last executing test programs: 2.253668372s ago: executing program 2 (id=3): syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000001100)='./file0\x00', 0x1000040, &(0x7f0000002a00)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x1530, &(0x7f00000014c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 2.002710999s ago: executing program 2 (id=6): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) membarrier(0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000280)={0x0, 0x1, 0xffffffffffffffff, 0x3, 0x80000}) 1.96573517s ago: executing program 2 (id=7): syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x20008, 0x0, 0xff, 0x0, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.929901331s ago: executing program 2 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x2000800) 1.880402892s ago: executing program 1 (id=2): syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000001100)='./file0\x00', 0x1000040, &(0x7f0000002a00)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x1530, &(0x7f00000014c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 1.793390354s ago: executing program 3 (id=4): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000140)={[{@fat=@fmask={'fmask', 0x3d, 0x4}}, {@shortname_mixed}, {@fat=@showexec}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@shortname_mixed}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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") unshare(0x6020400) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) 1.59231836s ago: executing program 1 (id=9): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x250) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x340, &(0x7f00000004c0)) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000080000009900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r7, &(0x7f0000000500), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="02000000010000000000000000000000000000000000000000000000033350d6e032801e9d5c6c5c8bb0e86109d970bfe1e7a23cf4f723acc63e475f6ce8ab3c52b6da17f6e63febb7fef3bcf8f7941e592fe09495e562ff0a0b412bb0bb5b4785525220adb9f6f291768e6def05bc9e24a5a62ad6466866c1e5cb55861c909ba702183fa80f0d38bc5615ec4826da52c7ac5719712e8b594e8982c90d5b7a1af14333e9c44052e7bf4616f5987ce4282b6ab8fb574d86e3f8172565710a9df625cf"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0d000000040068bc384860c9f6cb000000000000", @ANYRES32=r9, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000000100"/28], 0x48) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast1, 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) 1.57219264s ago: executing program 4 (id=5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket$inet6(0xa, 0x2, 0x7f) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='!:m', 0x3) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) close_range(r0, 0xffffffffffffffff, 0x0) 1.491046442s ago: executing program 0 (id=1): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x9) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000100)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r8, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x10040) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xef, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7, 0x8000}]}}}}}}}, 0x0) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x1, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x40, 0xf, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x6d, 0xf7, 0x80, {0x4}}}]}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$sock_attach_bpf(r7, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) recvmsg(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000000440)=""/233, 0xe9}], 0x1, &(0x7f0000000cc0)=""/221, 0xdd}, 0x100) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f00000003c0)={0x33, 0x7, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x10, {0x0, 0x2, 0x5, 0x4, [0x0]}}, @ra={0x5, 0x2, 0x401}]}, 0x48) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@multicast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0xaa, 0x1, '\t', "f8dfbf", 0x805}}}}}, 0x0) 1.473658783s ago: executing program 4 (id=10): syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000001100)='./file0\x00', 0x1000040, &(0x7f0000002a00)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x1530, &(0x7f00000014c0)="$eJzs3AucTlXXAPC19t5nDE16muQy7L3X4Uku2yRJLklySZIkSXJLSJrklYTEkFvSkITkMiSXISSXiUnjfr9fEpKkSZIkuSX7+wmv+novvX3v9/p+36z/73d+9nr22ees86znPOecbWa+6TykRqOaVRsQEfyP4IV/kgEgFgAGAMA1ABAAQNn4svHn+3NKTP6f7YT9ez2UdqUzYFcS1z974/pnb1z/7I3rn71x/bM3rn/2xvXP3rj+jGVnm6YVuJaX7Lvw/H92xtf//0eySo35Yk2p67sAxPzRIVz/7I3r//9W8EdW4vpnb1z/bCruSifA/i/g8z87yPF3e7j+2RvXn7Hs7ErPP//vL/If9kMkO7wH/+D4GWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx/4BT/jIFAJfaVzovxhhjjDHGGGOM/fv4HFc6A8YYY4wxxhhjjP3vQxAgQUEAMZADYiEn5AIBAFdDbrgGInAtxMN1kAeuh7yQD/JDAUiAglAINBiwQBBCYSgCUbgBisKNUAyKQwko+cu0QiLcBKXhZigDt0BZuBXKwW1QHipARagEt0NluAOqwJ1QFe6CalAdakBNuBtqwT1QG+6FOnAf1IX7oR48APXhQWgAD0FDeBgawSPQGB6FJtAUmkFzaPGnxr8A3eFF6AE9IRl6QW94CfpAX+gH/WEAvAwD4RUYBK9CCgyGIfAaDIXXYRi8AcNhBIyEN2EUvAWjYQyMhXGQCuNhArwNE+EdmASTYQpMhTSYBtPhXZgBM2EWvAez4X2YA3NhHsyHdPgAFsBCyIAPYRF8BJmwGJbAUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2AbbYQd8DDvhE9gFu2HPX+v3r4w/+avxn8Je6IKAgAIFKlQYgzEYi7GYC3NhHMZhbsyNEYxgPMZjHsyDeTEv5sf8mIAJWAgL4edgkJCwMBbGKEaxKBbFYlgMS2AJdOgwEROxNN6MZbAMlsWyWA7LYXmsgBWwElbCylgZq2AVrIpVsRpWwxpYA+/Gu7EX1sbaWAfrYF2se2l6ChtgA2yIDbERNsLG2BibYBNshs2wBbbAltgSW2ErbINtsC22xXbYDpMwCdtje+yAHbAjdsRO2Ak7Y2fsgl2xa9YLOQBfxBexJ1YTvbA39sY+mJKjH/bH/vgyDsRX8BV8FVNwMA7B1/A1fB2H4QkcjiNwJI7EyuItHI1jkMQ4TMVUnIATcCJOxEk4GSfjVEzDaTgdp+MMnIkz8T2cje/j+zgX5+J8TMd0XIALMQMzcBGexExcjEtwKS7D5bgMV+IqXIlrcC2uwfW4HjfiRtyMm3ErbsXtuB0/RgWAn+Bu3I0puBf34j7ch/txPx7AA5iFWXgQD+IhPISH8TAewSN4FL/HY/g9HsfjeAJP4ik8hWfwDJ7F5xK+avhx8dUpIM5TQokYESNiRazIJXKJOBEncovcIiIiIl7Eizwij8gr8or8Ir9IEAmikCgkjDCCRBgDACIqoqKoKCqKiWKihCghnHAiUSSK0qK0KCPKiLLiVlFO3CbKiwqitaskKonKoo2rIu4UVUVVUU1UFzVETVFT1BK1RG1RW9QRdURdUVfUEw+I+qIX9sOHxPnKNBKDsbEYgk1EUyEvngEtxTBsJVqLNuIJMQKHYzvR0iWJp0V7MRo7iL+IMfis6CTGYWfxvOgiuopu4gXRXbRyPURPMQl7id5iKvYRfUU/0V/MwOriPZyds4Z4VaSIwWKIeE3Mx9fFMPGGGC5GiJHiTTFKvCVGizFirBgnUsV4MUG8LSaKd8QkMVlMEVNFmpgmpot3xQwxU8wS74nZ4n0xR8wV88R8kS4+EAvEQpEhPhSLxEciUywWS8RSsUwsFyvESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBc7xMdip/hE7BK7xR7xqdgrPhP7xOdiv/hCHBBfiizxlTgovhaHxDfisPhWHBHfiaPie3FM/CCOix/FCXFSnBKnxRnxkzgrfhbnhBcgUQoppZKBjJE5ZKzMKXPJq2ScDC6+u9fKeHmdzCOvl3llPplfFpAJsqAsJLU00kqSoSwsi8iovEEWlTfKYrK4LCFLSidLyUR5kywtb5Zl5C2yrLxVlpO3yfKygqwoK8nbZWV5h4TIhX1Uk9VlDVlT3i2T4R5ZW94r68j7ZF15v6wnH5D15YOygXxINpQPy0byEdlYPiqbyKaymWwuW8jHZEv5uGwlW8s28gnZFmIB5FMyST4t20t/8SPyrOwkn5Od5fOyi+wqu8mf5TnpZQ/ZU0IvkL3lS7KP7Cv7yf5ygHxZDpSvyEHyVZkiB8sh8jU5VL4uh8k35HA5Qo6Ub8pR8i05Wo6RY+U4mSrHywnybTlRviMnyclyipwq0+Q02e/ilmZJ+U/Hv/3r8ecvvXKaHPTL3jfKTXKz3CK3ym1yu9whP5Y75U65S+6Se+QeuVfulfvkPrlf7pcH5AGZJbPkQXlQHpKH5GF5WB6RR+RR+b08LX+Qx+WP8oQ8KU/K0/KMPCPPXnwPQKESSiqlAhWjcqhYlVPlUlepOHW1yq2uURF1rYpX16k86nqVV+VT+VUBlaAKqkJKK6OsIhWqwqqIiqob8OIHRpVQJZVTpVSiuulfGa+KqhtVMVX8N+Mv5Zf81/zkb/JroVqolqqlaqVaqTaqjWqr2qp2qp1KUkmqvWqvOqgOqqPqqDqpTqqz6qy6qC6qm+qmuqvuqofqoZJVsuqtXlJ9VF/VT/VXA9TLaqAaqAapQSpFpaghaogaqoaqYWqYGq6Gq5FqpBqlRqnRarQaq8aqVJWqJqgJaqKaqCapSWqKmqLSVJqarqarGWqGmqVmqdlqtpqj5qh5ap5KV+lqgVqgMlSGWqQWqUy1WC1WS9VStVwtVyvVSrVarVZr1Vq1Xq1XmWqT2qS2qC1qm9qmdqgdaqfaqXapXWqP2qP2qr1qn9qn9qv96oA6oLJUljqoDqpD6pA6rA6rI+qIOqqOqmPqmDqujqsT6oQ6pU6pM+qMOqvOqnPqnIJAgAhEoAIVxAQxQWwQG+QKcgVxQVyQ+7GL3wFBfJAnuD7IG+QL8gcFgoSgYFAo0IEJbCAuFj0a3BAUDW4MigXFgxJBycAFpYLE4KagdHBzUCa4JSgb3BqUC24LygcVgopBpeD2oHJwR1AluDOoGtwVVAuqBzWCmsHdQa3gnqB2cG9QJ7gvqBvcH9QLHgjqBw8GDYKHgobBw0Gj4JGgcfBo0CRoGjQLmgct/q3b9/5EvsddD91TJ+teurd+SffRfXU/3V8P0C/rgfoVPUi/qlP0YD1Ev6aH6tf1MP2GHq5H6JH6TT1Kv6VH6zF6rB6nU/V4PUG/rSfqd/QkPVlP0VN1mp6mp+t39Qw9U8/S7+nZ+n09R8/V8/R8na4/0Av0Qp2hP9SL9Ec6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Md6p/5E79K79R79qd6rP9P79Od6v/5CH9Bf6iz9lT6ov9aH9Df6sP5WH9Hf6aP6e31M/6CP6x/1CX1Sn9Kn9Rn9kz6rf9bntD9/c3/+8m6UUSbGxJhYE2tymVwmzsSZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZ88iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWhuN7ebO8wd5k5zp7nL3GWqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl5/kbVvGVGmzFmrBlnUk2qmWAmmInq4glippg0k2amm+lmhplhZplZZraZbeaYOWaemWfSTbpZYBaYDJNhFplFJtNkmiVmiVlmlpkVZoVZZVaZNWaNWQfrzAazwWwym8wWs8VsM9vMDrPD7DQ7zS6zy+wxe8xes9fsM/vMfrPfHDAHTJbJMgfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClzxuS7eL30JtbmtLnsVTbOXm1z22vsf4/z2wI2wRa0hay2eW2+38TGWlvMFrclbEnrbCmbaG/6XVzeVrAVbSV7u61s77BVfhfXsvfY2vZeW8feZ2vau38T17X323r2EVsfEcA2tQ1tc9vIPmIb20dtE9vUNrPNbVv7pG1nn7JJ9mnb3j7zu3iBXWhX2dV2jV1rd9nd9pQ9bQ/Zb+wZ+5PtYXvaAfZlO9C+YgfZV22KHfy7eKR9046yb9nRdowda8f9Lp5ip9o0O81Ot+/aGXbm7+J0+4GdbTPsHDvXzrPzf4nP55RhP7SL7Ec20wawxC61y+xyu8Ku/GuuS+16u8FutDvtJ3aL3Wq32e12x6UbYbvb7rGf2r32M3vQfm332y/sAXvYZtmvfonPH99h+609Yr+zR+339pj9wR63P176hP5y7D/Yn+056y0QEpAkRQHFUA6KpZyUi66iOLqactM1FKFrKZ6uozx0PeWlfJSfClACFaRCpMmQJaKQClMRitINdCm9ElSSHJWiRLqJStPNVIZuobJ0K5Wj26g8VaCKVIlup8p0B1WhO6kq3UXVqDrVoJp0N9Wie6g23Ut16D6qS/dTPXqA6tOD1IAeIoSHqRE9Qo3pUWpCTakZNacW9Bi1pMepFbWmNvQEtaUnqR09RUn0NLWnZ6gD/YU60rPUiZ6jzvQ8daGu1I1eoO70IvWgnpRMvag3vUR9qC/1o/40gF6mgfQKDaJXKYUG0xB6jYbS6zSM3qDhNIJG0ps0it6i0TSGxtI4SqXxNIHepon0Dk2iyTSFplIaTaPp9C7NoJk0i96j2fQ+zaG5NI/mUzp9QAtoIWXQh7SIPqJMWkxLaCkto+W0glbSKlpNa2gtraP1tIE20ibaTFtoK22j7bSDPqad9Antot20hz6lvfQZ7aPPaT99QQfoS8qir+ggfU2H6Bs6TN/6nvQdHaXv6Rj9QMfpRzpBJ+kUnaYz9BOdpZ/pHHmCEEMRylCFQRgT5ghjw5xhrvCqMC68OswdXhNGwmvD+PC6ME94fZg3zBfmDwuECWHBsFCoQxPakMIwLBwWCaPhDWHR8MawWFg8LBGWDF1YKkwMbwpLhzeHZcJbwrLhrWG58LawfFghfOS+SuHtYeXwjrBKeGdYNbwrrBZWD2uENcO7w1rhPWHt8N6wTnhfWCa8P6wXPhDWDx8MG4QPhQ3Dh8NG4SNh4/DRsEnYNGwWNg9bhI+FLcPHw1Zh67BN+ETYNnwybBc+FSaFT4ftw2d+6b9/4d/vTw57hb3Dl8KXQu/vlfOi86Pp0Q+iC6ILoxnRD6OLoh9FM6OLo0uiS6PLosujK6Iro6uiq6Nromuj66LroxuiV4P3NXOAQyecdMoFLsblcLEup8vlrnJx7mqX213jIu5aF++uc3nc9S6vy+fyuwIuwRV0hZx2xllHLnSFXREXdTe4ou5GV8wVdyVcSedcKZfomrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe0a++ecR3cX1xH96zr5J5zz7nnXRfX1XVzL7jubnzuC+dksuvters+ro/r5/q5AW6AG+gGukFukEtxKW6IG+KGuqFumBvmhrvhbqQb6Ua5UW60G+3GurEu1aW6CW6Cm+gmuklukpviprg0l+amu+luhpvhKs+8sJc5bo6b5+a5dJfuFrjz94wZbpFb5DJdplvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vlr7mwUbfX7XP73H633x1wX7os95U76L52h9w37rD71h1x37mj7nt3zP3gjrsf3Ql30p1yp90Z95M7635255x3qZHxkQmRtyMTI+9EJkUmR6ZEpkbSItMi0yPvRmZEZkZmRd6LzI68H5kTmRuZF5kfSY98EFkQWRjJiHwYWRT5KJIZWRxZElkaWRZZHvG+4JbQF/ZFfNTf4Iv6G30xX9yX8CW986V8or/Jl/Y3+zL+Fl/W3+rL+dt8eV/BV/SP+ia+qW/mm/sW/jHf0j/uW/nWvo1/wrf1T/p2/imf5J/27f0zvoP/i+/on/Wd/HO+s3/ed/FdfTf/gu/uX/Q9fE+f7Hv53v4l38f39f18fz/Av+wH+lf8IP+qT/GD/RD/mh/qX/fD/Bt+uB/hR8a86UddekSGcT7Vj/cT/Nt+on/HT/KT/RQ/1af5aX66f9fP8DP9LP+en+3f93P8XD/Pz/fp/gO/wC/0Gf5Dv8h/5DP94kuTkn6FX+lX+dV+jV/r1/n1foPf6Df5zX6L3+q3+e1+h//Y7/Sf+F1+t9/jP/V7/Wd+n//c7/df+AP+S5/lv/IH/df+kP/GH/bf+iP+O58TAI75H/xx/6M/4U/6U/60P+N/8mf9z/4c/84aY4wxxtgfMv5yU/y258J0fq+/MUb8auXeAHD11gJZv+4/f0e5Lu+Fdl+R0DYCAE/37PzQpaVateTk5IvrZkoIiswFuPQ/QefFwOV4MbSBJyEJWkPpv5l/X9H1DP2T7UdvBcj1qzGxcDm+vP3PATD5b2z/sSdGLigXnor/B9ufC1CsyOUx5+9TL8WLoc0v8yutoczfyT9fy3+Sf84vUgFa/WpMHFyOL+efCI/DM5D0mzUZY4wxxhhjjLEL+oqKHS89f176ic+/9XyeoC6PyQGX43/2fM4YY4wxxhhjjLEr79mu3Z56LCmpdcd/vVHlz4xCAPhjKzeGP5sYN/5Uw3uAS6+oP1ymv9sAON+Q/8mj2Pwf2VfKxVPnv3ctO+0D+L9Ryj/fGPvXV67wFxNjjDHGGGPs3+7y3f9vX1dXKiHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywb+k/8XbErfYyMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZfAQAA//8axPVm") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 1.008720745s ago: executing program 4 (id=11): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) membarrier(0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000280)={0x0, 0x1, 0xffffffffffffffff, 0x3, 0x80000}) 846.665099ms ago: executing program 3 (id=12): syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000001100)='./file0\x00', 0x1000040, &(0x7f0000002a00)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x1530, &(0x7f00000014c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 817.604689ms ago: executing program 4 (id=13): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) membarrier(0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000280)={0x0, 0x1, 0xffffffffffffffff, 0x3, 0x80000}) 528.344267ms ago: executing program 4 (id=14): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200016f"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x6) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000008c0)="0f01c2b8000000800f23c80f21f835000010000f23f80f32c4c21d0c5e0b660f3880900900000066b85c000f00d0c4c1bde9b300080000c4c220f5020f97ce260f01ca", 0x43}], 0x1, 0x11, 0x0, 0x0) syz_clone(0x2800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="14e6fb5cdd05a11e") syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000035000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000b62eb5c0188ac4000000000000000000000000000d00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, &(0x7f00000001c0), 0x0}, 0x20) r9 = eventfd(0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r9}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x4, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 527.872767ms ago: executing program 1 (id=15): syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x20008, 0x0, 0xff, 0x0, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 422.04879ms ago: executing program 1 (id=16): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket$inet6(0xa, 0x2, 0x7f) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='!:m', 0x3) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) close_range(r0, 0xffffffffffffffff, 0x0) 359.431761ms ago: executing program 3 (id=17): syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000001100)='./file0\x00', 0x1000040, &(0x7f0000002a00)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x1530, &(0x7f00000014c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 246.189844ms ago: executing program 4 (id=18): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xcd7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x221, 0x2, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB=' \"('], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000300), 0xa7d, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) syz_emit_ethernet(0xd41, &(0x7f00000006c0)={@remote, @empty, @void, {@llc_tr={0x11, {@snap={0x55, 0x1, "d7", 'U-l', 0x15, "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"}}}}}, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002440)={{0xffffffffffffffff, &(0x7f0000000340)='^{\x00', 0x101000, &(0x7f0000000380)={@align=0x54c, {0x0, 0xae, 0xfffff801, 0x3}}, 0x9, &(0x7f0000000400), &(0x7f0000000440)=0x7}, {[0xfffffffb, 0x8, 0x0, 0x3]}, 0xb, 0x1000, &(0x7f0000001440)=""/4096}) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, &(0x7f00000024c0)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x9, 0xa00) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) (async) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x80a, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x10000000000, 0x5d, 0x7, 0x42, 0x400000000000004, 0xa1, 0x11, 0x4, 0x8000000000000000, 0x1, 0xffffffffffff9865, 0xd, 0x5], 0x0, 0x110900}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 48.365709ms ago: executing program 3 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x20, 0x19, 0x15, 0x3, 0xffffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x4, 0x9}]}, 0x20}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e21, 0x80, 0x1, 0x0, 0xa, 0xe0, 0x80, 0xff}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @in6=@remote, 0x3c, 0x0, 0x0, 0x50030000, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 33.480289ms ago: executing program 3 (id=20): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket$inet6(0xa, 0x2, 0x7f) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='!:m', 0x3) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=21): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$P9_RREAD(r3, &(0x7f0000000d40)={0xbcb, 0x75, 0x1, {0xbc0, "96133b84f10728eaeed65ae4ac9dba0a1e668ff28d267431e0be8b6403d43fd037a5aa31c310be73eb417b32b9499476f80e9b83d4dd964ebdaf5d039b014be90f6204134968a0ee4845a7870abed197ce092bd181a3192283150a0f180b01178791de391f79707b868d062720157933fe44b8e77805bafb9e21c510afd0026146435be777138e3936dc88f55fa377d59c3f19fa7f2e8bbcbd9c14f32a2437e587bc0bf2dc5227f981de04ca87374ac10ae794ff14c6a938eafe5faf1a786204d612d86d4d6e3794695b504931f0d071841b1e341d924ccbdec097cb4664dd6f669f08c70c46e069464d6201ca487f39f460f0aeb53c19f08aedd4c7efb3cbd9e229a6d3e177879d9cb2fe8c536a7908d8178c986e97c81a47f99983d231dd40ecd54eac32f92a0d5f99608465e4c71d4e414569f0e2d4826c57d148c7aaea8277f4305f326928a8e9dc98ffcae5e83d8296b87c5ff4968de6eac1d100b53815458530807c9ca9d27665a7a2eb24edcce62162fc6f060f1eca12494067e5ece405b2ef9f48ff6953659480c132b984b4cd5b9824f0fcad7c09b225f256c2b4ea31009fec068ab2a674a5a61ba332673c45f3bc534412509c971668745692595b235b74de706405954835e64deeb40082134758d5576bb96cca74ba2f38e9adc4fc8ed2da6c66dd1dcec3a51ad272e7b9fcc53f91dbd2af4f4b9426e24f1ccf620f1ecca489a59a58bfc3d95348cc14845e8d56014796f924023e8257193b9f6a23d23e83b37a64703cb0abbcd937ae1f76d93a10e3dd1c42fe6f9a7a3867b744522dc2385978c4789598f0d687eff82919bb7368cb525bdbdeb5c9eb1a35357e50be1baa8388de846440cf6e6ebbc0577bd578bea6f0cd899102c9ab762af424729152260d2d7afa5f45440389fc5be4f2a036c47ddf4e2702c3971bc27da39416d26fe28c90eaf5c1b13a30b0275982f45dd1218f1fad36bb7fb4be26a44aeece232cdbcdb58dd72a9d3e8989cfc557a0db43ede42a5fa3b70e46951df11646c66e2fd0e9e6a5f049526a1ad3b0bf490316885109f8239bb9e2b6d03e09576f7607b81be403cc312e505eae1a99ded949a41ee06b32dd84571e72f3cbaad0ea9637faa4707e2a62805288b447eaad248641065b1600464331d47bf120b6a614bf7fa14757c447638f617065c3b7a0aba442dc777573694f666a60e08a53c9da53bf8f55df53f0f88edc411c55933d0e96dd5689424ca2257efec4a19f4bfbac2dca81abb8d0fe2c23f2862e8f3e484366b7fa4308e2afe652318e0bad747ed3d82300692da58738039ac26100abba252acf4fced6221ed0e083823be5e93d9f0825dd4ebd38f2239b6322a0e21370300f301f9ce2dcd357e974dda56e75b4ca098f7a8bec4d7dc53737d0784fa1a5e4a25e931fcc9662aea36f44c0dc879bf149a3028edcbc9e974060fd5903a6469c63325afc2d359f634897c4b44073f50135be828e4471c826ba3d6c60a7cc2de331ef0d510f29ebf4d63a82c19ef5aeaab2591c73c2f31d1406d7ef4d630870a3d9ff117d1a061492f7b644bf829219b0ca70e7651c0fcb28123fbda8ac9ed72867aac1d6ebd977f23711335b58f5fe61e0d4600a03a6bddfd629ba9dd94d6b728668db6588d412fd9bbe6cbf9647829a7128f054bccd5a457f430716fba59e978f4c8cccbb898166eecc86dc97362a0be44579d357b4a78311aff1f0f6a641b97481e3843f8ac28426650f99cbd738e2c162572cc95cd6329c2d7767a2ca5aa66b3f53f86b3b748088cf5292f5f235bcb7114020b0b78c235fdd9ff5e8360a904e1bc492ae89f25a17f51e24fe4d9414c08f0e27b2bb0cca0086204e8405ca96dd78ab66b8a4147f3400d38a51bd12f35261c0f637b5193446415555715d3eb2c03aab256ce58ed7f7bda72e57bb77e6aa921af580e63842e255645e59606c6354e8515397fa942347843389527c896e5f624e3155153cf845bfc57b45051985a3e730760a4ae9eeb3511bdb547f612bf127af3229cf38a25e0c232f7737f327dd4da065c7251cc0afdf239169c480f2571ea16b1fab820f4230e8db70d444c0e83acebb1ff9da2581d650903cf1526e83f62c9b543db7e676ad939fd7131a9e9abca65f0f794328632b3924dc209e33ca6ca9819df273781b4a30533eb018608b06e01743cf886da7e11885de26d613b52c6a82cba1ad8dbe399501376e7ea445e02cf0048512f53ede2b8fc438d0d425580497b3366a4cb60478222bf6a1b452e6808c8d9a63bca38b0131dd0c4e8856c3c987e20a7dce37f416aad49d58da18058e482a1f4a80d9a70aa5d24f62a121d67796c45f214e61b3e4da558060bb5d6cb35e5a400a1333c7806471f4afcbdebf5bf269285ef0c5a29e7fe3c4233b2a03a4c9393d622f59a3cca5c290e7bd97c5b2bc75934d2e006d87d03041ece79c18f58c45979db920768b40d16e3625944845d262dcd9b04f3c742adea863d8d65e5bb570673b53a4e26c2ae659ae8cc68a11622c69bec36b6b4134ca7bb82d7f5638640b1e596245a127c88968bcfca605d937cbea529a1c98d20e2b1fdf4a9499b0a90d8d25d3f2cdd260d86f5140079c0df54ddab8af23b546ce591fdf3c1479506fd328b6f21b09976e1561b358c5930631441abdc29a4380ea68e79c9da41b567811d46595c3561815f768b2196a262d410336ea4b06faf68fab9ce54019cc3d2f3ad9df564f343d36986874b21c1d63eb1374745154881df2c2b0a7700689e5c7d8f70055ad6dd0f63b5baacecd45f824b071804585be0126062ef43ca6e9194ab709b794b333f6da4db9af4c49eb494aa2818fe279e6f2d146eaf3d90dc4be4f1c4ccb8c016a17c8aa40d3550086908584a80a9960c712e361da808bd966f0d887492a6ea28ffcabf94a6d0f4c21c258108d2e9c922e7d979cce28a43775c1f931a610d4706d290f007d8e6341c03505e7c4739b80866caa73f30eecfcadfc1c6e91031bdb5cda23eef852a9a8bdfaee6247a0d13d4c5dd51f2dc23e5fa6aa4900cc8764a4b2c85e103efb52ca0e9d2119be6224ce59575083760df7f9961731c6162c282a3289bbc87c710b981d64f066a426965ac856692d3a1cc6989daaf085763118dc56bafbfe1138fd34d011c7d256c6374ac417a5939436c3d35c8d2244faf25aec9063d37669cf16131d7fddaad9571848980e4c5bad750db9fd49a48aad94c2aafa4b63c6f6b6d29868b728777b3c912fa0eafb8dcd7cfd58a450cac3e7d8633c2d6dd574499818518c23656cd4782bdc2a602dece6310a2841ae07efad474e121e6f4e06d3f3bded7c4823d50a565f10e49708b7645665c19d75a56d2218187eedb15303227fd5760d0f29852d546f861c91a49ea725d200e122060cbba9e6736414e63edb2a684339dd75345267a3fd77c1f37eef898fec7ab8aaaf3e9254f1a1b930c0d5b61494068c650c7ec64fde7000e3daa7b88584e98c38191d97429ff2366bcbe093e2599fceef0b4339cb5b5d4022e39baedd198a48229b38eb8a8e62d90f0d45ada0e9019d91592e46f854e31f0f705ba9e9e3504db9b7892fa64c86cea7b4cf60912b1ce95d19fffee84ac8ec0d136e66bd5c7e2f8f1f77d0eafe00962556389b4a4251c9013b432c5d213e53730368853e016ad6db6e23692b5ed304ade79c327bf5728b50897e90c13505efb538faac0082accc6470a19758ca27ad41488bba56eb5222fa4e77bc79df91d0122d84ad583b67e69672b09cf7ff83c88bee0cb772f3c23932933b573b14f0fcb1b5668062de04320e1b4527d7112787c1710d52ca5021809f6f23da13db5e4b2d23cec1b2c19022faf6109aa1acb894efdb2c5160437fd7ef7fbaeed48efdc856998d1ef28803e9cebc92a8de7e24bc5061deee78ecb6ab61e1fd5cbae3e6b35d861b3ca637013364a88557702bdd9ee78be16741064741b35edd1f8a6ea3effce1d195f92fd60d6ed44a17db3f05c3eb1e4c6c9a8d6d4502e6e6af1bae16a52ab98cfb6fa6d0740efc2d9d19ee8512c9dcd37f985c804881b4c63bb2c36d1f605a5ca9eb793f1615fd1d413bbb8069b6abefcc456939d444e0ac32c7f9b4233a0ec48912fb3c1ce5e127dbf9a64c66455cc59dffe55fcd526beadb78215fb1b4712017dfb3a1ca28e0db8a6a59833e0285a9246edf2628081972a437bca82f3f26c7721467c5c7edc2873b58008cb14f4fa3a338"}}, 0xbcb) preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x2a, 0x4, 0x2) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0xda3, 0x2000) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000a80)=""/165) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 21.180846][ T30] audit: type=1400 audit(1785984927.485:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.181975][ T278] cgroup: Unknown subsys name 'net' [ 21.203636][ T30] audit: type=1400 audit(1785984927.485:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.231658][ T30] audit: type=1400 audit(1785984927.515:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.252640][ T278] cgroup: Unknown subsys name 'devices' [ 21.344096][ T278] cgroup: Unknown subsys name 'hugetlb' [ 21.349992][ T278] cgroup: Unknown subsys name 'rlimit' [ 21.487152][ T30] audit: type=1400 audit(1785984927.795:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.511929][ T30] audit: type=1400 audit(1785984927.795:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.537847][ T30] audit: type=1400 audit(1785984927.795:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.543922][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.569974][ T30] audit: type=1400 audit(1785984927.875:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.596053][ T30] audit: type=1400 audit(1785984927.875:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.636425][ T30] audit: type=1400 audit(1785984927.945:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.663280][ T30] audit: type=1400 audit(1785984927.945:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.663348][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.161779][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.169090][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.176671][ T286] device bridge_slave_0 entered promiscuous mode [ 22.184875][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.192201][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.199891][ T286] device bridge_slave_1 entered promiscuous mode [ 22.323300][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.330497][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.338031][ T289] device bridge_slave_0 entered promiscuous mode [ 22.344868][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.352185][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.360596][ T289] device bridge_slave_1 entered promiscuous mode [ 22.370617][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.377746][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.385466][ T287] device bridge_slave_0 entered promiscuous mode [ 22.404049][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.412158][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.419958][ T287] device bridge_slave_1 entered promiscuous mode [ 22.436246][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.443667][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.451310][ T292] device bridge_slave_0 entered promiscuous mode [ 22.461176][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.468489][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.476163][ T292] device bridge_slave_1 entered promiscuous mode [ 22.534580][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.541710][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.549510][ T293] device bridge_slave_0 entered promiscuous mode [ 22.556419][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.563475][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.570898][ T293] device bridge_slave_1 entered promiscuous mode [ 22.614223][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.621556][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.629169][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.636438][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.736332][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.743710][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.750984][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.758056][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.768421][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.775500][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.782779][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.790040][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.809595][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.816929][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.825117][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.833034][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.840865][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.848844][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.857088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.865495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.894391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.902928][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.910074][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.918143][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.926340][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.933559][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.957466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.966310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.974294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.983108][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.990128][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.997567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.006259][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.013356][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.032527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.040948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.049110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.057210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.065434][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.072671][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.094919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.102720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.111100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.119503][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.126535][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.135058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.143224][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.150231][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.157596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.165744][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.172884][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.180247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.188585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.196804][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.203864][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.211244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.219937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.228722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.244898][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.253458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.261601][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.268665][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.276287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.284850][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.293121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.301125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.309372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.317705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.330159][ T292] device veth0_vlan entered promiscuous mode [ 23.341639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.350162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.358743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.367056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.375518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.383383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.398301][ T292] device veth1_macvtap entered promiscuous mode [ 23.408619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.416945][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.425299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.433142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.441459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.450103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.458469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.472646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.481122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.489616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.498331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.510311][ T286] device veth0_vlan entered promiscuous mode [ 23.516708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.525333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.533914][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.542018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.550431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.558050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.576301][ T287] device veth0_vlan entered promiscuous mode [ 23.582779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.582860][ T292] request_module fs-gadgetfs succeeded, but still no fs? [ 23.591235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.607661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.616208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.624784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.632786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.640711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.648555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.665088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.673139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.685211][ T309] loop2: detected capacity change from 0 to 256 [ 23.689168][ T286] device veth1_macvtap entered promiscuous mode [ 23.701018][ T287] device veth1_macvtap entered promiscuous mode [ 23.708270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.715967][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.716465][ T309] ======================================================= [ 23.716465][ T309] WARNING: The mand mount option has been deprecated and [ 23.716465][ T309] and is ignored by this kernel. Remove the mand [ 23.716465][ T309] option from the mount to silence this warning. [ 23.716465][ T309] ======================================================= [ 23.724633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.758517][ T309] exfat: Unknown parameter '00000000000000000000' [ 23.767236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.780991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.788810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.797024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.805590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.822044][ T293] device veth0_vlan entered promiscuous mode [ 23.829218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.837596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.847470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.856130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.864796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.873562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.893558][ T309] overlayfs: overlapping lowerdir path [ 23.897301][ T289] device veth0_vlan entered promiscuous mode [ 23.919427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.931068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.941373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.950058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.959392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.966785][ T317] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 23.967670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.987117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.994998][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.995190][ T292] ------------[ cut here ]------------ [ 24.011035][ T292] WARNING: CPU: 1 PID: 292 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 24.011845][ T293] device veth1_macvtap entered promiscuous mode [ 24.025364][ T292] Modules linked in: [ 24.031351][ T292] CPU: 1 PID: 292 Comm: syz-executor Not tainted syzkaller #0 [ 24.039576][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.047834][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.052830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.059574][ T319] loop1: detected capacity change from 0 to 256 [ 24.066686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.083575][ T292] RIP: 0010:drop_nlink+0xc5/0x110 [ 24.088632][ T292] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 c3 0b f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3b 9a b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 24.109466][ T289] device veth1_macvtap entered promiscuous mode [ 24.115927][ T292] RSP: 0018:ffffc90000a97b50 EFLAGS: 00010293 [ 24.125974][ T292] RAX: ffffffff81b71ca5 RBX: ffff88812992fa10 RCX: ffff888120434f00 [ 24.128258][ T321] loop3: detected capacity change from 0 to 128 [ 24.140436][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.140623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.148655][ T292] RBP: ffffc90000a97b78 R08: 0000000000000003 R09: 0000000000000004 [ 24.157119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.173140][ T319] exfat: Unknown parameter '00000000000000000000' [ 24.173523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.187322][ T292] R10: dffffc0000000000 R11: fffff52000152f58 R12: dffffc0000000000 [ 24.188629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.196107][ T292] R13: 1ffff11025325f4b R14: ffff88812992fa58 R15: 0000000000000000 [ 24.204562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.212296][ T292] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 24.229312][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.238839][ T319] overlayfs: missing 'lowerdir' [ 24.245969][ T292] CR2: 00007fabc595d000 CR3: 000000010dcd0000 CR4: 00000000003506a0 [ 24.254847][ T292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.264784][ T292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.265011][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.273863][ T292] Call Trace: [ 24.282601][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.284964][ T292] [ 24.293074][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.295378][ T292] shmem_rmdir+0x5b/0x90 [ 24.307920][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.313813][ T292] vfs_rmdir+0x1ae/0x450 [ 24.337985][ T292] incfs_kill_sb+0xfe/0x210 [ 24.346520][ T292] deactivate_locked_super+0xa0/0x100 [ 24.352398][ T292] deactivate_super+0xaf/0xe0 [ 24.357224][ T292] cleanup_mnt+0x44f/0x500 [ 24.361702][ T292] __cleanup_mnt+0x19/0x20 [ 24.367468][ T292] task_work_run+0x127/0x190 [ 24.372156][ T292] do_exit+0xb70/0x29a0 [ 24.384881][ T292] ? put_task_struct+0x90/0x90 [ 24.389698][ T292] ? __fdget_pos+0x1f7/0x380 [ 24.394717][ T292] ? ksys_write+0x1eb/0x260 [ 24.399361][ T292] ? __ia32_sys_read+0x90/0x90 [ 24.406763][ T292] do_group_exit+0x149/0x310 [ 24.417066][ T292] __x64_sys_exit_group+0x3f/0x40 [ 24.424375][ T60] logitech-hidpp-device 0005:046D:B012.0001: Device not connected [ 24.431835][ T292] x64_sys_call+0x832/0x9a0 [ 24.449611][ T332] loop4: detected capacity change from 0 to 256 [ 24.450662][ T292] do_syscall_64+0x4c/0xa0 [ 24.460697][ T292] ? clear_bhb_loop+0x50/0xa0 [ 24.466169][ T292] ? clear_bhb_loop+0x50/0xa0 [ 24.555944][ T292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 24.562149][ T292] RIP: 0033:0x7f883dfc00d9 [ 24.568436][ T292] Code: Unable to access opcode bytes at RIP 0x7f883dfc00af. [ 24.595442][ T332] exfat: Unknown parameter '00000000000000000000' [ 24.608428][ T292] RSP: 002b:00007ffda317b378 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 24.668529][ T332] overlayfs: missing 'lowerdir' [ 24.712729][ T292] RAX: ffffffffffffffda RBX: 00007f883e0564d4 RCX: 00007f883dfc00d9 [ 24.735726][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 24.747556][ T292] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f883e056474 [ 24.758246][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda317c630 [ 24.771755][ T292] R13: 00007f883e056474 R14: 0000555590f084e8 R15: 00007ffda317d700 [ 24.832392][ T60] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.851293][ T292] [ 24.881837][ T292] ---[ end trace 9581e4fa4b99513b ]--- [ 24.983813][ T292] ------------[ cut here ]------------ [ 25.056159][ T292] WARNING: CPU: 1 PID: 292 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 25.102330][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 25.330995][ T292] Modules linked in: [ 25.335115][ T292] CPU: 0 PID: 292 Comm: syz-executor Tainted: G W syzkaller #0 [ 25.360223][ T339] loop3: detected capacity change from 0 to 256 [ 25.369196][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.390961][ T292] RIP: 0010:drop_nlink+0xc5/0x110 [ 25.396331][ T292] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 c3 0b f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3b 9a b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 25.405014][ T339] exfat: Unknown parameter '00000000000000000000' [ 25.416389][ T292] RSP: 0018:ffffc90000a97b50 EFLAGS: 00010293 [ 25.428704][ T292] RAX: ffffffff81b71ca5 RBX: ffff88812992f260 RCX: ffff888120434f00 [ 25.430701][ T345] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 25.437158][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.455896][ T292] RBP: ffffc90000a97b78 R08: 0000000000000003 R09: 0000000000000004 [ 25.462365][ T344] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.464068][ T292] R10: dffffc0000000000 R11: fffff52000152f58 R12: dffffc0000000000 [ 25.497873][ T339] overlayfs: overlapping lowerdir path [ 25.505205][ T292] R13: 1ffff11025325e55 R14: ffff88812992f2a8 R15: 0000000000000000 [ 25.513973][ T286] ------------[ cut here ]------------ [ 25.519505][ T286] WARNING: CPU: 1 PID: 286 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 25.528648][ T60] usb 1-1: unable to get BOS descriptor or descriptor too short [ 25.536750][ T292] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 25.551623][ T286] Modules linked in: [ 25.556150][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.563467][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 25.572749][ T292] CR2: 0000000000000000 CR3: 000000012aefc000 CR4: 00000000003526a0 [ 25.582308][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.592479][ T292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.600454][ T292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.612383][ T60] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 25.612377][ T286] RIP: 0010:drop_nlink+0xc5/0x110 [ 25.612595][ T349] loop3: detected capacity change from 0 to 256 [ 25.622524][ T286] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 c3 0b f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3b 9a b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 25.627383][ T292] Call Trace: [ 25.633901][ T286] RSP: 0018:ffffc90000a17b50 EFLAGS: 00010293 [ 25.656880][ T292] [ 25.663832][ T286] [ 25.666759][ T292] shmem_rmdir+0x5b/0x90 [ 25.670623][ T286] RAX: ffffffff81b71ca5 RBX: ffff88812a548fc8 RCX: ffff888120433b40 [ 25.674627][ T292] vfs_rmdir+0x1ae/0x450 [ 25.681898][ T286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.686179][ T292] incfs_kill_sb+0x18f/0x210 [ 25.693816][ T286] RBP: ffffc90000a17b78 R08: 0000000000000003 R09: 0000000000000004 [ 25.702665][ T292] deactivate_locked_super+0xa0/0x100 [ 25.712103][ T286] R10: dffffc0000000000 R11: fffff52000142f58 R12: dffffc0000000000 [ 25.712691][ T349] exfat: Unknown parameter '00000000000000000000' [ 25.720962][ T286] R13: 1ffff110254a9202 R14: ffff88812a549010 R15: 0000000000000000 [ 25.732396][ T292] deactivate_super+0xaf/0xe0 [ 25.734769][ T286] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 25.742430][ T292] cleanup_mnt+0x44f/0x500 [ 25.748608][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.759580][ T286] CR2: 00007fdd6d540ff8 CR3: 0000000127786000 CR4: 00000000003506b0 [ 25.763415][ T292] __cleanup_mnt+0x19/0x20 [ 25.776565][ T349] overlayfs: missing 'lowerdir' [ 25.781825][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.785953][ T292] task_work_run+0x127/0x190 [ 25.789973][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.797908][ T60] usb 1-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 25.806498][ T286] Call Trace: [ 25.818820][ T286] [ 25.821775][ T286] shmem_rmdir+0x5b/0x90 [ 25.826364][ T292] do_exit+0xb70/0x29a0 [ 25.830545][ T292] ? put_task_struct+0x90/0x90 [ 25.840224][ T286] vfs_rmdir+0x1ae/0x450 [ 25.842450][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.849556][ T286] incfs_kill_sb+0xfe/0x210 [ 25.857550][ T292] ? __fdget_pos+0x1f7/0x380 [ 25.862219][ T292] ? ksys_write+0x1eb/0x260 [ 25.862492][ T286] deactivate_locked_super+0xa0/0x100 [ 25.867078][ T60] usb 1-1: Product: syz [ 25.877002][ T292] ? __ia32_sys_read+0x90/0x90 [ 25.883228][ T286] deactivate_super+0xaf/0xe0 [ 25.887939][ T286] cleanup_mnt+0x44f/0x500 [ 25.892113][ T292] do_group_exit+0x149/0x310 [ 25.894859][ T311] logitech-hidpp-device 0005:046D:B012.0002: Device not connected [ 25.897016][ T292] __x64_sys_exit_group+0x3f/0x40 [ 25.910039][ T60] usb 1-1: Manufacturer: syz [ 25.912568][ T286] __cleanup_mnt+0x19/0x20 [ 25.915850][ T60] usb 1-1: SerialNumber: syz [ 25.932233][ T286] task_work_run+0x127/0x190 [ 25.932295][ T292] x64_sys_call+0x832/0x9a0 [ 25.936959][ T292] do_syscall_64+0x4c/0xa0 [ 25.941460][ T286] do_exit+0xb70/0x29a0 [ 25.950756][ T286] ? put_task_struct+0x90/0x90 [ 25.955869][ T292] ? clear_bhb_loop+0x50/0xa0 [ 25.956413][ T286] ? __fdget_pos+0x1f7/0x380 [ 25.962467][ T330] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 25.965416][ T286] ? ksys_write+0x1eb/0x260 [ 25.972407][ T292] ? clear_bhb_loop+0x50/0xa0 [ 25.976979][ T286] do_group_exit+0x149/0x310 [ 25.981474][ T292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.994664][ T286] __x64_sys_exit_group+0x3f/0x40 [ 25.997110][ T292] RIP: 0033:0x7f883dfc00d9 [ 26.005584][ T286] x64_sys_call+0x832/0x9a0 [ 26.005804][ T292] Code: Unable to access opcode bytes at RIP 0x7f883dfc00af. [ 26.010279][ T286] do_syscall_64+0x4c/0xa0 [ 26.017726][ T292] RSP: 002b:00007ffda317b378 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 26.031430][ T292] RAX: ffffffffffffffda RBX: 00007f883e0564d4 RCX: 00007f883dfc00d9 [ 26.032319][ T286] ? clear_bhb_loop+0x50/0xa0 [ 26.039916][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 26.052594][ T292] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f883e056474 [ 26.061769][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda317c630 [ 26.062276][ T286] ? clear_bhb_loop+0x50/0xa0 [ 26.070312][ T292] R13: 00007f883e056474 R14: 0000555590f084e8 R15: 00007ffda317d700 [ 26.082280][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.083232][ T292] [ 26.091952][ T292] ---[ end trace 9581e4fa4b99513c ]--- [ 26.097452][ T286] RIP: 0033:0x7fac1c2e70d9 [ 26.097519][ T341] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 26.101948][ T286] Code: Unable to access opcode bytes at RIP 0x7fac1c2e70af. [ 26.117456][ T286] RSP: 002b:00007ffddd7e8f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 26.126393][ T286] RAX: ffffffffffffffda RBX: 00007fac1c37d4d4 RCX: 00007fac1c2e70d9 [ 26.135041][ T286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 26.144050][ T286] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fac1c37d474 [ 26.152900][ T286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddd7ea230 [ 26.161139][ T286] R13: 00007fac1c37d474 R14: 000055558c8cb4e8 R15: 00007ffddd7eb300 [ 26.170201][ T286] [ 26.174090][ T286] ---[ end trace 9581e4fa4b99513d ]--- [ 26.179765][ T286] ------------[ cut here ]------------ [ 26.185523][ T286] WARNING: CPU: 1 PID: 286 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 26.185885][ T292] ================================================================== [ 26.193514][ T286] Modules linked in: [ 26.201565][ T292] BUG: KASAN: use-after-free in fast_dput+0x1e0/0x290 [ 26.201590][ T292] Read of size 4 at addr ffff888111fce660 by task syz-executor/292 [ 26.210541][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 26.210554][ T30] audit: type=1400 audit(1785984932.515:159): avc: denied { setopt } for pid=329 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.212200][ T292] [ 26.212207][ T292] CPU: 0 PID: 292 Comm: syz-executor Tainted: G W syzkaller #0 [ 26.220914][ T30] audit: type=1400 audit(1785984932.535:160): avc: denied { read } for pid=329 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.226317][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.226333][ T292] Call Trace: [ 26.226337][ T292] [ 26.226343][ T292] __dump_stack+0x21/0x30 [ 26.226363][ T292] dump_stack_lvl+0x110/0x170 [ 26.226378][ T292] ? show_regs_print_info+0x20/0x20 [ 26.245710][ T286] [ 26.247816][ T292] ? load_image+0x3f0/0x3f0 [ 26.256854][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 26.275739][ T292] ? __flush_work+0x5b0/0x6d0 [ 26.275769][ T292] print_address_description+0x7f/0x2c0 [ 26.275788][ T292] ? fast_dput+0x1e0/0x290 [ 26.275801][ T292] kasan_report+0x10f/0x150 [ 26.275815][ T292] ? fast_dput+0x1e0/0x290 [ 26.275827][ T292] __asan_report_load4_noabort+0x14/0x20 [ 26.275841][ T292] fast_dput+0x1e0/0x290 [ 26.275854][ T292] dput+0x26/0x90 [ 26.286370][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.289168][ T292] incfs_free_mount_info+0x60/0x200 [ 26.289191][ T292] incfs_kill_sb+0x1af/0x210 [ 26.289269][ T292] deactivate_locked_super+0xa0/0x100 [ 26.289288][ T292] deactivate_super+0xaf/0xe0 [ 26.289302][ T292] cleanup_mnt+0x44f/0x500 [ 26.289318][ T292] __cleanup_mnt+0x19/0x20 [ 26.292351][ T286] RIP: 0010:drop_nlink+0xc5/0x110 [ 26.296684][ T292] task_work_run+0x127/0x190 [ 26.296705][ T292] do_exit+0xb70/0x29a0 [ 26.301433][ T286] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 c3 0b f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3b 9a b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 26.306548][ T292] ? put_task_struct+0x90/0x90 [ 26.306567][ T292] ? __fdget_pos+0x1f7/0x380 [ 26.306580][ T292] ? ksys_write+0x1eb/0x260 [ 26.306594][ T292] ? __ia32_sys_read+0x90/0x90 [ 26.309149][ T286] RSP: 0018:ffffc90000a17b50 EFLAGS: 00010293 [ 26.313568][ T292] do_group_exit+0x149/0x310 [ 26.313588][ T292] __x64_sys_exit_group+0x3f/0x40 [ 26.313603][ T292] x64_sys_call+0x832/0x9a0 [ 26.313617][ T292] do_syscall_64+0x4c/0xa0 [ 26.322669][ T286] [ 26.327384][ T292] ? clear_bhb_loop+0x50/0xa0 [ 26.327406][ T292] ? clear_bhb_loop+0x50/0xa0 [ 26.335027][ T286] RAX: ffffffff81b71ca5 RBX: ffff88812a548818 RCX: ffff888120433b40 [ 26.337433][ T292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.342650][ T286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.346609][ T292] RIP: 0033:0x7f883dfc00d9 [ 26.346625][ T292] Code: Unable to access opcode bytes at RIP 0x7f883dfc00af. [ 26.346633][ T292] RSP: 002b:00007ffda317b378 EFLAGS: 00000246 [ 26.352533][ T286] RBP: ffffc90000a17b78 R08: 0000000000000003 R09: 0000000000000004 [ 26.356551][ T292] ORIG_RAX: 00000000000000e7 [ 26.356559][ T292] RAX: ffffffffffffffda RBX: 00007f883e0564d4 RCX: 00007f883dfc00d9 [ 26.360203][ T286] R10: dffffc0000000000 R11: fffff52000142f58 R12: dffffc0000000000 [ 26.370290][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 26.370302][ T292] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f883e056474 [ 26.370311][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda317c630 [ 26.370320][ T292] R13: 00007f883e056474 R14: 0000555590f084e8 R15: 00007ffda317d700 [ 26.370335][ T292] [ 26.370340][ T292] [ 26.370344][ T292] Allocated by task 317: [ 26.370350][ T292] __kasan_slab_alloc+0xb7/0xe0 [ 26.376185][ T286] R13: 1ffff110254a910c R14: ffff88812a548860 R15: 0000000000000000 [ 26.380114][ T292] slab_post_alloc_hook+0x4f/0x2b0 [ 26.380137][ T292] kmem_cache_alloc+0xf7/0x260 [ 26.385738][ T286] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 26.390240][ T292] __d_alloc+0x2d/0x690 [ 26.390258][ T292] d_alloc_parallel+0xe5/0x1380 [ 26.401713][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.404050][ T292] __lookup_slow+0x14c/0x410 [ 26.404069][ T292] lookup_one_len+0x19d/0x2d0 [ 26.404083][ T292] incfs_lookup_dentry+0x60/0xb0 [ 26.404096][ T292] open_or_create_special_dir+0x4c/0x1f0 [ 26.404112][ T292] incfs_mount_fs+0x42f/0x890 [ 26.404126][ T292] legacy_get_tree+0xed/0x190 [ 26.404140][ T292] vfs_get_tree+0x89/0x260 [ 26.404156][ T292] do_new_mount+0x251/0xb40 [ 26.404170][ T292] path_mount+0x640/0xff0 [ 26.404183][ T292] __se_sys_mount+0x320/0x390 [ 26.404195][ T292] __x64_sys_mount+0xbf/0xd0 [ 26.404208][ T292] x64_sys_call+0x6bf/0x9a0 [ 26.404219][ T292] do_syscall_64+0x4c/0xa0 [ 26.404231][ T292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.404244][ T292] [ 26.404248][ T292] Freed by task 351: [ 26.404255][ T292] kasan_set_track+0x4a/0x70 [ 26.404269][ T292] kasan_set_free_info+0x23/0x40 [ 26.404282][ T292] ____kasan_slab_free+0x125/0x160 [ 26.410458][ T286] CR2: 00007ff0d69f1d58 CR3: 000000010d73e000 CR4: 00000000003506a0 [ 26.413620][ T292] __kasan_slab_free+0x11/0x20 [ 26.413643][ T292] slab_free_freelist_hook+0xc2/0x190 [ 26.413655][ T292] kmem_cache_free+0x100/0x320 [ 26.413670][ T292] __d_free+0x23/0x30 [ 26.413683][ T292] rcu_do_batch+0x4c1/0xbf0 [ 26.413696][ T292] rcu_core+0x4a3/0xef0 [ 26.413708][ T292] rcu_core_si+0x9/0x10 [ 26.413719][ T292] handle_softirqs+0x250/0x560 [ 26.434435][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.438509][ T292] __irq_exit_rcu+0x52/0xf0 [ 26.438533][ T292] irq_exit_rcu+0x9/0x10 [ 26.443359][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.447754][ T292] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 26.447775][ T292] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 26.453093][ T286] Call Trace: [ 26.458782][ T292] [ 26.458790][ T292] Last potentially related work creation: [ 26.458795][ T292] kasan_save_stack+0x3a/0x60 [ 26.458816][ T292] __kasan_record_aux_stack+0xd2/0x100 [ 26.463795][ T286] [ 26.468480][ T292] kasan_record_aux_stack_noalloc+0xb/0x10 [ 26.468504][ T292] call_rcu+0x10b/0xf60 [ 26.473506][ T286] shmem_rmdir+0x5b/0x90 [ 26.477540][ T292] dentry_free+0xbd/0x150 [ 26.477557][ T292] __dentry_kill+0x516/0x660 [ 26.479910][ T286] vfs_rmdir+0x1ae/0x450 [ 26.484518][ T292] dentry_kill+0xc0/0x2a0 [ 26.484533][ T292] dput+0x47/0x90 [ 26.484544][ T292] incfs_free_mount_info+0x60/0x200 [ 26.484558][ T292] incfs_kill_sb+0x1af/0x210 [ 26.484571][ T292] deactivate_locked_super+0xa0/0x100 [ 26.484586][ T292] deactivate_super+0xaf/0xe0 [ 26.484598][ T292] cleanup_mnt+0x44f/0x500 [ 26.484612][ T292] __cleanup_mnt+0x19/0x20 [ 26.484625][ T292] task_work_run+0x127/0x190 [ 26.484637][ T292] do_exit+0xb70/0x29a0 [ 26.484650][ T292] do_group_exit+0x149/0x310 [ 26.484661][ T292] __x64_sys_exit_group+0x3f/0x40 [ 26.484673][ T292] x64_sys_call+0x832/0x9a0 [ 26.484687][ T292] do_syscall_64+0x4c/0xa0 [ 26.484701][ T292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.484716][ T292] [ 26.490329][ T286] incfs_kill_sb+0x18f/0x210 [ 26.497327][ T292] The buggy address belongs to the object at ffff888111fce660 [ 26.497327][ T292] which belongs to the cache dentry of size 208 [ 26.497343][ T292] The buggy address is located 0 bytes inside of [ 26.497343][ T292] 208-byte region [ffff888111fce660, ffff888111fce730) [ 26.497357][ T292] The buggy address belongs to the page: [ 26.497373][ T292] page:ffffea000447f380 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111fce [ 26.497394][ T292] flags: 0x4000000000000200(slab|zone=1) [ 26.497412][ T292] raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881001c5e00 [ 26.497423][ T292] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 26.497430][ T292] page dumped because: kasan: bad access detected [ 26.503840][ T286] deactivate_locked_super+0xa0/0x100 [ 26.511671][ T292] page_owner tracks the page as allocated [ 26.511695][ T292] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112cd0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 317, ts 23964878432, free_ts 0 [ 26.511725][ T292] post_alloc_hook+0x192/0x1b0 [ 26.516515][ T341] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 576, setting to 64 [ 26.523567][ T292] prep_new_page+0x1c/0x110 [ 26.523593][ T292] get_page_from_freelist+0x2c3a/0x2cd0 [ 26.523606][ T292] __alloc_pages+0x1a2/0x460 [ 26.523619][ T292] new_slab+0xa0/0x4d0 [ 26.523630][ T292] ___slab_alloc+0x3ac/0x840 [ 26.523643][ T292] __slab_alloc+0x49/0x90 [ 26.530914][ T30] audit: type=1400 audit(1785984932.835:161): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 26.537679][ T292] kmem_cache_alloc+0x138/0x260 [ 26.537702][ T292] __d_alloc+0x2d/0x690 [ 26.537714][ T292] d_alloc_parallel+0xe5/0x1380 [ 26.542521][ T286] deactivate_super+0xaf/0xe0 [ 26.550598][ T292] __lookup_slow+0x14c/0x410 [ 26.550621][ T292] lookup_one_len+0x19d/0x2d0 [ 26.550634][ T292] incfs_lookup_dentry+0x60/0xb0 [ 26.550648][ T292] open_or_create_special_dir+0x4c/0x1f0 [ 26.559678][ T30] audit: type=1400 audit(1785984932.835:162): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.566653][ T292] incfs_mount_fs+0x42f/0x890 [ 26.566674][ T292] legacy_get_tree+0xed/0x190 [ 26.566689][ T292] page_owner free stack trace missing [ 26.566694][ T292] [ 26.566697][ T292] Memory state around the buggy address: [ 26.566704][ T292] ffff888111fce500: 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 26.566714][ T292] ffff888111fce580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 26.566723][ T292] >ffff888111fce600: 00 00 00 00 fc fc fc fc fc fc fc fc fa fb fb fb [ 26.566728][ T292] ^ [ 26.566735][ T292] ffff888111fce680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 26.566744][ T292] ffff888111fce700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb [ 26.566751][ T292] ================================================================== [ 26.566757][ T292] Disabling lock debugging due to kernel taint [ 26.569670][ T292] ------------[ cut here ]------------ [ 26.576174][ T341] usb 5-1: config 0 interface 0 has no altsetting 0 [ 26.583395][ T292] WARNING: CPU: 0 PID: 292 at fs/dcache.c:769 fast_dput+0x207/0x290 [ 26.583427][ T292] Modules linked in: [ 26.583436][ T292] CPU: 0 PID: 292 Comm: syz-executor Tainted: G B W syzkaller #0 [ 26.591841][ T286] cleanup_mnt+0x44f/0x500 [ 26.594547][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.594557][ T292] RIP: 0010:fast_dput+0x207/0x290 [ 26.594573][ T292] Code: ec f2 ff e9 4e fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fe ff ff 48 89 df e8 53 ec f2 ff e9 94 fe ff ff e8 f9 7c b3 ff <0f> 0b e9 13 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ec fe ff [ 26.597159][ T30] audit: type=1400 audit(1785984932.835:163): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.601101][ T292] RSP: 0018:ffffc90000a97b60 EFLAGS: 00010293 [ 26.601117][ T292] RAX: ffffffff81b639e7 RBX: ffff888111fce660 RCX: ffff888120434f00 [ 26.601127][ T292] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001 [ 26.601137][ T292] RBP: ffffc90000a97b88 R08: 0000000000000003 R09: 0000000000000004 [ 26.606261][ T341] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 26.614016][ T292] R10: dffffc0000000000 R11: fffff52000152f5c R12: 00000000ffffff80 [ 26.614035][ T292] R13: dffffc0000000000 R14: ffff888111fce6b8 R15: 1ffff110223f9cd7 [ 26.614045][ T292] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 26.619491][ T286] __cleanup_mnt+0x19/0x20 [ 26.623946][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.633074][ T30] audit: type=1400 audit(1785984932.835:164): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.636997][ T292] CR2: 00007ff0d69f0ff8 CR3: 0000000110571000 CR4: 00000000003506b0 [ 26.637014][ T292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.642085][ T30] audit: type=1400 audit(1785984932.835:165): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.648826][ T292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.648839][ T292] Call Trace: [ 26.648843][ T292] [ 26.648873][ T292] dput+0x26/0x90 [ 26.648890][ T292] incfs_free_mount_info+0x60/0x200 [ 26.648906][ T292] incfs_kill_sb+0x1af/0x210 [ 26.648921][ T292] deactivate_locked_super+0xa0/0x100 [ 26.648939][ T292] deactivate_super+0xaf/0xe0 [ 26.648953][ T292] cleanup_mnt+0x44f/0x500 [ 26.648970][ T292] __cleanup_mnt+0x19/0x20 [ 26.648984][ T292] task_work_run+0x127/0x190 [ 26.648997][ T292] do_exit+0xb70/0x29a0 [ 26.649014][ T292] ? put_task_struct+0x90/0x90 [ 26.649029][ T292] ? __fdget_pos+0x1f7/0x380 [ 26.649043][ T292] ? ksys_write+0x1eb/0x260 [ 26.649057][ T292] ? __ia32_sys_read+0x90/0x90 [ 26.649070][ T292] do_group_exit+0x149/0x310 [ 26.649086][ T292] __x64_sys_exit_group+0x3f/0x40 [ 26.649100][ T292] x64_sys_call+0x832/0x9a0 [ 26.649114][ T292] do_syscall_64+0x4c/0xa0 [ 26.654689][ T341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.658377][ T292] ? clear_bhb_loop+0x50/0xa0 [ 26.658401][ T292] ? clear_bhb_loop+0x50/0xa0 [ 26.663595][ T286] task_work_run+0x127/0x190 [ 26.668964][ T292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.668984][ T292] RIP: 0033:0x7f883dfc00d9 [ 26.674489][ T341] usb 5-1: config 0 descriptor?? [ 26.678321][ T292] Code: Unable to access opcode bytes at RIP 0x7f883dfc00af. [ 26.678331][ T292] RSP: 002b:00007ffda317b378 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 26.682986][ T30] audit: type=1400 audit(1785984932.835:166): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.687372][ T292] RAX: ffffffffffffffda RBX: 00007f883e0564d4 RCX: 00007f883dfc00d9 [ 26.687388][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 26.687397][ T292] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f883e056474 [ 26.687406][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda317c630 [ 26.687416][ T292] R13: 00007f883e056474 R14: 0000555590f084e8 R15: 00007ffda317d700 [ 26.691817][ T286] do_exit+0xb70/0x29a0 [ 26.696462][ T292] [ 26.696471][ T292] ---[ end trace 9581e4fa4b99513e ]--- [ 26.735152][ T292] syz-executor (292) used greatest stack depth: 22024 bytes left [ 26.737821][ T30] audit: type=1400 audit(1785984932.835:167): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.782322][ T286] ? put_task_struct+0x90/0x90 [ 26.802380][ T353] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 26.810362][ T286] ? __fdget_pos+0x1f7/0x380 [ 27.142354][ T341] usbhid 5-1:0.0: can't add hid device: -71 [ 27.143149][ T286] ? ksys_write+0x1eb/0x260 [ 27.147933][ T341] usbhid: probe of 5-1:0.0 failed with error -71 [ 27.153560][ T286] do_group_exit+0x149/0x310 [ 27.208213][ T341] usb 5-1: USB disconnect, device number 2 [ 27.216115][ T286] __x64_sys_exit_group+0x3f/0x40 [ 27.677412][ T60] usb 1-1: USB disconnect, device number 2 [ 27.684019][ T286] x64_sys_call+0x832/0x9a0 [ 27.799162][ T286] do_syscall_64+0x4c/0xa0 [ 27.803800][ T286] ? clear_bhb_loop+0x50/0xa0 [ 27.808532][ T286] ? clear_bhb_loop+0x50/0xa0 [ 27.813482][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.819417][ T286] RIP: 0033:0x7fac1c2e70d9 [ 27.828137][ T286] Code: Unable to access opcode bytes at RIP 0x7fac1c2e70af. [ 27.835747][ T286] RSP: 002b:00007ffddd7e8f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 27.846968][ T286] RAX: ffffffffffffffda RBX: 00007fac1c37d4d4 RCX: 00007fac1c2e70d9 [ 27.854991][ T286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 27.862975][ T286] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fac1c37d474 [ 27.871045][ T286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddd7ea230 [ 27.879068][ T286] R13: 00007fac1c37d474 R14: 000055558c8cb4e8 R15: 00007ffddd7eb300 [ 27.887228][ T286] [ 27.890257][ T286] ---[ end trace 9581e4fa4b99513f ]--- [ 27.932396][ T286] syz-executor (286) used greatest stack depth: 21376 bytes left [ 28.403047][ T45] device bridge_slave_1 left promiscuous mode [ 28.409206][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.417313][ T45] device bridge_slave_0 left promiscuous mode [ 28.423485][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.431688][ T45] device veth1_macvtap left promiscuous mode [ 28.437891][ T45] device veth0_vlan left promiscuous mode [ 29.432971][ T45] device bridge_slave_1 left promiscuous mode [ 29.439121][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.447193][ T45] device bridge_slave_0 left promiscuous mode [ 29.453674][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.461808][ T45] device veth1_macvtap left promiscuous mode [ 29.468044][ T45] device veth0_vlan left promiscuous mode