 49.273328][ T292] RAX: ffff8881234f3900 RBX: 0000000000000000 RCX: ffff8881234f3900 [ 49.281386][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.289441][ T292] RBP: ffffc9000b6bfcb0 R08: ffffffff88b97947 R09: 1ffffffff1172f28 [ 49.297416][ T292] R10: dffffc0000000000 R11: fffffbfff1172f29 R12: ffff88810cb6bbfc [ 49.305393][ T292] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 49.313456][ T292] FS: 000055557412f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.322392][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.328990][ T292] CR2: 0000000000000168 CR3: 0000000123246000 CR4: 00000000003526b0 [ 49.337079][ T292] Kernel panic - not syncing: Fatal exception [ 49.343346][ T292] Kernel Offset: disabled [ 49.347662][ T292] Rebooting in 86400 seconds..