last executing test programs: 3.728161249s ago: executing program 3 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$incfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x200010, &(0x7f0000000140)=ANY=[@ANYBLOB='rlog_wakeup_cnt=00001000000000000001,\x00']) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)={0x40, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @nested={0x4, 0x71}, @nested={0x28, 0xbc, 0x0, 0x1, [@nested={0x4, 0xc3}, @nested={0x8, 0x13, 0x0, 0x1, [@generic="3a48ad04"]}, @nested={0x18, 0x2e, 0x0, 0x1, [@typed={0x14, 0x10b, 0x0, 0x0, @ipv6=@local}]}]}]}, 0x40}], 0x1, 0x0, 0x0, 0x8800}, 0x8880) 3.650798601s ago: executing program 3 (id=107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000280)="10d0b3", 0x3, 0xffffffffffffffff) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@multicast, @broadcast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x4, 0x1c, 0x66, 0x0, 0x20, 0x2, 0x0, @private=0xa0100ff, @rand_addr=0x64010101}, {0x13, 0x14, 0x0, @multicast1}}}}}}, 0x2e) 3.618219142s ago: executing program 3 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@verity_on, 0x3a}], [], 0x2f}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@pcr={'pcr', 0x3d, 0x1d}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@fsmagic={'fsmagic', 0x3d, 0x100000000000000}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '+*'}}], 0x3a}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000006c0)=0x9, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000006c0)=0x9, 0x4) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000400)=@v1={0x1000000, [{0x800, 0x6}]}, 0xc, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000400)=@v1={0x1000000, [{0x800, 0x6}]}, 0xc, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f0000000040)="800037bbfa9ba1ce", 0x8, 0x8000, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f00000002c0)=0xd9, 0x4) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f00000002c0)=0xd9, 0x4) read(r4, &(0x7f0000000300)=""/4067, 0xfe3) (async) read(r4, &(0x7f0000000300)=""/4067, 0xfe3) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000002900ff00370000003a000000000000001800000000000000290000000400"], 0x30}, 0xc4) (async) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000002900ff00370000003a000000000000001800000000000000290000000400"], 0x30}, 0xc4) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000001300)={0xaa, 0x40}) 2.998477932s ago: executing program 0 (id=111): syz_open_dev$evdev(&(0x7f000001fa80), 0x2, 0x300) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000003000/0x2000)=nil) r0 = getpgid(0x0) ptrace(0x4207, r0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) gettimeofday(&(0x7f0000000080), &(0x7f00000000c0)) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '', 0x3a, '}!^-', 0x3a, './file0'}, 0x2b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') accept4$packet(r2, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0xf, 0xdc, &(0x7f0000000080)=ANY=[], 0x0) 2.77365877s ago: executing program 3 (id=112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz1\x00', {0x8, 0x3, 0x3, 0x8}, 0x4a, [0x3, 0x6, 0x1000, 0x5, 0x0, 0x80, 0x7, 0x7, 0xffffffff, 0x9, 0x10001, 0xe2, 0x0, 0x6, 0x9, 0x10001, 0x400, 0x401, 0xffff, 0x10000, 0x40, 0x0, 0xfffffffa, 0x4, 0x5dd5, 0xa9, 0x9, 0xd, 0x9, 0x6, 0xff, 0x8, 0xe, 0x2, 0x8, 0x7, 0x5, 0x8, 0x2, 0x9ad9, 0x100, 0x7b2, 0x3ff, 0x7ff, 0x3, 0xb995, 0x80000000, 0x800, 0x1ff, 0x8001, 0x75, 0x8223, 0x4, 0x0, 0x4, 0xb47, 0x1, 0xf, 0x21d3cd32, 0x9, 0xe1c9, 0x6, 0x3, 0x2], [0x5, 0x3, 0x8, 0xfd60, 0x2, 0x4, 0x4, 0x7e5, 0x5, 0x8, 0x6, 0x7, 0x80000000, 0x7fffffff, 0xeeb, 0x9, 0x56f, 0x7ff, 0x7, 0xbd33, 0x8001, 0x1, 0x400, 0x1, 0x4, 0x7fff, 0x1, 0x5, 0x100000, 0x7, 0x0, 0x7, 0xe, 0x1f, 0x1, 0x6, 0x7, 0x4, 0x8, 0xd40, 0xc2e6, 0xf, 0x80, 0x3d, 0x1, 0x7, 0x1, 0x6, 0x8, 0x9, 0x2f, 0x4, 0x2, 0x1, 0x6, 0x4e4, 0x5, 0x5, 0x1, 0x9, 0x40000000, 0x1, 0xe2, 0x8], [0x7, 0x8, 0x800, 0xba40, 0x10, 0x2000000, 0x7, 0x8000, 0xb, 0x3de, 0x400, 0x6, 0x5, 0x10001, 0x3, 0x180000, 0x3ff, 0xbe5c, 0x40, 0x401, 0x80000001, 0x2, 0x6661, 0xfffffe00, 0x3, 0x0, 0xf, 0x1, 0x5, 0x0, 0x0, 0x4, 0x7fffffff, 0x571, 0x1, 0x0, 0x101, 0x8001, 0x2, 0x2, 0x7, 0xfffffffd, 0x3, 0x6, 0x4, 0x1, 0x8001, 0x1ff, 0x1ff, 0x7f, 0x9, 0x7ff, 0x7, 0x8, 0x3, 0x5, 0x6, 0x33a, 0xd89e, 0x10000, 0x1, 0x3ff, 0x78, 0x8], [0x7, 0x6a5f, 0xb, 0xffff, 0x3, 0x4, 0x3, 0x6, 0xa5, 0x4c0, 0x9, 0xd9d7, 0x0, 0x2, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x2, 0xf, 0x4, 0x1, 0x9, 0x5, 0xd639, 0x80000000, 0x9, 0xfffffff2, 0x949c60c0, 0x0, 0x7, 0x3, 0x200, 0x7, 0xcc, 0xffff, 0x0, 0x6, 0x3, 0x0, 0x80000001, 0x8, 0x28d, 0x7ff, 0x5, 0xa, 0x5, 0x6, 0x6, 0x4, 0x40, 0x3, 0x4, 0x7fffffff, 0x0, 0x51, 0x6, 0x50888803, 0x2, 0x8, 0x37133bed, 0x6b, 0x9]}, 0x45c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000003c00000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 2.713259602s ago: executing program 3 (id=113): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x4) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ac0)="300000b7", 0x4}], 0x1}}], 0x1, 0x4004800) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000000500)}, {&(0x7f0000000100)="2d3e0440d91fe13bd34c708347a18366a42249935e710bb8ae3d3a0ac19cc2c6ea91c25dc336a96d1a2cf7a0f0b130d3a291308d412a90946280ac8a1d22c2bf85a0a9de1e70f7ce45838e36bb4291d682c2656f75ad722306f9d8060298488dcf7426e9afc873906f44d150eb3af34ec0db8640d08de62be9d4918c31c088d966f0efbe8999c3fe526e823b96a989d28b30", 0x92}], 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0x140, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$unix(r0, 0x0, 0x0, 0x800) 2.45824739s ago: executing program 0 (id=114): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300120018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 2.45767177s ago: executing program 0 (id=115): r0 = socket$nl_audit(0x10, 0x3, 0x9) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x9, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r2, &(0x7f0000000000)=0x10, r3, &(0x7f00000000c0)=0x80000001, 0x7, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.356008213s ago: executing program 0 (id=116): r0 = timerfd_create(0x1, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') close_range(r1, 0xffffffffffffffff, 0x0) (async) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timerfd_settime(r0, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r3, 0x10e, 0xc, &(0x7f0000000200)=""/210, &(0x7f0000000180)=0xd2) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) (async) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) (async) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) write$uinput_user_dev(r2, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0x0, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x1, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0xe, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xb, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x4c, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x10, 0x30, 0x9, 0x2, 0x3, 0x7, 0x10001, 0xd35, 0xa, 0x6, 0x0, 0xfff, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x0, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x61, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x4, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x5, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0xc, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x8, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x41c, 0xfe6c, 0x2, 0x9], [0x1, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x4139, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x100, 0x8001, 0x3, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x3, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0x9, 0xee6, 0x2000800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x8, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) fspick(0xffffffffffffffff, 0x0, 0x0) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) writev(r6, &(0x7f0000003f00)=[{&(0x7f0000002cc0)="dfb37fe0", 0x4}], 0x1) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_gettime(0x4, &(0x7f0000000040)) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000005ac14142e00000000000000000000000000000000000000000a0000202e000000d34197cc0f1920216fa90144a66e663f990d46577ebafb17ebc5689050a37c35ba7cee5cc8f2dbf105ebfd5249004f3b4a22cc1bf67119a5277a7198371aa8cf10dfdfed9ffcbb5f328430f1c2856317ddb2306251295a11ce0c5d2fc130e00df7982e33d4d8aac8e68090d16fe834a7381ddc6f1cd33090aa935eb8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f00000100000000000000000000000000000000000000000000000000000000ac14142a0000000000000000000000003c0100000000000008000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x954, 0x20, @dev={0xfe, 0x80, '\x00', 0x3f}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x7, 0x4c58, 0x5}}) (async) sendmmsg$inet(r5, &(0x7f00000008c0), 0x3, 0x240088a0) 2.334624214s ago: executing program 0 (id=117): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x500f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="80fd4717a707", 0x6}], 0x1, 0x3, 0x7) r3 = syz_open_dev$hiddev(&(0x7f0000000040), 0x81, 0x48000) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000580)={0x2, 0x3, 0x6}) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000380)={0x20, 0x11, 0x7, "760843a1c489ac"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000340)=ANY=[]) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x40, 0x22, 0xd6, {0xd6, 0x24, "ec90ab3f7ec20084ea9b45bec0731324623bd7ca1d801bfd0a50dabcd3759aa59cbb02d0cbf7686ae908c8f93af156990068859392ae788d3d88fe61dd35ec1536a2a363b118b52e26d5c4fbe957aa064d1a7b5e18a9d98184c37da98cdaba179bc743702e0916767f5d0de07e4b6dc05d166be191579b41e51e042f56b3bcfd47fb79c5cee11a79941b90ffc55d73eb52cbf45de59f24c235913a22abbda91e51ff262698a23e09f4ed6014e9458ea4d4350965dab1632048adf3ec631b080099f67a2a5895f78ea4bc1b70681965010f510d74"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000200)=ANY=[@ANYBLOB="b5098a2a00003766c30d48e14495d4e111fa"], &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x228b, 0x4, 0x1, {0x22, 0x444}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x20, 0x5, 0x8b, "55332d509a76bb1bdf51cf588eb34eaf32cafed0cc93354b4feab42ff2f889c33de20c3d0ceefb4e40b6d0f6142520dbc4935df48fbf79d7f277953c1334c1cc2da708613b51c7b34434cafe4fa1b7b935066169a5825631c351d1db6f4f9489195b47395bbddbc63b64a3291b01061dac46226f375c4fcebd1ecafa568d2a7bd3e17be050711382e98ffb"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000440)={0x20, 0x1, 0x97, "c73a0d4ba6791574b9088d6c89c8e9029546367b466e59749bbbfef5b2b35bae791d235b7f1e06b9ac2a7b39398e74b6bff332bf34a5018d533761f232ab1d2afd42ddd706f62287888263afed9ed464b32dc4327966ca1b2c7d967903e0719e32f331e234aa0c1a954aa2d9c3865c4620017560b8bea02ce29a4a08cab63f4825e386842810b41cb97cd8c5e0914e4d3c1d16b1993a14"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x3a}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400e2800000028060de78207442897"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.860738519s ago: executing program 3 (id=119): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) (async, rerun: 64) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224000100000000090400000103010000092100000001220100090581"], 0x0) (rerun: 64) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) (async) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setuid(0xee00) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000040)=0x80000000) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000300)={0x1, 0x13, 0x4802, 0x5, 0x0, 0x3, 0x0}) (async, rerun: 32) syz_usb_ep_write(r2, 0x81, 0xfffffffffffffd9c, 0x0) (async, rerun: 32) fsopen(0x0, 0x1) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4240c2, 0x0) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000280)=0x9) (async) r6 = syz_clone(0x42000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0x1a, r6, 0xc, &(0x7f0000000000)) waitid(0x2, r6, &(0x7f0000000100), 0x8, &(0x7f0000000180)) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400", 0x9) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_uid}]}}) 1.097382064s ago: executing program 2 (id=122): arch_prctl$ARCH_SET_GS(0x1001, 0xfffffffffffffffd) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_SET_IO_FLUSHER(0x34, 0x1) r0 = syz_ublk_setup_io_uring(0x17c3, &(0x7f0000000040)={0x0, 0xcfe9, 0x2000, 0x4000000}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x894a, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mknodat$null(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8, 0x103) recvmmsg(r6, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}, 0x58}], 0x1, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x100}}}, &(0x7f0000000280)) 946.504499ms ago: executing program 2 (id=124): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x249}) mlock(&(0x7f000018b000/0x2000)=nil, 0x2000) munlockall() mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 946.051759ms ago: executing program 2 (id=125): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = eventfd2(0xffffffff, 0x800) write$eventfd(r1, &(0x7f0000000080)=0xffffffff00000000, 0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000000c0)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0, 0x0, 0x0, 0x56}}], 0x40000000000024e, 0x20002040) sendto$inet6(r3, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001140)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x4084) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8200, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, &(0x7f0000000180)) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xed) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000f3, 0x0, 0x2afc9260}]}) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000019c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) r9 = socket(0x1e, 0x805, 0x0) connect$tipc(r9, &(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x4}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 927.34017ms ago: executing program 2 (id=126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f0000000100)=@unlock_all, 0xb) r4 = memfd_secret(0x80000) clock_settime(0xcd1f6467c1540c16, &(0x7f00000000c0)) recvfrom$inet6(r4, &(0x7f0000000100)=""/67, 0x43, 0x2041, &(0x7f0000000180)={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x6}, 0x1c) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x88a8}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "04b5ce", 0x1a, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x1e}, {0x19}, {0x2}]}}}}}}}, 0x54) 822.398763ms ago: executing program 2 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x64, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc7a0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3cab}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa7d}]}]}, 0x64}}, 0x40800) 766.442485ms ago: executing program 2 (id=128): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) 662.121358ms ago: executing program 0 (id=129): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r0, 0x6, 0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x20, r1, 0x507, 0x60bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x20044050) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240102000a000201020904010000000100000904010101010200000905010910000206000725010c0040000904020000010200000904020101010200000905820900c57643f004c80203f1c29779031007"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 535.901702ms ago: executing program 1 (id=130): getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/nf_conntrack_expect\x00') read$FUSE(r2, &(0x7f0000004640)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r8, r7, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r6, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendfile(r1, r1, 0x0, 0x9) 422.524696ms ago: executing program 1 (id=131): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4c, 0x0, &(0x7f0000000140)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x8000, 0x1, 0x1, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) pselect6(0x40, &(0x7f0000000100)={0x7b, 0x5, 0x0, 0x10001, 0x800, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x800029, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 297.62613ms ago: executing program 1 (id=132): setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:dbusd_exec_t:s0\x00', 0x22, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000001a0001002abd70000000000081ff80"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) 233.289842ms ago: executing program 1 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="000000005b7d271cd5e651d66188aebb99a0b4897903797b5928497a7bccace3e156e6019cf69675e39e4a2f7b38d4ced31ed1272e009211670fa378cb240abb2f07674ed71051ac7510af995648446aa35bef69efb1c78827f9c1e5f4a2d499603313fd70eb9b9d5e2056debe957e3267435c", @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf25140000001c0007800c00030007000000000000000c0004000400000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000011}, 0x20040010) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) fsopen(&(0x7f0000000000)='proc\x00', 0x0) syz_ublk_setup_io_uring(0x173c, &(0x7f0000000680)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) io_setup(0x9, &(0x7f0000000340)=0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r10, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r11, 0x0}]) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r12, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r12, 0x5404, &(0x7f0000000040)={0xa, 0xf7af, 0xdff1f001, 0x9, 0x7, "4cb8b26f2184c4030016001e00"}) syz_ublk_setup_queues(r4, r9, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r8, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',~']) read$FUSE(r13, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r13, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x1000003ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r13, &(0x7f0000000180)={0x50, 0x0, r14, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r14, {0x7, 0x2d, 0x8, 0x4440000, 0x9, 0x4, 0x6, 0x4, 0x0, 0x0, 0x8, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) 64.781298ms ago: executing program 1 (id=134): lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x23, 0x3, "cfa7ae"}, 0x23, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x1, 0x0, &(0x7f0000000040)) (async) getsockopt$MRT6(r0, 0x29, 0x1, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$incfs(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000), 0x82, 0x0) 0s ago: executing program 1 (id=135): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') futimesat(r2, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 17.266651][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 17.266669][ T36] audit: type=1400 audit(1780429247.710:59): avc: denied { transition } for pid=233 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.271452][ T36] audit: type=1400 audit(1780429247.710:60): avc: denied { noatsecure } for pid=233 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.275862][ T36] audit: type=1400 audit(1780429247.720:61): avc: denied { write } for pid=233 comm="sh" path="pipe:[1424]" dev="pipefs" ino=1424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.279380][ T36] audit: type=1400 audit(1780429247.720:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.282369][ T36] audit: type=1400 audit(1780429247.720:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 25.038198][ T36] audit: type=1400 audit(1780429255.480:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.041708][ T287] cgroup: Unknown subsys name 'net' [ 25.060840][ T36] audit: type=1400 audit(1780429255.480:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.088200][ T36] audit: type=1400 audit(1780429255.510:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.088672][ T287] cgroup: Unknown subsys name 'devices' [ 25.212610][ T287] cgroup: Unknown subsys name 'hugetlb' [ 25.218228][ T287] cgroup: Unknown subsys name 'rlimit' [ 25.333517][ T36] audit: type=1400 audit(1780429255.780:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.356718][ T36] audit: type=1400 audit(1780429255.780:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.381598][ T36] audit: type=1400 audit(1780429255.780:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.401005][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.413520][ T36] audit: type=1400 audit(1780429255.860:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.438982][ T36] audit: type=1400 audit(1780429255.860:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.483073][ T36] audit: type=1400 audit(1780429255.930:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.484449][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.508606][ T36] audit: type=1400 audit(1780429255.930:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.840947][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.848051][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.856237][ T294] bridge_slave_0: entered allmulticast mode [ 26.862730][ T294] bridge_slave_0: entered promiscuous mode [ 26.869438][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.876519][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.883639][ T294] bridge_slave_1: entered allmulticast mode [ 26.889958][ T294] bridge_slave_1: entered promiscuous mode [ 26.996275][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.003366][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.010684][ T300] bridge_slave_0: entered allmulticast mode [ 27.016925][ T300] bridge_slave_0: entered promiscuous mode [ 27.026266][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.033401][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.040588][ T300] bridge_slave_1: entered allmulticast mode [ 27.046831][ T300] bridge_slave_1: entered promiscuous mode [ 27.102256][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.109328][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.116443][ T299] bridge_slave_0: entered allmulticast mode [ 27.122687][ T299] bridge_slave_0: entered promiscuous mode [ 27.135203][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.142281][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.149362][ T298] bridge_slave_0: entered allmulticast mode [ 27.155752][ T298] bridge_slave_0: entered promiscuous mode [ 27.162297][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.169354][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.176545][ T298] bridge_slave_1: entered allmulticast mode [ 27.182821][ T298] bridge_slave_1: entered promiscuous mode [ 27.188920][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.196045][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.203169][ T299] bridge_slave_1: entered allmulticast mode [ 27.209401][ T299] bridge_slave_1: entered promiscuous mode [ 27.291595][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.298666][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.305981][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.313032][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.380832][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.387910][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.395215][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.402273][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.411314][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.418372][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.425712][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.432775][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.450186][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.457272][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.464598][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.471668][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.496004][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.503594][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.512170][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.519421][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.527353][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.534803][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.542184][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.549398][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.562146][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.569197][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.592194][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.599230][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.616562][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.623644][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.639797][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.646886][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.663598][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.670684][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.678843][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.685937][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.712928][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.719983][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.727771][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.734863][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.743167][ T294] veth0_vlan: entered promiscuous mode [ 27.772495][ T294] veth1_macvtap: entered promiscuous mode [ 27.798359][ T300] veth0_vlan: entered promiscuous mode [ 27.809986][ T299] veth0_vlan: entered promiscuous mode [ 27.828356][ T298] veth0_vlan: entered promiscuous mode [ 27.841635][ T300] veth1_macvtap: entered promiscuous mode [ 27.849500][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.879182][ T299] veth1_macvtap: entered promiscuous mode [ 27.888678][ T298] veth1_macvtap: entered promiscuous mode [ 27.975066][ T318] rust_binder: 317:318 transaction to 0 failed: EINVAL [ 27.975245][ T322] netlink: 'syz.3.4': attribute type 12 has an invalid length. [ 28.001645][ T324] netlink: 'syz.0.5': attribute type 12 has an invalid length. [ 28.160458][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.200301][ T316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.310486][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 28.317305][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.325934][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 28.338765][ T10] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 28.347922][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.356014][ T316] usb 3-1: Using ep0 maxpacket: 32 [ 28.356242][ T10] usb 2-1: Product: syz [ 28.365644][ T10] usb 2-1: Manufacturer: syz [ 28.370879][ T10] usb 2-1: SerialNumber: syz [ 28.375809][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.387109][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.397801][ T316] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.407315][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.416399][ T316] usb 3-1: config 0 descriptor?? [ 28.424537][ T316] hub 3-1:0.0: USB hub found [ 28.614569][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.624051][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 28.633180][ T316] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 28.643146][ T10] usb 2-1: USB disconnect, device number 2 [ 28.659706][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.845487][ T320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.856233][ T320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.868410][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.892710][ T335] pim6reg1: entered promiscuous mode [ 28.898126][ T335] pim6reg1: entered allmulticast mode [ 29.076072][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.099127][ T347] TCP: TCP_TX_DELAY enabled [ 29.118407][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.128393][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.138678][ T316] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 29.157468][ T316] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 29.180503][ T354] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12'. [ 29.240296][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 29.246550][ T10] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 29.255060][ T10] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 29.263465][ T10] usb 4-1: config 0 has no interface number 0 [ 29.269593][ T10] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 29.279752][ T10] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 29.292274][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 29.310309][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.318351][ T10] usb 4-1: Product: syz [ 29.323483][ T10] usb 4-1: Manufacturer: syz [ 29.328101][ T10] usb 4-1: SerialNumber: syz [ 29.334734][ T10] usb 4-1: config 0 descriptor?? [ 29.340072][ T333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 29.349849][ T333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 29.357261][ T67] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.450472][ T316] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.510324][ T67] usb 1-1: Using ep0 maxpacket: 32 [ 29.516741][ T67] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 29.525068][ T67] usb 1-1: config 0 has no interface number 0 [ 29.531212][ T67] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 29.542776][ T67] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 29.551860][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.559868][ T67] usb 1-1: Product: syz [ 29.564109][ T67] usb 1-1: Manufacturer: syz [ 29.568778][ T67] usb 1-1: SerialNumber: syz [ 29.574342][ T67] usb 1-1: config 0 descriptor?? [ 29.581533][ T350] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 29.589233][ T333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 29.596831][ T333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 29.606276][ T316] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.614127][ T316] usb 2-1: no configurations [ 29.618763][ T316] usb 2-1: can't read configurations, error -22 [ 29.750320][ T316] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.901899][ T316] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.909628][ T316] usb 2-1: no configurations [ 29.914341][ T316] usb 2-1: can't read configurations, error -22 [ 29.920825][ T316] usb usb2-port1: attempt power cycle [ 30.070661][ T320] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 30.207900][ T10] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 30.219373][ T10] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 30.230028][ T10] asix 4-1:0.251: probe with driver asix failed with error -71 [ 30.237756][ T320] usb 3-1: device firmware changed [ 30.243253][ T45] usb 3-1: USB disconnect, device number 2 [ 30.245390][ T10] usb 4-1: USB disconnect, device number 2 [ 30.262298][ T316] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.292147][ T316] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.299888][ T316] usb 2-1: no configurations [ 30.310997][ T316] usb 2-1: can't read configurations, error -22 [ 30.318138][ T67] asix 1-1:0.188: probe with driver asix failed with error -71 [ 30.338733][ T67] usb 1-1: USB disconnect, device number 2 [ 30.390302][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.450352][ T316] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 30.471930][ T316] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.479700][ T316] usb 2-1: no configurations [ 30.484368][ T316] usb 2-1: can't read configurations, error -22 [ 30.490827][ T316] usb usb2-port1: unable to enumerate USB device [ 30.550435][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 30.556759][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.567123][ T45] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 30.576155][ T45] usb 3-1: New USB device found, idVendor=6172, idProduct=2377, bcdDevice= 0.00 [ 30.585248][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.593958][ T45] usb 3-1: config 0 descriptor?? [ 30.760310][ T67] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.823321][ T45] usb 3-1: string descriptor 0 read error: -71 [ 30.830699][ T45] usb 3-1: USB disconnect, device number 3 [ 30.895794][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 30.895810][ T36] audit: type=1400 audit(1780429261.340:123): avc: denied { write } for pid=367 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.910782][ T67] usb 1-1: Using ep0 maxpacket: 32 [ 30.933100][ T67] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.942377][ T36] audit: type=1400 audit(1780429261.340:124): avc: denied { read } for pid=367 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.951595][ T67] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.976259][ T36] audit: type=1400 audit(1780429261.420:125): avc: denied { read write } for pid=369 comm="syz.3.16" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.994186][ T67] usb 1-1: New USB device found, idVendor=04b1, idProduct=3042, bcdDevice= 0.40 [ 31.001306][ T36] audit: type=1400 audit(1780429261.420:126): avc: denied { open } for pid=369 comm="syz.3.16" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.014569][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.036815][ T36] audit: type=1400 audit(1780429261.420:127): avc: denied { ioctl } for pid=369 comm="syz.3.16" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.043729][ T67] usb 1-1: Product: syz [ 31.066708][ T36] audit: type=1400 audit(1780429261.430:128): avc: denied { create } for pid=369 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.070838][ T67] usb 1-1: Manufacturer: syz [ 31.094995][ T67] usb 1-1: SerialNumber: syz [ 31.352761][ T36] audit: type=1400 audit(1780429261.800:129): avc: denied { read } for pid=373 comm="syz.2.17" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.375677][ T36] audit: type=1400 audit(1780429261.800:130): avc: denied { open } for pid=373 comm="syz.2.17" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.425972][ T36] audit: type=1400 audit(1780429261.870:131): avc: denied { ioctl } for pid=373 comm="syz.2.17" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.585951][ T36] audit: type=1400 audit(1780429262.030:132): avc: denied { create } for pid=377 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.665502][ T381] af_packet: tpacket_rcv: packet too big, clamped from 56584 to 0. macoff=72 [ 31.906086][ T392] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 31.948796][ T392] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 32.210330][ T316] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.259906][ T400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 32.350417][ T316] usb 4-1: device descriptor read/64, error -71 [ 32.560322][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.567919][ T338] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 32.590406][ T316] usb 4-1: device descriptor read/64, error -71 [ 32.700384][ T310] usb 3-1: device descriptor read/64, error -71 [ 32.720292][ T338] usb 2-1: Using ep0 maxpacket: 16 [ 32.726713][ T338] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.737067][ T338] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.747738][ T338] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 32.756869][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.764954][ T338] usb 2-1: Product: syz [ 32.769159][ T338] usb 2-1: Manufacturer: syz [ 32.774572][ T338] usb 2-1: SerialNumber: syz [ 32.830317][ T316] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.940311][ T310] usb 3-1: device descriptor read/64, error -71 [ 32.960283][ T316] usb 4-1: device descriptor read/64, error -71 [ 32.986177][ T338] usb 2-1: 0:1 : does not exist [ 32.991147][ T338] usb 2-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 32.999904][ T338] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 33.011655][ T338] usb 2-1: USB disconnect, device number 7 [ 33.025750][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.180298][ T310] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.200294][ T316] usb 4-1: device descriptor read/64, error -71 [ 33.310395][ T316] usb usb4-port1: attempt power cycle [ 33.320419][ T310] usb 3-1: device descriptor read/64, error -71 [ 33.355677][ T67] usb 1-1: MIDIStreaming interface descriptor not found [ 33.372774][ T67] usb 1-1: USB disconnect, device number 3 [ 33.391794][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.560321][ T310] usb 3-1: device descriptor read/64, error -71 [ 33.650505][ T316] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.670575][ T310] usb usb3-port1: attempt power cycle [ 33.676975][ T316] usb 4-1: device descriptor read/8, error -71 [ 33.750368][ T67] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.811634][ T316] usb 4-1: device descriptor read/8, error -71 [ 33.820319][ T338] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 33.900317][ T67] usb 1-1: Using ep0 maxpacket: 16 [ 33.906703][ T67] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.915269][ T67] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 33.926705][ T67] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.935790][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.943823][ T67] usb 1-1: Product: syz [ 33.948001][ T67] usb 1-1: Manufacturer: syz [ 33.952643][ T67] usb 1-1: SerialNumber: syz [ 33.958291][ T415] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 33.982048][ T338] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.990661][ T338] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 34.001759][ T338] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 34.012905][ T310] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.022551][ T338] usb 2-1: string descriptor 0 read error: -22 [ 34.028803][ T338] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 34.037897][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.047234][ T310] usb 3-1: device descriptor read/8, error -71 [ 34.053526][ T316] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.081273][ T316] usb 4-1: device descriptor read/8, error -71 [ 34.191379][ T310] usb 3-1: device descriptor read/8, error -71 [ 34.208819][ T67] usb 1-1: bad CDC descriptors [ 34.213630][ T316] usb 4-1: device descriptor read/8, error -71 [ 34.223841][ T67] usb 1-1: USB disconnect, device number 4 [ 34.292576][ T431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'. [ 34.320385][ T316] usb usb4-port1: unable to enumerate USB device [ 34.440287][ T310] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.461385][ T310] usb 3-1: device descriptor read/8, error -71 [ 34.591374][ T310] usb 3-1: device descriptor read/8, error -71 [ 34.680308][ T67] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.700473][ T310] usb usb3-port1: unable to enumerate USB device [ 34.830286][ T67] usb 1-1: Using ep0 maxpacket: 32 [ 34.836617][ T67] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 34.844921][ T67] usb 1-1: config 0 has no interface number 0 [ 34.851082][ T67] usb 1-1: config 0 interface 184 has no altsetting 0 [ 34.859411][ T67] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 34.868518][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.876557][ T67] usb 1-1: Product: syz [ 34.880755][ T67] usb 1-1: Manufacturer: syz [ 34.885384][ T67] usb 1-1: SerialNumber: syz [ 34.890949][ T67] usb 1-1: config 0 descriptor?? [ 34.896938][ T67] smsc75xx v1.0.0 [ 34.924016][ T338] usb 2-1: Can't get UAC3 power state for id 10 [ 34.934717][ T338] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 34.950514][ T338] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 34.955862][ T441] Zero length message leads to an empty skb [ 34.973895][ T338] usb 2-1: USB disconnect, device number 8 [ 35.040931][ T449] random: crng reseeded on system resumption [ 35.430314][ T359] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.504254][ T67] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 35.515130][ T67] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 35.560298][ T359] usb 4-1: device descriptor read/64, error -71 [ 35.720294][ T310] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.820312][ T359] usb 4-1: device descriptor read/64, error -71 [ 35.857161][ T310] usb 3-1: device descriptor read/64, error -71 [ 35.920475][ T67] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 35.931646][ T67] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 35.941244][ T67] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 35.950720][ T67] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 35.965253][ T67] usb 1-1: USB disconnect, device number 5 [ 35.980382][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 35.980397][ T36] audit: type=1400 audit(1780429266.420:165): avc: denied { map } for pid=468 comm="syz.1.46" path="socket:[3768]" dev="sockfs" ino=3768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 36.015345][ T36] audit: type=1400 audit(1780429266.460:166): avc: denied { create } for pid=468 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.034813][ T36] audit: type=1400 audit(1780429266.460:167): avc: denied { ioctl } for pid=468 comm="syz.1.46" path="socket:[4468]" dev="sockfs" ino=4468 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.060281][ T359] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 36.069675][ T36] audit: type=1400 audit(1780429266.460:168): avc: denied { write } for pid=468 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.088950][ T36] audit: type=1400 audit(1780429266.460:169): avc: denied { create } for pid=468 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 36.108437][ T36] audit: type=1400 audit(1780429266.510:170): avc: denied { create } for pid=472 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 36.128059][ T36] audit: type=1400 audit(1780429266.520:171): avc: denied { sys_admin } for pid=472 comm="syz.1.47" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 36.170299][ T310] usb 3-1: device descriptor read/64, error -71 [ 36.211416][ T359] usb 4-1: device descriptor read/64, error -71 [ 36.400347][ T67] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.410463][ T310] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 36.460479][ T359] usb 4-1: device descriptor read/64, error -71 [ 36.470972][ T36] audit: type=1400 audit(1780429266.920:172): avc: denied { create } for pid=480 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 36.499623][ T484] batadv_slave_1: entered promiscuous mode [ 36.507104][ T36] audit: type=1400 audit(1780429266.950:173): avc: denied { accept } for pid=483 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.528415][ T483] batadv_slave_1: left promiscuous mode [ 36.543120][ T310] usb 3-1: device descriptor read/64, error -71 [ 36.550548][ T36] audit: type=1400 audit(1780429267.000:174): avc: denied { create } for pid=487 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.570673][ T359] usb usb4-port1: attempt power cycle [ 36.583498][ T491] ======================================================= [ 36.583498][ T491] WARNING: The mand mount option has been deprecated and [ 36.583498][ T491] and is ignored by this kernel. Remove the mand [ 36.583498][ T491] option from the mount to silence this warning. [ 36.583498][ T491] ======================================================= [ 36.590410][ T67] usb 2-1: Using ep0 maxpacket: 16 [ 36.624804][ T67] usb 2-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 36.635151][ T67] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.646595][ T67] usb 2-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 36.655737][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.663909][ T67] usb 2-1: Product: syz [ 36.668109][ T67] usb 2-1: Manufacturer: syz [ 36.672741][ T67] usb 2-1: SerialNumber: syz [ 36.776579][ T495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.785224][ T310] usb 3-1: device descriptor read/64, error -71 [ 36.791862][ T495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.882424][ T67] usb 2-1: USB disconnect, device number 9 [ 36.900395][ T310] usb usb3-port1: attempt power cycle [ 36.910295][ T359] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 36.931328][ T359] usb 4-1: device descriptor read/8, error -71 [ 37.020330][ T338] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.061418][ T359] usb 4-1: device descriptor read/8, error -71 [ 37.171463][ T338] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 37.181499][ T338] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 37.193097][ T338] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 37.202200][ T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.210204][ T338] usb 1-1: Product: syz [ 37.214415][ T338] usb 1-1: Manufacturer: syz [ 37.219005][ T338] usb 1-1: SerialNumber: syz [ 37.224255][ T338] usb 1-1: config 0 descriptor?? [ 37.229530][ T494] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 37.236827][ T494] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 37.250294][ T310] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 37.271316][ T310] usb 3-1: device descriptor read/8, error -71 [ 37.300290][ T359] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 37.321366][ T359] usb 4-1: device descriptor read/8, error -71 [ 37.395960][ T497] veth1_macvtap: left promiscuous mode [ 37.401667][ T497] macsec0: entered allmulticast mode [ 37.407949][ T310] usb 3-1: device descriptor read/8, error -71 [ 37.413552][ T497] veth1_macvtap: entered promiscuous mode [ 37.419950][ T497] veth1_macvtap: entered allmulticast mode [ 37.426042][ T497] macsec0: left allmulticast mode [ 37.431126][ T497] veth1_macvtap: left allmulticast mode [ 37.461551][ T359] usb 4-1: device descriptor read/8, error -71 [ 37.570372][ T359] usb usb4-port1: unable to enumerate USB device [ 37.650306][ T310] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 37.670286][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 37.671761][ T310] usb 3-1: device descriptor read/8, error -71 [ 37.811535][ T310] usb 3-1: device descriptor read/8, error -71 [ 37.821474][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.832459][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.842240][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 37.855098][ T45] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 37.864195][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.873098][ T45] usb 2-1: config 0 descriptor?? [ 37.920391][ T310] usb usb3-port1: unable to enumerate USB device [ 37.956374][ T338] dm9601 1-1:0.0: probe with driver dm9601 failed with error -71 [ 37.975486][ T338] usb 1-1: USB disconnect, device number 6 [ 38.283833][ T45] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 38.304602][ T45] steelseries 0003:1038:1410.0002: invalid report_size 645342769 [ 38.312673][ T45] steelseries 0003:1038:1410.0002: item 0 4 1 7 parsing failed [ 38.320618][ T45] steelseries 0003:1038:1410.0002: parse failed [ 38.327012][ T45] steelseries 0003:1038:1410.0002: probe with driver steelseries failed with error -22 [ 38.430409][ T338] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.499464][ T45] usb 2-1: USB disconnect, device number 10 [ 38.580285][ T338] usb 1-1: Using ep0 maxpacket: 16 [ 38.587037][ T338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.600283][ T316] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.607982][ T338] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 38.618473][ T520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=520 comm=syz.2.63 [ 38.631121][ T338] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 38.642967][ T338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 38.650759][ T520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=520 comm=syz.2.63 [ 38.654630][ T338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 38.676452][ T338] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 38.689825][ T520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=520 comm=syz.2.63 [ 38.702565][ T338] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.711889][ T338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 38.728417][ T338] usb 1-1: SerialNumber: syz [ 38.737064][ T503] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 38.761731][ T316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.770447][ T316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.780843][ T316] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.789877][ T316] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 38.803306][ T316] usb 4-1: string descriptor 0 read error: -22 [ 38.809642][ T316] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 38.818833][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.948925][ T338] usb 1-1: USB disconnect, device number 7 [ 39.031598][ T510] capability: warning: `syz.3.59' uses 32-bit capabilities (legacy support in use) [ 39.042868][ T510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.052347][ T510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.061674][ T316] usb 4-1: Can't get UAC3 power state for id 10 [ 39.062389][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.077315][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.080389][ T535] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 39.093072][ T316] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 39.098588][ T316] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 39.122981][ T316] usb 4-1: USB disconnect, device number 11 [ 39.131901][ T536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.142966][ T536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.237579][ T542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.256697][ T542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.266771][ T542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.276071][ T542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.285327][ T542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.295297][ T542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.350299][ T45] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 39.501797][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.510028][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 39.518054][ T45] usb 2-1: too many configurations: 222, using maximum allowed: 8 [ 39.526980][ T45] usb 2-1: config index 0 descriptor too short (expected 2926, got 110) [ 39.535599][ T45] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.544556][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.554885][ T45] usb 2-1: config 1 has no interfaces? [ 39.561308][ T45] usb 2-1: config index 1 descriptor too short (expected 2926, got 110) [ 39.569800][ T45] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.578796][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.589220][ T45] usb 2-1: config 1 has no interfaces? [ 39.607571][ T45] usb 2-1: config index 2 descriptor too short (expected 2926, got 110) [ 39.616396][ T45] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.625402][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.630354][ T316] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 39.636401][ T45] usb 2-1: config 1 has no interfaces? [ 39.649686][ T45] usb 2-1: config index 3 descriptor too short (expected 2926, got 110) [ 39.658538][ T45] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.677183][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.699640][ T45] usb 2-1: config 1 has no interfaces? [ 39.706485][ T45] usb 2-1: config index 4 descriptor too short (expected 2926, got 110) [ 39.715097][ T45] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.723995][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.734339][ T45] usb 2-1: config 1 has no interfaces? [ 39.740743][ T45] usb 2-1: config index 5 descriptor too short (expected 2926, got 110) [ 39.749287][ T45] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.754498][ T550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.766404][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.772817][ T550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.777169][ T45] usb 2-1: config 1 has no interfaces? [ 39.790522][ T45] usb 2-1: config index 6 descriptor too short (expected 2926, got 110) [ 39.798891][ T45] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.807896][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.818626][ T45] usb 2-1: config 1 has no interfaces? [ 39.824305][ T316] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 39.825187][ T45] usb 2-1: config index 7 descriptor too short (expected 2926, got 110) [ 39.832923][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 39.847995][ T45] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.860913][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.862233][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 39.872280][ T45] usb 2-1: config 1 has no interfaces? [ 39.886756][ T45] usb 2-1: language id specifier not provided by device, defaulting to English [ 39.897009][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 39.898951][ T316] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 39.906211][ T45] usb 2-1: New USB device strings: Mfr=1, Product=143, SerialNumber=237 [ 39.917265][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.924301][ T45] usb 2-1: Product: syz [ 39.931624][ T316] usb 4-1: Product: syz [ 39.936666][ T45] usb 2-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十 [ 39.940193][ T316] usb 4-1: Manufacturer: syz [ 39.940369][ T338] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 39.949335][ T45] usb 2-1: SerialNumber: syz [ 39.965042][ T316] usb 4-1: SerialNumber: syz [ 39.972891][ T316] usb 4-1: config 0 descriptor?? [ 40.111568][ T338] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 40.122576][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.133573][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.143372][ T338] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 40.157162][ T338] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 40.166270][ T338] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 40.174640][ T338] usb 3-1: Manufacturer: syz [ 40.179633][ T542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.181097][ T45] usb 2-1: USB disconnect, device number 11 [ 40.192019][ T338] usb 3-1: config 0 descriptor?? [ 40.200436][ T542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.210894][ T542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.220327][ T542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.232145][ T359] usb 4-1: USB disconnect, device number 12 [ 40.612616][ T338] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 40.622107][ T338] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 40.631378][ T338] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 40.871415][ T358] usb 3-1: USB disconnect, device number 12 [ 40.890292][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.000372][ T359] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 41.020313][ T45] usb 1-1: device descriptor read/64, error -71 [ 41.151468][ T359] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 41.160305][ T359] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.170465][ T359] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 41.180919][ T359] usb 4-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 41.189971][ T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.198021][ T359] usb 4-1: Product: syz [ 41.202367][ T359] usb 4-1: Manufacturer: syz [ 41.206977][ T359] usb 4-1: SerialNumber: syz [ 41.270303][ T45] usb 1-1: device descriptor read/64, error -71 [ 41.415011][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 41.415030][ T36] audit: type=1400 audit(1780429271.860:193): avc: denied { connect } for pid=574 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.441640][ T10] usb 4-1: USB disconnect, device number 13 [ 41.510293][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 41.557416][ T36] audit: type=1400 audit(1780429272.000:194): avc: denied { read append } for pid=584 comm="syz.2.83" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.581195][ T36] audit: type=1400 audit(1780429272.000:195): avc: denied { open } for pid=584 comm="syz.2.83" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.604744][ T36] audit: type=1400 audit(1780429272.000:196): avc: denied { ioctl } for pid=584 comm="syz.2.83" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.660296][ T45] usb 1-1: device descriptor read/64, error -71 [ 41.910302][ T45] usb 1-1: device descriptor read/64, error -71 [ 41.955557][ T36] audit: type=1400 audit(1780429272.400:197): avc: denied { create } for pid=591 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.004579][ T36] audit: type=1400 audit(1780429272.450:198): avc: denied { ioctl } for pid=596 comm="syz.3.88" path="socket:[4811]" dev="sockfs" ino=4811 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.030411][ T45] usb usb1-port1: attempt power cycle [ 42.270303][ T359] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 42.371591][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 42.391771][ T45] usb 1-1: device descriptor read/8, error -71 [ 42.420301][ T359] usb 3-1: Using ep0 maxpacket: 16 [ 42.426647][ T359] usb 3-1: config index 0 descriptor too short (expected 59616, got 154) [ 42.435137][ T359] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 42.445441][ T359] usb 3-1: config 135 has 0 interfaces, different from the descriptor's value: 29 [ 42.456856][ T359] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.467290][ T359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.475432][ T359] usb 3-1: Product: syz [ 42.479615][ T359] usb 3-1: Manufacturer: syz [ 42.486480][ T359] usb 3-1: SerialNumber: syz [ 42.521406][ T45] usb 1-1: device descriptor read/8, error -71 [ 42.659588][ T36] audit: type=1400 audit(1780429273.100:199): avc: denied { create } for pid=634 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.661720][ T637] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 42.679584][ T36] audit: type=1400 audit(1780429273.110:200): avc: denied { write } for pid=634 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.707808][ T36] audit: type=1400 audit(1780429273.110:201): avc: denied { remount } for pid=634 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 42.708321][ T592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.733030][ T36] audit: type=1400 audit(1780429273.170:202): avc: denied { bind } for pid=634 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.738908][ T592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.789482][ T338] usb 3-1: USB disconnect, device number 13 [ 42.796547][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 42.809667][ T650] loop8: detected capacity change from 0 to 7 [ 42.821324][ T45] usb 1-1: device descriptor read/8, error -71 [ 42.951449][ T45] usb 1-1: device descriptor read/8, error -71 [ 43.060445][ T45] usb usb1-port1: unable to enumerate USB device [ 43.150332][ T359] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 43.302054][ T359] usb 4-1: unable to get BOS descriptor or descriptor too short [ 43.310917][ T359] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 43.318484][ T359] usb 4-1: can't read configurations, error -71 [ 43.590306][ T338] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 43.626715][ T660] netlink: 72 bytes leftover after parsing attributes in process `syz.0.94'. [ 43.635916][ T660] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.740302][ T338] usb 3-1: Using ep0 maxpacket: 32 [ 43.746585][ T338] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 43.759171][ T338] usb 3-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice= 0.40 [ 43.768349][ T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.776374][ T338] usb 3-1: Product: syz [ 43.780566][ T338] usb 3-1: Manufacturer: syz [ 43.785153][ T338] usb 3-1: SerialNumber: syz [ 43.993374][ T338] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 44.000339][ T338] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 44.010824][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 44.018683][ T338] usb 3-1: USB disconnect, device number 14 [ 44.028367][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.171831][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.180426][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.190553][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 44.201588][ T10] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.216268][ T10] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 44.225358][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.233374][ T10] usb 1-1: Product: syz [ 44.237533][ T10] usb 1-1: Manufacturer: syz [ 44.242163][ T10] usb 1-1: SerialNumber: syz [ 44.360294][ T359] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 44.451343][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 44.461554][ T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 44.474050][ T10] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 44.483952][ T10] usb 1-1: USB disconnect, device number 12 [ 44.495876][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.520442][ T359] usb 4-1: Using ep0 maxpacket: 8 [ 44.527427][ T359] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.541109][ T359] usb 4-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 44.551772][ T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.559768][ T359] usb 4-1: Product: syz [ 44.564113][ T359] usb 4-1: Manufacturer: syz [ 44.568712][ T359] usb 4-1: SerialNumber: syz [ 44.689546][ T674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 44.734136][ T676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 44.770283][ T45] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 44.781200][ T359] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 44.788160][ T359] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 44.803216][ T359] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 44.812789][ T359] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 44.824888][ T359] usb 4-1: USB disconnect, device number 15 [ 44.842457][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.922833][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 44.931436][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 44.942423][ T687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.948151][ T687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.953743][ T45] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 44.967841][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.976244][ T45] usb 3-1: Product: syz [ 44.980837][ T45] usb 3-1: Manufacturer: syz [ 44.985497][ T45] usb 3-1: SerialNumber: syz [ 45.032440][ T687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.043995][ T687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.200308][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 45.202305][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 45.220154][ T45] usb 3-1: USB disconnect, device number 15 [ 45.296137][ T700] incfs: Options parsing error. -22 [ 45.302840][ T700] incfs: mount failed -22 [ 45.307525][ T700] netlink: 'syz.3.106': attribute type 46 has an invalid length. [ 45.330285][ T10] usb 2-1: device descriptor read/64, error -71 [ 45.336887][ T702] syzkaller1: entered promiscuous mode [ 45.342470][ T702] syzkaller1: entered allmulticast mode [ 45.402872][ T704] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.415068][ T704] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 45.570387][ T10] usb 2-1: device descriptor read/64, error -71 [ 45.810300][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 45.940311][ T10] usb 2-1: device descriptor read/64, error -71 [ 45.960297][ T310] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 45.979622][ T710] __vm_enough_memory: pid: 710, comm: syz.0.110, bytes: 140737488359424 not enough memory for the allocation [ 46.123148][ T310] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.132301][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.140357][ T310] usb 3-1: Product: syz [ 46.144546][ T310] usb 3-1: Manufacturer: syz [ 46.149158][ T310] usb 3-1: SerialNumber: syz [ 46.180297][ T10] usb 2-1: device descriptor read/64, error -71 [ 46.290404][ T10] usb usb2-port1: attempt power cycle [ 46.356257][ T708] 9pnet_fd: p9_fd_create_unix (708): problem connecting socket: ./cgroup/file0: -2 [ 46.372035][ T310] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 46.381366][ T310] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 46.389827][ T310] usb 3-1: 2:1 : sample bitwidth 129 in over sample bytes 2 [ 46.403534][ T310] usb 3-1: USB disconnect, device number 16 [ 46.537944][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 46.537962][ T36] audit: type=1400 audit(1780429276.980:220): avc: denied { read write } for pid=719 comm="syz.0.115" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 46.569474][ T36] audit: type=1400 audit(1780429276.980:221): avc: denied { open } for pid=719 comm="syz.0.115" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 46.650282][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 46.671329][ T10] usb 2-1: device descriptor read/8, error -71 [ 46.801355][ T10] usb 2-1: device descriptor read/8, error -71 [ 46.920322][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 47.040277][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 47.061325][ T10] usb 2-1: device descriptor read/8, error -71 [ 47.080281][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 47.086582][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.097588][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 47.110478][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 47.119545][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.128356][ T45] usb 1-1: config 0 descriptor?? [ 47.191429][ T10] usb 2-1: device descriptor read/8, error -71 [ 47.300373][ T10] usb usb2-port1: unable to enumerate USB device [ 47.338318][ T728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.346888][ T728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.355251][ T36] audit: type=1400 audit(1780429277.800:222): avc: denied { write } for pid=727 comm="syz.0.117" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.400292][ T310] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 47.530290][ T310] usb 4-1: device descriptor read/64, error -71 [ 47.579274][ T45] kye 0003:0458:500F.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 47.590020][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.596759][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.603506][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.610191][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.616931][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.623674][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.630438][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.637155][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.643933][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.650745][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.657457][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.664943][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.671676][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.678380][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.685143][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.691879][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.698572][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.705288][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.712036][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.718744][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.725465][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.732330][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.739044][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.745772][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.752496][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.759186][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.765943][ T45] kye 0003:0458:500F.0004: unknown main item tag 0x0 [ 47.773571][ T45] kye 0003:0458:500F.0004: hidraw0: USB HID v0.04 Device [HID 0458:500f] on usb-dummy_hcd.0-1/input0 [ 47.785187][ T45] kye 0003:0458:500F.0004: tablet-enabling feature report not found [ 47.792835][ T310] usb 4-1: device descriptor read/64, error -71 [ 47.804586][ T45] kye 0003:0458:500F.0004: tablet enabling failed [ 47.846715][ T45] usb 1-1: USB disconnect, device number 13 [ 47.955816][ T743] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 47.965598][ T36] audit: type=1400 audit(1780429278.410:223): avc: denied { relabelto } for pid=742 comm="syz.1.123" name="cgroup" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 47.992503][ T36] audit: type=1400 audit(1780429278.410:224): avc: denied { associate } for pid=742 comm="syz.1.123" name="cgroup" dev="tmpfs" ino=133 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 48.050324][ T310] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 48.061763][ T36] audit: type=1400 audit(1780429278.510:225): avc: denied { connect } for pid=748 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.180355][ T310] usb 4-1: device descriptor read/64, error -71 [ 48.358043][ T36] audit: type=1400 audit(1780429278.800:226): avc: denied { getopt } for pid=756 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.440293][ T310] usb 4-1: device descriptor read/64, error -71 [ 48.479499][ T36] audit: type=1400 audit(1780429278.920:227): avc: denied { unlink } for pid=294 comm="syz-executor" name="cgroup" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 48.560284][ T310] usb usb4-port1: attempt power cycle [ 48.600307][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 48.736612][ T768] fuse: Bad value for 'user_id' [ 48.741576][ T768] fuse: Bad value for 'user_id' [ 48.762051][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.770925][ T10] usb 1-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 48.781949][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 118, changing to 7 [ 48.793693][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50432, setting to 1024 [ 48.807700][ T10] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 48.817017][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.825171][ T10] usb 1-1: Product: syz [ 48.829496][ T10] usb 1-1: Manufacturer: syz [ 48.834292][ T10] usb 1-1: SerialNumber: syz [ 48.841076][ T777] fuse: Unknown parameter '~' [ 48.900282][ T310] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 48.931539][ T310] usb 4-1: device descriptor read/8, error -71 [ 48.961644][ T792] SELinux: Context ϧ is not valid (left unmapped). [ 48.969608][ T36] audit: type=1400 audit(1780429279.410:228): avc: denied { create } for pid=790 comm="syz.1.134" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 48.992021][ T36] audit: type=1400 audit(1780429279.410:229): avc: denied { associate } for pid=790 comm="syz.1.134" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7AE [ 49.017497][ T294] ------------[ cut here ]------------ [ 49.023128][ T294] WARNING: CPU: 1 PID: 294 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 49.032480][ T294] Modules linked in: [ 49.036420][ T294] CPU: 1 UID: 0 PID: 294 Comm: syz-executor Not tainted syzkaller #0 27f57cd38205631bbb0a3490d070b68221604ba5 [ 49.048093][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 49.055327][ T10] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 49.058266][ T294] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 49.070074][ T294] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fe 50 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 7a 61 03 cc e8 d6 ae 3e ff <0f> 0b e9 3e ff ff ff e8 ca ae 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 49.073365][ T310] usb 4-1: device descriptor read/8, error -71 [ 49.089747][ T294] RSP: 0018:ffffc9000666fb48 EFLAGS: 00010293 [ 49.102031][ T294] RAX: ffffffff8249195a RBX: 0000000000000000 RCX: ffff888122b21300 [ 49.110023][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.118133][ T294] RBP: ffffc9000666fb70 R08: ffff888139fe12df R09: 1ffff110273fc25b [ 49.126152][ T294] R10: dffffc0000000000 R11: ffffed10273fc25c R12: 0000000000000000 [ 49.130173][ T10] usb 1-1: USB disconnect, device number 14 [ 49.134206][ T294] R13: dffffc0000000000 R14: ffff888139fe1240 R15: ffff8881301c1220 [ 49.148069][ T294] FS: 000055556eae8500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.157050][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.163686][ T294] CR2: 000055556eb13998 CR3: 0000000103f80000 CR4: 00000000003526b0 [ 49.171730][ T294] Call Trace: [ 49.175029][ T294] [ 49.177976][ T294] ovl_do_remove+0x81b/0xda0 [ 49.182638][ T294] ? ovl_set_redirect+0x780/0x780 [ 49.187812][ T294] ? down_write+0xee/0x2b0 [ 49.192319][ T294] ? __cfi_down_write+0x10/0x10 [ 49.197214][ T294] ovl_rmdir+0x1e/0x30 [ 49.201393][ T294] vfs_rmdir+0x3e0/0x560 [ 49.205687][ T294] incfs_kill_sb+0x109/0x230 [ 49.210344][ T294] deactivate_locked_super+0xd8/0x2a0 [ 49.215761][ T294] deactivate_super+0xb8/0xe0 [ 49.220511][ T294] cleanup_mnt+0x406/0x4a0 [ 49.224970][ T294] __cleanup_mnt+0x1d/0x40 [ 49.229419][ T294] task_work_run+0x1e5/0x260 [ 49.234051][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.249744][ T294] ? __cfi_task_work_run+0x10/0x10 [ 49.249782][ T294] ? __x64_sys_umount+0x12e/0x180 [ 49.249803][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 49.265424][ T294] ? __kasan_check_read+0x15/0x20 [ 49.270524][ T294] resume_user_mode_work+0x35/0x50 [ 49.275692][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 49.281231][ T294] do_syscall_64+0x63/0xf0 [ 49.285676][ T294] ? clear_bhb_loop+0x50/0xa0 [ 49.290416][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.296347][ T294] RIP: 0033:0x7efdeef9e097 [ 49.300832][ T294] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 49.320554][ T294] RSP: 002b:00007ffd556ed408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 49.329025][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efdeef9e097 [ 49.337035][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd556ed4c0 [ 49.345182][ T294] RBP: 00007ffd556ed4c0 R08: 00007ffd556ee4c0 R09: 00000000ffffffff [ 49.353207][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd556ee550 [ 49.361239][ T294] R13: 00007efdef0321ca R14: 000000000000bf3e R15: 00007ffd556ee590 [ 49.369274][ T294] [ 49.372345][ T294] ---[ end trace 0000000000000000 ]--- [ 49.378084][ T294] ------------[ cut here ]------------ [ 49.383662][ T294] WARNING: CPU: 0 PID: 294 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 49.393018][ T294] Modules linked in: [ 49.396927][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Tainted: G W syzkaller #0 27f57cd38205631bbb0a3490d070b68221604ba5 [ 49.410078][ T294] Tainted: [W]=WARN [ 49.413965][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 49.424063][ T294] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 49.429707][ T294] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fe 50 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 7a 61 03 cc e8 d6 ae 3e ff <0f> 0b e9 3e ff ff ff e8 ca ae 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 49.449358][ T294] RSP: 0018:ffffc9000666fb48 EFLAGS: 00010293 [ 49.455480][ T294] RAX: ffffffff8249195a RBX: 0000000000000000 RCX: ffff888122b21300 [ 49.463496][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.471520][ T294] RBP: ffffc9000666fb70 R08: ffff888139fe12df R09: 1ffff110273fc25b [ 49.479509][ T294] R10: dffffc0000000000 R11: ffffed10273fc25c R12: 0000000000000000 [ 49.487525][ T294] R13: dffffc0000000000 R14: ffff888139fe1240 R15: ffff8881301c1220 [ 49.495558][ T294] FS: 000055556eae8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 49.504546][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.511184][ T294] CR2: 00007f3f0a9ea2f8 CR3: 0000000103f80000 CR4: 00000000003526b0 [ 49.519175][ T294] Call Trace: [ 49.522513][ T294] [ 49.525468][ T294] ovl_do_remove+0x81b/0xda0 [ 49.530088][ T294] ? ovl_set_redirect+0x780/0x780 [ 49.535158][ T294] ? down_write+0xee/0x2b0 [ 49.539610][ T294] ? __cfi_down_write+0x10/0x10 [ 49.544515][ T294] ovl_rmdir+0x1e/0x30 [ 49.548616][ T294] vfs_rmdir+0x3e0/0x560 [ 49.552913][ T294] incfs_kill_sb+0x1a0/0x230 [ 49.557532][ T294] deactivate_locked_super+0xd8/0x2a0 [ 49.562968][ T294] deactivate_super+0xb8/0xe0 [ 49.567687][ T294] cleanup_mnt+0x406/0x4a0 [ 49.572257][ T294] __cleanup_mnt+0x1d/0x40 [ 49.576704][ T294] task_work_run+0x1e5/0x260 [ 49.581351][ T294] ? __cfi_task_work_run+0x10/0x10 [ 49.586497][ T294] ? __x64_sys_umount+0x12e/0x180 [ 49.591560][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 49.596968][ T294] ? __kasan_check_read+0x15/0x20 [ 49.602032][ T294] resume_user_mode_work+0x35/0x50 [ 49.607163][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 49.612673][ T294] do_syscall_64+0x63/0xf0 [ 49.617113][ T294] ? clear_bhb_loop+0x50/0xa0 [ 49.621841][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.627770][ T294] RIP: 0033:0x7efdeef9e097 [ 49.632251][ T294] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 49.651967][ T294] RSP: 002b:00007ffd556ed408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 49.660444][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efdeef9e097 [ 49.668436][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd556ed4c0 [ 49.676454][ T294] RBP: 00007ffd556ed4c0 R08: 00007ffd556ee4c0 R09: 00000000ffffffff [ 49.684496][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd556ee550 [ 49.692533][ T294] R13: 00007efdef0321ca R14: 000000000000bf3e R15: 00007ffd556ee590 [ 49.700588][ T294] [ 49.703619][ T294] ---[ end trace 0000000000000000 ]--- [ 49.709150][ T310] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 49.731243][ T310] usb 4-1: device descriptor read/8, error -71 [ 49.861365][ T310] usb 4-1: device descriptor read/8, error -71 [ 49.970490][ T310] usb usb4-port1: unable to enumerate USB device