last executing test programs: 4.610259718s ago: executing program 2 (id=88): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000002240)="c1", 0x1}], 0x1) 4.283890076s ago: executing program 0 (id=90): r0 = socket$netlink(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x102200, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0x0) setpgid(r1, r1) waitid(0x2, 0x0, 0x0, 0x4, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)={0xf8, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@broadcast}, @generic="97c6a0a5a0e825ff137ceef3bc8b619ab35d04d1dacf5aa92dc923f6c65feb441e5383694035ce149ee67700ee01afd7f1921636f5477dee8195b7a750b3af6b35faba5fae823a42b9ffae98bf1fe439b9968185b28124e34af743487f1ebd7c99fd83c3dbc9815898a6156ce4465c5c50ada2aca6cadbad888751729b0c9e82031c0cc126ab248b7ab63f3ca02131d7cbb8e4c5acdeabe3e3ca68368b35e22fbabe016d9ba7af6f6b0e177b04ae03a72f24355e875d9b36bd507cb2df7052f35528e9302a599a4c4bef1daa001dbfd2979a49ff9b99e0"]}, 0xf8}], 0x1}, 0x40048c1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, 0xffffffffffffffff, 0x11}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x87, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) unshare(0x6c000600) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x40, 0xe, 0x81, {0x81, 0xb, "644428a88201c4d98d66cc5d71732d65f7a951c77ed7c8df48f4ef697cbd7a331341e5152588d6203edc5248b65103493ac3fbd3d9f6513ede156a6067d7731730371537ae42070d6dc855eedc05b2ed80e4eccdf6d5a43797603b27163529f935ac2e30a44a3eb0474b898f5a6faf82ae4d636fb9402bc8e63ae7334e1aff"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x50, 0x15, 0xa0, "785320308a33ad8393b38706e296d39e1a5232b051deb862d774bec2a651d75fe178d8f5ba9b6ffc810b4e4a6a91433818e2d32dd03889efd5f70550dbbfff11392c4585a45628083cd75f413f050e0bbafe0e80fc36e8ae87c38db7da9681669592d2435be03ad83ef5de160da65d81205b6369b94211efe6fa3f5713e5fe593d531d4fafccd3a16dc788256c0a9526419c86fc391aea81ae5af276c40507e7"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x1, 0x3, 0x7, 0x5, 0xed7c, 0xfff, 0x0, 0x8, 0x2, 0x2, 0x8, 0xffc0}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000640)={0x20, 0x89, 0x2, 0x1}}) pidfd_send_signal(r4, 0x5, &(0x7f00000000c0)={0x5, 0x8, 0xffffffc4}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000540)={0x20, 0x1, 0x28, {0x28, 0xb, "c26313852642792c3cbdeace918d0fb74237cc4b44b72fb06888815544000000000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.422255457s ago: executing program 3 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) socket(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair(0x1, 0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a8270081001000080600010800060400010180c200000e000000aaaaaaaaaabbac1414"], 0x32) 3.422081277s ago: executing program 2 (id=92): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a82700810010000806000108"], 0x32) 3.411644147s ago: executing program 3 (id=93): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000010c0)=""/225, 0xe1}, {&(0x7f0000000000)=""/127, 0x7f}], 0x2, 0x4, 0x20002000) 3.399532138s ago: executing program 3 (id=94): syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000001a40)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(r1, &(0x7f0000001fc0)=""/4079, 0xfef) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x20}) 3.370399568s ago: executing program 2 (id=95): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000140)={0x10, 0x35, 0x4, 0x70bd27, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000003140)=[@rights={{0x10}}], 0x10, 0x40090}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x144) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(r5, &(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x1, 0x0) (async) fchdir(r3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000140)={0x10, 0x35, 0x4, 0x70bd27, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000003140)=[@rights={{0x10}}], 0x10, 0x40090}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r5, &(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x144) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fspick(r5, &(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) (async) 3.238192231s ago: executing program 2 (id=96): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) sigaltstack(&(0x7f0000000340)={0x0, 0x1, 0xfffffffffffffe63}, 0x0) sigaltstack(&(0x7f00000006c0)={0x0, 0x2}, 0x0) (async) sigaltstack(&(0x7f00000006c0)={0x0, 0x2}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f0000000680)={&(0x7f0000000500)=[{0x1, 0x4, 0x7, 0x100000001, 0x2}, {0xffffffffffffffd6, 0x8, 0x8, 0x9, 0x800}, {0x6, 0xfffffffffffffffd, 0x8, 0x8bb, 0x7}, {0xb, 0x6, 0x9, 0x487c, 0x7}, {0x4, 0x3bd6, 0x5, 0x7, 0x2}, {0x8, 0x688ec2ba, 0x5, 0x2, 0x8}, {0x8, 0x2, 0x4, 0x400000000000, 0x5}, {0x10000, 0x6, 0x0, 0x1, 0xc3b}, {0x4, 0xff, 0x800, 0x9a, 0x7f}], 0x9, 0x28, 0x3, 0x8}) (async) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f0000000680)={&(0x7f0000000500)=[{0x1, 0x4, 0x7, 0x100000001, 0x2}, {0xffffffffffffffd6, 0x8, 0x8, 0x9, 0x800}, {0x6, 0xfffffffffffffffd, 0x8, 0x8bb, 0x7}, {0xb, 0x6, 0x9, 0x487c, 0x7}, {0x4, 0x3bd6, 0x5, 0x7, 0x2}, {0x8, 0x688ec2ba, 0x5, 0x2, 0x8}, {0x8, 0x2, 0x4, 0x400000000000, 0x5}, {0x10000, 0x6, 0x0, 0x1, 0xc3b}, {0x4, 0xff, 0x800, 0x9a, 0x7f}], 0x9, 0x28, 0x3, 0x8}) syz_io_uring_setup(0x1937, &(0x7f0000000040)={0x0, 0xda82, 0x0, 0x1, 0x2d3, 0x0, r6}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) (async) r7 = syz_io_uring_setup(0x1937, &(0x7f0000000040)={0x0, 0xda82, 0x0, 0x1, 0x2d3, 0x0, r6}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) syz_ublk_setup_queues(r6, r4, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x5, 0xdfffffff, 0x0, r7}}], 0x1, 0x0, 0x0) 3.237940411s ago: executing program 2 (id=97): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) unshare(0x60000600) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r2, 0x0, 0x20, 0x0, 0x20, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @remote}}}}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/22) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) r4 = socket(0x1, 0x2, 0x1) bind$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$SIOCGETLINKNAME(r4, 0x89e0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x109341) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0x0, 0xb, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000000)=0x100) mount_setattr(r5, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x20, 0x7b, 0x20000, {r5}}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f01000000000000000000042413050524010208042413"], 0x0) sync_file_range(r0, 0x1ff, 0x44c1079f, 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000380)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x1}}, {{0x2}, {0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x38) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) nanosleep(&(0x7f0000000400)={r8, r9+60000000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffffe) r10 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8900) accept4$unix(r10, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x80800) 2.610288287s ago: executing program 0 (id=100): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) (async) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40, 0x0, 0x4}, 0xc) (async) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @loopback}, 0xc) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r0, &(0x7f0000000240)="240000001a005f147f000800000904000a000000000a5f880000070000d0660000004c78", 0x24) 2.559596838s ago: executing program 0 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x30, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'veth0_virt_wifi\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0xe6}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) socket(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) socketpair(0x1, 0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x25a5, 0x4) vmsplice(r8, &(0x7f0000000600)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a8270081001000080600010800060400010180c200000e000000aaaaaaaaaabbac1414"], 0x32) 2.353532593s ago: executing program 0 (id=102): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, &(0x7f0000003480)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000300)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xffffffffc4412c40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x84, 0x40000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x28) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0xfffffffe) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000480)="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", 0x10c}], 0x1) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1}}], 0x1, 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="002e19"], 0x0, 0x0, 0x0}, 0x0) 2.182260107s ago: executing program 3 (id=103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a82700810010000806000108"], 0x32) 2.172108677s ago: executing program 3 (id=104): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "a051a64a92d2703e", "fa71f713cb2f0fb54436a503359daad5199c54ac687a01800ccd4c9abbe6bfb5", "100400", "5a405eab0cc5c7dd"}, 0x38) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x10001, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffd, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x23, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) syz_usb_connect$uac2(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb082501010305f9ff090402000001022000090400010101"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 901.979608ms ago: executing program 3 (id=109): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x40, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x1, 0x8d2, 0x0, 0x0, 0x1000, 0x1, r1, 0x0, 0xc0}}}, &(0x7f0000000100)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) syz_ublk_setup_queues(r2, r4, &(0x7f0000000240)={0x0, 0xdb9c, 0x40, 0x2, 0x248, 0x0, r2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd0aa, 0x400, 0x2, 0x29e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa72a, 0x800, 0x1, 0x219}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4256, 0x10000, 0x2, 0x3a1, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x319, 0x400, 0x3, 0x1de, 0x0, r2}}], 0x4, &(0x7f0000001b00)={0x2e, 0x0, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, '\x00', {0x4, 0xec9, 0x0, &(0x7f0000000b00)=@buf_1k="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"}}, &(0x7f0000001b80)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) wait4(r8, 0x0, 0x80000000, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r3, 0x40186f02, &(0x7f0000000540)={0x80, 0x7, 0x0, 0x9}) ptrace$poke(0x4, r8, &(0x7f00000011c0), 0xfffffffffffffffe) sendfile(r2, r2, 0x0, 0x7) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000180)={0x20, 0x17, 0x6, "0ee04c8008d0"}, 0x0, 0x0}) 610.822445ms ago: executing program 0 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x6, 0x4, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x801f, 0x8, 0x283, 0xc}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440100001f00000128bd7000fddbdf25fe8000000000000000000000000000bb000004d302003200fe8000000000000000000000000000bb080000000000000008001e0002000000ac000700ac1414bb000000000000000000000000000000000000000000000000000000014e24b09a4e2101000a201880a9000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="ff03000000000000010000000000000009000000000000000400000000000000070000000000000007000000000000000500000000000000050000000000000000000000010000000300000000000000ffffffff000000000400000000000000fd000000b06b6e00020100010000000050001100ac1414aa000000000000000000000000fc010000000000000000000000000000ac14140f000000000000000000000000ac1414400000000000000000000000002b020000000000000a000200"], 0x144}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4000040) r5 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x56}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x840) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}}) socketpair(0x1, 0x2, 0x1, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000000)={0xffffffff, 0x4, 0x4, 0x1, 0xd}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a8270081001000080600010800060400010180c200000e000000aaaaaaaaaabbac1414"], 0x32) 510.246048ms ago: executing program 0 (id=111): add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000200)="84ffffff83", 0x5, 0x4003300, 0x0, 0x0) close(r0) syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x2, 0x0, 0x20, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x40, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}}}}]}}, 0x0) 285.470613ms ago: executing program 1 (id=112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a82700810010000806000108"], 0x32) 233.063044ms ago: executing program 1 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a8270081001000080600010800060400010180c200000e00"], 0x32) 173.365036ms ago: executing program 2 (id=114): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) (async) syz_usb_connect$midi(0x3, 0x69, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0}) 172.880396ms ago: executing program 1 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r0, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x2, 0x0, 0x2}, 0x6}}, 0x18) write$P9_RCLUNK(r0, &(0x7f0000000bc0)={0x7, 0x79, 0x1}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r1 = syz_ublk_setup_io_uring(0x400019, &(0x7f0000000040)={0x0, 0x30b5, 0x80000, 0x2, 0x158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000200)={0x0, 0x95e6, 0x0, 0x5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2, 0x10000004, 0x0, r8}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf914, 0x10, 0x2, 0xe3, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf5fc, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, r5, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000340)={0x39}) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 117.965647ms ago: executing program 1 (id=116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) close(0x3) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000001040)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@tipc={{0x5, 0x4, 0x3, 0x1f, 0x3c, 0x64, 0x0, 0x8, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x13}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x101, 0x0, 0x1, 0x8, 0xfa, 0x0, 0x4e22, 0x4e24, 0x2, 0x3}}}}, 0x46) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001a00010000000000000000000200fc003a2a5e247b0000fb0c001b8006"], 0x28}], 0x1}, 0x0) (async, rerun: 32) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3e, 0x0, &(0x7f0000000000)) (rerun: 32) 23.93604ms ago: executing program 1 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file4\x00', &(0x7f0000000200), 0x82, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055c4e185f80066bad004edc7442402f8ff0000c7442406000000000f011c24", 0x53}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=118): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="b40000001100010002000000f6dbdf256500000013", @ANYBLOB="e0e77bc99b0ced6f90e2c6954c95bfd6b90c220673714b61ce250b2e9aafae243ca40cfff3965f26188ade0b3dab377239ba8d0c89cae346610e4e82230f1fff6f02b8f6755bc1c56627ec7e83deee8c7a1a4a86e70c5d446e9e44eeec6d816d3d04f09bb1ade986f324f93ee4874a05deed199861c0612ec2ac045b492c572c0b2273dca067c1699ddaad082f826b8efa71f7bac6b8f86aa6fb7413f0c7588d3a53a2a2cf2141"], 0xb4}, {&(0x7f0000000500)={0x30c, 0x38, 0x510, 0x70bd2d, 0x25dfdbfd, "", [@generic="d4ed90f46fe07afa87762612864a033f3a51a5fb523f68ab7631f3c2bf0efbeb09e2cc8c08bddf35d85ef3f5b3fd6d72f869dfaf24631a6528884905cbc9c62192cefc1052388a447c200befd87c9dc5f6811ebc511eacf4d9ade40ca0a82dbeb3834bfbb1fadcafd72d95", @generic="1c097559683c51f8d71414cd8fec0e38bc3e55339177368b370426f98fde62dfb20ddcf9cbd620399e77bfe699dcf3458e0e2ca0b3031c1b160956566e22ea53278e010cb1353e7ab723944382339ecc5e05642d4ef768559592d9c5f34c78b5d75bde65dc1d7da9a63540098e1e1c306b44363f694a4dbb32a93938471e11777ca1563ca8cc9697cc6692064156874c71e8f12f51345b573dd68da10e266fbf0c9da8a641eac18387269a1648fcf3a7b1eae56cd8e490082758732f1d3b27c7a47c46f9e8f831b5b35c75b5af570a9d966880bc5443fcc46f4f9d", @generic="96c0b013221dfcbdca5bedcd56d165bd2b789916ee89da7fb78a0b139f341e8ee2cf9b08320310b517e41b2beae8ba0797243a1329df3586bc6c4c7f65c14fb2eb4868820a4de076b9fa1e3393dc67e3eaed696f082d857ea2e4b045ecc9e2d652b0", @nested={0x8, 0xe1, 0x0, 0x1, [@nested={0x4, 0x2c}]}, @generic="63ce096ef163fdfa0da0d0aeb6de002ab596ae62e50cd18f50247d867a3c243478ee2046068452c075103c86d5515827527b4cdbf4093b974a148d0d6025afd0b77c1011ab1d8ca35024842d38894c1a876d64374199578ed8d1b64183b79833627196d8ba296a6751e366e67ad41a91112919f77582ea6e3208361b27dc953976d8d3aeab30e5e52b78a840f231529befd1", @typed={0x8, 0x133, 0x0, 0x0, @fd=r0}, @generic="cee78e6e9c7acd60201f9422153660d4ff7dc8bef4aa16408ab791279d4c7673bec38e62f49013c35973863b96b3640c12f1cc3245844d796982133b35cdd573d517b0101a504b92b3a265d96545d9a5306dc53ef1e15968ca354ca05ae73774d8897addcd27eb6cd959900f7e672e4607a29158555a967dfb8b73b1f833ffa66e5efaf3518d87d9c7911356df5acbbecce61d0df2666ab95e4b79102fe9", @typed={0x13, 0x16b, 0x0, 0x0, @str=',\'^{@^%!.\'@$]#\x00'}]}, 0x30c}], 0x2}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1e]}, 0x8, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x4047}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000001c0)=0x9) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000000000001a00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x2404c804}, 0x2200c414) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000e44facb5510d2da4af02b750000", @ANYRES16=r2, @ANYBLOB="220727bd7000fedbdf251200000008000800030000000800070003000000"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20004014) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.621716][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 14.621733][ T36] audit: type=1400 audit(1786598254.199:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.625867][ T36] audit: type=1400 audit(1786598254.199:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.628564][ T36] audit: type=1400 audit(1786598254.199:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2889]" dev="pipefs" ino=2889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.631759][ T36] audit: type=1400 audit(1786598254.199:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.634263][ T36] audit: type=1400 audit(1786598254.199:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 21.751459][ T36] audit: type=1400 audit(1786598261.329:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.752545][ T286] cgroup: Unknown subsys name 'net' [ 21.774094][ T36] audit: type=1400 audit(1786598261.329:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.801399][ T36] audit: type=1400 audit(1786598261.349:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.801552][ T286] cgroup: Unknown subsys name 'devices' [ 21.912143][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.917746][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.009817][ T36] audit: type=1400 audit(1786598261.579:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.033046][ T36] audit: type=1400 audit(1786598261.579:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.042110][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.057897][ T36] audit: type=1400 audit(1786598261.579:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.089437][ T36] audit: type=1400 audit(1786598261.649:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.115122][ T36] audit: type=1400 audit(1786598261.649:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.146787][ T36] audit: type=1400 audit(1786598261.719:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.172342][ T36] audit: type=1400 audit(1786598261.719:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.172620][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.004460][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.011543][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.018690][ T293] bridge_slave_0: entered allmulticast mode [ 23.024996][ T293] bridge_slave_0: entered promiscuous mode [ 23.031146][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.038152][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.045251][ T294] bridge_slave_0: entered allmulticast mode [ 23.051439][ T294] bridge_slave_0: entered promiscuous mode [ 23.057575][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.064649][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.071725][ T296] bridge_slave_0: entered allmulticast mode [ 23.077835][ T296] bridge_slave_0: entered promiscuous mode [ 23.084034][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.091079][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.098987][ T295] bridge_slave_0: entered allmulticast mode [ 23.105232][ T295] bridge_slave_0: entered promiscuous mode [ 23.111446][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.118471][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.125553][ T293] bridge_slave_1: entered allmulticast mode [ 23.131704][ T293] bridge_slave_1: entered promiscuous mode [ 23.137726][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.144795][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.151854][ T294] bridge_slave_1: entered allmulticast mode [ 23.157964][ T294] bridge_slave_1: entered promiscuous mode [ 23.166880][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.173921][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.180998][ T296] bridge_slave_1: entered allmulticast mode [ 23.187109][ T296] bridge_slave_1: entered promiscuous mode [ 23.193188][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.200206][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.207289][ T295] bridge_slave_1: entered allmulticast mode [ 23.213437][ T295] bridge_slave_1: entered promiscuous mode [ 23.378837][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.385903][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.393191][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.400225][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.412425][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.419459][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.426732][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.433759][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.451830][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.458866][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.466150][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.473170][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.484770][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.491812][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.499063][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.506092][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.533848][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.541157][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.548301][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.556046][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.563387][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.570805][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.577977][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.585214][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.598934][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.605991][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.621463][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.628493][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.651608][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.658626][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.666589][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.673610][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.681151][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.688158][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.709647][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.716683][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.734224][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.741262][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.749157][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.756201][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.776915][ T296] veth0_vlan: entered promiscuous mode [ 23.800992][ T293] veth0_vlan: entered promiscuous mode [ 23.817908][ T296] veth1_macvtap: entered promiscuous mode [ 23.825921][ T294] veth0_vlan: entered promiscuous mode [ 23.842318][ T293] veth1_macvtap: entered promiscuous mode [ 23.856337][ T294] veth1_macvtap: entered promiscuous mode [ 23.869471][ T295] veth0_vlan: entered promiscuous mode [ 23.902713][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.905752][ T295] veth1_macvtap: entered promiscuous mode [ 24.052518][ T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.095944][ T330] Line length is too long: Should be less than 4094 [ 24.203001][ T64] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.250349][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.340376][ T322] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.361878][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.370226][ T64] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 24.378606][ T64] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 24.388815][ T64] usb 4-1: config 63 has no interface number 0 [ 24.395230][ T64] usb 4-1: config 63 interface 66 has no altsetting 0 [ 24.403558][ T64] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 24.411343][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.412847][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.424009][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.431695][ T64] usb 4-1: Product: syz [ 24.442233][ T311] usb 3-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 24.446055][ T64] usb 4-1: Manufacturer: syz [ 24.455224][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.459572][ T64] usb 4-1: SerialNumber: syz [ 24.468874][ T311] usb 3-1: config 0 descriptor?? [ 24.510518][ T322] usb 2-1: Using ep0 maxpacket: 8 [ 24.516935][ T322] usb 2-1: unable to get BOS descriptor or descriptor too short [ 24.525272][ T322] usb 2-1: config 9 has an invalid interface number: 5 but max is 1 [ 24.533390][ T322] usb 2-1: config 9 has an invalid descriptor of length 199, skipping remainder of the config [ 24.543665][ T322] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 24.553318][ T322] usb 2-1: config 9 has no interface number 0 [ 24.559413][ T322] usb 2-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 24.570964][ T322] usb 2-1: config 9 interface 5 altsetting 9 endpoint 0x8A has invalid maxpacket 11266, setting to 1024 [ 24.582211][ T322] usb 2-1: config 9 interface 5 altsetting 9 bulk endpoint 0x8A has invalid maxpacket 1024 [ 24.592271][ T322] usb 2-1: config 9 interface 5 has no altsetting 0 [ 24.600159][ T322] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 24.609219][ T322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.617251][ T322] usb 2-1: Product: syz [ 24.621619][ T322] usb 2-1: Manufacturer: syz [ 24.626217][ T322] usb 2-1: SerialNumber: syz [ 24.633009][ T326] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 24.767977][ T313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.776582][ T313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.789956][ T64] usb 4-1: USB disconnect, device number 2 [ 25.700551][ T311] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 25.861365][ T311] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 25.872536][ T311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 25.879142][ T311] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 25.888444][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.897616][ T311] usb 4-1: config 0 descriptor?? [ 25.902999][ T344] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 26.010344][ T45] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 26.170365][ T45] usb 1-1: Invalid ep0 maxpacket: 32 [ 26.300353][ T45] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 26.460336][ T45] usb 1-1: Invalid ep0 maxpacket: 32 [ 26.465820][ T45] usb usb1-port1: attempt power cycle [ 26.513866][ T311] usbhid 4-1:0.0: can't add hid device: -71 [ 26.519944][ T311] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 26.528715][ T311] usb 4-1: USB disconnect, device number 3 [ 26.820335][ T45] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 26.840688][ T45] usb 1-1: Invalid ep0 maxpacket: 32 [ 26.970335][ T45] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 26.990718][ T45] usb 1-1: Invalid ep0 maxpacket: 32 [ 26.996142][ T45] usb usb1-port1: unable to enumerate USB device [ 27.006597][ T64] usb 3-1: USB disconnect, device number 2 [ 27.013765][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 27.013795][ T36] audit: type=1400 audit(1786598266.579:128): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.074373][ T322] usb 2-1: USB disconnect, device number 2 [ 27.102587][ T36] audit: type=1400 audit(1786598266.679:129): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 27.134634][ T36] audit: type=1400 audit(1786598266.709:130): avc: denied { create } for pid=369 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.157190][ T36] audit: type=1400 audit(1786598266.719:131): avc: denied { write } for pid=369 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.177969][ T36] audit: type=1400 audit(1786598266.719:132): avc: denied { nlmsg_write } for pid=369 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.198380][ T36] audit: type=1400 audit(1786598266.719:133): avc: denied { write } for pid=369 comm="syz.1.20" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.221499][ T36] audit: type=1400 audit(1786598266.719:134): avc: denied { open } for pid=369 comm="syz.1.20" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.245234][ T36] audit: type=1400 audit(1786598266.719:135): avc: denied { create } for pid=369 comm="syz.1.20" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.266176][ T36] audit: type=1400 audit(1786598266.719:136): avc: denied { ioctl } for pid=369 comm="syz.1.20" path="/dev/input/event2" dev="devtmpfs" ino=209 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.420344][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.470422][ T322] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.570382][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 27.577976][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 27.587194][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.595328][ T9] usb 4-1: Product: syz [ 27.599491][ T9] usb 4-1: Manufacturer: syz [ 27.604186][ T9] usb 4-1: SerialNumber: syz [ 27.621486][ T322] usb 2-1: config 6 has an invalid interface number: 191 but max is 2 [ 27.629740][ T322] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 27.638470][ T322] usb 2-1: config 6 has an invalid interface number: 176 but max is 2 [ 27.646665][ T322] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 27.655382][ T322] usb 2-1: config 6 has an invalid interface number: 171 but max is 2 [ 27.663576][ T322] usb 2-1: config 6 has no interface number 0 [ 27.669665][ T322] usb 2-1: config 6 has no interface number 1 [ 27.676155][ T322] usb 2-1: config 6 has no interface number 2 [ 27.682456][ T322] usb 2-1: config 6 interface 191 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 1024 [ 27.692599][ T322] usb 2-1: config 6 interface 191 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 27.703575][ T322] usb 2-1: config 6 interface 191 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 27.714547][ T322] usb 2-1: config 6 interface 176 altsetting 130 endpoint 0xB has invalid maxpacket 1015, setting to 64 [ 27.725722][ T322] usb 2-1: config 6 interface 176 altsetting 130 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 27.736866][ T322] usb 2-1: config 6 interface 176 altsetting 130 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 27.747936][ T322] usb 2-1: config 6 interface 176 altsetting 130 has a duplicate endpoint with address 0x9, skipping [ 27.759074][ T322] usb 2-1: config 6 interface 176 altsetting 130 has a duplicate endpoint with address 0x9, skipping [ 27.770387][ T322] usb 2-1: config 6 interface 176 altsetting 130 endpoint 0xC has an invalid bInterval 189, changing to 7 [ 27.781731][ T322] usb 2-1: config 6 interface 176 altsetting 130 has a duplicate endpoint with address 0x1, skipping [ 27.792630][ T322] usb 2-1: config 6 interface 176 altsetting 130 has a duplicate endpoint with address 0xD, skipping [ 27.803535][ T322] usb 2-1: config 6 interface 176 altsetting 130 has an invalid descriptor for endpoint zero, skipping [ 27.814617][ T322] usb 2-1: config 6 interface 171 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 27.825423][ T322] usb 2-1: config 6 interface 171 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 27.837063][ T322] usb 2-1: config 6 interface 171 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 27.848048][ T322] usb 2-1: config 6 interface 191 has no altsetting 0 [ 27.854974][ T322] usb 2-1: config 6 interface 176 has no altsetting 0 [ 27.861882][ T322] usb 2-1: config 6 interface 171 has no altsetting 0 [ 27.868773][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.875964][ T9] usb 4-1: unit 2 not found! [ 27.880647][ T9] usb 4-1: unit 6 not found! [ 27.886132][ T322] usb 2-1: Dual-Role OTG device on HNP port [ 27.894070][ T9] usb 4-1: USB disconnect, device number 4 [ 27.900496][ T322] usb 2-1: New USB device found, idVendor=03f0, idProduct=5216, bcdDevice=c4.e9 [ 27.909548][ T322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.920027][ T322] usb 2-1: Product: ␉ [ 27.924925][ T322] usb 2-1: Manufacturer: 褑僰ᇱ謆ꭹꧦ隿곳∾퐺寿ꦢឭ컻쎓炚Ӥ㢙鯴䗫ᡋ卨ﴀ䄲龍⤬泷쒑杶龫ﾶࡴ㷫⎤芃뽭硞憩䟭㇪풊騥篓累鱷ᓃㅰ䆍㽮㧷⯄ꩅꘂ␂뱢逕愀毤憩缟ﱧ縂늭䤮火賏乕⠞릯녭ﯙ┊镯塊飠阬螣蹔Ǔ㏈ᔍ뿜솈藓㜪穲獃ꃑ軶擜㧰৓൩蜄䵓乤㦢咪깉ҭ깆杔螺᭖ [ 27.959969][ T322] usb 2-1: SerialNumber: syz [ 27.966966][ T370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 27.979225][ T36] audit: type=1400 audit(1786598267.549:137): avc: denied { create } for pid=374 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.199907][ T370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.208437][ T370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.217205][ T370] netlink: 165 bytes leftover after parsing attributes in process `syz.1.20'. [ 28.232918][ T322] usb 2-1: USB disconnect, device number 3 [ 28.290355][ T45] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 28.451163][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 28.459743][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.469932][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 28.478993][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.489990][ T45] usb 3-1: Found UVC 1.00 device (046d:0825) [ 28.560331][ T334] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.711824][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.722759][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.732572][ T334] usb 4-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 28.741640][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.750440][ T334] usb 4-1: config 0 descriptor?? [ 29.000340][ T334] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 29.048187][ T45] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 29.057776][ T45] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 29.066599][ T45] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 29.075011][ T45] usb 3-1: USB disconnect, device number 3 [ 29.170351][ T359] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 29.171429][ T334] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 29.188970][ T334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 29.196233][ T334] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 29.205287][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.213825][ T334] usb 2-1: config 0 descriptor?? [ 29.219006][ T383] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 29.320323][ T359] usb 1-1: Using ep0 maxpacket: 32 [ 29.326544][ T359] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.336793][ T359] usb 1-1: config 0 has no interfaces? [ 29.343434][ T359] usb 1-1: string descriptor 0 read error: -71 [ 29.349636][ T359] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 29.358949][ T359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.367623][ T359] usb 1-1: config 0 descriptor?? [ 29.372823][ T359] usb 1-1: can't set config #0, error -71 [ 29.379136][ T359] usb 1-1: USB disconnect, device number 6 [ 29.810351][ T359] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 29.829578][ T334] usbhid 2-1:0.0: can't add hid device: -71 [ 29.835689][ T334] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 29.844795][ T334] usb 2-1: USB disconnect, device number 4 [ 29.950684][ T409] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 29.981284][ T359] usb 3-1: config 1 has an invalid interface number: 161 but max is 0 [ 29.989516][ T359] usb 3-1: config 1 has no interface number 0 [ 29.995913][ T359] usb 3-1: config 1 interface 161 has no altsetting 0 [ 30.008447][ T359] usb 3-1: New USB device found, idVendor=0411, idProduct=003d, bcdDevice=bb.be [ 30.017576][ T359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.025603][ T359] usb 3-1: Product: syz [ 30.029811][ T359] usb 3-1: Manufacturer: syz [ 30.034449][ T359] usb 3-1: SerialNumber: syz [ 30.110882][ T415] process 'syz.0.38' launched './file1' with NULL argv: empty string added [ 30.134076][ T417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.39'. [ 30.242063][ T359] asix 3-1:1.161: probe with driver asix failed with error -22 [ 30.250984][ T359] usb 3-1: Found UVC 15.ff device syz (0411:003d) [ 30.257435][ T359] usb 3-1: No valid video chain found. [ 30.263937][ T359] usb 3-1: USB disconnect, device number 4 [ 30.380332][ T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 30.510345][ T310] usb 1-1: device descriptor read/64, error -71 [ 30.750424][ T310] usb 1-1: device descriptor read/64, error -71 [ 30.754472][ T429] FAULT_INJECTION: forcing a failure. [ 30.754472][ T429] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.769862][ T429] CPU: 0 UID: 0 PID: 429 Comm: syz.2.44 Not tainted syzkaller #0 28f921879e8f15dfc7a8f0390122ef60233eff00 [ 30.769890][ T429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.769904][ T429] Call Trace: [ 30.769908][ T429] [ 30.769912][ T429] __dump_stack+0x21/0x30 [ 30.769934][ T429] dump_stack_lvl+0x140/0x1c0 [ 30.769948][ T429] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.769962][ T429] ? check_stack_object+0x138/0x150 [ 30.769973][ T429] dump_stack+0x19/0x20 [ 30.769986][ T429] should_fail_ex+0x3c2/0x510 [ 30.769998][ T429] should_fail+0xf/0x20 [ 30.770008][ T429] should_fail_usercopy+0x1e/0x30 [ 30.770020][ T429] _copy_to_user+0x24/0xa0 [ 30.770033][ T429] simple_read_from_buffer+0xed/0x160 [ 30.770048][ T429] proc_fail_nth_read+0x1aa/0x220 [ 30.770062][ T429] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 30.770076][ T429] ? bpf_lsm_file_permission+0xd/0x20 [ 30.770089][ T429] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 30.770103][ T429] vfs_read+0x288/0xc70 [ 30.770113][ T429] ? __cfi_vfs_read+0x10/0x10 [ 30.770123][ T429] ? __kasan_check_write+0x18/0x20 [ 30.770133][ T429] ? mutex_lock+0x97/0x1d0 [ 30.770148][ T429] ? __cfi_mutex_lock+0x10/0x10 [ 30.770162][ T429] ksys_read+0x145/0x260 [ 30.770172][ T429] ? __cfi_ksys_read+0x10/0x10 [ 30.770182][ T429] ? __kasan_check_read+0x15/0x20 [ 30.770198][ T429] __x64_sys_read+0x7f/0x90 [ 30.770208][ T429] x64_sys_call+0x2638/0x2ee0 [ 30.770217][ T429] do_syscall_64+0x57/0xf0 [ 30.770228][ T429] ? clear_bhb_loop+0x50/0xa0 [ 30.770242][ T429] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.770255][ T429] RIP: 0033:0x7f7f2875e90e [ 30.770265][ T429] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 30.770282][ T429] RSP: 002b:00007f7f29690fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 30.770305][ T429] RAX: ffffffffffffffda RBX: 00007f7f296916c0 RCX: 00007f7f2875e90e [ 30.770318][ T429] RDX: 000000000000000f RSI: 00007f7f296910a0 RDI: 0000000000000007 [ 30.770330][ T429] RBP: 00007f7f29691090 R08: 0000000000000000 R09: 0000000000000000 [ 30.770337][ T429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.770343][ T429] R13: 00007f7f28a26038 R14: 00007f7f28a25fa0 R15: 00007ffdc0167878 [ 30.770351][ T429] [ 31.080330][ T310] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 31.210343][ T310] usb 1-1: device descriptor read/64, error -71 [ 31.336174][ T322] usb 4-1: USB disconnect, device number 5 [ 31.380412][ T334] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 31.388034][ T444] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.51'. [ 31.460346][ T310] usb 1-1: device descriptor read/64, error -71 [ 31.540365][ T359] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.541412][ T334] usb 3-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 31.558229][ T334] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.569216][ T334] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 31.580030][ T334] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 31.580417][ T310] usb usb1-port1: attempt power cycle [ 31.590884][ T334] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.610326][ T334] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.619367][ T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.627367][ T334] usb 3-1: Product: syz [ 31.631565][ T334] usb 3-1: Manufacturer: syz [ 31.636144][ T334] usb 3-1: SerialNumber: syz [ 31.641897][ T435] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.670320][ T359] usb 2-1: device descriptor read/64, error -71 [ 31.730328][ T322] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 31.849940][ T435] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.901633][ T322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.910127][ T322] usb 4-1: config 1 interface 0 altsetting 129 endpoint 0x81 has invalid maxpacket 6399, setting to 8 [ 31.921177][ T322] usb 4-1: config 1 interface 0 has no altsetting 0 [ 31.929757][ T322] usb 4-1: string descriptor 0 read error: -22 [ 31.930329][ T359] usb 2-1: device descriptor read/64, error -71 [ 31.936057][ T322] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 31.942419][ T310] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 31.951286][ T322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.967553][ T446] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 31.976546][ T310] usb 1-1: device descriptor read/8, error -71 [ 32.058129][ T334] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 32.064176][ T334] cdc_ncm 3-1:1.0: bind() failure [ 32.070005][ T334] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 32.076843][ T334] cdc_ncm 3-1:1.1: bind() failure [ 32.111691][ T310] usb 1-1: device descriptor read/8, error -71 [ 32.176518][ T322] usbhid 4-1:1.0: can't add hid device: -71 [ 32.182605][ T322] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 32.192015][ T322] usb 4-1: USB disconnect, device number 6 [ 32.200347][ T359] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.330342][ T359] usb 2-1: device descriptor read/64, error -71 [ 32.350366][ T310] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 32.371388][ T310] usb 1-1: device descriptor read/8, error -71 [ 32.501441][ T310] usb 1-1: device descriptor read/8, error -71 [ 32.570389][ T359] usb 2-1: device descriptor read/64, error -71 [ 32.610424][ T310] usb usb1-port1: unable to enumerate USB device [ 32.682212][ T359] usb usb2-port1: attempt power cycle [ 32.764747][ T322] usb 3-1: USB disconnect, device number 5 [ 32.865050][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 32.865067][ T36] audit: type=1400 audit(1786598272.439:166): avc: denied { map } for pid=464 comm="syz.3.58" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.896244][ T36] audit: type=1400 audit(1786598272.439:167): avc: denied { read write } for pid=464 comm="syz.3.58" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.930352][ T36] audit: type=1400 audit(1786598272.469:168): avc: denied { map } for pid=464 comm="syz.3.58" path="socket:[4491]" dev="sockfs" ino=4491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 32.970309][ T36] audit: type=1400 audit(1786598272.539:169): avc: denied { sqpoll } for pid=462 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.030360][ T359] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.070519][ T359] usb 2-1: device descriptor read/8, error -71 [ 33.201900][ T359] usb 2-1: device descriptor read/8, error -71 [ 33.240337][ T310] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.350763][ T45] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 33.390352][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 33.396552][ T310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.407997][ T310] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 33.417065][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.425139][ T310] usb 4-1: Product: syz [ 33.429296][ T310] usb 4-1: Manufacturer: syz [ 33.433997][ T310] usb 4-1: SerialNumber: syz [ 33.439171][ T310] usb 4-1: config 0 descriptor?? [ 33.444272][ T359] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 33.452322][ T310] smsc75xx v1.0.0 [ 33.455977][ T310] smsc75xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 33.465928][ T310] smsc75xx 4-1:0.0: probe with driver smsc75xx failed with error -22 [ 33.476595][ T359] usb 2-1: device descriptor read/8, error -71 [ 33.511016][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 33.519524][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.529796][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 33.538920][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.548651][ T45] usb 3-1: Found UVC 1.00 device (046d:0825) [ 33.560409][ T322] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 33.611333][ T359] usb 2-1: device descriptor read/8, error -71 [ 33.655333][ T472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.663900][ T472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.672259][ T9] usb 4-1: USB disconnect, device number 7 [ 33.711373][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.722364][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.730419][ T359] usb usb2-port1: unable to enumerate USB device [ 33.732119][ T322] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 33.747434][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.756661][ T322] usb 1-1: config 0 descriptor?? [ 33.959478][ T45] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 34.164478][ T322] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 34.171983][ T322] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 34.179391][ T322] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 34.186867][ T322] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 34.194347][ T322] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 34.205138][ T322] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 34.368427][ T322] playstation 0003:054C:0DF2.0001: Invalid reportID received, expected 9 got 0 [ 34.379919][ T322] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 34.389635][ T322] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 34.398482][ T322] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 34.406509][ T322] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 34.490334][ T359] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 34.573304][ T478] Zero length message leads to an empty skb [ 34.584971][ T322] usb 1-1: USB disconnect, device number 11 [ 34.641333][ T359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.652495][ T359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.662242][ T359] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.671301][ T359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.679805][ T359] usb 4-1: config 0 descriptor?? [ 34.685596][ T359] hub 4-1:0.0: USB hub found [ 34.710541][ T310] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 34.861341][ T310] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.872388][ T310] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.883147][ T310] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 34.889924][ T491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.892305][ T310] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 34.901761][ T491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.909031][ T310] usb 2-1: Product: syz [ 34.920788][ T310] usb 2-1: Manufacturer: syz [ 34.926996][ T310] hub 2-1:4.0: USB hub found [ 35.105087][ T36] audit: type=1400 audit(1786598274.679:170): avc: denied { create } for pid=492 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.109954][ T359] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 35.127087][ T36] audit: type=1400 audit(1786598274.709:171): avc: denied { ioctl } for pid=492 comm="syz.0.67" path="socket:[4538]" dev="sockfs" ino=4538 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.134585][ T359] usbhid 4-1:0.0: can't add hid device: -71 [ 35.162599][ T359] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.173165][ T36] audit: type=1400 audit(1786598274.749:172): avc: denied { write } for pid=489 comm="syz.1.66" name="sched_switch" dev="tracefs" ino=3868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 35.197094][ T36] audit: type=1400 audit(1786598274.749:173): avc: denied { add_name } for pid=489 comm="syz.1.66" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 35.197533][ T310] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 35.218057][ T36] audit: type=1400 audit(1786598274.749:174): avc: denied { create } for pid=489 comm="syz.1.66" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 35.225736][ T359] usb 4-1: USB disconnect, device number 8 [ 35.245633][ T36] audit: type=1400 audit(1786598274.749:175): avc: denied { write } for pid=489 comm="syz.1.66" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 35.540450][ T45] usb 2-1: USB disconnect, device number 9 [ 35.560331][ T310] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 35.716389][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.727935][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.738330][ T310] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 35.750688][ T310] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 35.759795][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.768830][ T310] usb 1-1: Product: syz [ 35.773154][ T310] usb 1-1: Manufacturer: syz [ 35.777907][ T310] usb 1-1: SerialNumber: syz [ 35.985795][ T310] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 35.993481][ T310] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 36.002254][ T310] usb 1-1: USB disconnect, device number 12 [ 36.028476][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.044434][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 36.117784][ T322] usb 3-1: USB disconnect, device number 6 [ 36.183344][ T525] netlink: 'syz.2.78': attribute type 4 has an invalid length. [ 36.230348][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 36.238549][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.248704][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 36.260688][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.262285][ T530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=530 comm=syz.1.80 [ 36.276708][ T9] usb 4-1: Product: syz [ 36.287410][ T9] usb 4-1: Manufacturer: syz [ 36.292602][ T9] usb 4-1: SerialNumber: syz [ 36.515277][ T514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.568382][ T9] usb 4-1: Unsupported UAC3 BADD profile [ 36.580401][ T322] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.589570][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.604874][ T9] usb 4-1: USB disconnect, device number 9 [ 36.616653][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.750330][ T322] usb 3-1: Using ep0 maxpacket: 32 [ 36.756461][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.767378][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.777123][ T322] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 36.790537][ T322] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 36.799781][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.809158][ T322] usb 3-1: config 0 descriptor?? [ 37.010319][ T310] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 37.171324][ T310] usb 1-1: No LPM exit latency info found, disabling LPM. [ 37.191280][ T310] usb 1-1: string descriptor 0 read error: -22 [ 37.197561][ T310] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 37.213544][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.222905][ T532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.240858][ T532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.250494][ T532] input: syz0 as /devices/virtual/input/input4 [ 37.261063][ T310] usb 1-1: MIDIStreaming interface descriptor not found [ 37.274462][ T322] usbhid 3-1:0.0: can't add hid device: -71 [ 37.283918][ T322] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 37.313197][ T322] usb 3-1: USB disconnect, device number 7 [ 37.460767][ T310] usb 1-1: USB disconnect, device number 13 [ 37.640314][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 37.801028][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 37.812513][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.822873][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 37.831946][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.850997][ T9] usb 4-1: Found UVC 1.00 device (046d:0825) [ 37.870333][ T36] kauditd_printk_skb: 13333 callbacks suppressed [ 37.870347][ T36] audit: type=1326 audit(1786598277.439:13509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=543 comm="syz.0.85" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbd9e0d9 code=0x7fc00000 [ 37.901980][ T36] audit: type=1326 audit(1786598277.449:13510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=543 comm="syz.0.85" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbd9e0d9 code=0x7fc00000 [ 37.927478][ T36] audit: type=1326 audit(1786598277.449:13511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=543 comm="syz.0.85" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbd9e0d9 code=0x7fc00000 [ 37.952838][ T36] audit: type=1326 audit(1786598277.449:13512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=543 comm="syz.0.85" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbd9e0d9 code=0x7fc00000 [ 37.978087][ T36] audit: type=1326 audit(1786598277.449:13513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=543 comm="syz.0.85" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbd9e0d9 code=0x7fc00000 [ 38.003297][ T36] audit: type=1326 audit(1786598277.449:13514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=543 comm="syz.0.85" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbd9e0d9 code=0x7fc00000 [ 38.028540][ T36] audit: type=1326 audit(1786598277.449:13515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=543 comm="syz.0.85" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbd9e0d9 code=0x7fc00000 [ 38.053768][ T36] audit: type=1326 audit(1786598277.449:13516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=543 comm="syz.0.85" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbd9e0d9 code=0x7fc00000 [ 38.078924][ T310] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.079008][ T36] audit: type=1326 audit(1786598277.449:13517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=543 comm="syz.0.85" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbd9e0d9 code=0x7fc00000 [ 38.111631][ T36] audit: type=1326 audit(1786598277.449:13518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=543 comm="syz.0.85" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbd9e0d9 code=0x7fc00000 [ 38.231408][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.241591][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.251506][ T310] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.265966][ T310] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 38.275236][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.283570][ T310] usb 3-1: Product: syz [ 38.287741][ T310] usb 3-1: Manufacturer: syz [ 38.292546][ T310] usb 3-1: SerialNumber: syz [ 38.450343][ T322] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 38.458439][ T9] uvcvideo 4-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 38.467967][ T9] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 38.477043][ T9] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 38.486255][ T9] usb 4-1: USB disconnect, device number 10 [ 38.501671][ T359] usb 3-1: USB disconnect, device number 8 [ 38.611377][ T322] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 38.622605][ T322] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.629215][ T322] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 38.638292][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.646756][ T322] usb 1-1: config 0 descriptor?? [ 38.652069][ T561] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 39.068151][ T322] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 39.076484][ T322] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 39.084602][ T322] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 39.091714][ T322] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 39.098753][ T322] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 39.105950][ T322] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 39.113129][ T322] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 39.120171][ T322] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 39.127272][ T322] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 39.135205][ T322] itetech 0003:06CB:73F5.0002: hidraw0: USB HID v0.81 Device [HID 06cb:73f5] on usb-dummy_hcd.0-1/input0 [ 39.272485][ T322] usb 1-1: USB disconnect, device number 14 [ 39.280445][ T359] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 39.430364][ T359] usb 4-1: Using ep0 maxpacket: 16 [ 39.436547][ T359] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.446905][ T359] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.457225][ T359] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.466396][ T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.474500][ T310] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 39.481999][ T359] usb 4-1: Product: syz [ 39.486145][ T359] usb 4-1: Manufacturer: syz [ 39.490804][ T359] usb 4-1: SerialNumber: syz [ 39.651348][ T310] usb 3-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 39.661667][ T310] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 39.672459][ T310] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 39.686159][ T310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.695252][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 39.703366][ T310] usb 3-1: SerialNumber: syz [ 39.708753][ T359] usb 4-1: 0:2 : does not exist [ 39.717409][ T359] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 39.727846][ T359] usb 4-1: USB disconnect, device number 11 [ 39.820343][ T322] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 39.967703][ T594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.976384][ T594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.985036][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 39.997464][ T322] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 40.006809][ T322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.014926][ T322] usb 2-1: Product: syz [ 40.019276][ T322] usb 2-1: Manufacturer: syz [ 40.024040][ T322] usb 2-1: SerialNumber: syz [ 40.030635][ T322] usb 2-1: config 0 descriptor?? [ 40.036934][ T322] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 40.044476][ T322] usb 2-1: No valid video chain found. [ 40.236667][ T359] usb 2-1: USB disconnect, device number 10 [ 40.330332][ T322] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 40.480363][ T322] usb 1-1: Using ep0 maxpacket: 32 [ 40.486495][ T322] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 40.494983][ T322] usb 1-1: config 0 has no interface number 0 [ 40.501077][ T322] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.511945][ T322] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.521710][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 40.529289][ T322] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 40.538371][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.546992][ T322] usb 1-1: config 0 descriptor?? [ 40.691671][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.700014][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.710163][ T9] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.724358][ T9] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 40.733468][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.741481][ T9] usb 4-1: Product: syz [ 40.745628][ T9] usb 4-1: Manufacturer: syz [ 40.750311][ T9] usb 4-1: SerialNumber: syz [ 40.962565][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 40.973399][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 40.986986][ T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 40.998394][ T9] usb 4-1: USB disconnect, device number 12 [ 41.009789][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.040319][ T310] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 41.191319][ T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.201517][ T310] usb 2-1: config 0 interface 0 altsetting 22 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 41.214548][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.221180][ T310] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 41.230652][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.239572][ T310] usb 2-1: config 0 descriptor?? [ 41.316010][ T322] uclogic 0003:28BD:0094.0003: failed retrieving string descriptor #100: -71 [ 41.326053][ T322] uclogic 0003:28BD:0094.0003: failed retrieving pen parameters: -71 [ 41.334170][ T322] uclogic 0003:28BD:0094.0003: pen probing failed: -71 [ 41.341184][ T322] uclogic 0003:28BD:0094.0003: failed probing parameters: -71 [ 41.348838][ T322] uclogic 0003:28BD:0094.0003: probe with driver uclogic failed with error -71 [ 41.359064][ T322] usb 1-1: USB disconnect, device number 15 [ 41.646627][ T310] usb 2-1: string descriptor 0 read error: -71 [ 41.653792][ T310] usb 2-1: USB disconnect, device number 11 [ 41.780367][ T322] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 41.836047][ T620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=620 comm=syz.0.110 [ 41.910356][ T322] usb 4-1: device descriptor read/64, error -71 [ 42.140372][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 42.160343][ T322] usb 4-1: device descriptor read/64, error -71 [ 42.180004][ T359] usb 3-1: USB disconnect, device number 9 [ 42.283075][ T633] netlink: 'syz.1.116': attribute type 27 has an invalid length. [ 42.290963][ T633] netlink: 'syz.1.116': attribute type 27 has an invalid length. [ 42.298734][ T633] netlink: 'syz.1.116': attribute type 27 has an invalid length. [ 42.300404][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 42.306737][ T633] netlink: 'syz.1.116': attribute type 27 has an invalid length. [ 42.315396][ T9] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 42.319624][ T633] netlink: 'syz.1.116': attribute type 27 has an invalid length. [ 42.331097][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.336963][ T633] netlink: 'syz.1.116': attribute type 27 has an invalid length. [ 42.344475][ T9] usb 1-1: Product: syz [ 42.356094][ T9] usb 1-1: Manufacturer: syz [ 42.356285][ T633] netlink: 'syz.1.116': attribute type 27 has an invalid length. [ 42.360726][ T9] usb 1-1: SerialNumber: syz [ 42.369639][ T633] netlink: 'syz.1.116': attribute type 27 has an invalid length. [ 42.381017][ T633] netlink: 'syz.1.116': attribute type 27 has an invalid length. [ 42.388873][ T633] netlink: 'syz.1.116': attribute type 27 has an invalid length. [ 42.400317][ T322] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 42.423468][ T637] incfs: mount failed -22 [ 42.431910][ T293] ------------[ cut here ]------------ [ 42.437494][ T293] WARNING: CPU: 1 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 42.446835][ T293] Modules linked in: [ 42.450841][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 28f921879e8f15dfc7a8f0390122ef60233eff00 [ 42.462496][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.472567][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 42.478193][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 82 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c eb 5d 03 cc e8 26 be 3e ff <0f> 0b e9 3e ff ff ff e8 1a be 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 42.497973][ T293] RSP: 0018:ffffc9000114fb88 EFLAGS: 00010293 [ 42.504100][ T293] RAX: ffffffff8248b39a RBX: 0000000000000000 RCX: ffff8881006c1300 [ 42.512093][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.520057][ T293] RBP: ffffc9000114fbb0 R08: ffff88811d22c7ff R09: 1ffff11023a458ff [ 42.528059][ T293] R10: dffffc0000000000 R11: ffffed1023a45900 R12: 0000000000000000 [ 42.536056][ T293] R13: dffffc0000000000 R14: ffff88811d22c760 R15: ffff88811316fcc0 [ 42.540314][ T322] usb 4-1: device descriptor read/64, error -71 [ 42.544053][ T293] FS: 000055555d597500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.559260][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.565867][ T293] CR2: 000055555d5b2918 CR3: 0000000122ad4000 CR4: 00000000003526b0 [ 42.573868][ T293] Call Trace: [ 42.577146][ T293] [ 42.580064][ T293] ovl_do_remove+0x824/0xd10 [ 42.582354][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 42.584696][ T293] ? ovl_set_redirect+0x780/0x780 [ 42.598522][ T293] ? __cfi_down_write+0x10/0x10 [ 42.598854][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.603403][ T293] ovl_rmdir+0x1e/0x30 [ 42.603431][ T293] vfs_rmdir+0x3de/0x560 [ 42.621969][ T9] usb 1-1: USB disconnect, device number 16 [ 42.623106][ T293] incfs_kill_sb+0x102/0x220 [ 42.637839][ T293] deactivate_locked_super+0xd5/0x270 [ 42.643228][ T293] deactivate_super+0xb8/0xe0 [ 42.647909][ T293] cleanup_mnt+0x438/0x4d0 [ 42.652340][ T293] __cleanup_mnt+0x1d/0x40 [ 42.656752][ T293] task_work_run+0x1e8/0x260 [ 42.661349][ T293] ? __cfi_task_work_run+0x10/0x10 [ 42.666460][ T293] ? __x64_sys_umount+0x12e/0x180 [ 42.671491][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 42.676859][ T293] ? __kasan_check_read+0x15/0x20 [ 42.681897][ T293] resume_user_mode_work+0x35/0x50 [ 42.687013][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 42.692489][ T293] do_syscall_64+0x63/0xf0 [ 42.696905][ T293] ? clear_bhb_loop+0x50/0xa0 [ 42.701613][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.707507][ T293] RIP: 0033:0x7ff14a39f317 [ 42.711936][ T293] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 42.731559][ T293] RSP: 002b:00007fff19c857b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 42.739960][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff14a39f317 [ 42.747940][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff19c85870 [ 42.755931][ T293] RBP: 00007fff19c85870 R08: 00007fff19c86870 R09: 00000000ffffffff [ 42.763943][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff19c86900 [ 42.771929][ T293] R13: 00007ff14a434474 R14: 000000000000a5a7 R15: 00007fff19c86940 [ 42.779893][ T293] [ 42.782929][ T293] ---[ end trace 0000000000000000 ]--- [ 42.788670][ T293] ------------[ cut here ]------------ [ 42.794195][ T293] WARNING: CPU: 0 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 42.803490][ T293] Modules linked in: [ 42.807365][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 28f921879e8f15dfc7a8f0390122ef60233eff00 [ 42.820485][ T293] Tainted: [W]=WARN [ 42.824288][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.834352][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 42.839996][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 82 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c eb 5d 03 cc e8 26 be 3e ff <0f> 0b e9 3e ff ff ff e8 1a be 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 42.859626][ T293] RSP: 0018:ffffc9000114fb88 EFLAGS: 00010293 [ 42.865712][ T293] RAX: ffffffff8248b39a RBX: 0000000000000000 RCX: ffff8881006c1300 [ 42.873696][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.881692][ T293] RBP: ffffc9000114fbb0 R08: ffff88811d22c7ff R09: 1ffff11023a458ff [ 42.889645][ T293] R10: dffffc0000000000 R11: ffffed1023a45900 R12: 0000000000000000 [ 42.897639][ T293] R13: dffffc0000000000 R14: ffff88811d22c760 R15: ffff88811316fcc0 [ 42.905640][ T293] FS: 000055555d597500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 42.914577][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.920325][ T359] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 42.921189][ T293] CR2: 000000110c34f2b2 CR3: 0000000122ad4000 CR4: 00000000003526b0 [ 42.936671][ T293] Call Trace: [ 42.939941][ T293] [ 42.942876][ T293] ovl_do_remove+0x824/0xd10 [ 42.947473][ T293] ? ovl_set_redirect+0x780/0x780 [ 42.952637][ T293] ? __cfi_down_write+0x10/0x10 [ 42.957478][ T293] ovl_rmdir+0x1e/0x30 [ 42.961639][ T293] vfs_rmdir+0x3de/0x560 [ 42.965893][ T293] incfs_kill_sb+0x197/0x220 [ 42.970486][ T293] deactivate_locked_super+0xd5/0x270 [ 42.975864][ T293] deactivate_super+0xb8/0xe0 [ 42.980561][ T293] cleanup_mnt+0x438/0x4d0 [ 42.984978][ T293] __cleanup_mnt+0x1d/0x40 [ 42.989378][ T293] task_work_run+0x1e8/0x260 [ 42.993978][ T293] ? __cfi_task_work_run+0x10/0x10 [ 42.999090][ T293] ? __x64_sys_umount+0x12e/0x180 [ 43.004115][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 43.009485][ T293] ? __kasan_check_read+0x15/0x20 [ 43.014536][ T293] resume_user_mode_work+0x35/0x50 [ 43.019682][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 43.025149][ T293] do_syscall_64+0x63/0xf0 [ 43.029567][ T293] ? clear_bhb_loop+0x50/0xa0 [ 43.034297][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.040197][ T293] RIP: 0033:0x7ff14a39f317 [ 43.044621][ T293] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 43.050347][ T359] usb 3-1: device descriptor read/64, error -71 [ 43.064247][ T293] RSP: 002b:00007fff19c857b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 43.064271][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff14a39f317 [ 43.086879][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff19c85870 [ 43.094856][ T293] RBP: 00007fff19c85870 R08: 00007fff19c86870 R09: 00000000ffffffff [ 43.102854][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff19c86900 [ 43.110858][ T293] R13: 00007ff14a434474 R14: 000000000000a5a7 R15: 00007fff19c86940 [ 43.118832][ T293] [ 43.121864][ T293] ---[ end trace 0000000000000000 ]--- [ 43.127571][ T322] usb 4-1: device descriptor read/64, error -71 [ 43.127597][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 43.127618][ T36] audit: type=1400 audit(1786598282.699:13597): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.166552][ T639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=639 comm=syz.1.118 [ 43.178947][ T639] netlink: 148 bytes leftover after parsing attributes in process `syz.1.118'. [ 43.240394][ T322] usb usb4-port1: attempt power cycle [ 43.330341][ T359] usb 3-1: device descriptor read/64, error -71 [ 43.570348][ T359] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.590325][ T322] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 43.611315][ T322] usb 4-1: device descriptor read/8, error -71 [ 43.700341][ T359] usb 3-1: device descriptor read/64, error -71 [ 43.741333][ T322] usb 4-1: device descriptor read/8, error -71 [ 43.940382][ T359] usb 3-1: device descriptor read/64, error -71 [ 43.980337][ T322] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 44.003315][ T322] usb 4-1: device descriptor read/8, error -71 [ 44.050390][ T359] usb usb3-port1: attempt power cycle [ 44.151300][ T322] usb 4-1: device descriptor read/8, error -71 [ 44.260449][ T322] usb usb4-port1: unable to enumerate USB device [ 44.390360][ T359] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 44.411263][ T359] usb 3-1: device descriptor read/8, error -71 [ 44.541318][ T359] usb 3-1: device descriptor read/8, error -71 [ 44.780377][ T359] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 44.801371][ T359] usb 3-1: device descriptor read/8, error -71 [ 44.931306][ T359] usb 3-1: device descriptor read/8, error -71 [ 45.050416][ T359] usb usb3-port1: unable to enumerate USB device