last executing test programs: 6.258256663s ago: executing program 2 (id=198): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000"], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x700}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000001140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x7, 0x9, 0x9) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) write(r4, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xe88}, 0x8}], 0x1, 0x10122, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x390) mmap(&(0x7f0000594000/0x4000)=nil, 0x4000, 0x7e637dbbc077cdc1, 0x50, r4, 0x184) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300090468fe0700000000000000ff3f18000000480100100000000019002b000a0001000500fe8000f97d16af0003000500000000", 0x39}], 0x1) sendmsg$nl_generic(r0, 0x0, 0x804) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f00000011c0)={{0xffff, 0x8, 0x8, 0x6, 0x1ff}, [{0x34, 0x3ff, 0x7, 0x40}, {0x5, 0x80, 0xd4, 0x6}]}) 5.410630101s ago: executing program 2 (id=217): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040c580b0000002000001090224000100009009090400fe01030001000921c100fe0122280009058103200039c804007c0e7236aefbfea1eb53d4a3bbd52a5cb127d587c1577e9e6b71f053ea19fd9ed9b318575e2b5f2794422b3376cab3e5456c19cb88a5fa38e999ac780fc9eebce9db9693e96144d98b8402c36782028561f5912cf9e0a6cd6c7472e42dd1b3511d92b45101eee79ee014f442ebfc06fb0f4f5a77773dc3726a8a756f7dee982ef2e87f106aaaca0e5574ccdb2f96dd4cefb0281a18b0ecb36a3b609d5ebcc5e6e6fac2fb526e470c7a475da524ddc9f09ea210d3919213bf"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x20, 0xc, 0x28, {0xfffffea5, 0x6, "c2631385269c2c3cbdeacc918d0fb74237cc6e442a52973661d6090055443800000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000280)={0x14, &(0x7f0000000040)={0x0, 0x30, 0x2b, {0x2b, 0x30, "4b9d13fbdfdb136a648f914289e3919e942b5eda017895f7e06a810353892ed7f6412f40fa391e3b67"}}, &(0x7f0000000200)={0x0, 0x3, 0x66, @string={0x66, 0x3, "7ffe0d05562e1b8cf7e098580c227b1de7bb1fec133aaed33294dc0dcdf28a3185b5c0c93d1e99508cb163edb3eeb82abed9463a4233602d82d536c089fb2e434e856a6b37a0bff863059a4d259305c880cd2eff7f6ace9c82976824fe119e662baf1a8e"}}}, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0x24, 0xa2, "81ecf5adf68502dfd82c7676c669b66b094e8cd7d98ccfe339c7c654d6d9894bdd7c88e5d80beaed515b3a03af7b268ad73b881c8359e509e78348ed84a9ee7de9b285a49d05dc6079597f3884117daa6c583f9fd50e0d6f22a84f263253d6c8f24def58a992cb2c054fa62d9349a2d4f494e9bdf6379cd22f025e399a97dde31510d52088e19b9211b821748c01ee9d915274841b058eb21ebe6df3d6ac7bbadb84"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xfb}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7d}, &(0x7f0000000400)={0xc0, 0x5, 0x5, "4f98960c70"}, &(0x7f0000000440)={0x40, 0x5, 0x2, "6bf8"}}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) 5.401639312s ago: executing program 0 (id=218): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2, 0x40}) r0 = socket(0x28, 0x5, 0x0) capget(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000100)={0x80000000, 0x1d8, 0xfffeffff, 0xf345, 0x6, 0xb}) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2504000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000880)={0x1c, &(0x7f00000018c0)={0x40, 0x6, 0x6, "b93e2cb02330"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x830) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x1) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x40, 0xe, 0x33, {0x33, 0x11, "d32b429de72d3aea83b9f5a5c180279ccee36514b7c6bbe248e52e79dcdb68e0112faebfd0f75094633090ba6942c04b5c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="0000090000007dd8fa72bfe25defe6"], &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x61}}) syz_usb_control_io$printer(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 2.603995413s ago: executing program 3 (id=243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x5001}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x44101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x24, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x1000c080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c00, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) pread64(r0, &(0x7f0000000100)=""/148, 0x94, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007f40)={&(0x7f0000000000)=@getspdinfo={0x14, 0x25, 0x0, 0x70bd2d, 0x25dfdbfc, 0x6}, 0xfffffef0}}, 0x48000) 2.573692733s ago: executing program 3 (id=244): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f640094feff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 2.545421904s ago: executing program 3 (id=245): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x6, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x2, 0x4f5b1, 0xffffffff, 0x10000000, 0x0, 0x89b4, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0xfffffffc, 0x4, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x2, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0xffffffff, 0x0, 0x0, 0xedc0, 0xa60, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x4, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffff8, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0xfffffffa, 0xfffffffc, 0x4, 0x0, 0x63, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x100004, 0x8, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8ec5, 0xa, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x8, 0x0, 0x7}, 0x3c, [0xc244, 0x8, 0x87e, 0x3, 0x401, 0x4080, 0x4, 0x78, 0x6, 0x6, 0x0, 0x0, 0x5, 0x1ff, 0xd, 0x9, 0x7, 0x4, 0x99c, 0xffffffff, 0x0, 0x81, 0x0, 0x3, 0x1a24, 0x2, 0x10, 0xf0d10e9e, 0x80, 0x60c7, 0x2, 0x8, 0xceb4, 0x8, 0xfffffffd, 0xff, 0xba, 0x101, 0x6, 0x7, 0xb, 0xb2e, 0xe3a0, 0x1, 0xd890, 0x7, 0xc042, 0x10001, 0x5dd7, 0x8, 0xff, 0xffff9490, 0x0, 0x1, 0x8000, 0x8a9a, 0xab, 0x6, 0x7, 0x0, 0x1, 0x6, 0x6, 0x6], [0x16, 0x0, 0xfffffb25, 0x2, 0x7, 0x1, 0x10000, 0x6, 0x2, 0x80000001, 0x8000, 0x800, 0xffffffff, 0x5, 0x8, 0x4, 0x88, 0x0, 0xbb, 0x2, 0x3, 0x7f, 0x7f9, 0xf, 0xcc, 0x3, 0x9b, 0x8, 0x2a2eabc2, 0x0, 0x2, 0x10, 0x3ff, 0x9, 0x38b, 0x0, 0x5, 0x1024, 0xfffffffe, 0x1, 0x400, 0x1, 0x8000, 0x5, 0xfffffffd, 0x16d, 0x401, 0x398, 0x7, 0x2, 0x32, 0x7, 0xda58, 0x80000004, 0x5, 0x5, 0x8a, 0xfffffff3, 0x61, 0xc8, 0x4, 0x0, 0x3, 0x11], [0x7501, 0x8fcc, 0x2, 0x0, 0x8, 0x80000001, 0x8, 0x4, 0x1, 0x2463, 0x100, 0x7ff, 0x800, 0xe, 0x5, 0xe1cc, 0x7, 0x8, 0x100, 0x3ff, 0xc, 0x5, 0x4, 0x9, 0x101, 0x7, 0x4, 0x40, 0x40, 0x80, 0x4, 0x6a9, 0xde2f, 0xfff, 0x83, 0xb, 0x9, 0x380000, 0x80000000, 0x7, 0x10001, 0x9, 0x8, 0x0, 0x2, 0xd141, 0x0, 0xac8, 0x13, 0x8, 0x4000000, 0x4, 0x6c, 0xfffffff9, 0xf, 0x0, 0x8, 0xa, 0xaec4, 0x10000, 0x7fffffff, 0x4, 0x40002bc, 0x5bf], [0xfffffff9, 0x7, 0xb280, 0x1, 0x2, 0x20000005, 0x6, 0x3, 0x9, 0xff, 0xd, 0x2, 0xffff8000, 0x2, 0xfffffffb, 0x5, 0x6, 0x5, 0xfffffff8, 0x4, 0x6, 0x5, 0xf, 0xa, 0x1ff, 0x80000000, 0x9, 0x40, 0x8, 0x8, 0x40, 0x6, 0x2, 0x5, 0x9, 0x6, 0x2, 0xcd5, 0x0, 0x3, 0x13, 0xa, 0x5, 0x3, 0x2, 0x1, 0x2, 0x0, 0x81, 0x6, 0xffff7fff, 0x7, 0x0, 0xfffffff4, 0x6501, 0x30, 0x401, 0x8, 0x101, 0x1, 0x80000001, 0xbf21, 0x800, 0xa]}, 0x45c) 2.480292035s ago: executing program 3 (id=247): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback={0x61, 0x7ffffffe}}, 0x1c) 2.479267765s ago: executing program 3 (id=249): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) recvfrom$packet(r1, &(0x7f0000000080)=""/77, 0x4d, 0x2, &(0x7f0000000140)={0x11, 0x5, r2, 0x1, 0x6}, 0x14) fremovexattr(r1, &(0x7f0000000180)=@random={'system.', './binderfs2/custom1\x00'}) listen(r1, 0x9) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000002c0)={r1, &(0x7f00000001c0)='\x00', 0x0, &(0x7f0000000200)={@_ha_fsid={[0x6, 0xfff]}, {0xf, 0x1, 0x8, 0xfffffffffffff800}}, 0x200, &(0x7f0000000240), &(0x7f0000000280)=0x80}) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x4, 0x1, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000340)={0x0, 0x10000}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000380)={{r1}, 0x6, 0x2, 0xa4}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x80010, r1, 0x3ae20000) r4 = memfd_secret(0x80000) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f00000003c0)={0x0, 0x5, 0xc, 0x6, 0x4, 0x20, 0xf}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e20, 0x5, @mcast1, 0x4}}, 0x0, 0x0, 0x1c, 0x0, "74801785af22bd80706e9ddea7a3d5821d05bcd5614a9f0fb842b7461901c6e9604e4665970f72ca8c602af20977d9960e86758302138badb81b322fc4b9f307922fe7753df3f6f6b3e1b826d395a36f"}, 0xd8) connect$can_bcm(r3, &(0x7f0000000500), 0x10) sendto$packet(r3, &(0x7f0000000540)="8fb4e45570f6c038c4b6558ea4c883eeb0e337071a71810fd31a51ca416df1067f6c0e3d5967fe6c40cf37e99a00da2f41c4f6a65ef8c1441715946fe7e2ec33ed15bd40c2bd9fd6b0b74e7416707ef8755c31269883382e2fa46a4659e66c223c5d7753ff7e5e7e6d18170e60c4bdba7a9173eac6e62a3b7f4b492ed483e12f", 0x80, 0x80, &(0x7f00000005c0)={0x11, 0x4, r2, 0x1, 0xf5, 0x6, @remote}, 0x14) bind$vsock_stream(r3, &(0x7f0000000600)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = socket$inet6(0xa, 0x800, 0x81) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000640)={0x2, 'nicvf0\x00', {}, 0x9}) connect$inet6(r5, &(0x7f0000000680)={0xa, 0x4e24, 0x2, @mcast1, 0x6}, 0x1c) recvfrom$inet6(r4, &(0x7f00000006c0)=""/4096, 0x1000, 0x1042, &(0x7f00000016c0)={0xa, 0x4e21, 0x6, @local, 0x8000}, 0x1c) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000001700)={0x230e, 0x4, 0x88ea, 0xf, 0x800}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001740)={0x0, 0x9, 0x7, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001b40)={r6, 0xffffffffffffffb0}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f80), r4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000020c0)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001fc0)={0x9c, r7, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x4}}]}, 0x9c}}, 0x81) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000003600)={0xa, 0x0, [{0xa000, 0xa1, &(0x7f0000002100)=""/161}, {0x0, 0x36, &(0x7f00000021c0)=""/54}, {0x5000, 0x42, &(0x7f0000002200)=""/66}, {0x50000, 0x52, &(0x7f0000002280)=""/82}, {0x55000, 0x1000, &(0x7f0000002300)=""/4096}, {0xffffffff, 0x6c, &(0x7f0000003300)=""/108}, {0x60000, 0x16, &(0x7f0000003380)=""/22}, {0xd000, 0xb0, &(0x7f00000033c0)=""/176}, {0xeeee8000, 0x74, &(0x7f0000003480)=""/116}, {0x2000, 0xf7, &(0x7f0000003500)=""/247}]}) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f0000003780)={0xc5, 0x0, r3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003b80)={0x5c, 0x0, &(0x7f0000003a40)=[@register_looper, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x70, 0x18, &(0x7f0000003980)={@ptr={0x70742a85, 0x1, &(0x7f0000003840)=""/154, 0x9a, 0x2, 0x1c}, @fda={0x66646185, 0x1, 0x2, 0x27}, @ptr={0x70742a85, 0x0, &(0x7f0000003900)=""/105, 0x69, 0x2, 0x30}}, &(0x7f0000003a00)={0x0, 0x28, 0x48}}}], 0x90, 0x0, &(0x7f0000003ac0)="16578effc849c839062f919404b08312dfc14b3dd85dba1e312a4c8b9ca77e14e2dc829d46b0c2750b002a33e0419a769b99429b1490650be14cacd04dd6b7940c21982f25cdbb19e857dac571e6c50a2a4861c22112a4005669600e0adcc21025465755beae7ea452a6271c929ff7d669df88bad9ff077de80ef867f1174a5538b2b996d447fbc0c5bd783356dd7176"}) 2.362987828s ago: executing program 2 (id=250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe80006a000000000000000000000001fe80000000000000000000000000000220e620e60012", @ANYRES16], 0x64) 2.28265352s ago: executing program 0 (id=252): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf252100000009001f00706879320000000005002000000009000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 2.228386041s ago: executing program 0 (id=253): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x2, 0x0, 0xfffff9e2}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x37fe0) 2.228209441s ago: executing program 0 (id=254): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebca60000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 2.228049831s ago: executing program 2 (id=255): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r0, 0x400, 0x1) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00003f3000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000333000/0x2000)=nil) r3 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x0) openat(r3, &(0x7f0000000040)='./file0\x00', 0x280000, 0x8) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.192867272s ago: executing program 0 (id=257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6c", 0xc1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd0e, &(0x7f0000000000)="0400000000010000000000007e0100003801") 2.116086673s ago: executing program 0 (id=260): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.984656376s ago: executing program 3 (id=261): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2, 0x40}) r0 = socket(0x28, 0x5, 0x0) capget(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000100)={0x80000000, 0x1d8, 0xfffeffff, 0xf345, 0x6, 0xb}) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2504000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000880)={0x1c, &(0x7f00000018c0)={0x40, 0x6, 0x6, "b93e2cb02330"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x830) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x1) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x40, 0xe, 0x33, {0x33, 0x11, "d32b429de72d3aea83b9f5a5c180279ccee36514b7c6bbe248e52e79dcdb68e0112faebfd0f75094633090ba6942c04b5c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="0000090000007dd8fa72bfe25defe6"], &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x61}}) syz_usb_control_io$printer(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) socket(0x10, 0x3, 0x0) 1.35208717s ago: executing program 2 (id=264): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001100010002000000f6dbdf25650000001b"], 0xb4}], 0x1}, 0x0) syz_usb_connect(0x3, 0x38, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0x91, 0x8, 0x31, 0x20, 0x5ac, 0x1402, 0xe9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x2, 0x6, 0xa4, 0x20, 0x1, "", [{{0x9, 0x4, 0xfb, 0x3, 0x1, 0x23, 0x58, 0xd7, 0x4, [@generic={0x2, 0x3b}], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x7, 0x8}}]}}, {{0x9, 0x4, 0x9, 0x8, 0x0, 0x52, 0xef, 0x77, 0x40}}]}}]}}, 0x0) 945.859569ms ago: executing program 1 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe80d8bb000000000000000000000001fe80000000000000000000000000000220e620e60012", @ANYRES16], 0x64) 827.293362ms ago: executing program 1 (id=266): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebcf00000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 725.966604ms ago: executing program 1 (id=267): modify_ldt$write2(0x11, &(0x7f0000000000)={0xcb3, 0x20001000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) syz_clone(0x8f03bb80, 0x0, 0xe, 0x0, 0x0, 0x0) 693.346785ms ago: executing program 1 (id=268): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x6, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x2, 0x4f5b1, 0xffffffff, 0x10000000, 0x0, 0x89b4, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0xfffffffc, 0x4, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x2, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0xffffffff, 0x0, 0x0, 0xedc0, 0xa60, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x4, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffff8, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0xfffffffa, 0xfffffffc, 0x4, 0x0, 0x63, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x100004, 0x8, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8ec5, 0xa, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x8, 0x0, 0x7}, 0x3c, [0xc244, 0x8, 0x87e, 0x3, 0x401, 0x4080, 0x4, 0x78, 0x6, 0x6, 0x0, 0x0, 0x5, 0x1ff, 0xd, 0x9, 0x7, 0x4, 0x99c, 0xffffffff, 0x0, 0x81, 0x0, 0x3, 0x1a24, 0x2, 0x10, 0xf0d10e9e, 0x80, 0x60c7, 0x2, 0x8, 0xceb4, 0x8, 0xfffffffd, 0xff, 0xba, 0x101, 0x6, 0x7, 0xb, 0xb2e, 0xe3a0, 0x1, 0xd890, 0x7, 0xc042, 0x10001, 0x5dd7, 0x8, 0xff, 0xffff9490, 0x0, 0x1, 0x8000, 0x8a9a, 0xab, 0x6, 0x7, 0x0, 0x1, 0x6, 0x6, 0x6], [0x16, 0x0, 0xfffffb25, 0x2, 0x7, 0x1, 0x10000, 0x6, 0x2, 0x80000001, 0x8000, 0x800, 0xffffffff, 0x5, 0x8, 0x4, 0x88, 0x0, 0xbb, 0x2, 0x3, 0x7f, 0x7f9, 0xf, 0xcc, 0x3, 0x9b, 0x8, 0x2a2eabc2, 0x0, 0x2, 0x10, 0x3ff, 0x9, 0x38b, 0x0, 0x5, 0x1024, 0xfffffffe, 0x1, 0x400, 0x1, 0x8000, 0x5, 0xfffffffd, 0x16d, 0x401, 0x398, 0x7, 0x2, 0x32, 0x7, 0xda58, 0x80000004, 0x5, 0x5, 0x8a, 0xfffffff3, 0x61, 0xc8, 0x4, 0x0, 0x3, 0x14], [0x7501, 0x8fcc, 0x2, 0x0, 0x8, 0x80000001, 0x8, 0x4, 0x1, 0x2463, 0x100, 0x7ff, 0x800, 0xe, 0x5, 0xe1cc, 0x7, 0x8, 0x100, 0x3ff, 0xc, 0x5, 0x4, 0x9, 0x101, 0x7, 0x4, 0x40, 0x40, 0x80, 0x4, 0x6a9, 0xde2f, 0xfff, 0x83, 0xb, 0x9, 0x380000, 0x80000000, 0x7, 0x10001, 0x9, 0x8, 0x0, 0x2, 0xd141, 0x0, 0xac8, 0x13, 0x8, 0x4000000, 0x4, 0x6c, 0xfffffff9, 0xf, 0x0, 0x8, 0xa, 0xaec4, 0x10000, 0x7fffffff, 0x4, 0x40002bc, 0x5bf], [0xfffffff9, 0x7, 0xb280, 0x1, 0x2, 0x20000005, 0x6, 0x3, 0x9, 0xff, 0xd, 0x2, 0xffff8000, 0x2, 0xfffffffb, 0x5, 0x6, 0x5, 0xfffffff8, 0x4, 0x6, 0x5, 0xf, 0xa, 0x1ff, 0x80000000, 0x9, 0x40, 0x8, 0x8, 0x40, 0x6, 0x2, 0x5, 0x9, 0x6, 0x2, 0xcd5, 0x0, 0x3, 0x13, 0xa, 0x5, 0x3, 0x2, 0x1, 0x2, 0x0, 0x81, 0x6, 0xffff7fff, 0x7, 0x0, 0xfffffff4, 0x6501, 0x30, 0x401, 0x8, 0x101, 0x1, 0x80000001, 0xbf21, 0x800, 0xa]}, 0x45c) 604.268277ms ago: executing program 1 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x11, r1, 0x180000000) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000100)={0x3, 0x4}) getsockopt$inet_mreqn(r0, 0x0, 0x62, 0x0, &(0x7f0000000200)) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x40402, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f00000006c0)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x40000083, 0x0, 0x1001}, {0x4000009a, 0x0, 0xbc}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$binfmt_script(r6, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0xd379a179b893e6b0, &(0x7f0000000080)={@loopback, @broadcast}, &(0x7f00000000c0)=0xc) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0x0) 31.027069ms ago: executing program 1 (id=270): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYBLOB="5172768d62ca3884eef0be7d21431dddebb36551c2d593934c9f85c9209bb717b20748b50981d8fa3a246d790d748c18e65004250507b0c8499ad30814f86e0b4452fba580f07e796d9093584ced9d90d69090a2a20685c8d84054fefe940aa0a910028f5eb62518aed132945a979d970fa888b0782c7d7e357f8256d7816832cf3349198afd79c5dac97ecd2e321f394bc4b9d43fea54dde5c1670193f5a97fe00ee5806adf157eee9325f82b70ef3abad5"], 0x0) 0s ago: executing program 2 (id=271): r0 = add_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000380)="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", 0x1000, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000001600), &(0x7f0000001640)={'fscrypt:', @desc3}, &(0x7f0000001680)={0x0, "fdb3921438a69535ec1b6ad57ce43d88b3c45d82b3ac3d423571b4e1c61f1095106493425762ccf3fe07bd16962c9fe43a905c3a082e6f881bf2cc61b926c984", 0x30}, 0x48, 0xfffffffffffffff9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r2, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) keyctl$instantiate_iov(0x14, r0, &(0x7f00000015c0)=[{&(0x7f0000001380)="b826c8cef93ee32e437124ae80af2143cb39e02c16c25900e3bd8565247178a7c7bdaac51f3aa40e0d121d92b1fef45f65e6b4a16887a4d6b5ae23a14e92f71558f5ac2583ee1c155c1462210f68549d2a2fa2b9ab06445b8dde7bf9eb11d718a2e65c9eb423f7a897f35311c15c5638489afd1f938a8c1b6372cc087532ad5ca506ffded023bf94dcd3b921f7b69e63b2746b1bebff4616fa1a38f54225143a8f9e475b3f8f0d1a5a1811c1", 0xac}, {&(0x7f0000001440)="214b9f2ee30a082ebe3654af0a4a40ac222156abd5340d0744e58657f859d0ab80cedf7dff19d2f38bc02c704701cb58eef0989ae33c353529fc7868cc930172d74543ca924d765976ac3fe513c118aca9ddf7621283f5f208", 0x59}, {&(0x7f00000014c0)="65a3a6c9f64385653a96e324b6d7ffcd301ed466f0b50387665f06afacfaa26053870c42459f0088fa94ea4bc54dc7614c9894ccff564e0065e902f6cb5c3a1c99369f8aa256ac6d479577cc0ba5b6cd787226a3ee080dcd65087ea12190ddb237c691ce30c5d866d41a7a084b5817cbdfdc3bef9b2efc1645b780f39c60e7093139b0ecba4acb6c5881eb0bc01f9ae46e1c1c9009fddf1f8437bcb62a2cc73b9b4860f3957717c2af171dc47e00c5ff2302c8bbad00fb9f5f556055f8b5c7069ddfe8614f65c4a64d", 0xc9}], 0x3, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f00006c6000/0x1000)=nil, 0x1000, 0x3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/73, 0x304000, 0x800, 0x400009, 0x1}, 0x20) madvise(&(0x7f000001c000/0x3000)=nil, 0x3000, 0x9) add_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000380)="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", 0x1000, 0xfffffffffffffffd) (async) add_key$fscrypt_v1(&(0x7f0000001600), &(0x7f0000001640)={'fscrypt:', @desc3}, &(0x7f0000001680)={0x0, "fdb3921438a69535ec1b6ad57ce43d88b3c45d82b3ac3d423571b4e1c61f1095106493425762ccf3fe07bd16962c9fe43a905c3a082e6f881bf2cc61b926c984", 0x30}, 0x48, 0xfffffffffffffff9) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) (async) sendmmsg(r2, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) (async) keyctl$instantiate_iov(0x14, r0, &(0x7f00000015c0)=[{&(0x7f0000001380)="b826c8cef93ee32e437124ae80af2143cb39e02c16c25900e3bd8565247178a7c7bdaac51f3aa40e0d121d92b1fef45f65e6b4a16887a4d6b5ae23a14e92f71558f5ac2583ee1c155c1462210f68549d2a2fa2b9ab06445b8dde7bf9eb11d718a2e65c9eb423f7a897f35311c15c5638489afd1f938a8c1b6372cc087532ad5ca506ffded023bf94dcd3b921f7b69e63b2746b1bebff4616fa1a38f54225143a8f9e475b3f8f0d1a5a1811c1", 0xac}, {&(0x7f0000001440)="214b9f2ee30a082ebe3654af0a4a40ac222156abd5340d0744e58657f859d0ab80cedf7dff19d2f38bc02c704701cb58eef0989ae33c353529fc7868cc930172d74543ca924d765976ac3fe513c118aca9ddf7621283f5f208", 0x59}, {&(0x7f00000014c0)="65a3a6c9f64385653a96e324b6d7ffcd301ed466f0b50387665f06afacfaa26053870c42459f0088fa94ea4bc54dc7614c9894ccff564e0065e902f6cb5c3a1c99369f8aa256ac6d479577cc0ba5b6cd787226a3ee080dcd65087ea12190ddb237c691ce30c5d866d41a7a084b5817cbdfdc3bef9b2efc1645b780f39c60e7093139b0ecba4acb6c5881eb0bc01f9ae46e1c1c9009fddf1f8437bcb62a2cc73b9b4860f3957717c2af171dc47e00c5ff2302c8bbad00fb9f5f556055f8b5c7069ddfe8614f65c4a64d", 0xc9}], 0x3, r1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f00006c6000/0x1000)=nil, 0x1000, 0x3) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/73, 0x304000, 0x800, 0x400009, 0x1}, 0x20) (async) madvise(&(0x7f000001c000/0x3000)=nil, 0x3000, 0x9) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 30.560269][ T36] audit: type=1400 audit(1786396890.660:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.564861][ T287] cgroup: Unknown subsys name 'net' [ 30.583148][ T36] audit: type=1400 audit(1786396890.660:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.610557][ T36] audit: type=1400 audit(1786396890.690:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.610999][ T287] cgroup: Unknown subsys name 'devices' [ 30.736163][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.741807][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.837544][ T36] audit: type=1400 audit(1786396890.940:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.861180][ T36] audit: type=1400 audit(1786396890.940:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.886075][ T36] audit: type=1400 audit(1786396890.940:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.910374][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.919193][ T36] audit: type=1400 audit(1786396891.020:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.944628][ T36] audit: type=1400 audit(1786396891.020:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.950063][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.970707][ T36] audit: type=1400 audit(1786396891.050:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.004435][ T36] audit: type=1400 audit(1786396891.050:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.853952][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.861031][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.868458][ T296] bridge_slave_0: entered allmulticast mode [ 31.874772][ T296] bridge_slave_0: entered promiscuous mode [ 31.881317][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.888432][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.895809][ T296] bridge_slave_1: entered allmulticast mode [ 31.902033][ T296] bridge_slave_1: entered promiscuous mode [ 31.944716][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.951795][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.958969][ T297] bridge_slave_0: entered allmulticast mode [ 31.965299][ T297] bridge_slave_0: entered promiscuous mode [ 31.976421][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.983485][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.990613][ T297] bridge_slave_1: entered allmulticast mode [ 31.997090][ T297] bridge_slave_1: entered promiscuous mode [ 32.035650][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.042725][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.050009][ T294] bridge_slave_0: entered allmulticast mode [ 32.056357][ T294] bridge_slave_0: entered promiscuous mode [ 32.062830][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.069914][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.077009][ T294] bridge_slave_1: entered allmulticast mode [ 32.083341][ T294] bridge_slave_1: entered promiscuous mode [ 32.091267][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.098358][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.105514][ T295] bridge_slave_0: entered allmulticast mode [ 32.111769][ T295] bridge_slave_0: entered promiscuous mode [ 32.121224][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.128354][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.135566][ T295] bridge_slave_1: entered allmulticast mode [ 32.141887][ T295] bridge_slave_1: entered promiscuous mode [ 32.274611][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.281701][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.289048][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.296101][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.328328][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.335435][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.342748][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.349850][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.369749][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.376835][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.384159][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.391206][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.407763][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.414868][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.422184][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.429275][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.461519][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.469100][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.477279][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.484545][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.491725][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.499194][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.506875][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.526629][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.533714][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.541321][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.548582][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.560282][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.567403][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.578069][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.585150][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.607921][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.615004][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.650326][ T294] veth0_vlan: entered promiscuous mode [ 32.676981][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.684075][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.693515][ T297] veth0_vlan: entered promiscuous mode [ 32.702475][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.709559][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.719726][ T294] veth1_macvtap: entered promiscuous mode [ 32.734076][ T296] veth0_vlan: entered promiscuous mode [ 32.752266][ T297] veth1_macvtap: entered promiscuous mode [ 32.766732][ T296] veth1_macvtap: entered promiscuous mode [ 32.826218][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.836552][ T295] veth0_vlan: entered promiscuous mode [ 32.867117][ T295] veth1_macvtap: entered promiscuous mode [ 32.963243][ T325] capability: warning: `syz.0.5' uses 32-bit capabilities (legacy support in use) [ 32.981969][ T325] capability: warning: `syz.0.5' uses deprecated v2 capabilities in a way that may be insecure [ 33.125742][ T323] fuse: Bad value for 'group_id' [ 33.130835][ T323] fuse: Bad value for 'group_id' [ 33.144120][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.160896][ T335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.283794][ T320] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 33.308641][ T65] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 33.322286][ T65] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 33.335093][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.344273][ T65] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 33.355028][ T65] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 33.365111][ T65] usb 3-1: Product: syz [ 33.369895][ T65] usb 3-1: Manufacturer: syz [ 33.369999][ T323] rust_binder: Write failure EFAULT in pid:2 [ 33.375738][ T65] usb 3-1: SerialNumber: syz [ 33.378807][ T338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'. [ 33.396771][ T65] usb 3-1: config 0 descriptor?? [ 33.402663][ T65] hub 3-1:0.0: bad descriptor, ignoring hub [ 33.416646][ T65] hub 3-1:0.0: probe with driver hub failed with error -5 [ 33.442742][ T65] usb 3-1: selecting invalid altsetting 0 [ 33.464790][ T320] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 33.473577][ T320] usb 1-1: config 0 has no interface number 0 [ 33.480802][ T320] usb 1-1: config 0 interface 41 has no altsetting 0 [ 33.489456][ T320] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 33.499558][ T320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.508148][ T320] usb 1-1: Product: syz [ 33.515036][ T320] usb 1-1: Manufacturer: syz [ 33.519681][ T320] usb 1-1: SerialNumber: syz [ 33.531594][ T320] usb 1-1: config 0 descriptor?? [ 33.727962][ T319] usb 3-1: USB disconnect, device number 2 [ 33.773745][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.844218][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 33.933727][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 33.939884][ T65] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 33.951218][ T65] usb 4-1: config 1 interface 0 has no altsetting 0 [ 33.959340][ T65] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 33.968853][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.976943][ T31] usb 2-1: device descriptor read/64, error -71 [ 33.983248][ T65] usb 4-1: Product: syz [ 33.987757][ T65] usb 4-1: Manufacturer: syz [ 33.992380][ T65] usb 4-1: SerialNumber: syz [ 34.213723][ T31] usb 2-1: device descriptor read/64, error -71 [ 34.359778][ T320] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 34.463732][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 34.603785][ T31] usb 2-1: device descriptor read/64, error -71 [ 34.843777][ T31] usb 2-1: device descriptor read/64, error -71 [ 34.953841][ T31] usb usb2-port1: attempt power cycle [ 35.293717][ T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 35.293756][ T319] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 35.314818][ T31] usb 2-1: device descriptor read/8, error -71 [ 35.326452][ T368] netlink: 'syz.0.5': attribute type 3 has an invalid length. [ 35.335467][ T368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.344118][ T368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.445054][ T31] usb 2-1: device descriptor read/8, error -71 [ 35.455012][ T319] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 35.465963][ T319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 35.477106][ T319] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 35.490220][ T319] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 35.499318][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.508177][ T319] usb 3-1: config 0 descriptor?? [ 35.513431][ T367] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 35.575413][ T320] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 35.586131][ T320] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 35.595656][ T320] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 35.605350][ T320] usb 1-1: USB disconnect, device number 2 [ 35.683986][ T31] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 35.704766][ T31] usb 2-1: device descriptor read/8, error -71 [ 35.845018][ T31] usb 2-1: device descriptor read/8, error -71 [ 35.924277][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x2 [ 35.933694][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 35.941226][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 35.948893][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 35.954254][ T31] usb usb2-port1: unable to enumerate USB device [ 35.956558][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 35.970416][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 35.977984][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 35.985593][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 35.993129][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.000792][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.008355][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.015976][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.023577][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.031199][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.038896][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.046456][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.054013][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.061537][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.069104][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.076652][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.084383][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.091903][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.099474][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.107393][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.114960][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.122482][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.130486][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.138139][ T367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.149620][ T319] holtek_mouse 0003:04D9:A070.0001: unknown main item tag 0x0 [ 36.157337][ T367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.170767][ T319] holtek_mouse 0003:04D9:A070.0001: hidraw0: USB HID v0.01 Device [HID 04d9:a070] on usb-dummy_hcd.2-1/input0 [ 36.200934][ T319] usb 3-1: USB disconnect, device number 3 [ 36.266893][ T372] fido_id[372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 36.389596][ T381] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.458814][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 36.458852][ T36] audit: type=1400 audit(1786396896.560:143): avc: denied { mount } for pid=382 comm="syz.0.24" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.460899][ T383] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 36.467185][ T36] audit: type=1400 audit(1786396896.560:144): avc: denied { read } for pid=382 comm="syz.0.24" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 36.518264][ T36] audit: type=1400 audit(1786396896.560:145): avc: denied { open } for pid=382 comm="syz.0.24" path="/7/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 36.564003][ T36] audit: type=1400 audit(1786396896.560:146): avc: denied { ioctl } for pid=382 comm="syz.0.24" path="/7/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 36.596510][ T36] audit: type=1400 audit(1786396896.610:147): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.611201][ T65] usb 4-1: USB disconnect, device number 2 [ 36.654009][ T392] netlink: 'syz.1.29': attribute type 3 has an invalid length. [ 36.661769][ T36] audit: type=1400 audit(1786396896.740:148): avc: denied { create } for pid=386 comm="syz.1.26" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.699848][ T36] audit: type=1400 audit(1786396896.740:149): avc: denied { read } for pid=386 comm="syz.1.26" name="file2" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.753679][ T36] audit: type=1400 audit(1786396896.740:150): avc: denied { open } for pid=386 comm="syz.1.26" path="/9/file2" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.782394][ T402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.33'. [ 36.788371][ T36] audit: type=1400 audit(1786396896.740:151): avc: denied { create } for pid=386 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.812650][ T36] audit: type=1400 audit(1786396896.740:152): avc: denied { ioctl } for pid=386 comm="syz.1.26" path="/9/file2" dev="tmpfs" ino=63 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.963004][ T411] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 37.013752][ T65] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 37.033315][ T418] input: syz1 as /devices/virtual/input/input4 [ 37.113708][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.174852][ T65] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 37.183259][ T65] usb 4-1: config 0 has no interface number 0 [ 37.191987][ T65] usb 4-1: config 0 interface 41 has no altsetting 0 [ 37.200508][ T65] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 37.209871][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.217945][ T65] usb 4-1: Product: syz [ 37.222222][ T65] usb 4-1: Manufacturer: syz [ 37.226935][ T65] usb 4-1: SerialNumber: syz [ 37.232832][ T65] usb 4-1: config 0 descriptor?? [ 37.263732][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 37.270139][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 37.278597][ T31] usb 1-1: config 0 has no interface number 0 [ 37.286692][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 37.296019][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.304186][ T31] usb 1-1: Product: syz [ 37.308584][ T31] usb 1-1: Manufacturer: syz [ 37.313711][ T31] usb 1-1: SerialNumber: syz [ 37.319850][ T31] usb 1-1: config 0 descriptor?? [ 37.326351][ T31] smsc95xx v2.0.0 [ 37.730101][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 37.741148][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 37.785501][ T436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 37.885140][ T440] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 37.971402][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 37.982298][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 38.040547][ T65] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 38.303709][ T319] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.454919][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.465948][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.475885][ T319] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 38.485437][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.494267][ T319] usb 2-1: config 0 descriptor?? [ 38.543928][ T458] process 'syz.0.36' launched './file0' with NULL argv: empty string added [ 38.826314][ T464] input: syz1 as /devices/virtual/input/input5 [ 38.901632][ T450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.911486][ T450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.921107][ T319] usbhid 2-1:0.0: can't add hid device: -71 [ 38.927177][ T319] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 38.935998][ T319] usb 2-1: USB disconnect, device number 6 [ 39.018546][ T469] netlink: 'syz.3.27': attribute type 3 has an invalid length. [ 39.028029][ T469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.036647][ T469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.103731][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 39.255289][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 39.263487][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 39.272179][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.282391][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.284511][ T65] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 39.302056][ T65] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 39.303867][ T9] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 39.311701][ T65] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 39.321586][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.333099][ T65] usb 4-1: USB disconnect, device number 3 [ 39.343495][ T9] usb 3-1: Product: syz [ 39.347992][ T9] usb 3-1: Manufacturer: syz [ 39.352683][ T9] usb 3-1: SerialNumber: syz [ 39.476759][ T475] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.513147][ T477] netlink: 'syz.1.63': attribute type 3 has an invalid length. [ 39.828069][ T491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.69'. [ 39.875007][ T319] usb 1-1: USB disconnect, device number 3 [ 39.976131][ T498] coredump: 34(syz.0.72): Core dump to core aborted: cannot preserve file permissions [ 39.993851][ T369] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.031820][ T499] coredump: 35(syz.0.72): Core dump to core aborted: cannot preserve file permissions [ 40.084089][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.111136][ T503] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1768292356.3171692.0), cmd(32) [ 40.153700][ T369] usb 2-1: Using ep0 maxpacket: 16 [ 40.161241][ T369] usb 2-1: device descriptor read/all, error -61 [ 40.234902][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.247408][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.256743][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.264799][ T65] usb 4-1: Product: syz [ 40.269011][ T65] usb 4-1: Manufacturer: syz [ 40.273669][ T65] usb 4-1: SerialNumber: syz [ 40.303724][ T369] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.433725][ T369] usb 2-1: device descriptor read/64, error -71 [ 40.453737][ T31] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 40.604926][ T31] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 40.613102][ T31] usb 1-1: config 0 has no interface number 0 [ 40.619349][ T31] usb 1-1: config 0 interface 41 has no altsetting 0 [ 40.627722][ T31] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 40.637013][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.645066][ T31] usb 1-1: Product: syz [ 40.649300][ T31] usb 1-1: Manufacturer: syz [ 40.653963][ T31] usb 1-1: SerialNumber: syz [ 40.659953][ T31] usb 1-1: config 0 descriptor?? [ 40.683690][ T369] usb 2-1: device descriptor read/64, error -71 [ 40.793858][ T369] usb usb2-port1: attempt power cycle [ 41.133699][ T369] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 41.154818][ T369] usb 2-1: device descriptor read/8, error -71 [ 41.283019][ T65] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 41.285409][ T369] usb 2-1: device descriptor read/8, error -71 [ 41.289625][ T65] cdc_ncm 4-1:1.0: setting tx_max = 48 [ 41.303801][ T65] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 41.468191][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 41.468210][ T36] audit: type=1400 audit(1786396901.570:209): avc: denied { unlink } for pid=522 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.493213][ T319] usb 4-1: USB disconnect, device number 4 [ 41.503699][ T31] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 41.511026][ T319] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 41.543710][ T369] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 41.574768][ T369] usb 2-1: device descriptor read/8, error -71 [ 41.714781][ T369] usb 2-1: device descriptor read/8, error -71 [ 41.823791][ T369] usb usb2-port1: unable to enumerate USB device [ 41.881230][ T9] usb 3-1: unit 3 not found! [ 41.895745][ T9] usb 3-1: USB disconnect, device number 4 [ 41.903398][ T538] netlink: 'syz.2.78': attribute type 3 has an invalid length. [ 41.914563][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.051775][ T548] tipc: Started in network mode [ 42.056775][ T548] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 42.064374][ T548] tipc: Enabled bearer , priority 10 [ 42.143696][ T36] audit: type=1400 audit(1786396902.240:210): avc: denied { create } for pid=549 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.162933][ T36] audit: type=1400 audit(1786396902.250:211): avc: denied { ioctl } for pid=549 comm="syz.2.83" path="socket:[5370]" dev="sockfs" ino=5370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.169140][ T553] kvm: apic: phys broadcast and lowest prio [ 42.269307][ T36] audit: type=1400 audit(1786396902.370:212): avc: denied { block_suspend } for pid=555 comm="syz.3.85" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.486423][ T559] netlink: 'syz.0.77': attribute type 3 has an invalid length. [ 42.494819][ T559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.503343][ T559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.533897][ T369] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 42.696436][ T558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.709048][ T558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.728482][ T369] usb 4-1: unable to get BOS descriptor or descriptor too short [ 42.743521][ T31] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 42.749278][ T369] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 42.756809][ T31] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 42.772096][ T31] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 42.773982][ T369] usb 4-1: can't read configurations, error -71 [ 42.786967][ T31] usb 1-1: USB disconnect, device number 4 [ 43.033752][ T319] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 43.183725][ T31] tipc: Node number set to 9611946 [ 43.185446][ T319] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.199302][ T319] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 43.210292][ T319] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 43.221454][ T319] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 43.230613][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.238697][ T319] usb 3-1: Product: syz [ 43.242916][ T319] usb 3-1: Manufacturer: syz [ 43.247582][ T319] usb 3-1: SerialNumber: syz [ 43.358577][ T579] netlink: 'syz.3.94': attribute type 3 has an invalid length. [ 43.436022][ T585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 43.469758][ T319] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 43.487601][ T319] usb 3-1: USB disconnect, device number 5 [ 43.496738][ T591] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(3145732.0.0), cmd(14) [ 43.543365][ T36] audit: type=1400 audit(1786396903.640:213): avc: denied { listen } for pid=594 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.568679][ T36] audit: type=1400 audit(1786396903.670:214): avc: denied { connect } for pid=594 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.592841][ T36] audit: type=1400 audit(1786396903.690:215): avc: denied { setopt } for pid=594 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.612449][ T36] audit: type=1400 audit(1786396903.690:216): avc: denied { append } for pid=594 comm="syz.0.102" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.645558][ T603] Zero length message leads to an empty skb [ 43.663690][ T36] audit: type=1400 audit(1786396903.690:217): avc: denied { write } for pid=594 comm="syz.0.102" path="socket:[6302]" dev="sockfs" ino=6302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.689680][ T36] audit: type=1400 audit(1786396903.690:218): avc: denied { shutdown } for pid=594 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.694196][ T605] netlink: 'syz.0.107': attribute type 3 has an invalid length. [ 43.926413][ T618] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(6029316.0.0), cmd(14) [ 44.018959][ T628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.117'. [ 44.193736][ T369] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 44.263735][ T354] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 44.343734][ T369] usb 2-1: Using ep0 maxpacket: 8 [ 44.350307][ T369] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 44.358616][ T369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.371432][ T369] usb 2-1: config 0 has no interface number 0 [ 44.377615][ T369] usb 2-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.393673][ T369] usb 2-1: config 0 interface 200 has no altsetting 0 [ 44.405183][ T369] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 44.415203][ T354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.417729][ T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.427613][ T354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.438626][ T369] usb 2-1: Product: syz [ 44.448356][ T369] usb 2-1: Manufacturer: syz [ 44.448716][ T354] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 44.454275][ T369] usb 2-1: SerialNumber: syz [ 44.462376][ T354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.475812][ T369] usb 2-1: config 0 descriptor?? [ 44.481455][ T354] usb 4-1: config 0 descriptor?? [ 44.763694][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 44.889088][ T354] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 44.896046][ T354] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 44.902846][ T354] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 44.909990][ T354] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 44.917119][ T354] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 44.924268][ T354] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 44.931442][ T354] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 44.944597][ T354] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 44.957311][ T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 44.966531][ T640] netlink: 'syz.2.122': attribute type 3 has an invalid length. [ 44.974358][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.982466][ T31] usb 1-1: Product: syz [ 44.986913][ T31] usb 1-1: Manufacturer: syz [ 44.991562][ T31] usb 1-1: SerialNumber: syz [ 45.088268][ T354] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device [ 45.089465][ T620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.095882][ T354] arvo 0003:1E7D:30D4.0002: couldn't install keyboard [ 45.112900][ T620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.122037][ T354] arvo 0003:1E7D:30D4.0002: probe with driver arvo failed with error -32 [ 45.139833][ T354] usb 4-1: USB disconnect, device number 7 [ 45.223195][ T653] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(16646148.0.0), cmd(14) [ 45.289521][ T655] bridge0: port 3(erspan0) entered blocking state [ 45.297066][ T655] bridge0: port 3(erspan0) entered disabled state [ 45.303602][ T655] erspan0: entered allmulticast mode [ 45.310045][ T655] erspan0: entered promiscuous mode [ 45.315621][ T655] bridge0: port 3(erspan0) entered blocking state [ 45.322091][ T655] bridge0: port 3(erspan0) entered forwarding state [ 45.402603][ T664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.132'. [ 45.563731][ T354] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 45.733715][ T354] usb 3-1: Using ep0 maxpacket: 8 [ 45.740003][ T354] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.751340][ T354] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 45.762684][ T354] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.775747][ T354] usb 3-1: config 0 interface 0 has no altsetting 0 [ 45.782440][ T354] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 45.791790][ T354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.800904][ T354] usb 3-1: config 0 descriptor?? [ 45.806734][ T658] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 45.961158][ T683] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(25165828.0.0), cmd(14) [ 46.069253][ T691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.143'. [ 46.217795][ T354] input: HID 1b96:000a as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B96:000A.0003/input/input6 [ 46.233762][ T354] ntrig 0003:1B96:000A.0003: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 46.333750][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 46.421576][ T354] usb 3-1: USB disconnect, device number 6 [ 46.439747][ T696] input: syz1 as /devices/virtual/input/input7 [ 46.483790][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 46.490107][ T31] usb 4-1: config 0 interface 0 altsetting 114 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.503152][ T31] usb 4-1: config 0 interface 0 altsetting 114 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.513277][ T31] usb 4-1: config 0 interface 0 altsetting 114 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.526470][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 46.533118][ T31] usb 4-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 46.542267][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.551164][ T31] usb 4-1: config 0 descriptor?? [ 46.634966][ T701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.645971][ T701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.656893][ T701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.666345][ T701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.759155][ T31] usb 4-1: string descriptor 0 read error: -71 [ 46.767531][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 46.773508][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 46.782333][ T31] usb 4-1: USB disconnect, device number 8 [ 46.974691][ T705] FAULT_INJECTION: forcing a failure. [ 46.974691][ T705] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.988970][ T705] CPU: 0 UID: 0 PID: 705 Comm: syz.2.149 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 46.989010][ T705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.989032][ T705] Call Trace: [ 46.989039][ T705] [ 46.989048][ T705] __dump_stack+0x21/0x30 [ 46.989088][ T705] dump_stack_lvl+0x140/0x1c0 [ 46.989119][ T705] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.989157][ T705] ? _parse_integer+0x2e/0x40 [ 46.989180][ T705] ? kstrtoull+0x13b/0x1e0 [ 46.989202][ T705] dump_stack+0x19/0x20 [ 46.989231][ T705] should_fail_ex+0x3c2/0x510 [ 46.989256][ T705] should_fail+0xf/0x20 [ 46.989278][ T705] should_fail_usercopy+0x1e/0x30 [ 46.989305][ T705] _copy_from_user+0x20/0xa0 [ 46.989335][ T705] ___sys_sendmsg+0x1c7/0x370 [ 46.989360][ T705] ? __sys_sendmsg+0x2a0/0x2a0 [ 46.989382][ T705] ? proc_fail_nth_write+0x184/0x220 [ 46.989419][ T705] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 46.989446][ T705] ? __fget_files+0x2bc/0x330 [ 46.989466][ T705] __x64_sys_sendmsg+0x206/0x2e0 [ 46.989482][ T705] ? fput+0x1a4/0x230 [ 46.989502][ T705] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 46.989518][ T705] ? ksys_write+0x1f3/0x260 [ 46.989535][ T705] ? __kasan_check_read+0x15/0x20 [ 46.989551][ T705] x64_sys_call+0x2a4c/0x2ee0 [ 46.989565][ T705] do_syscall_64+0x57/0xf0 [ 46.989584][ T705] ? clear_bhb_loop+0x50/0xa0 [ 46.989612][ T705] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.989632][ T705] RIP: 0033:0x7f99b719e0d9 [ 46.989646][ T705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.989659][ T705] RSP: 002b:00007f99b7ff4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.989679][ T705] RAX: ffffffffffffffda RBX: 00007f99b7425fa0 RCX: 00007f99b719e0d9 [ 46.989691][ T705] RDX: 0000000000048000 RSI: 0000200000007f80 RDI: 0000000000000003 [ 46.989702][ T705] RBP: 00007f99b7ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 46.989711][ T705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.989720][ T705] R13: 00007f99b7426038 R14: 00007f99b7425fa0 R15: 00007fffb9d12b48 [ 46.989734][ T705] [ 47.253166][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 47.253184][ T36] audit: type=1400 audit(1786396907.350:235): avc: denied { getopt } for pid=708 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.257737][ T709] 9p: Unknown uid 00000000004294967295 [ 47.379137][ T36] audit: type=1400 audit(1786396907.480:236): avc: denied { create } for pid=713 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.441642][ T718] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(83886084.0.0), cmd(14) [ 47.454761][ T31] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 47.496937][ T722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.157'. [ 47.525944][ T36] audit: type=1400 audit(1786396907.630:237): avc: denied { ioctl } for pid=723 comm="syz.3.158" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6802 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.563250][ T319] usb 1-1: USB disconnect, device number 5 [ 47.577655][ T726] netlink: 'syz.0.159': attribute type 3 has an invalid length. [ 47.605952][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 47.618447][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 47.631782][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 47.644805][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 47.659752][ T31] usb 3-1: string descriptor 0 read error: -22 [ 47.666143][ T31] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 47.675433][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.778607][ T736] FAULT_INJECTION: forcing a failure. [ 47.778607][ T736] name failslab, interval 1, probability 0, space 0, times 1 [ 47.791343][ T736] CPU: 1 UID: 0 PID: 736 Comm: syz.0.164 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 47.791376][ T736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.791390][ T736] Call Trace: [ 47.791398][ T736] [ 47.791407][ T736] __dump_stack+0x21/0x30 [ 47.791451][ T736] dump_stack_lvl+0x140/0x1c0 [ 47.791491][ T736] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.791527][ T736] ? release_sock+0x171/0x1f0 [ 47.791549][ T736] dump_stack+0x19/0x20 [ 47.791569][ T736] should_fail_ex+0x3c2/0x510 [ 47.791606][ T736] should_failslab+0xac/0x100 [ 47.791634][ T736] kmem_cache_alloc_node_noprof+0x45/0x420 [ 47.791657][ T736] ? netlink_data_ready+0x20/0x20 [ 47.791682][ T736] ? __alloc_skb+0x10c/0x360 [ 47.791704][ T736] __alloc_skb+0x10c/0x360 [ 47.791725][ T736] netlink_alloc_large_skb+0xf7/0x1b0 [ 47.791772][ T736] netlink_sendmsg+0x576/0xad0 [ 47.791795][ T736] ? __cfi_netlink_sendmsg+0x10/0x10 [ 47.791825][ T736] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 47.791843][ T736] ? security_socket_sendmsg+0x3d/0x100 [ 47.791866][ T736] ____sys_sendmsg+0x9a1/0xa00 [ 47.791896][ T736] ? __import_iovec+0x5b9/0x7d0 [ 47.791929][ T736] ? __sys_sendmsg_sock+0x50/0x50 [ 47.791953][ T736] ? import_iovec+0x80/0xb0 [ 47.791987][ T736] ___sys_sendmsg+0x2a6/0x370 [ 47.792004][ T736] ? __sys_sendmsg+0x2a0/0x2a0 [ 47.792020][ T736] ? proc_fail_nth_write+0x184/0x220 [ 47.792063][ T736] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 47.792099][ T736] ? __fget_files+0x2bc/0x330 [ 47.792130][ T736] __x64_sys_sendmsg+0x206/0x2e0 [ 47.792146][ T736] ? fput+0x1a4/0x230 [ 47.792170][ T736] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 47.792203][ T736] ? ksys_write+0x1f3/0x260 [ 47.792228][ T736] ? __kasan_check_read+0x15/0x20 [ 47.792250][ T736] x64_sys_call+0x2a4c/0x2ee0 [ 47.792275][ T736] do_syscall_64+0x57/0xf0 [ 47.792293][ T736] ? clear_bhb_loop+0x50/0xa0 [ 47.792315][ T736] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.792352][ T736] RIP: 0033:0x7fd5dfb9e0d9 [ 47.792371][ T736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.792389][ T736] RSP: 002b:00007fd5e0a1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.792412][ T736] RAX: ffffffffffffffda RBX: 00007fd5dfe25fa0 RCX: 00007fd5dfb9e0d9 [ 47.792431][ T736] RDX: 0000000000048000 RSI: 0000200000007f80 RDI: 0000000000000003 [ 47.792443][ T736] RBP: 00007fd5e0a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 47.792454][ T736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.792464][ T736] R13: 00007fd5dfe26038 R14: 00007fd5dfe25fa0 R15: 00007fff4c309ff8 [ 47.792477][ T736] [ 47.946467][ T36] audit: type=1400 audit(1786396908.050:238): avc: denied { create } for pid=737 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.036722][ T363] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 48.090787][ T36] audit: type=1400 audit(1786396908.170:239): avc: denied { write } for pid=737 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.163756][ T363] usb 4-1: device descriptor read/64, error -71 [ 48.179288][ T31] usb 3-1: unable to issue vendor read request (ret = -71) [ 48.187254][ T31] usb 3-1: unable to issue vendor read request (ret = -71) [ 48.200415][ T31] usb 3-1: unable to issue vendor read request (ret = -71) [ 48.213011][ T31] usb 3-1: USB disconnect, device number 7 [ 48.239606][ T36] audit: type=1400 audit(1786396908.340:240): avc: denied { read write } for pid=745 comm="syz.1.169" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.262844][ T36] audit: type=1400 audit(1786396908.340:241): avc: denied { open } for pid=745 comm="syz.1.169" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.269593][ T746] 9pnet_fd: Insufficient options for proto=fd [ 48.286817][ T36] audit: type=1400 audit(1786396908.340:242): avc: denied { ioctl } for pid=745 comm="syz.1.169" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.344931][ T319] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 48.374200][ T750] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(100663300.0.0), cmd(14) [ 48.443694][ T363] usb 4-1: device descriptor read/64, error -71 [ 48.448928][ T756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.173'. [ 48.503841][ T319] usb 1-1: Using ep0 maxpacket: 32 [ 48.510207][ T319] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 48.518360][ T319] usb 1-1: config 0 has no interface number 0 [ 48.525427][ T319] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.536471][ T319] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.546282][ T319] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 48.555445][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.567004][ T319] usb 1-1: config 0 descriptor?? [ 48.693717][ T363] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 48.753460][ T768] netlink: 252 bytes leftover after parsing attributes in process `syz.2.179'. [ 48.762808][ T36] audit: type=1400 audit(1786396908.850:243): avc: denied { setopt } for pid=767 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.805098][ T36] audit: type=1400 audit(1786396908.910:244): avc: denied { mount } for pid=774 comm="syz.2.180" name="/" dev="configfs" ino=2502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.848050][ T363] usb 4-1: device descriptor read/64, error -71 [ 48.958696][ T783] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(117440516.0.0), cmd(14) [ 49.014369][ T790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.187'. [ 49.073719][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 49.103702][ T363] usb 4-1: device descriptor read/64, error -71 [ 49.158614][ T795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.167432][ T795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.176896][ T796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.185493][ T796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.213805][ T363] usb usb4-port1: attempt power cycle [ 49.223693][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 49.229977][ T9] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 49.238215][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.248573][ T9] usb 3-1: config 0 has no interface number 0 [ 49.263727][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 49.272811][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.283591][ T9] usb 3-1: Product: syz [ 49.287922][ T9] usb 3-1: Manufacturer: syz [ 49.292629][ T9] usb 3-1: SerialNumber: syz [ 49.298873][ T9] usb 3-1: config 0 descriptor?? [ 49.306573][ T9] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 49.312999][ T9] usb 3-1: No valid video chain found. [ 49.525172][ T319] uclogic 0003:28BD:0094.0004: failed retrieving string descriptor #100: -71 [ 49.534220][ T319] uclogic 0003:28BD:0094.0004: failed retrieving pen parameters: -71 [ 49.542806][ T319] uclogic 0003:28BD:0094.0004: pen probing failed: -71 [ 49.550211][ T319] uclogic 0003:28BD:0094.0004: failed probing parameters: -71 [ 49.557889][ T319] uclogic 0003:28BD:0094.0004: probe with driver uclogic failed with error -71 [ 49.563791][ T363] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 49.569642][ T369] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 49.583119][ T319] usb 1-1: USB disconnect, device number 6 [ 49.594697][ T363] usb 4-1: device descriptor read/8, error -71 [ 49.716493][ T800] FAULT_INJECTION: forcing a failure. [ 49.716493][ T800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.729712][ T800] CPU: 1 UID: 0 PID: 800 Comm: syz.1.190 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 49.729754][ T800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.729765][ T800] Call Trace: [ 49.729770][ T800] [ 49.729777][ T800] __dump_stack+0x21/0x30 [ 49.729805][ T800] dump_stack_lvl+0x140/0x1c0 [ 49.729827][ T800] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.729851][ T800] dump_stack+0x19/0x20 [ 49.729875][ T800] should_fail_ex+0x3c2/0x510 [ 49.729893][ T800] should_fail+0xf/0x20 [ 49.729909][ T800] should_fail_usercopy+0x1e/0x30 [ 49.729928][ T800] _copy_from_iter+0x1a6/0x1520 [ 49.729950][ T800] ? __virt_addr_valid+0x2a1/0x370 [ 49.729969][ T800] ? __cfi__copy_from_iter+0x10/0x10 [ 49.729989][ T800] ? __check_object_size+0x54c/0x870 [ 49.730006][ T800] ? __cfi___check_object_size+0x10/0x10 [ 49.730023][ T800] ? skb_put+0x10e/0x200 [ 49.730045][ T800] netlink_sendmsg+0x66d/0xad0 [ 49.730062][ T800] ? __cfi_netlink_sendmsg+0x10/0x10 [ 49.730085][ T800] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 49.730103][ T800] ? security_socket_sendmsg+0x3d/0x100 [ 49.730125][ T800] ____sys_sendmsg+0x9a1/0xa00 [ 49.730150][ T800] ? __import_iovec+0x5b9/0x7d0 [ 49.730172][ T800] ? __sys_sendmsg_sock+0x50/0x50 [ 49.730189][ T800] ? import_iovec+0x80/0xb0 [ 49.730211][ T800] ___sys_sendmsg+0x2a6/0x370 [ 49.730228][ T800] ? __sys_sendmsg+0x2a0/0x2a0 [ 49.730243][ T800] ? proc_fail_nth_write+0x184/0x220 [ 49.730266][ T800] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 49.730292][ T800] ? __fget_files+0x2bc/0x330 [ 49.730312][ T800] __x64_sys_sendmsg+0x206/0x2e0 [ 49.730327][ T800] ? fput+0x1a4/0x230 [ 49.730352][ T800] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 49.730395][ T800] ? ksys_write+0x1f3/0x260 [ 49.730417][ T800] ? __kasan_check_read+0x15/0x20 [ 49.730434][ T800] x64_sys_call+0x2a4c/0x2ee0 [ 49.730448][ T800] do_syscall_64+0x57/0xf0 [ 49.730471][ T800] ? clear_bhb_loop+0x50/0xa0 [ 49.730498][ T800] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.730524][ T800] RIP: 0033:0x7f86b339e0d9 [ 49.730538][ T800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.730551][ T800] RSP: 002b:00007f86b4249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.730568][ T800] RAX: ffffffffffffffda RBX: 00007f86b3625fa0 RCX: 00007f86b339e0d9 [ 49.730579][ T800] RDX: 0000000000048000 RSI: 0000200000007f80 RDI: 0000000000000003 [ 49.730595][ T800] RBP: 00007f86b4249090 R08: 0000000000000000 R09: 0000000000000000 [ 49.730605][ T800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.730619][ T800] R13: 00007f86b3626038 R14: 00007f86b3625fa0 R15: 00007fff76be53e8 [ 49.730633][ T800] [ 50.015749][ T363] usb 4-1: device descriptor read/8, error -71 [ 50.034693][ T804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.043255][ T804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.263737][ T363] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 50.284738][ T363] usb 4-1: device descriptor read/8, error -71 [ 50.324117][ T369] usb 3-1: USB disconnect, device number 8 [ 50.344861][ T816] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(150994948.0.0), cmd(14) [ 50.414910][ T363] usb 4-1: device descriptor read/8, error -71 [ 50.523845][ T363] usb usb4-port1: unable to enumerate USB device [ 50.577020][ T823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.585683][ T823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.676916][ T831] FAULT_INJECTION: forcing a failure. [ 50.676916][ T831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.690039][ T831] CPU: 1 UID: 0 PID: 831 Comm: syz.3.203 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 50.690075][ T831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.690093][ T831] Call Trace: [ 50.690100][ T831] [ 50.690106][ T831] __dump_stack+0x21/0x30 [ 50.690133][ T831] dump_stack_lvl+0x140/0x1c0 [ 50.690155][ T831] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.690178][ T831] ? check_stack_object+0x138/0x150 [ 50.690195][ T831] dump_stack+0x19/0x20 [ 50.690216][ T831] should_fail_ex+0x3c2/0x510 [ 50.690235][ T831] should_fail+0xf/0x20 [ 50.690251][ T831] should_fail_usercopy+0x1e/0x30 [ 50.690269][ T831] _copy_to_user+0x24/0xa0 [ 50.690291][ T831] simple_read_from_buffer+0xed/0x160 [ 50.690314][ T831] proc_fail_nth_read+0x1aa/0x220 [ 50.690338][ T831] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 50.690361][ T831] ? bpf_lsm_file_permission+0xd/0x20 [ 50.690388][ T831] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 50.690410][ T831] vfs_read+0x288/0xc70 [ 50.690426][ T831] ? __cfi_vfs_read+0x10/0x10 [ 50.690441][ T831] ? __kasan_check_write+0x18/0x20 [ 50.690456][ T831] ? mutex_lock+0x97/0x1d0 [ 50.690478][ T831] ? __cfi_mutex_lock+0x10/0x10 [ 50.690501][ T831] ksys_read+0x145/0x260 [ 50.690516][ T831] ? __cfi_ksys_read+0x10/0x10 [ 50.690532][ T831] ? __kasan_check_read+0x15/0x20 [ 50.690547][ T831] __x64_sys_read+0x7f/0x90 [ 50.690563][ T831] x64_sys_call+0x2638/0x2ee0 [ 50.690577][ T831] do_syscall_64+0x57/0xf0 [ 50.690594][ T831] ? clear_bhb_loop+0x50/0xa0 [ 50.690616][ T831] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.690637][ T831] RIP: 0033:0x7f803735e90e [ 50.690650][ T831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 50.690663][ T831] RSP: 002b:00007f8038338fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.690680][ T831] RAX: ffffffffffffffda RBX: 00007f80383396c0 RCX: 00007f803735e90e [ 50.690692][ T831] RDX: 000000000000000f RSI: 00007f80383390a0 RDI: 0000000000000004 [ 50.690702][ T831] RBP: 00007f8038339090 R08: 0000000000000000 R09: 0000000000000000 [ 50.690712][ T831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.690721][ T831] R13: 00007f8037626038 R14: 00007f8037625fa0 R15: 00007ffc9531bab8 [ 50.690734][ T831] [ 51.006338][ T840] input: syz1 as /devices/virtual/input/input8 [ 51.036284][ T842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.208'. [ 51.155113][ T857] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(805306372.0.0), cmd(14) [ 51.347524][ T868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.219'. [ 51.369358][ T870] netlink: 'syz.3.220': attribute type 3 has an invalid length. [ 51.391063][ T872] incfs: Options parsing error. -22 [ 51.396383][ T872] incfs: mount failed -22 [ 51.483735][ T369] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 51.491319][ T319] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 51.643738][ T31] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 51.645549][ T319] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 51.659293][ T369] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 51.667594][ T369] usb 1-1: config 0 has no interface number 0 [ 51.673911][ T369] usb 1-1: config 0 interface 41 has no altsetting 0 [ 51.681348][ T319] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 51.689096][ T319] usb 3-1: can't read configurations, error -61 [ 51.696219][ T369] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 51.705337][ T369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.713348][ T369] usb 1-1: Product: syz [ 51.717577][ T369] usb 1-1: Manufacturer: syz [ 51.722191][ T369] usb 1-1: SerialNumber: syz [ 51.727481][ T369] usb 1-1: config 0 descriptor?? [ 51.794951][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 51.803778][ T31] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 51.814095][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 51.823757][ T319] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 51.825057][ T31] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 51.840427][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.848467][ T31] usb 4-1: Product: syz [ 51.852662][ T31] usb 4-1: Manufacturer: syz [ 51.857302][ T31] usb 4-1: SerialNumber: syz [ 51.974161][ T319] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 51.982916][ T319] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 51.990769][ T319] usb 3-1: can't read configurations, error -61 [ 51.997247][ T319] usb usb3-port1: attempt power cycle [ 52.064392][ T872] netlink: 'syz.3.221': attribute type 2 has an invalid length. [ 52.091968][ T31] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 52.121501][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 52.132153][ T31] usb 4-1: USB disconnect, device number 13 [ 52.149500][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.333739][ T319] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 52.354826][ T319] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 52.364249][ T319] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 52.371914][ T319] usb 3-1: can't read configurations, error -61 [ 52.503727][ T319] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 52.524402][ T319] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 52.533163][ T319] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 52.540819][ T319] usb 3-1: can't read configurations, error -61 [ 52.547321][ T369] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 52.559511][ T319] usb usb3-port1: unable to enumerate USB device [ 52.718850][ T883] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1543503876.0.0), cmd(14) [ 52.746730][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 52.746750][ T36] audit: type=1400 audit(1786396912.850:267): avc: denied { mount } for pid=884 comm="syz.3.226" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.780747][ T36] audit: type=1400 audit(1786396912.880:268): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.897219][ T36] audit: type=1400 audit(1786396913.000:269): avc: denied { create } for pid=890 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.008820][ T895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.230'. [ 53.032152][ T897] netlink: 'syz.1.231': attribute type 3 has an invalid length. [ 53.203799][ T363] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 53.365408][ T363] usb 4-1: unable to get BOS descriptor or descriptor too short [ 53.373895][ T906] loop5: detected capacity change from 0 to 7 [ 53.373931][ T363] usb 4-1: not running at top speed; connect to a high speed hub [ 53.388991][ T363] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 53.397626][ T363] usb 4-1: config 0 has no interface number 0 [ 53.403898][ T363] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 53.415136][ T363] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 53.426721][ T363] usb 4-1: config 0 interface 88 has no altsetting 0 [ 53.435167][ T363] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice= 3.31 [ 53.444343][ T363] usb 4-1: New USB device strings: Mfr=0, Product=84, SerialNumber=3 [ 53.452495][ T363] usb 4-1: Product: syz [ 53.457295][ T363] usb 4-1: SerialNumber: syz [ 53.466764][ T363] usb 4-1: config 0 descriptor?? [ 53.507603][ T907] support for the xor transformation has been removed. [ 53.528169][ T909] netlink: 'syz.0.218': attribute type 3 has an invalid length. [ 53.702935][ T363] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input9 [ 53.721920][ T363] usb 4-1: USB disconnect, device number 14 [ 53.740614][ T318] udevd[318]: Error opening device "/dev/input/event3": No such file or directory [ 53.750061][ T318] udevd[318]: Unable to EVIOCGABS device "/dev/input/event3" [ 53.757987][ T318] udevd[318]: Unable to EVIOCGABS device "/dev/input/event3" [ 53.781209][ T36] audit: type=1400 audit(1786396913.880:270): avc: granted { setsecparam } for pid=912 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 53.804113][ T369] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 53.818173][ T915] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4278124548.0.0), cmd(14) [ 53.826472][ T369] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 53.838540][ T369] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 53.848662][ T369] usb 1-1: USB disconnect, device number 7 [ 53.890329][ T921] raw_sendmsg: syz.3.239 forgot to set AF_INET. Fix it! [ 53.898370][ T921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.239'. [ 53.924059][ T924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.240'. [ 53.950899][ T926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=926 comm=syz.3.241 [ 53.978169][ T928] netlink: 'syz.3.242': attribute type 3 has an invalid length. [ 54.002418][ T36] audit: type=1400 audit(1786396914.100:271): avc: denied { write } for pid=929 comm="syz.3.243" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.005842][ T930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 54.106433][ T934] input: syz1 as /devices/virtual/input/input10 [ 54.127668][ T936] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4294836228.0.0), cmd(14) [ 54.225563][ T36] audit: type=1400 audit(1786396914.330:272): avc: denied { setattr } for pid=941 comm="syz.3.249" name="PACKET" dev="sockfs" ino=9263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.254510][ T36] audit: type=1400 audit(1786396914.360:273): avc: denied { listen } for pid=941 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.275933][ T36] audit: type=1400 audit(1786396914.380:274): avc: denied { map } for pid=941 comm="syz.3.249" path="socket:[9263]" dev="sockfs" ino=9263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.302599][ T36] audit: type=1400 audit(1786396914.380:275): avc: denied { accept } for pid=941 comm="syz.3.249" path="socket:[9263]" dev="sockfs" ino=9263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.435682][ T957] input: syz1 as /devices/virtual/input/input11 [ 54.463010][ T959] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.256.0), cmd(14) [ 54.511097][ T965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.525863][ T36] audit: type=1400 audit(1786396914.630:276): avc: denied { write } for pid=964 comm="syz.0.260" name="/" dev="incremental-fs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.529540][ T966] overlayfs: upper fs does not support tmpfile. [ 54.555043][ T965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.571135][ T966] overlayfs: upper fs does not support tmpfile. [ 54.893742][ T319] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 55.044931][ T319] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 55.053042][ T319] usb 4-1: config 0 has no interface number 0 [ 55.059277][ T319] usb 4-1: config 0 interface 41 has no altsetting 0 [ 55.067388][ T319] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 55.076537][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.084585][ T319] usb 4-1: Product: syz [ 55.088776][ T319] usb 4-1: Manufacturer: syz [ 55.093694][ T319] usb 4-1: SerialNumber: syz [ 55.103966][ T319] usb 4-1: config 0 descriptor?? [ 55.146751][ T977] futex_wake_op: syz.1.263 tries to shift op by 144; fix this program [ 55.155047][ T976] futex_wake_op: syz.1.263 tries to shift op by 144; fix this program [ 55.165615][ T977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.174718][ T977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.304950][ T983] veth1_to_bond: entered promiscuous mode [ 55.319070][ T983] netlink: 148 bytes leftover after parsing attributes in process `syz.2.264'. [ 55.330039][ T983] veth1_to_bond (unregistering): left promiscuous mode [ 55.603780][ T363] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 55.774748][ T363] usb 3-1: Using ep0 maxpacket: 32 [ 55.781160][ T363] usb 3-1: config 6 has an invalid interface number: 251 but max is 1 [ 55.793667][ T363] usb 3-1: config 6 has an invalid interface number: 9 but max is 1 [ 55.803812][ T363] usb 3-1: config 6 has no interface number 0 [ 55.810112][ T363] usb 3-1: config 6 has no interface number 1 [ 55.826699][ T363] usb 3-1: config 6 interface 251 has no altsetting 0 [ 55.833525][ T363] usb 3-1: config 6 interface 9 has no altsetting 0 [ 55.851775][ T363] usb 3-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=e9.d2 [ 55.861159][ T363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.881214][ T363] usb 3-1: Product: syz [ 55.885468][ T363] usb 3-1: Manufacturer: syz [ 55.890082][ T363] usb 3-1: SerialNumber: syz [ 55.919582][ T319] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 55.964268][ T991] input: syz1 as /devices/virtual/input/input12 [ 56.046489][ T993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.055984][ T993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.108596][ T363] asix 3-1:6.251: probe with driver asix failed with error -22 [ 56.125070][ T363] asix 3-1:6.9: probe with driver asix failed with error -22 [ 56.143481][ T363] usb 3-1: USB disconnect, device number 13 [ 56.616634][ T995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.625589][ T995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.643729][ T967] Bluetooth: hci0: command 0x1003 tx timeout [ 56.649810][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.672865][ T296] ------------[ cut here ]------------ [ 56.678427][ T296] WARNING: CPU: 1 PID: 296 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 56.686405][ T296] Modules linked in: [ 56.690341][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 56.702060][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.712182][ T296] RIP: 0010:drop_nlink+0xce/0x110 [ 56.717320][ T296] Code: 04 00 00 be 08 00 00 00 e8 5f 13 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 4b 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 56.737344][ T296] RSP: 0018:ffffc9000b6afc88 EFLAGS: 00010293 [ 56.743581][ T296] RAX: ffffffff81f225ee RBX: ffff888116e8a958 RCX: ffff888102bc5f00 [ 56.751629][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.759713][ T296] RBP: ffffc9000b6afcb0 R08: 0000000000000003 R09: 0000000000000004 [ 56.767738][ T296] R10: dffffc0000000000 R11: fffff520016d5f80 R12: dffffc0000000000 [ 56.775784][ T296] R13: 1ffff11022dd1534 R14: ffff888116e8a9a0 R15: 0000000000000000 [ 56.783826][ T296] FS: 0000555560bf0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 56.792798][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.799446][ T296] CR2: 0000555560c13958 CR3: 00000001212b8000 CR4: 00000000003526b0 [ 56.807538][ T296] Call Trace: [ 56.810845][ T296] [ 56.813832][ T296] shmem_rmdir+0x5f/0x90 [ 56.818126][ T296] vfs_rmdir+0x3de/0x560 [ 56.822446][ T296] incfs_kill_sb+0x102/0x220 [ 56.827124][ T296] deactivate_locked_super+0xd5/0x270 [ 56.832543][ T296] deactivate_super+0xb8/0xe0 [ 56.837314][ T296] cleanup_mnt+0x438/0x4d0 [ 56.841774][ T296] __cleanup_mnt+0x1d/0x40 [ 56.846261][ T296] task_work_run+0x1e8/0x260 [ 56.850895][ T296] ? __cfi_task_work_run+0x10/0x10 [ 56.856101][ T296] ? __x64_sys_umount+0x12e/0x180 [ 56.861179][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 56.866666][ T296] ? __kasan_check_read+0x15/0x20 [ 56.871728][ T296] resume_user_mode_work+0x35/0x50 [ 56.876909][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 56.882409][ T296] do_syscall_64+0x63/0xf0 [ 56.886907][ T296] ? clear_bhb_loop+0x50/0xa0 [ 56.891624][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.897597][ T296] RIP: 0033:0x7fd5dfb9f317 [ 56.902056][ T296] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 56.921751][ T296] RSP: 002b:00007fff4c309268 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 56.930253][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd5dfb9f317 [ 56.938328][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4c309320 [ 56.946448][ T296] RBP: 00007fff4c309320 R08: 00007fff4c30a320 R09: 00000000ffffffff [ 56.954504][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4c30a3b0 [ 56.962875][ T296] R13: 00007fd5dfc34474 R14: 000000000000d51a R15: 00007fff4c30a3f0 [ 56.970908][ T296] [ 56.974051][ T296] ---[ end trace 0000000000000000 ]--- [ 56.979606][ T296] ================================================================== [ 56.987705][ T296] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 56.993995][ T296] Write of size 4 at addr 0000000000000168 by task syz-executor/296 [ 57.001980][ T296] [ 57.004309][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G W syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 57.004335][ T296] Tainted: [W]=WARN [ 57.004340][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.004351][ T296] Call Trace: [ 57.004357][ T296] [ 57.004365][ T296] __dump_stack+0x21/0x30 [ 57.004392][ T296] dump_stack_lvl+0x140/0x1c0 [ 57.004414][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.004439][ T296] print_report+0x3d/0x70 [ 57.004461][ T296] kasan_report+0x162/0x1a0 [ 57.004481][ T296] ? ihold+0x24/0x70 [ 57.004501][ T296] ? ihold+0x24/0x70 [ 57.004519][ T296] kasan_check_range+0x25a/0x2b0 [ 57.004541][ T296] __kasan_check_write+0x18/0x20 [ 57.004556][ T296] ihold+0x24/0x70 [ 57.004577][ T296] vfs_rmdir+0x25c/0x560 [ 57.004600][ T296] incfs_kill_sb+0x102/0x220 [ 57.004617][ T296] deactivate_locked_super+0xd5/0x270 [ 57.004641][ T296] deactivate_super+0xb8/0xe0 [ 57.004665][ T296] cleanup_mnt+0x438/0x4d0 [ 57.004684][ T296] __cleanup_mnt+0x1d/0x40 [ 57.004702][ T296] task_work_run+0x1e8/0x260 [ 57.004723][ T296] ? __cfi_task_work_run+0x10/0x10 [ 57.004743][ T296] ? __x64_sys_umount+0x12e/0x180 [ 57.004758][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 57.004772][ T296] ? __kasan_check_read+0x15/0x20 [ 57.004788][ T296] resume_user_mode_work+0x35/0x50 [ 57.004803][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 57.004819][ T296] do_syscall_64+0x63/0xf0 [ 57.004837][ T296] ? clear_bhb_loop+0x50/0xa0 [ 57.004859][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.004880][ T296] RIP: 0033:0x7fd5dfb9f317 [ 57.004895][ T296] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 57.004909][ T296] RSP: 002b:00007fff4c309268 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 57.004926][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd5dfb9f317 [ 57.004937][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4c309320 [ 57.004947][ T296] RBP: 00007fff4c309320 R08: 00007fff4c30a320 R09: 00000000ffffffff [ 57.004959][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4c30a3b0 [ 57.004970][ T296] R13: 00007fd5dfc34474 R14: 000000000000d51a R15: 00007fff4c30a3f0 [ 57.004983][ T296] [ 57.004989][ T296] ================================================================== [ 57.244284][ T296] Disabling lock debugging due to kernel taint [ 57.250588][ T319] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 57.252502][ T296] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 57.261650][ T319] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 57.269020][ T296] #PF: supervisor write access in kernel mode [ 57.269035][ T296] #PF: error_code(0x0002) - not-present page [ 57.269049][ T296] PGD 8000000130f25067 P4D 8000000130f25067 PUD 0 [ 57.286276][ T319] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 57.290494][ T296] [ 57.290505][ T296] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 57.290532][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Tainted: G B W syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 57.305847][ T319] usb 4-1: USB disconnect, device number 15 [ 57.307726][ T296] Tainted: [B]=BAD_PAGE, [W]=WARN [ 57.307738][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.347948][ T296] RIP: 0010:ihold+0x2a/0x70 [ 57.352499][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 42 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 0a ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 57.372140][ T296] RSP: 0018:ffffc9000b6afcc8 EFLAGS: 00010246 [ 57.378252][ T296] RAX: ffff888102bc5f00 RBX: 0000000000000000 RCX: ffff888102bc5f00 [ 57.386263][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.394259][ T296] RBP: ffffc9000b6afcd8 R08: ffffffff88bb6947 R09: 1ffffffff1176d28 [ 57.402235][ T296] R10: dffffc0000000000 R11: fffffbfff1176d29 R12: 0000000000000000 [ 57.410221][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 57.418215][ T296] FS: 0000555560bf0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 57.427172][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.433776][ T296] CR2: 0000000000000168 CR3: 00000001212b8000 CR4: 00000000003526b0 [ 57.441776][ T296] Call Trace: [ 57.445064][ T296] [ 57.448011][ T296] vfs_rmdir+0x25c/0x560 [ 57.452318][ T296] incfs_kill_sb+0x102/0x220 [ 57.456929][ T296] deactivate_locked_super+0xd5/0x270 [ 57.462341][ T296] deactivate_super+0xb8/0xe0 [ 57.467031][ T296] cleanup_mnt+0x438/0x4d0 [ 57.471456][ T296] __cleanup_mnt+0x1d/0x40 [ 57.475902][ T296] task_work_run+0x1e8/0x260 [ 57.480502][ T296] ? __cfi_task_work_run+0x10/0x10 [ 57.485623][ T296] ? __x64_sys_umount+0x12e/0x180 [ 57.490650][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 57.496053][ T296] ? __kasan_check_read+0x15/0x20 [ 57.501207][ T296] resume_user_mode_work+0x35/0x50 [ 57.506331][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 57.511801][ T296] do_syscall_64+0x63/0xf0 [ 57.516237][ T296] ? clear_bhb_loop+0x50/0xa0 [ 57.520927][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.526851][ T296] RIP: 0033:0x7fd5dfb9f317 [ 57.531277][ T296] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 57.550894][ T296] RSP: 002b:00007fff4c309268 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 57.559322][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd5dfb9f317 [ 57.567320][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4c309320 [ 57.575292][ T296] RBP: 00007fff4c309320 R08: 00007fff4c30a320 R09: 00000000ffffffff [ 57.583264][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4c30a3b0 [ 57.591259][ T296] R13: 00007fd5dfc34474 R14: 000000000000d51a R15: 00007fff4c30a3f0 [ 57.599258][ T296] [ 57.602291][ T296] Modules linked in: [ 57.606183][ T296] CR2: 0000000000000168 [ 57.610331][ T296] ---[ end trace 0000000000000000 ]--- [ 57.615785][ T296] RIP: 0010:ihold+0x2a/0x70 [ 57.620316][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 42 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 0a ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 57.639944][ T296] RSP: 0018:ffffc9000b6afcc8 EFLAGS: 00010246 [ 57.646021][ T296] RAX: ffff888102bc5f00 RBX: 0000000000000000 RCX: ffff888102bc5f00 [ 57.654001][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.661990][ T296] RBP: ffffc9000b6afcd8 R08: ffffffff88bb6947 R09: 1ffffffff1176d28 [ 57.669966][ T296] R10: dffffc0000000000 R11: fffffbfff1176d29 R12: 0000000000000000 [ 57.677958][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 57.685937][ T296] FS: 0000555560bf0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 57.694887][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.701478][ T296] CR2: 0000000000000168 CR3: 00000001212b8000 CR4: 00000000003526b0 [ 57.709462][ T296] Kernel panic - not syncing: Fatal exception [ 57.715720][ T296] Kernel Offset: disabled [ 57.720075][ T296] Rebooting in 86400 seconds..