last executing test programs: 488.334178ms ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_to_hsr\x00'}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r6, 0x0) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x886c}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0xc, 0x4, 0x2, 0x22, 0x30, 0x66, 0x0, 0x5, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x18}, {[@timestamp_prespec={0x44, 0xc, 0xe9, 0x3, 0x5, [{@empty, 0x3a}]}, @timestamp={0x44, 0x10, 0xa2, 0x0, 0xd, [0x2, 0x0, 0x5]}]}}}}}}}, 0x42) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x130, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@random="c5d10e40fc66"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x44}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @private=0xa010101, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x4219, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 444.231609ms ago: executing program 2 (id=3): r0 = timerfd_create(0x4, 0x800) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x2, 0x1, [0x8000, 0x2, 0x8370, 0x10001, 0x3], [0x8, 0xd2, 0x2, 0x3, 0x127, 0x0, 0xffff, 0x8, 0x4, 0x0, 0x8001, 0x9, 0x6, 0x7, 0x0, 0x6e86, 0x7, 0x7, 0x4, 0x5, 0x4, 0x8, 0x7fffffff, 0x87, 0x5, 0x9, 0x3, 0x75, 0x594ba68f, 0x4, 0x0, 0x0, 0x400, 0x1, 0x682c, 0x6, 0xf6, 0x4, 0x1, 0x8, 0x4, 0x9, 0x4, 0x1, 0x6, 0x101, 0x100000001, 0x93ba, 0x7fffffff, 0x34, 0xec72, 0x400, 0xffffffffffffffdf, 0x80000000000000, 0x1, 0x200, 0x8, 0x5, 0x7f, 0xffffffff, 0xdc48, 0xffffffffffffffff, 0x3, 0x62, 0x10000, 0x29d, 0x7, 0x51, 0x4, 0xffffffff80000001, 0xc0, 0x6, 0x1, 0x100, 0x4, 0x1cb0, 0x8, 0x5, 0x2, 0x2, 0x1, 0x3, 0x5, 0x7, 0x2, 0x4, 0x3, 0x400, 0x81, 0xff, 0xff, 0x2, 0xbd, 0xb29, 0x5, 0x6, 0x6, 0x5, 0x100, 0x7, 0xfffffffffffffff6, 0x9, 0x6a5, 0x1, 0x400, 0x3, 0x3, 0x4, 0x9, 0x3, 0x9, 0x140000000000000, 0xfffffffffffffff7, 0x9, 0x1, 0x800, 0x1000, 0xa, 0x7, 0x2, 0x2]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "0b6b3a94fb3846e1c4ff94c0d0d3443d"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001440)={0x0, "fd46a6dbaa035456facbf203da95677a"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002440)={0x4, 0x0, {0xfffffffffffffff8, @struct={0x8, 0x2}, r1, 0x3, 0x8, 0x7fffffffffffffff, 0x3, 0x3, 0x0, @usage=0x200, 0xabd, 0x3ff, [0x9, 0x0, 0x3, 0x80, 0x4, 0x2]}, {0x6c2, @usage=0xd1c, r2, 0x40, 0x8, 0xfffffffffffffffc, 0xc2, 0xfb, 0x18, @struct={0x4, 0x6}, 0x4, 0x7fff, [0x2, 0x0, 0x6, 0x101, 0x2, 0x8]}, {0xd2a2, @usage=0x4, r3, 0x1b, 0x9, 0x6, 0x36, 0x7, 0x16, @usage=0xd4f8, 0x9, 0x10001, [0x2, 0x0, 0x3f, 0x7, 0x200, 0x1]}, {0x1, 0x1000, 0x50}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, 0x0) 434.674209ms ago: executing program 0 (id=1): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=@newsa={0x1a0, 0x10, 0x4, 0x12, 0x100, {{@in=@rand_addr=0x64010101, @in=@multicast1, 0x1, 0x0, 0x4e23, 0x25, 0x2}, {@in=@broadcast, 0x4d3, 0x33}, @in6=@local, {0x0, 0x190, 0x6, 0xd, 0xc1, 0x2, 0xfffffffffffffff8, 0x6}, {0xffffffffffffffff, 0x1ff, 0x1f, 0x78}, {0x2, 0x5}, 0x4070bd2a, 0x3503, 0xa, 0x1}, [@algo_crypt={0xad, 0x2, {{'ecb(cast6)\x00'}, 0x328, "609e80f5b065f1355677512886848a9022f998079d1caf025072f542e1160551c073825df240fda4ab6e33f2cbf0f1022fe95957560f7e62b9e2da370de3b216989c9e081e6dffc061ed80ab2704788e420adcc7a71fb737e73acc907c908a0bfe81a27ca2"}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4c801}, 0x404c001) (async, rerun: 64) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = epoll_create1(0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000600)={0xe000000d}) (async, rerun: 32) ppoll(&(0x7f0000000140)=[{r2, 0xa180}, {r3, 0x110}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f00000018c0)={0x1ffff, 0x400, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) (async, rerun: 64) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) (async, rerun: 32) r8 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) (rerun: 32) r9 = syz_pidfd_open(r8, 0x0) ftruncate(r9, 0x4) r10 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x894a, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x7, 0x7, 0x64, @loopback, @local, 0x1, 0x7800, 0xd, 0x9}}) sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="26541135358d81faa642f0c5aec00f46f928ad9ebe6f7c91341bdeecd683cd6b5440f4ac63a59b4dc24d0136de7043965c7c5669c385cd866457d4df50846fc6342309875f387d2f099ba006a2167c68a1a54b23b82749935fb0dd7ecd728c2fce7e7ce7f52edfab25a4c840d76a7bbc86df8ac7c6c57a948de95fcc5194a3406f1eeabcc53b4ad10284be997c08f1f2d9e68f93212a19b18b1b99", 0x9b}, {&(0x7f0000000400)="4b87c4b1eb64a64d6c8a164f5c9efa3a443c633bc421b685fa7ee69f21bbe884ba0e6993a42a20949b4867144c", 0x2d}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="6c00000000000000000000000700000044242f51ffffffff00000001e000000200000081ac14141200000009ffffffff000004014414fa13ac14143400000001ffffffff00000009004418d9200000000400000009000000010000000500000003070bf864010100e00000010000000014000000000000000000000001000000feffffff000000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac14000d"], 0xa8}, 0x41) clock_gettime(0x766293fdc5a3d1bd, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000018c0)={0x24, &(0x7f0000001640)={0x20, 0x14, 0x6, "aa8671eaa682"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1a0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) (async, rerun: 32) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) (rerun: 32) ioctl$MON_IOCX_GET(r12, 0x40189206, &(0x7f0000000580)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000480)=""/199, 0xc7}) (async, rerun: 32) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x234, &(0x7f0000000ac0)=ANY=[]) (rerun: 32) 418.64176ms ago: executing program 3 (id=4): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000000)={0x0, 0x2}) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x20, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000c40)="120000001200e7ef007b0000000000fa", 0x10, 0x8800, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}}) 352.186081ms ago: executing program 2 (id=5): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2581, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffff, 0x6, 0xc, 0x1000000, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x1, 0x87fffffff, 0x0, 0x10, 0xb, 0x6, 0x200cc0, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x6, 0x9}) 351.868101ms ago: executing program 2 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x62020600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x4000, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_vlan\x00', 0x4}, 0x18) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)={@val={0xa, 0x886c}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x8, 0x3c, 0x0, @private2={0xfc, 0x2, '\x00', 0x6}, @mcast2, {[@dstopts={0x32}]}}}}}}, 0x42) 343.967601ms ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x1804008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) (fail_nth: 2) 52.068559ms ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)=""/3, 0x3}], 0x1, 0x0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000030102"], 0x18}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x1804008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000073, 0x0, 0x2e2}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000001680)=""/4104, 0x1008}, {&(0x7f0000000540)=""/190, 0xbe}], 0x3}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 3.8825ms ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x1804008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 0s ago: executing program 1 (id=10): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xe000, 0x41000, 0x8, 0xb, 0x3, 0xe4, 0x40, 0x3, 0x0, 0x20, 0x19}, {0x41000, 0xa000, 0xe, 0x4, 0x40, 0x5, 0x7d, 0x9, 0xd9, 0x3, 0xff}, {0xc000, 0x4000, 0xb, 0x5, 0x81, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x25, 0x81}, {0xdddd0000, 0xffff1000, 0x3, 0x40, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x6, 0xe}, {0xeeef0000, 0x26000, 0x10, 0x2d, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x93, 0xf9, 0x2}, {0x1000, 0x80a0000, 0x8, 0x7, 0xb5, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x7e, 0xef, 0x70}, {0xffff1000, 0xb000, 0x10, 0x5, 0xf, 0x7, 0x1, 0x16, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x1, 0x3ff}, 0x80000031, 0x0, 0x5000, 0x2004, 0xb, 0x0, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x2000000, 0x4) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_usb_connect$uac3(0x5, 0x121, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10f, 0x3, 0x1, 0x2, 0x40, 0x4, {0x8, 0xb, 0x1, 0x0, 0x1, 0x21, 0x30, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x45, 0x5}, [@feature_unit={0x19, 0x24, 0x7, 0x2, 0x3, [0x4, 0xe, 0xc, 0x9, 0xc]}, @power_domain={0xd, 0x24, 0x10, 0x66, 0x480, 0x9, 0x4, "fb3839b5"}, @processing_unit={0x15, 0x24, 0x9, 0x2, 0x3, [0x3, 0x0, 0x2, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0xc}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4}, @as_header={0x17, 0x24, 0x1, 0x71, 0x5, 0x1, 0x2, 0x7, 0x6, 0x6, 0xc0}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x51, 0x9, {0xa, 0x25, 0x25, 0x9, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0xf, 0x3, "94"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x1, 0x53, 0x6, "86bc", "2cbd"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xff, 0x0, 0xf5, 0xf5, 0xc}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc, 0x81, 0xc, 0x2}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x7ff, 0x7, "c151bce8e201bda9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x3, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x6, 0x9, {0xa, 0x25, 0x25, 0x0, 0x4, 0x61}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x3, 0x0, 0x10, 0x2f}, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0xfffffffffffffd23, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0xfc, &(0x7f0000000a00)=@string={0xfc, 0x3, "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"}}, {0x6c, &(0x7f00000002c0)=@string={0x6c, 0x3, "68b96c713b324871e633d520e0ac346188042d3fdfcbbe045a0cea4e50c227150c29cfc8bac4bd34e1d74182c04cf9a3a5d461dc321090148d5982aa07065d7528740ed3a1daf14fd9c9ab08a4824577c3ebf0e65c4674ba08c46fbe96172af0f6ed6779685902c1bb26"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x419}}, {0x47, &(0x7f0000000380)=@string={0x47, 0x3, "3c6a71dcac80ed86a214f30e243e385f0a729de6d39b471852a7d286b1aa7a9033f6a4f31f1683ab5c28578f002fead9881ad665212e2588aa3f6ea9d9de6a441e1c4ad452"}}]}) syz_usb_control_io$uac3(r5, &(0x7f0000000680)={0x14, &(0x7f0000000480)={0x20, 0xb, 0xc3, {0xc3, 0x22, "a30e02cb80eea583aac0a4ffc2cd0b175839601dc97e36f046be00b11f3f14f13c75bb55374eaa4b382eeb8ceb164ac54a714a4714570b5f1103f831264b61ad18311a600a6bca23bb19f3f73ecfc1830a4a950fd8351b579d9f9e22c73df327101d283e73ce15aeb19af5e1dd5503975de7d9a096ae8ff64306eb7a7540abbad5eb3c067b61faf18add6a08cdb3fd4f90db6a576e3e0f3a2d85ec424b2afa7edeb2d62c372b4544048ab0d11cc581d099db9f03024d6422798c23f99e9a03ed78"}}, &(0x7f0000000580)=ANY=[@ANYBLOB="0003ca000000ca03bfb47030230e6cc38651175f9d189233a37a432c1d6bbe200ae17560ddd7a9ed56f4bbe87e25e947d3f02787b5c7589011f9dd8032852e3ac1f148bc551eadbd9c9fa51f45e0e5ab0a603fa5ccac05de159d8955f9ff88a5f4718d8b7fdd49d42b3b9a68c8f542de3a893948c1a61c0883ed4044a23b98723b2c3b957fadb5fd86e4ce87ca0409cc13ae08f2ceada0de71e415f81bc48e4e4fc35f1ada831e0bd9117dfb315198e9deddcfd4b78d8c51fb815cb7b0fb88d055ae91ac1e4484775acec6c1cea5a2f9"]}, &(0x7f0000000980)={0x44, &(0x7f00000006c0)={0x20, 0x1d, 0xe2, "50ab47a536e5cd2e74fd414355140dbf4e6d05fe9dc2525a2799a6a722c5ffab9db40e2bf486977f02452e1f34cd88120b155e458d315abce1e390561f9461a0729126c6e479a00c7808c89fdabd6d244181e6a46d7f08ff10c0d5f44d2e3648f20f32af2747945caf6343ecf5fbaa18bc2cb381f222b3e778525eb059a6d180faed1f9e299fcdb5e30ede79be04c3b43e2d167004c33478b76a869367cb02ead29e573b8cc71239ccd42302b1c5f7e91b741206abf2d162e55b72c38e84d222faf31ea30037162ff1800bc34242405c68d03b9dc192234d0156922fc393fdb14eb9"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000840)={0x20, 0x81, 0x1, '\a'}, &(0x7f0000000880)={0x20, 0x82, 0x2, '^\r'}, &(0x7f00000008c0)={0x20, 0x83, 0x3, "e607d6"}, &(0x7f0000000900)={0x20, 0x84, 0x3, "823b37"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "61d5d3"}}) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 29.064621][ T36] audit: type=1400 audit(1785086886.020:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.068300][ T286] cgroup: Unknown subsys name 'net' [ 29.087573][ T36] audit: type=1400 audit(1785086886.020:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.115001][ T36] audit: type=1400 audit(1785086886.050:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.115576][ T286] cgroup: Unknown subsys name 'devices' [ 29.242295][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.248069][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.343099][ T36] audit: type=1400 audit(1785086886.300:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.366360][ T36] audit: type=1400 audit(1785086886.300:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.391133][ T36] audit: type=1400 audit(1785086886.300:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.421470][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.430429][ T36] audit: type=1400 audit(1785086886.390:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.456031][ T36] audit: type=1400 audit(1785086886.390:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 29.535689][ T36] audit: type=1400 audit(1785086886.490:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.537170][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.561244][ T36] audit: type=1400 audit(1785086886.490:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.422094][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.429171][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.436502][ T294] bridge_slave_0: entered allmulticast mode [ 30.443075][ T294] bridge_slave_0: entered promiscuous mode [ 30.451094][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.458182][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.465619][ T294] bridge_slave_1: entered allmulticast mode [ 30.472020][ T294] bridge_slave_1: entered promiscuous mode [ 30.503201][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.510336][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.517516][ T293] bridge_slave_0: entered allmulticast mode [ 30.524064][ T293] bridge_slave_0: entered promiscuous mode [ 30.530610][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.537656][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.544842][ T295] bridge_slave_0: entered allmulticast mode [ 30.551214][ T295] bridge_slave_0: entered promiscuous mode [ 30.561821][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.568985][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.576482][ T295] bridge_slave_1: entered allmulticast mode [ 30.582857][ T295] bridge_slave_1: entered promiscuous mode [ 30.589054][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.596132][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.603362][ T293] bridge_slave_1: entered allmulticast mode [ 30.609780][ T293] bridge_slave_1: entered promiscuous mode [ 30.683341][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.690470][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.697570][ T296] bridge_slave_0: entered allmulticast mode [ 30.704009][ T296] bridge_slave_0: entered promiscuous mode [ 30.713342][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.720506][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.727608][ T296] bridge_slave_1: entered allmulticast mode [ 30.733968][ T296] bridge_slave_1: entered promiscuous mode [ 30.819830][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.826920][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.834311][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.841386][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.881541][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.888635][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.896075][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.903414][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.924259][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.931367][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.938663][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.945771][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.975616][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.983286][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.991235][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.998543][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.005920][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.013664][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.037928][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.045058][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.062491][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.069664][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.077754][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.084825][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.093115][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.100198][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.146241][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.153361][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.161654][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.168726][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.187328][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.194414][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.202337][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.209387][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.248660][ T295] veth0_vlan: entered promiscuous mode [ 31.270544][ T294] veth0_vlan: entered promiscuous mode [ 31.281363][ T295] veth1_macvtap: entered promiscuous mode [ 31.292061][ T293] veth0_vlan: entered promiscuous mode [ 31.306321][ T294] veth1_macvtap: entered promiscuous mode [ 31.313482][ T296] veth0_vlan: entered promiscuous mode [ 31.343617][ T293] veth1_macvtap: entered promiscuous mode [ 31.361165][ T296] veth1_macvtap: entered promiscuous mode [ 31.377091][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.562992][ T332] FAULT_INJECTION: forcing a failure. [ 31.562992][ T332] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.609499][ T332] CPU: 1 UID: 0 PID: 332 Comm: syz.0.7 Not tainted syzkaller #0 a4a563d0c71b2f3eba821a1af94cbf4bdc8174ca [ 31.609539][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 31.609566][ T332] Call Trace: [ 31.609574][ T332] [ 31.609583][ T332] __dump_stack+0x21/0x30 [ 31.609634][ T332] dump_stack_lvl+0x140/0x1c0 [ 31.609668][ T332] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.609703][ T332] ? check_stack_object+0x81/0x150 [ 31.609728][ T332] ? __virt_addr_valid+0x2a1/0x370 [ 31.609756][ T332] dump_stack+0x19/0x20 [ 31.609785][ T332] should_fail_ex+0x3c2/0x510 [ 31.609812][ T332] should_fail+0xf/0x20 [ 31.609835][ T332] should_fail_usercopy+0x1e/0x30 [ 31.609862][ T332] _copy_from_user+0x20/0xa0 [ 31.609893][ T332] memdup_user+0x81/0x170 [ 31.609930][ T332] ? strndup_user+0x40/0xd0 [ 31.609952][ T332] strndup_user+0x6c/0xd0 [ 31.609974][ T332] __se_sys_mount+0x9f/0x480 [ 31.610001][ T332] ? ksys_write+0x1f3/0x260 [ 31.610028][ T332] ? __x64_sys_mount+0xf0/0xf0 [ 31.610056][ T332] __x64_sys_mount+0xc3/0xf0 [ 31.610083][ T332] x64_sys_call+0x2021/0x2ee0 [ 31.610107][ T332] do_syscall_64+0x57/0xf0 [ 31.610135][ T332] ? clear_bhb_loop+0x50/0xa0 [ 31.610169][ T332] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.610202][ T332] RIP: 0033:0x7fa105f9de99 [ 31.610225][ T332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.610246][ T332] RSP: 002b:00007fa106f2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 31.610281][ T332] RAX: ffffffffffffffda RBX: 00007fa106225fa0 RCX: 00007fa105f9de99 [ 31.610301][ T332] RDX: 0000200000000200 RSI: 0000200000000140 RDI: 0000200000000080 [ 31.610319][ T332] RBP: 00007fa106f2e090 R08: 0000000000000000 R09: 0000000000000000 [ 31.610336][ T332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.610351][ T332] R13: 00007fa106226038 R14: 00007fa106225fa0 R15: 00007ffd3ce0c9f8 [ 31.610373][ T332] [ 31.851202][ T338] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.875952][ T294] ------------[ cut here ]------------ [ 31.881560][ T294] WARNING: CPU: 0 PID: 294 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 31.885170][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.891430][ T294] Modules linked in: [ 31.902530][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Not tainted syzkaller #0 a4a563d0c71b2f3eba821a1af94cbf4bdc8174ca [ 31.914346][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 31.924499][ T294] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 31.930215][ T294] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9e 83 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 86 c3 3e ff <0f> 0b e9 3e ff ff ff e8 7a c3 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 31.950061][ T294] RSP: 0018:ffffc9000b67fb88 EFLAGS: 00010293 [ 31.956181][ T294] RAX: ffffffff8248ae3a RBX: 0000000000000000 RCX: ffff88812b231300 [ 31.964222][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.972459][ T294] RBP: ffffc9000b67fbb0 R08: ffff888119198b9f R09: 1ffff11023233173 [ 31.980549][ T294] R10: dffffc0000000000 R11: ffffed1023233174 R12: 0000000000000000 [ 31.988582][ T294] R13: dffffc0000000000 R14: ffff888119198b00 R15: ffff888121ca4cc0 [ 31.996610][ T294] FS: 000055556961e500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.005581][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.012216][ T294] CR2: 0000555569649998 CR3: 00000001220b8000 CR4: 00000000003526b0 [ 32.020242][ T294] Call Trace: [ 32.023552][ T294] [ 32.024720][ T341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 32.026540][ T294] ovl_do_remove+0x824/0xd10 [ 32.039867][ T294] ? ovl_set_redirect+0x780/0x780 [ 32.052323][ T294] ? __cfi_down_write+0x10/0x10 [ 32.052350][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.057231][ T294] ovl_rmdir+0x1e/0x30 [ 32.071618][ T46] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 32.072288][ T294] vfs_rmdir+0x3db/0x560 [ 32.085520][ T294] incfs_kill_sb+0x102/0x220 [ 32.089139][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.090286][ T294] deactivate_locked_super+0xd2/0x270 [ 32.103729][ T294] deactivate_super+0xb8/0xe0 [ 32.108491][ T294] cleanup_mnt+0x438/0x4d0 [ 32.112992][ T294] __cleanup_mnt+0x1d/0x40 [ 32.117501][ T294] task_work_run+0x1e8/0x260 [ 32.120823][ T46] usb 4-1: config 0 descriptor?? [ 32.122180][ T294] ? __cfi_task_work_run+0x10/0x10 [ 32.132410][ T294] ? __x64_sys_umount+0x12e/0x180 [ 32.137478][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.142940][ T294] ? __kasan_check_read+0x15/0x20 [ 32.148012][ T294] resume_user_mode_work+0x35/0x50 [ 32.153215][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 32.158743][ T294] do_syscall_64+0x63/0xf0 [ 32.163246][ T294] ? clear_bhb_loop+0x50/0xa0 [ 32.167972][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.174082][ T294] RIP: 0033:0x7f1898d9f0d7 [ 32.178560][ T294] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.198285][ T294] RSP: 002b:00007ffeab941ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.206802][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1898d9f0d7 [ 32.214972][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeab941fa0 [ 32.223048][ T294] RBP: 00007ffeab941fa0 R08: 00007ffeab942fa0 R09: 00000000ffffffff [ 32.231112][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeab943030 [ 32.239134][ T294] R13: 00007f1898e3330a R14: 0000000000007c60 R15: 00007ffeab943070 [ 32.247184][ T294] [ 32.250273][ T294] ---[ end trace 0000000000000000 ]--- [ 32.259393][ T294] ------------[ cut here ]------------ [ 32.265011][ T294] WARNING: CPU: 0 PID: 294 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 32.274743][ T294] Modules linked in: [ 32.278690][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Tainted: G W syzkaller #0 a4a563d0c71b2f3eba821a1af94cbf4bdc8174ca [ 32.292203][ T294] Tainted: [W]=WARN [ 32.296054][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.306204][ T294] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 32.311983][ T294] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9e 83 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 86 c3 3e ff <0f> 0b e9 3e ff ff ff e8 7a c3 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 32.331693][ T294] RSP: 0018:ffffc9000b67fb88 EFLAGS: 00010293 [ 32.337808][ T294] RAX: ffffffff8248ae3a RBX: 0000000000000000 RCX: ffff88812b231300 [ 32.339758][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 32.346065][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.359782][ T294] RBP: ffffc9000b67fbb0 R08: ffff888119198b9f R09: 1ffff11023233173 [ 32.359817][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 32.367791][ T294] R10: dffffc0000000000 R11: ffffed1023233174 R12: 0000000000000000 [ 32.367810][ T294] R13: dffffc0000000000 R14: ffff888119198b00 R15: ffff888121ca4cc0 [ 32.387364][ T46] usb 4-1: USB disconnect, device number 2 [ 32.391868][ T294] FS: 000055556961e500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.406844][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.413584][ T294] CR2: 0000555569649998 CR3: 00000001220b8000 CR4: 00000000003526b0 [ 32.421636][ T294] Call Trace: [ 32.424951][ T294] [ 32.427922][ T294] ovl_do_remove+0x824/0xd10 [ 32.432623][ T294] ? ovl_set_redirect+0x780/0x780 [ 32.437698][ T294] ? __cfi_down_write+0x10/0x10 [ 32.442644][ T294] ovl_rmdir+0x1e/0x30 [ 32.446760][ T294] vfs_rmdir+0x3db/0x560 [ 32.451060][ T294] incfs_kill_sb+0x197/0x220 [ 32.455694][ T294] deactivate_locked_super+0xd2/0x270 [ 32.461177][ T294] deactivate_super+0xb8/0xe0 [ 32.465935][ T294] cleanup_mnt+0x438/0x4d0 [ 32.470434][ T294] __cleanup_mnt+0x1d/0x40 [ 32.474985][ T294] task_work_run+0x1e8/0x260 [ 32.479631][ T294] ? __cfi_task_work_run+0x10/0x10 [ 32.484794][ T294] ? __x64_sys_umount+0x12e/0x180 [ 32.489895][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.495316][ T294] ? __kasan_check_read+0x15/0x20 [ 32.500399][ T294] resume_user_mode_work+0x35/0x50 [ 32.505581][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 32.511107][ T294] do_syscall_64+0x63/0xf0 [ 32.515593][ T294] ? clear_bhb_loop+0x50/0xa0 [ 32.520601][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.526528][ T294] RIP: 0033:0x7f1898d9f0d7 [ 32.531107][ T294] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.550988][ T294] RSP: 002b:00007ffeab941ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.559486][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1898d9f0d7 [ 32.567506][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeab941fa0 [ 32.576832][ T294] RBP: 00007ffeab941fa0 R08: 00007ffeab942fa0 R09: 00000000ffffffff [ 32.584867][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeab943030 [ 32.592895][ T294] R13: 00007f1898e3330a R14: 0000000000007c60 R15: 00007ffeab943070 [ 32.600963][ T294] [ 32.604024][ T294] ---[ end trace 0000000000000000 ]--- [ 32.837392][ T293] ------------[ cut here ]------------ [ 32.842952][ T293] WARNING: CPU: 0 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 32.849752][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.853110][ T293] Modules linked in: [ 32.863780][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 a4a563d0c71b2f3eba821a1af94cbf4bdc8174ca [ 32.876980][ T293] Tainted: [W]=WARN [ 32.880908][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.891058][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 32.896767][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9e 83 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 86 c3 3e ff <0f> 0b e9 3e ff ff ff e8 7a c3 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 32.916443][ T293] RSP: 0018:ffffc9000b66fb88 EFLAGS: 00010293 [ 32.922585][ T293] RAX: ffffffff8248ae3a RBX: 0000000000000000 RCX: ffff888103bf1300 [ 32.930647][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.938651][ T293] RBP: ffffc9000b66fbb0 R08: ffff888121cb0f3f R09: 1ffff110243961e7 [ 32.946678][ T293] R10: dffffc0000000000 R11: ffffed10243961e8 R12: 0000000000000000 [ 32.954712][ T293] R13: dffffc0000000000 R14: ffff888121cb0ea0 R15: ffff888121ed0330 [ 32.962756][ T293] FS: 000055555a170500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.971738][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.978327][ T293] CR2: 000055555a19b998 CR3: 00000001238d0000 CR4: 00000000003526b0 [ 32.986372][ T293] Call Trace: [ 32.989716][ T293] [ 32.992671][ T293] ovl_do_remove+0x824/0xd10 [ 32.997286][ T293] ? ovl_set_redirect+0x780/0x780 [ 33.002370][ T293] ? __cfi_down_write+0x10/0x10 [ 33.007272][ T293] ovl_rmdir+0x1e/0x30 [ 33.011437][ T293] vfs_rmdir+0x3db/0x560 [ 33.015737][ T293] incfs_kill_sb+0x102/0x220 [ 33.020377][ T293] deactivate_locked_super+0xd2/0x270 [ 33.022529][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.025834][ T293] deactivate_super+0xb8/0xe0 [ 33.038479][ T46] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.041576][ T293] cleanup_mnt+0x438/0x4d0 [ 33.041616][ T293] __cleanup_mnt+0x1d/0x40 [ 33.053007][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.055124][ T293] task_work_run+0x1e8/0x260 [ 33.063065][ T46] usb 4-1: config 0 descriptor?? [ 33.067797][ T293] ? __cfi_task_work_run+0x10/0x10 [ 33.082585][ T293] ? __x64_sys_umount+0x12e/0x180 [ 33.087657][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.093103][ T293] ? __kasan_check_read+0x15/0x20 [ 33.098201][ T293] resume_user_mode_work+0x35/0x50 [ 33.103424][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 33.108970][ T293] do_syscall_64+0x63/0xf0 [ 33.113498][ T293] ? clear_bhb_loop+0x50/0xa0 [ 33.118228][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.124305][ T293] RIP: 0033:0x7fa105f9f0d7 [ 33.128765][ T293] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.148456][ T293] RSP: 002b:00007ffd3ce0bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.156934][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa105f9f0d7 [ 33.164985][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3ce0bd20 [ 33.173027][ T293] RBP: 00007ffd3ce0bd20 R08: 00007ffd3ce0cd20 R09: 00000000ffffffff [ 33.181070][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3ce0cdb0 [ 33.189092][ T293] R13: 00007fa10603330a R14: 0000000000007e03 R15: 00007ffd3ce0cdf0 [ 33.197205][ T293] [ 33.200284][ T293] ---[ end trace 0000000000000000 ]--- [ 33.205869][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 33.206728][ T293] ------------[ cut here ]------------ [ 33.218958][ T293] WARNING: CPU: 1 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 33.228359][ T293] Modules linked in: [ 33.232333][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 a4a563d0c71b2f3eba821a1af94cbf4bdc8174ca [ 33.245526][ T293] Tainted: [W]=WARN [ 33.249369][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 33.259572][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 33.265272][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9e 83 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 86 c3 3e ff <0f> 0b e9 3e ff ff ff e8 7a c3 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 33.285230][ T293] RSP: 0018:ffffc9000b66fb88 EFLAGS: 00010293 [ 33.291543][ T293] RAX: ffffffff8248ae3a RBX: 0000000000000000 RCX: ffff888103bf1300 [ 33.299610][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.307613][ T293] RBP: ffffc9000b66fbb0 R08: ffff888121cb0f3f R09: 1ffff110243961e7 [ 33.315669][ T293] R10: dffffc0000000000 R11: ffffed10243961e8 R12: 0000000000000000 [ 33.323731][ T293] R13: dffffc0000000000 R14: ffff888121cb0ea0 R15: ffff888121ed0330 [ 33.332122][ T293] FS: 000055555a170500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.341151][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.347787][ T293] CR2: 000055556961e4e8 CR3: 00000001238d0000 CR4: 00000000003526b0 [ 33.350253][ T9] usb 2-1: device descriptor read/64, error -71 [ 33.355951][ T293] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 33.370232][ T293] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 33.378218][ T293] Call Trace: [ 33.381566][ T293] [ 33.384555][ T293] ovl_do_remove+0x824/0xd10 [ 33.389265][ T293] ? ovl_set_redirect+0x780/0x780 [ 33.394356][ T293] ? __cfi_down_write+0x10/0x10 [ 33.399270][ T293] ovl_rmdir+0x1e/0x30 [ 33.403445][ T293] vfs_rmdir+0x3db/0x560 [ 33.407766][ T293] incfs_kill_sb+0x197/0x220 [ 33.412519][ T293] deactivate_locked_super+0xd2/0x270 [ 33.417972][ T293] deactivate_super+0xb8/0xe0 [ 33.422713][ T293] cleanup_mnt+0x438/0x4d0 [ 33.427161][ T293] __cleanup_mnt+0x1d/0x40 [ 33.431666][ T293] task_work_run+0x1e8/0x260 [ 33.436320][ T293] ? __cfi_task_work_run+0x10/0x10 [ 33.441488][ T293] ? __x64_sys_umount+0x12e/0x180 [ 33.446628][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.452087][ T293] ? __kasan_check_read+0x15/0x20 [ 33.457157][ T293] resume_user_mode_work+0x35/0x50 [ 33.462334][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 33.468124][ T293] do_syscall_64+0x63/0xf0 [ 33.472691][ T293] ? clear_bhb_loop+0x50/0xa0 [ 33.477412][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.483390][ T293] RIP: 0033:0x7fa105f9f0d7 [ 33.487833][ T293] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.507693][ T293] RSP: 002b:00007ffd3ce0bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.516187][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa105f9f0d7 [ 33.524236][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3ce0bd20 [ 33.532281][ T293] RBP: 00007ffd3ce0bd20 R08: 00007ffd3ce0cd20 R09: 00000000ffffffff [ 33.540340][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3ce0cdb0 [ 33.548341][ T293] R13: 00007fa10603330a R14: 0000000000007e03 R15: 00007ffd3ce0cdf0 [ 33.556380][ T293] [ 33.559425][ T293] ---[ end trace 0000000000000000 ]--- [ 33.570018][ T46] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 33.580609][ T46] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input4 [ 33.599786][ T9] usb 2-1: device descriptor read/64, error -71 [ 33.653420][ T46] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 33.839540][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 33.979540][ T9] usb 2-1: device descriptor read/64, error -71 [ 34.077067][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 34.077087][ T36] audit: type=1400 audit(1785086891.030:124): avc: denied { read write } for pid=318 comm="syz.3.4" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 34.106294][ T36] audit: type=1400 audit(1785086891.030:125): avc: denied { open } for pid=318 comm="syz.3.4" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 34.129207][ T36] audit: type=1400 audit(1785086891.040:126): avc: denied { mounton } for pid=318 comm="syz.3.4" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.142484][ T63] usb 4-1: USB disconnect, device number 3 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: [ 34.219546][ T9] usb 2-1: device descriptor read/64, error -71 stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 34.282043][ T36] audit: type=1400 audit(1785086891.240:127): avc: denied { search } for pid=360 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network[ 34.329997][ T9] usb usb2-port1: attempt power cycle : [ 34.392764][ T36] audit: type=1400 audit(1785086891.350:128): avc: denied { write } for pid=149 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.423535][ T36] audit: type=1400 audit(1785086891.350:129): avc: denied { remove_name } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.445822][ T36] audit: type=1400 audit(1785086891.350:130): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 34.480690][ T36] audit: type=1400 audit(1785086891.370:131): avc: denied { unlink } for pid=149 comm="dhcpcd" name="pid" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK Stopping iptables: [ 34.536416][ T36] audit: type=1400 audit(1785086891.490:132): avc: denied { search } for pid=374 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK[ 34.558232][ T36] audit: type=1400 audit(1785086891.490:133): avc: denied { write } for pid=374 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: [ 34.689555][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd done [ 34.720655][ T9] usb 2-1: device descriptor read/8, error -71 Stopping klogd: OK [ 34.860813][ T9] usb 2-1: device descriptor read/8, error -71 Stopping acpid: [ 35.099560][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 35.120705][ T9] usb 2-1: device descriptor read/8, error -71 [ 35.251321][ T9] usb 2-1: device descriptor read/8, error -71 [ 35.359674][ T9] usb usb2-port1: unable to enumerate USB device OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.72 closed by remote host. Sent SIGTERM to all processes [ 36.210838][ T45] bridge_slave_1: left allmulticast mode [ 36.216820][ T45] bridge_slave_1: left promiscuous mode [ 36.230494][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.238462][ T45] bridge_slave_0: left allmulticast mode [ 36.244557][ T45] bridge_slave_0: left promiscuous mode [ 36.250258][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.362822][ T45] veth1_macvtap: left promiscuous mode [ 36.368367][ T45] veth0_vlan: left promiscuous mode [ 36.632387][ T45] bridge_slave_1: left allmulticast mode [ 36.638091][ T45] bridge_slave_1: left promiscuous mode [ 36.643894][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.651480][ T45] bridge_slave_0: left allmulticast mode [ 36.657138][ T45] bridge_slave_0: left promiscuous mode [ 36.662952][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.670675][ T45] bridge_slave_1: left allmulticast mode [ 36.676332][ T45] bridge_slave_1: left promiscuous mode [ 36.682128][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.690844][ T45] bridge_slave_0: left allmulticast mode [ 36.696523][ T45] bridge_slave_0: left promiscuous mode [ 36.702533][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.710382][ T45] bridge_slave_1: left allmulticast mode [ 36.716042][ T45] bridge_slave_1: left promiscuous mode [ 36.721893][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.729398][ T45] bridge_slave_0: left allmulticast mode [ 36.735175][ T45] bridge_slave_0: left promiscuous mode [ 36.740858][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.964801][ T45] veth1_macvtap: left promiscuous mode [ 36.970362][ T45] veth0_vlan: left promiscuous mode [ 36.975957][ T45] veth1_macvtap: left promiscuous mode [ 36.981574][ T45] veth0_vlan: left promiscuous mode [ 36.988402][ T45] veth1_macvtap: left promiscuous mode [ 36.993988][ T45] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 38.197451][ T396] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 38.204230][ T396] ACPI: PM: Preparing to enter system sleep state S5 [ 38.211250][ T396] kvm: exiting hardware virtualization [ 38.216789][ T396] reboot: Power down serialport: VM disconnected.