last executing test programs: 6.802643929s ago: executing program 3 (id=25): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r0 = syz_usb_connect$uac3(0x0, 0x9d, &(0x7f0000000780)=ANY=[@ANYBLOB="12010002000000083512100040000102030109028b000301071001080b0002010030080904000000010130000a24010e270002000080132403030703060604060000000500050003002a24050603"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120101020000d8010e0bffff40000102030109020700010101a00409040005010301018709210600020122bc0c090581031000063f0d"], 0x0) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000008c0)={0x2c, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000680)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000006c0)=0x4) pwritev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="002145000014000b0000b50600000a0000010a0000feff79005000500000000200000002601003e8000000", 0x2b}], 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000021000100000000000400000020010000000000000000000000000000fc0200000000000000000000000000000000fffc000000000a0000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e2ff7f00000000005000110000000000000000000000000000000001ac1414aa000000000000000000000000fc01000000000000000000000000000100000000004000000000ffffac1414bb6c010000033d00000a000200a4d2cb8e94f37b437de8385565b61544dcd164487daa7b04a4ac4461a24b3685083b4c8cfca36ad4eef7673c8b46a36320ddb9031ac9f9536ee10556bc6fe57573b82beabd9ecb6fec065926e994cdd79854acbf9646e93aca1d45e297179a20ee2a8644de37357c6a20fb3ab5f45e4dd95baf96a414a0127276c9f3cdd027d51c8a"], 0xa0}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x40200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000600)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000640)={0x2, 0x4e21, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newsa={0x23c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xa0}, {@in=@broadcast, 0x4d4, 0x32}, @in6=@private2, {0x2, 0x9, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0xa, 0x4, 0x0, 0x50}, [@algo_auth={0x103, 0x1, {{'sha3-256-ce\x00'}, 0x5d8, "3a37b1e0251098d52e6b360bdd0d7fb934d761e96be17bbe13e24e3cd38b62f5ccb12ee9115e8b8600452748bcd2a97b2e436659cda1243ab487e4e1e3f7f60bfa9164fbd3ce11d81528bd1a63c31922070379d24d47282c181b26e0f547704323236b367f30bc9876528103640bbe8aeb8fcbb7fe2d772daefcf1313faa3d1cd7bd54bbb3f4b368f1c2b96d7cdca8e930f825cc841ad3f356bc32bfb8efa613082b25c530d513cbe2b1f12dbc158f24edef16ab9572f89dca19bd"}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0x40082) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x30, r9, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) 6.051076556s ago: executing program 2 (id=34): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create(0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x2, &(0x7f0000000600)=[{0x14, 0x0, 0x1, 0xfffffffc}, {0x6}]}) ppoll(&(0x7f0000000440)=[{r1, 0x26a}], 0x1, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) mount(&(0x7f00000004c0)=@filename='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)='hpfs\x00', 0x200031, &(0x7f0000000580)='mangle\x00') setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffc, 0x7, 0x8000, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @empty, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 5.350464087s ago: executing program 0 (id=39): modify_ldt$write(0x1, &(0x7f0000000080)={0x404, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000000c0)={0x476, 0x20000800, 0x1000, 0x0, 0x1, 0x0, 0x1}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0xffffe000) accept4$unix(r1, 0x0, &(0x7f0000000000)=0xffffffffffffff1f, 0x0) write(r0, &(0x7f0000000880)='0', 0x1) 5.290867083s ago: executing program 0 (id=40): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x28) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000080, &(0x7f0000000000)={[{@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@verity_require}], [{@uid_eq={'uid', 0x3d, r0}}, {@smackfsfloor}]}) 5.289055093s ago: executing program 0 (id=41): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000000)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000240)=0x0) r5 = timerfd_create(0x7, 0x80800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_gettime(r5, &(0x7f00000008c0)) munmap$IORING_OFF_CQ_RING(r2, 0x442) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r4, &(0x7f0000000280)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000580)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8002, 0x0, 0x0}}, 0x0) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r8, 0x8008ae9d, &(0x7f0000000880)) r9 = socket(0x10, 0x803, 0x0) accept4$tipc(r9, &(0x7f0000000900)=@id, &(0x7f0000000940)=0x10, 0x800) ioctl$DM_DEV_ARM_POLL(r7, 0xc138fd10, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '0\x00'}}}) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f0000000840)={0x30, 0x5, 0x0, {0x0, 0x2, 0x8}}, 0x30) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 5.209884111s ago: executing program 2 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xd0) mkdir(&(0x7f0000000100)='./bus\x00', 0xc8) r0 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000740)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000007c0)=0xffff) connect$unix(r2, &(0x7f0000000800)=@file={0x1}, 0x6e) linkat(0xffffffffffffffff, &(0x7f0000000480)='./bus\x00', r0, &(0x7f0000000500)='./bus\x00', 0x1000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000540)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r4, 0x3) r5 = accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000580), 0x4) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000680)={r4, 0x9, 0x8001, 0xffffffffffff7fff}) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f00000006c0)='\x00', &(0x7f0000000700)='./bus\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000000000/0x800000)=nil, 0x800000}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x80, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mknod(&(0x7f0000000280)='./file0/file1\x00', 0xc000, 0xffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x105001, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x5, 0x80, 0x0, 0x0, 0x14, 0x8}, @llc={@snap={0x0, 0xaa, 't', "00009d", 0xf7, "cee77242d089827f926122ca5131d7a1b0ebec15d0ef"}}}, 0x2c) 5.030310609s ago: executing program 0 (id=43): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x89b1, &(0x7f0000000240)={'ip6_vti0\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f0000000400)=""/117, 0x75}, {&(0x7f0000000480)=""/3, 0x3}, {&(0x7f00000004c0)=""/49, 0x31}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/230, 0xe6}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/198, 0xc6}], 0x9) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) chroot(&(0x7f00000000c0)='./file0\x00') (async, rerun: 64) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1d000, 0x0) (rerun: 64) pivot_root(&(0x7f0000000140)='./file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000640)='./bus\x00', 0xc8) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) (rerun: 64) mount$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x2224023, 0x0) (async, rerun: 64) setxattr$incfs_id(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980), &(0x7f00000009c0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) (rerun: 64) landlock_create_ruleset(&(0x7f00000003c0)={0xc0d8, 0x1, 0x1}, 0x18, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20380) ioctl$int_in(r2, 0x40049409, 0x0) (async) pivot_root(0x0, &(0x7f00000002c0)='./file0/../file0/../file0\x00') 4.951826457s ago: executing program 3 (id=44): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000497000/0x1000)=nil, 0x1000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x17fc) 4.866517946s ago: executing program 3 (id=45): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0x15, 0x85}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x40305839, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001040)={0x24, &(0x7f0000000ec0)={0x40, 0x22, 0x86, {0x86, 0x2, "38a3088af3b63ad3f05564c967bab8c5e1a14da0a514fc6d76acd35165c272d97dfcf3ade1eee34bce86aa185e2c168e4a513c7c3189b8542a57f8c772efcf09a1a800d288d21a2fa6f28250211aeb0a317246faa4db9fb6618e0307f0523568937bddcfb517d9bc27a4141635cca5d40d6c7ccbe55225e5361d6c5dcd911352c1d1d425"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f0000000540)={0x0, 0x22, 0x18, {[@main=@item_012={0x1, 0x0, 0xb, "15"}, @global=@item_012={0x0, 0x1, 0x4}, @local=@item_012={0x2, 0x2, 0xa, "942c"}, @global=@item_012={0x1, 0x1, 0x6, "a9"}, @global=@item_012={0x2, 0x1, 0x1, "f11c"}, @local=@item_4={0x3, 0x2, 0x0, "f35334c7"}, @main=@item_012={0x2, 0x0, 0xa, ' \t'}, @local=@item_4={0x3, 0x2, 0x5, "cbd65986"}]}}, &(0x7f0000001000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0xa, 0x1, {0x22, 0xf88}}}}, &(0x7f0000001240)={0x2c, &(0x7f0000001480)={0x40, 0x5, 0xf8, "774a5dc5c77bee08d6cfd5aedf0af7d06e4e9bc89a633aba6616131aad9979a696f1d50f64d84c82ec56890e2ea217056aa0cb42c9038e57f7e506a5e9966afbc51a378e855705f39e081637ee8dcef584016e248bc9aa3a8980f67af5da209afafa67f10a7c55089d1e6a1b8c3c41dd2637f7708cda28dd0023ea741853326ced20acc514e02ea532314a02f5ccbe51904ce2db9f32443ea84b4e939e58dcfdfd1a2fdb684c7f9fbd3913a2f183d0377c934ba372981a1fc8661b4da9defa1e3395d832e9ccea9f6116b8b6d13e8d2f9b04a25939906b28276174f4a4670a47a56a454e11a31439b6287b01062a1b629f3152b17fa60000"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0xd9}, &(0x7f00000011c0)={0x20, 0x1, 0x37, "7decfedc6c9a6bd6be3d36f6cc34cda280e42f3d812d8c1f42166114a73e02458a25de5ef731a0dc2b6e3ef646199b970b3ee9b5941708"}, &(0x7f0000001200)={0x20, 0x3, 0x1, 0x8}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r2 = syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x424a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x4, 0x80, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x32}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x1, 0x3a, 0x0, 0x8, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x403, 0x5, 0x2, 0xe}, @mixer_unit={0x8, 0x24, 0x4, 0x5, 0x0, "904249"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0x6, "f80045ec"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x81, 0x3, 0x60, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x2, 0x4, {0x7, 0x25, 0x1, 0x8, 0x6, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x6, 0x1, 0x6, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x6, 0x10, {0x7, 0x25, 0x1, 0xc, 0x1, 0x101}}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x8, 0x9, 0x5, 0x20, 0xff}, 0x4f, &(0x7f0000001380)={0x5, 0xf, 0x4f, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x2, 0x9, 0x6d, 0x80}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0xc3f, 0xf000, 0x10, [0xc0ff, 0xffff60]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b7ab21132750f64c5229e85c97f74606"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "5bebc834bbc0bf8de40504000000398c"}]}, 0x9, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1409}}, {0xc1, &(0x7f0000001280)=@string={0xc1, 0x3, "43ed0b4abdfad036606813ab15ae0da4957ad16ca83c74e2e679b0e2fd14a4dc5eb037b13f24d3bbd6043f373640ea3021d0b89f7ee15c1eaee5438248c73204e979b86cc9e3e2eeb2102363a67716bcd0fb4bd7529a0f78aeada5842d3c3b17aef9151b07e584b78d94c9cffc1978e2e745538e73fd1a3bc303d6fc7b761d385bade46e24e6de55477ca55aeadac43b1047f4d36d6d8e878081d09025ac6e547ea9b84a5eadcd6f1641a21f7f1b7a3f9c7637a8b7f63b438380228e27cb0c"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x140a}}, {0xf8, &(0x7f0000000640)=@string={0xf8, 0x3, "ae99582331cca373bb8fec1d0049faa30b86d6a25ef4e888c6480ea4525a719a090fef280782ccbd4f00518403024be61ff795ebeee5803480b4bf874374fc0c6d2bdd4ae67d6979968c6a36e62d18bc12bd7adaff0a2c23578aa40fb169001bdbe7bf9d74d3799c6dd44506347200c9c2066b7d792aac6bb4a3c9a3a8124f65fff943cff3a722af5eabe5203a009d46e279bf35b8d640c1c956c68739b4a7604fb55f5bdd3976aa268c53cbbb5d4fd0021bd6f79fce1f0290b77b74e66bcc36cb9fe0833f0c8636ae558875df73834b1982d1d9a697dbae0a8f01d6ca35720c3aefd4dc81d5609c2c8e2d87c3e74f578db24ee5de59"}}, {0xcc, &(0x7f0000001a80)=ANY=[@ANYRESDEC=r0]}, {0x8e, &(0x7f0000000840)=ANY=[@ANYBLOB="8e03d34957f95642897a1b0f22294b711070af67c15158c262355c3de67750bd53acaa5667548fdaad20badf740219bced0f9641a9356c489edcec56814bfe563c7ed5861387ea37dd93208847aa7b09b9f2c6da5ffcd02ac3c65dc81e6699c18a13dc2ba117111384528a97c545801fc8302f88d14989d4f5888dc1df801f67ec3c7195274c8314eb535c9c7622"]}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x205d}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000bc0)={0x14, &(0x7f0000001080)=ANY=[@ANYBLOB="4022440000004410000ca6a888735fde15d18c006f1b9587fc52f50844ae1b729e4e917e1d02716c8808173afcd6193b9067149bea0c6493bb19a1f7c24e20191d59cd3650faf9f200002cd612e05e0f983845ca3858f56b6ca97d6deb799ab7ff6c1279ae720873703e87eff6fc89437a4f0080000047d669744a49bde672d65077b71155b4dd279bc514b67a543e7a66"], &(0x7f0000000b40)={0x0, 0x3, 0x43, @string={0x43, 0x3, "0c86b7024068474f4f3e705375dd482fa2c5fd746f94a2dd016c4c8320bf425f74461ae0bcf4be5d0f9530d82b833adca6bdd9b6f71fc1868244ee52319d9e8ba2"}}}, &(0x7f0000000e40)={0x44, &(0x7f0000000c00)={0x0, 0x11, 0x47, "6d2d3eb1bc48b292371b092ec5ff02f990f08acf0ac20fc8230268876bba82963e12c40ccac1451e89915e87198ffcf065bb0d0fa24c63490b53f164c173451ff9cca3cfee8ae2"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d00)={0x20, 0x81, 0x1, "b5"}, &(0x7f0000000d40)={0x20, 0x82, 0x1, "ce"}, &(0x7f0000000d80)={0x20, 0x83, 0x3, "99688b"}, &(0x7f0000000dc0)={0x20, 0x84, 0x4, "e69eae17"}, &(0x7f0000000e00)={0x20, 0x85, 0x3, "b9565a"}}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x40048c67) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000005c0)={0x27800000000, 0x0, 0x1, r7, 0x1}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x2000005, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r9}}]}}) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x40) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000740)='.log\x00', 0x181141, 0x9c37611dc13d0d2b) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB='\a'], 0x0) fchown(r10, 0x0, 0xee01) capset(&(0x7f0000000780)={0x19980330}, &(0x7f00000007c0)={0x1, 0x200003, 0x0, 0x0, 0x7, 0x3}) r12 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000940)={0x41, 0x2}, 0x10) r13 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000f80)={0x41, 0x4}, 0x10) 4.266555227s ago: executing program 2 (id=48): lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00') (async) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x80) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x210802, 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000180)={0x103, 0x29, 0x2, {0x100, [{{0x8, 0x1, 0x8}, 0x5, 0xb, 0x7, './file0'}, {{0x350f43301d266e88, 0x1, 0x7}, 0x39b6, 0x4e, 0x7, './file0'}, {{0x80, 0x2, 0x4}, 0x79, 0x4, 0x7, './file1'}, {{0x10, 0x2, 0x4}, 0x7d, 0x1, 0x7, './file0'}, {{0x8, 0x0, 0x2}, 0x5, 0xe3, 0x7, './file0'}, {{0x40, 0x0, 0x6}, 0x0, 0x8, 0x7, './file1'}, {{0x80, 0x1, 0x3}, 0x7ff, 0x9, 0x7, './file0'}, {{0x1, 0x2}, 0xfffffffffffffffd, 0xa4, 0x7, './file0'}]}}, 0x103) io_setup(0x4, &(0x7f00000002c0)) (async) r4 = syz_ublk_setup_io_uring(0x79f5, &(0x7f0000000300)={0x0, 0xd7f8, 0x1000, 0x1, 0x183}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) syz_ublk_setup_io_uring(0x40a3, &(0x7f0000000440)={0x0, 0x1063, 0x400, 0x1, 0x380, 0x0, r4}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r5, &(0x7f0000000580)="3f4ed98f469c345dbbcc47d4a819457e08ad06e8bfdec1808205c54bb226c8f378ce4a8bb025169b99c062bf2fe680f46e258d7967d70e1afc7be59abe56b0043dadfddd50cf1f35301ae8e99b330dc8df1a6198e3d32e33b04c16b809e36c919c807daa51f21c70ab64e8014aa2c9eba764", 0x72, 0x4800, 0x0, 0x0) (async, rerun: 64) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000600), 0x280080, 0x0) (async, rerun: 64) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000680)="0d622a4f90e420922508f2e512185a1bdffc95e291890400885c6cd7d1269a120caa9321b2a54194f1c728475e9a3572d7954e042bf7a430b4fc34788d91251e9f0c0540b84aeba0c291363e5013a04fc6a6539708b4e431fc7aba9c0411d1906bf9931117ae018bb8", 0x69) (async) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000000800)={r2, &(0x7f0000000700)='/dev/kvm\x00', 0x0, &(0x7f0000000740)={@_ha_fsid={[0x9, 0xc]}, {0x199f, 0x1, 0x7, 0x100}}, 0x3ff, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)=0x8}) (async, rerun: 64) bind$inet(r7, &(0x7f0000000840)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) (async, rerun: 64) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880), 0x2000, 0x0) ioctl$FICLONE(r6, 0x40049409, r9) (async) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000008c0)) (async) inotify_init1(0x80800) (async) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40103d0b, &(0x7f0000000900)={0xe336, 0xd}) (async, rerun: 64) sendmsg$802154_dgram(r7, &(0x7f0000000a80)={&(0x7f0000000940)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000a40)={&(0x7f0000000980)="469daf964a78743139935bea532b7765540286bff92d27f2eb4d70d702d7ff38aab0074be70e7e5721dd088a65d901164778d413a35ea7445185927e8136d36a02ee903b7ff0429abba13bc7ef3798e40d0cf96498384ef9e73d6cc7277f6a6544c4d30b188d0b3640dc197e97dcacf6b7b1edd63af2c4dfa8bb31d59c561572c33c2a3a0d76b6a616a4589bc764b091b4d6c221cd9c50a1f9bb54e1635d61ca20a3f611d4c3e3f7fcdbb8aebf823cd8b535", 0xb2}, 0x1, 0x0, 0x0, 0x10}, 0x24000880) (async, rerun: 64) openat$cgroup_ro(r8, &(0x7f0000000ac0)='memory.stat\x00', 0x0, 0x0) (async) r10 = openat(0xffffffffffffffff, &(0x7f0000000b00)='./file1\x00', 0x2000, 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pwritev(r10, &(0x7f0000001b40)=[{&(0x7f0000000b40)="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", 0x1000}], 0x1, 0x9, 0x81) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001b80)) (async) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) fcntl$setpipe(r11, 0x407, 0x89) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001e40)={0x2c, &(0x7f0000001c00)={0x40, 0xb, 0xdf, {0xdf, 0x3, "31c8c6c3f807e8419a102cd247f02f861b2092f478e09e0a950d4ddb00ccc78df079f365a4f64b07f48c18b16c315e2e3be0726b9b42a95f28fdc01f3479a00f841f2f6ac1c42aaec1b8a57329dd3b6f22d787cd0c7170263f4572a4c6dab9c3c034fcf07ded37d3cfb0a7a7b2f5e6be2b4d7beef9c5c405d234eda1090b2b1331f701f512df349ccb7080b2f644eeeb7551341f6fec9d5f4502c4b0fec03edb9fc9c024968b175e720184265cadc094b803f21ad42690a859cee044d03a9793ca869c24e15a14c6a64851f8cffc84b2df4b4088d27e5110b04feab948"}}, &(0x7f0000001d00)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "4a2c2b1eabab4aa24039310eda680f869aa14d2b074bd7a9021a4b32e4f996bbee22667408dd283a3df7d947670ecde1311203843843570ba1b33cf11af5d3feebd13949415722d395b2727c228579ded17bde78539f17c8b50a59e6b0c53151c0db0f0c0edfa4c0"}}, &(0x7f0000001d80)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xe5, 0x3, 0x291}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x6, 0x35}, @ptm_cap={0x3}]}}, &(0x7f0000001dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x5, 0x4, 0x7, "3fe0b09a", "e63e85df"}}, &(0x7f0000001e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2e, 0x80, 0x1, 0x9, 0x4, 0x401}}}, &(0x7f0000002240)={0x84, &(0x7f0000001e80)={0x0, 0xf, 0x21, "0340169c808598674654cc3dc6790748310261076cd9be7d6e0348e252f520fcf8"}, &(0x7f0000001ec0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000001f00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001f40)={0x20, 0x0, 0x4, {0x2, 0x2}}, 0xfffffffffffffffe, &(0x7f0000001f80)={0x40, 0x7, 0x2}, &(0x7f0000001fc0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002000)={0x40, 0xb, 0x2, "ad3f"}, &(0x7f0000002040)={0x40, 0xf, 0x2, 0x5bae}, &(0x7f0000002080)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000020c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002100)={0x40, 0x19, 0x2, "24e5"}, &(0x7f0000002140)={0x40, 0x1a, 0x2, 0x243}, &(0x7f0000002180)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000021c0)={0x40, 0x1e, 0x1, 0x11}, &(0x7f0000002200)={0x40, 0x21, 0x1, 0x8}}) 4.199600544s ago: executing program 1 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x10083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40086610, &(0x7f0000000680)=@v2={0x2, @aes256, 0x8, '\x00', @c}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r1, 0x0, 0x0) statx(r1, &(0x7f0000000040)='./dev/sda1\x00', 0x2000, 0x10, &(0x7f0000000080)) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000006c0)={0x10, 0x0, "cd6354aaf48bd635ea1ffc70164cafa0"}) 3.703842274s ago: executing program 2 (id=50): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r3 = dup(r2) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, 0x0) (async) connect$can_bcm(r0, &(0x7f0000000e00)={0x1d, r1}, 0x10) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (rerun: 64) sendmsg$can_bcm(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x1, 0xc91, 0x81, {r4, r5/1000+60000}, {}, {}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3c, 0x1, 0x0, 0x0, "269808448093e9b3c65a0f07cb5908d4d47e130b2dcadaa851034cf176d860393ab3b400f3bfefc9578febc2e73a43f9e1cdc4dbf638ad0229fb802ddaca30f8"}}, 0x80}, 0x1, 0x0, 0x0, 0x8044}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x1, 0x944, 0xffffffff, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x6f, 0x3, 0x0, 0x0, "f1b68c3e70a5d4bb02ab9dd1826faf62d4bcfd6c350a928a417ccf61f72b6378965ff4776ad1e8e0b6d8bc529caeb5e8ff90381a02e9b1826bd45bc45cb236d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8050) 3.622787462s ago: executing program 2 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) r0 = gettid() timer_create(0x0, &(0x7f00000021c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000002200)) timer_settime(0x0, 0x0, &(0x7f0000002240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000022c0)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000002300)={0x28, 0x0, 0x2710, @local, 0x1}, 0x10) (async) recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002500)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r2, 0x0) timer_create(0xd53fd0dbe4c4b1b3, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2020) (async) r4 = fsopen(&(0x7f0000002280)='devtmpfs\x00', 0x0) (async) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000025c0)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b3400000000000000000000092403000000000000092405009917211cfd0924030500000004000724050401", @ANYRES16, @ANYRES8], 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000002580)=@v1={0x0, @adiantum, 0x11, @desc1}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000002400)='rootcontext\xf3\xa0n\xaa\xa5m\xb5\xc6\x9f\x9f\x17\xac\x962v\xf2\x02a\xcc\x06\x00\x00\x00\xe4\x95\xf5\r\xe3c\x19\x18\v*\x88\x84\xf8[\xa97\xe7\'@\xb0\xdbbJ\x0f\xa9\xd9\x91\x9d\x85~7M\xe2\xde\xcb\xb1$\xfa\xba\xc7\x84\xcb\x95\xb7\b\xde\x9c\x8e\tvnU\xca \x9c5\x1dRa4\xda\xbb\xe6f*\xe8\x19\x02+\xa4kg\xa0\x1c\x06\r\xa0\x02C\xce5\xf5\x15\x8a\x88\xd4\xd3\xcf\xb8\x1e\x8c\x1dyO\x8a\x02\x02\x00\x00\x00\x00\x00\x00\x00\x99!\xf1\xb7S\xdb\xcd\xc7\n\xa0g\x18`z\x04\xcf\x80]6\xafL\x13fy\xad#8\x9c\xae\xc4\x00\x01\xed\x04^m%M\x9d\xed\x10\xa8\x1c\xbc_\xd1}=s\xd5\xc2\x92\xdd\xed\x11\xd5', &(0x7f00000023c0)='\x06\x00\x00\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x8000000000000000, 0x3a, 'z', 0x3a, '&!', 0x3a, './file0'}, 0x2a) 3.374124857s ago: executing program 0 (id=52): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x17, 0x2, "25b9"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_io_uring_setup(0xf03, &(0x7f00000001c0)={0x0, 0x79ff, 0x81, 0xffffffff, 0x34a}, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) (async) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000003c0), 0x4) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120001000000000000000000020000004e214e207f0000010000000000000000000000007f00000100"/56, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff"], 0x4c}}, 0x0) munmap$IORING_OFF_CQ_RING(r2, 0x48000) (async) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)={0x40, 0x10, 0x2, "1550"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@remote, @in=@private=0xa010100, @in=@loopback, @in=@empty, 0x3c, 0x0, 0x0, 0x20, 0xa, 0xa}]}]}, 0xa0}}, 0x0) 3.189735556s ago: executing program 1 (id=53): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r0 = syz_usb_connect$uac3(0x0, 0x9d, &(0x7f0000000780)=ANY=[@ANYBLOB="12010002000000083512100040000102030109028b000301071001080b0002010030080904000000010130000a24010e270002000080132403030703060604060000000500050003002a24050603"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120101020000d8010e0bffff40000102030109020700010101a00409040005010301018709210600020122bc0c090581031000063f0d"], 0x0) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000008c0)={0x2c, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000680)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000006c0)=0x4) pwritev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="002145000014000b0000b50600000a0000010a0000feff79005000500000000200000002601003e8000000", 0x2b}], 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000021000100000000000400000020010000000000000000000000000000fc0200000000000000000000000000000000fffc000000000a0000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e2ff7f00000000005000110000000000000000000000000000000001ac1414aa000000000000000000000000fc01000000000000000000000000000100000000004000000000ffffac1414bb6c010000033d00000a000200a4d2cb8e94f37b437de8385565b61544dcd164487daa7b04a4ac4461a24b3685083b4c8cfca36ad4eef7673c8b46a36320ddb9031ac9f9536ee10556bc6fe57573b82beabd9ecb6fec065926e994cdd79854acbf9646e93aca1d45e297179a20ee2a8644de37357c6a20fb3ab5f45e4dd95baf96a414a0127276c9f3cdd027d51c8a"], 0xa0}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x40200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000600)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000640)={0x2, 0x4e21, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newsa={0x23c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xa0}, {@in=@broadcast, 0x4d4, 0x32}, @in6=@private2, {0x2, 0x9, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0xa, 0x4, 0x0, 0x50}, [@algo_auth={0x103, 0x1, {{'sha3-256-ce\x00'}, 0x5d8, "3a37b1e0251098d52e6b360bdd0d7fb934d761e96be17bbe13e24e3cd38b62f5ccb12ee9115e8b8600452748bcd2a97b2e436659cda1243ab487e4e1e3f7f60bfa9164fbd3ce11d81528bd1a63c31922070379d24d47282c181b26e0f547704323236b367f30bc9876528103640bbe8aeb8fcbb7fe2d772daefcf1313faa3d1cd7bd54bbb3f4b368f1c2b96d7cdca8e930f825cc841ad3f356bc32bfb8efa613082b25c530d513cbe2b1f12dbc158f24edef16ab9572f89dca19bd"}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0x40082) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) 3.083706107s ago: executing program 3 (id=54): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x2}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1366}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7ec}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) getgroups(0x2, &(0x7f0000000180)=[0x0, 0x0]) setresgid(r3, r2, 0x0) setregid(0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="1c0000001200050f0c1000000049b23e9b200a00080012c000000001", 0x1c, 0x0, 0x0, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ftruncate(0xffffffffffffffff, 0x1) mremap(&(0x7f000082c000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000175000/0x2000)=nil) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000140)=0x0) fcntl$lock(r6, 0x6, &(0x7f0000000080)={0x1, 0x2, 0x7fffffffffffffff, 0x1fd, r7}) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000ffdbdf351400000008000300", @ANYRES32=r12, @ANYBLOB="0a0006040000000000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x4008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x50, r8, 0x100000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000001c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = syz_open_dev$usbfs(&(0x7f0000000580), 0x206, 0x20982) ioctl$USBDEVFS_ALLOW_SUSPEND(r13, 0x5522) ioctl$USBDEVFS_WAIT_FOR_RESUME(r13, 0x5523) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x17fc) 2.907262655s ago: executing program 3 (id=55): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x23, @string={0x23, 0x3, "d318c666a2ee76b79d11c3f43ef3bedd860b273448dae468ec760fb8c9e90aea46"}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000600)={0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="009aed3c0000000000000000"], 0x0}, 0x0) 2.591012507s ago: executing program 0 (id=56): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e23, 0x80, @empty, 0x2}, {0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1, {[0xf, 0x6, 0x2bab, 0x0, 0x5, 0x4, 0x6, 0x5]}}, 0x5c) stat(0x0, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x48080) mkdir(&(0x7f00000000c0)='./bus\x00', 0xde) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000300)=0x9, 0x12) mknodat$null(r2, 0x0, 0x8000, 0x103) socket$pptp(0x18, 0x1, 0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@nfs_export_on}, {@index_off}]}) ioctl$RTC_PIE_OFF(r1, 0x7006) 2.515027215s ago: executing program 32 (id=56): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e23, 0x80, @empty, 0x2}, {0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1, {[0xf, 0x6, 0x2bab, 0x0, 0x5, 0x4, 0x6, 0x5]}}, 0x5c) stat(0x0, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x48080) mkdir(&(0x7f00000000c0)='./bus\x00', 0xde) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000300)=0x9, 0x12) mknodat$null(r2, 0x0, 0x8000, 0x103) socket$pptp(0x18, 0x1, 0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@nfs_export_on}, {@index_off}]}) ioctl$RTC_PIE_OFF(r1, 0x7006) 2.301494396s ago: executing program 2 (id=58): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000440)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000600)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x3, 0xac, {0xac, 0xc, "a6e275078ee9d2efdb2bac5f15f4e337d18ea52329444bcd11f0ce77d1582938156599d62d37f1458ef423ee965b99007fa265c76242845b43e8dfd78083453b2cf2c0e265e725e20bbefac431fa4ede352e66662611610c29b2c45f62dee506ef59e4ba4a32062228df45ff2203e4d2aefa1380c8189bf583b089b409ac2428ab6c5d9468ae0557d2afdd281b349ee2a3201e739d8cb560b0fc5a901ab12ed36f6e43d36abf8de82e9b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x6, "eb24dd39465f"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xfe}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x800, 0xfff5, 0x6, 0x0, 0x8aef, 0x5, 0x2, 0x1000, 0x3, 0x1, 0x34, 0x93e5}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000640)={0x20, 0x83, 0x2}, &(0x7f0000000680)={0x20, 0x87, 0x2}, &(0x7f00000006c0)={0x20, 0x89, 0x2}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000800)={0x40, 0x7, 0x4, "a80c3ab8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x40, 0xb, 0x2, "9466"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "6997"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x1}, 0x0, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x53}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x6}}) 1.919657615s ago: executing program 4 (id=57): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) connect$inet6(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.900115567s ago: executing program 4 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x8, &(0x7f0000000040)) chdir(&(0x7f0000000200)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0xe3) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='./dev/sda1\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000680)='./mnt\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1/file2\x00', 0x1000, 0x0) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000007c0), 0xa, 0x62080) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000800)={0x1, 0x100, 0x7}) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000a40)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x2) 1.334019915s ago: executing program 1 (id=60): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001680)=""/4102, 0x1006}, {&(0x7f00000012c0)=""/239, 0xef}], 0x2}, 0x20000}, {{0x0, 0x0, 0x0}, 0x4741}], 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x4000084) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r0) 1.268474311s ago: executing program 1 (id=61): r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000340)={0x40, 0xb, 0x9, 0x401, 0x200}) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000040)='./dev\x00', 0x101000, 0x100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x8001) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b80)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfffffefd, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x401, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x33, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x1ff, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac5, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0xaf, 0x8, 0x6, 0x1, 0x2000005, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) (async) ppoll(&(0x7f0000001000)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(r2, &(0x7f0000000740)='./mnt\x00', 0x1a6) (async, rerun: 32) mount(&(0x7f0000000a80)=@filename='./dev/sda1\x00', &(0x7f0000000ac0)='./mnt\x00', &(0x7f0000000b00)='ext4\x00', 0x8410, 0x0) (async, rerun: 32) r5 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsmount(r5, 0x1, 0x7e) (async, rerun: 32) r6 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x5, 0x2}]}]}}}], 0x18}}], 0x1, 0x40) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x8004af80, &(0x7f0000000080)) (async, rerun: 32) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda1\x00', 0x101700, 0x180) (rerun: 32) getdents(r7, &(0x7f0000000100)=""/49, 0x31) r8 = open$dir(&(0x7f0000000b40)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x40086610, 0x0) 1.18137131s ago: executing program 3 (id=62): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 381.295821ms ago: executing program 1 (id=63): setxattr$system_posix_acl(&(0x7f0000000600)='.\x00', &(0x7f0000000640)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x6142, 0xbc) mkdir(&(0x7f0000000080)='./bus\x00', 0xde) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x8, &(0x7f0000000980)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f00000009c0)='./bus\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000a40)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x114) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='27', 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000200)=0x28) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000740)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000007c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000800)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1d0) prctl$PR_SET_MM_AUXV(0x3c, 0xc, &(0x7f0000000500)="db", 0x1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="10002cbd7000fedbdf250300000005009b0c93de00000500050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000002}, 0x90) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) unlink(&(0x7f00000001c0)='./file0/file1\x00') 0s ago: executing program 1 (id=64): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) (async) listen(r0, 0x0) clock_gettime(0x3, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={r1, r2/1000+60000}, 0x10) (async) accept4(r0, 0x0, 0x0, 0x80000) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x154}}, 0x10) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 29.910691][ T36] audit: type=1400 audit(1794030138.610:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.933775][ T36] audit: type=1400 audit(1794030138.640:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.936818][ T287] cgroup: Unknown subsys name 'net' [ 29.961732][ T36] audit: type=1400 audit(1794030138.660:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.962201][ T287] cgroup: Unknown subsys name 'devices' [ 30.086534][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.092216][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.248623][ T36] audit: type=1400 audit(1794030138.950:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.271907][ T36] audit: type=1400 audit(1794030138.950:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.296910][ T36] audit: type=1400 audit(1794030138.950:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.321903][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.330764][ T36] audit: type=1400 audit(1794030139.030:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.356600][ T36] audit: type=1400 audit(1794030139.030:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.360163][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.383133][ T36] audit: type=1400 audit(1794030139.060:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.416549][ T36] audit: type=1400 audit(1794030139.060:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.768989][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.776194][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.783334][ T294] bridge_slave_0: entered allmulticast mode [ 31.789885][ T294] bridge_slave_0: entered promiscuous mode [ 31.796633][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.803707][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.810862][ T294] bridge_slave_1: entered allmulticast mode [ 31.817362][ T294] bridge_slave_1: entered promiscuous mode [ 31.849432][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.856544][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.863634][ T297] bridge_slave_0: entered allmulticast mode [ 31.870455][ T297] bridge_slave_0: entered promiscuous mode [ 31.879906][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.887041][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.894170][ T297] bridge_slave_1: entered allmulticast mode [ 31.900589][ T297] bridge_slave_1: entered promiscuous mode [ 31.944594][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.951708][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.958892][ T296] bridge_slave_0: entered allmulticast mode [ 31.965251][ T296] bridge_slave_0: entered promiscuous mode [ 31.971702][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.978906][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.986057][ T295] bridge_slave_0: entered allmulticast mode [ 31.992348][ T295] bridge_slave_0: entered promiscuous mode [ 31.999022][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.006123][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.013224][ T295] bridge_slave_1: entered allmulticast mode [ 32.019630][ T295] bridge_slave_1: entered promiscuous mode [ 32.025867][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.033020][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.040280][ T296] bridge_slave_1: entered allmulticast mode [ 32.046681][ T296] bridge_slave_1: entered promiscuous mode [ 32.201372][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.208491][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.215857][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.222933][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.236455][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.243543][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.250952][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.258057][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.280312][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.287535][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.294865][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.301924][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.335757][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.342848][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.350180][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.357282][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.381599][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.389445][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.397118][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.404862][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.412315][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.419753][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.427164][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.434503][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.453704][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.460824][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.473239][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.480359][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.495626][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.502736][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.510878][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.517986][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.525713][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.532791][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.544811][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.551905][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.561717][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.568830][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.585836][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.592977][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.650816][ T296] veth0_vlan: entered promiscuous mode [ 32.657650][ T294] veth0_vlan: entered promiscuous mode [ 32.677509][ T297] veth0_vlan: entered promiscuous mode [ 32.691601][ T296] veth1_macvtap: entered promiscuous mode [ 32.701980][ T295] veth0_vlan: entered promiscuous mode [ 32.718184][ T294] veth1_macvtap: entered promiscuous mode [ 32.733618][ T297] veth1_macvtap: entered promiscuous mode [ 32.757284][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.774900][ T295] veth1_macvtap: entered promiscuous mode [ 32.797023][ T312] overlayfs: missing 'lowerdir' [ 32.870509][ T322] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 32.880287][ T322] SELinux: failed to load policy [ 32.889643][ T320] SELinux: failed to load policy [ 32.949152][ T335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.053267][ T335] syzkaller1: entered promiscuous mode [ 33.059072][ T335] syzkaller1: entered allmulticast mode [ 33.109685][ T334] syz.3.9 (334): drop_caches: 3 [ 33.114695][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.124116][ T319] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.234203][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.264079][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 33.270616][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.281220][ T319] usb 1-1: Using ep0 maxpacket: 8 [ 33.286796][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.299507][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.310380][ T319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.320908][ T319] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.330159][ T10] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 33.343702][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.350500][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 33.359784][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.368398][ T319] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 33.368693][ T344] ======================================================= [ 33.368693][ T344] WARNING: The mand mount option has been deprecated and [ 33.368693][ T344] and is ignored by this kernel. Remove the mand [ 33.368693][ T344] option from the mount to silence this warning. [ 33.368693][ T344] ======================================================= [ 33.380533][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.421151][ T10] usb 2-1: config 0 descriptor?? [ 33.427567][ T319] usb 1-1: Product: syz [ 33.433511][ T319] usb 1-1: Manufacturer: syz [ 33.438358][ T319] usb 1-1: SerialNumber: syz [ 33.438453][ T310] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.456029][ T310] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.462707][ T310] usb 3-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00 [ 33.473072][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.482405][ T310] usb 3-1: config 0 descriptor?? [ 33.512123][ T342] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 33.683547][ T317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.692190][ T317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.692694][ T336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.709536][ T336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.715480][ T319] usb 1-1: selecting invalid altsetting 1 [ 33.834821][ T10] logitech-djreceiver 0003:046D:C53A.0001: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 33.908895][ T319] usb 1-1: cannot request logical cluster ID: 0 (err: -5) [ 33.918011][ T319] usb 1-1: invalid MIXER UNIT descriptor 6 [ 33.926660][ T319] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 33.951528][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.024168][ T45] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 34.175923][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.184480][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 34.192315][ T45] usb 4-1: no configurations [ 34.197084][ T45] usb 4-1: can't read configurations, error -22 [ 34.285200][ T67] usb 1-1: USB disconnect, device number 2 [ 34.324396][ T45] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 34.475524][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.483723][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 34.491834][ T45] usb 4-1: no configurations [ 34.496594][ T45] usb 4-1: can't read configurations, error -22 [ 34.503089][ T45] usb usb4-port1: attempt power cycle [ 34.826536][ T359] overlay: filesystem on ./bus not supported as upperdir [ 34.844507][ T45] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 34.869234][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.877517][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 34.885396][ T45] usb 4-1: no configurations [ 34.890054][ T45] usb 4-1: can't read configurations, error -22 [ 35.024113][ T45] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 35.046158][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.054330][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 35.062123][ T45] usb 4-1: no configurations [ 35.066965][ T45] usb 4-1: can't read configurations, error -22 [ 35.073429][ T45] usb usb4-port1: unable to enumerate USB device [ 35.114129][ T319] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.264180][ T319] usb 1-1: Using ep0 maxpacket: 8 [ 35.270568][ T319] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 35.278964][ T319] usb 1-1: config 0 has no interface number 0 [ 35.286518][ T319] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 35.295654][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.303707][ T319] usb 1-1: Product: syz [ 35.308042][ T319] usb 1-1: Manufacturer: syz [ 35.312682][ T319] usb 1-1: SerialNumber: syz [ 35.318256][ T319] usb 1-1: config 0 descriptor?? [ 35.376491][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 35.376509][ T36] audit: type=1400 audit(1794030144.080:154): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.412385][ T36] audit: type=1400 audit(1794030144.110:155): avc: denied { create } for pid=367 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.431953][ T36] audit: type=1400 audit(1794030144.110:156): avc: denied { create } for pid=367 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.451357][ T36] audit: type=1400 audit(1794030144.140:157): avc: denied { map } for pid=367 comm="syz.1.18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.475520][ T36] audit: type=1400 audit(1794030144.140:158): avc: denied { read write } for pid=367 comm="syz.1.18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.500129][ T36] audit: type=1400 audit(1794030144.140:159): avc: denied { map } for pid=367 comm="syz.1.18" path="socket:[4289]" dev="sockfs" ino=4289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 35.525310][ T319] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 35.531910][ T319] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 35.545115][ T319] usb 1-1: USB disconnect, device number 3 [ 35.552741][ T36] audit: type=1400 audit(1794030144.250:160): avc: denied { create } for pid=369 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.590715][ T36] audit: type=1400 audit(1794030144.250:161): avc: denied { write } for pid=369 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.611124][ T36] audit: type=1400 audit(1794030144.250:162): avc: denied { write } for pid=369 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.912249][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 35.918629][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 35.926773][ T10] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 35.935485][ T310] usb 3-1: USB disconnect, device number 2 [ 36.054549][ T36] audit: type=1400 audit(1794030144.760:163): avc: denied { read write } for pid=379 comm="syz.0.23" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.081872][ T380] SELinux: failed to load policy [ 36.094594][ T10] usb 2-1: device firmware changed [ 36.100047][ T353] usb 2-1: USB disconnect, device number 2 [ 36.234152][ T353] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.264147][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.344107][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.384147][ T353] usb 2-1: Using ep0 maxpacket: 16 [ 36.391819][ T353] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 36.401103][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.409482][ T353] usb 2-1: Product: syz [ 36.413857][ T353] usb 2-1: Manufacturer: syz [ 36.418567][ T353] usb 2-1: SerialNumber: syz [ 36.423983][ T353] usb 2-1: config 0 descriptor?? [ 36.430274][ T353] usb-storage 2-1:0.0: USB Mass Storage device detected [ 36.437850][ T310] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 36.449521][ T310] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 36.450069][ T353] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 36.468775][ T310] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.481716][ T310] usb 3-1: config 0 interface 0 has no altsetting 0 [ 36.488497][ T310] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 36.497653][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.507921][ T310] usb 3-1: config 0 descriptor?? [ 36.513464][ T378] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 36.521166][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 36.530293][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.541608][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 36.551811][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 36.561791][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 36.575701][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.584830][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.592870][ T45] usb 1-1: SerialNumber: syz [ 36.598832][ T382] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 36.606364][ T382] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 36.614508][ T45] hub 1-1:1.0: bad descriptor, ignoring hub [ 36.620509][ T45] hub 1-1:1.0: probe with driver hub failed with error -5 [ 36.628051][ T45] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 36.631265][ T353] usb 2-1: USB disconnect, device number 3 [ 36.816719][ T45] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 36.844735][ T45] usb 1-1: USB disconnect, device number 4 [ 36.930136][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 36.936414][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 36.946373][ T310] usb 3-1: USB disconnect, device number 3 [ 37.194301][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 37.344092][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 37.354918][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.365228][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.377914][ T31] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 37.386307][ T409] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.387745][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.407290][ T31] usb 4-1: Product: syz [ 37.411542][ T31] usb 4-1: Manufacturer: syz [ 37.416651][ T31] usb 4-1: SerialNumber: syz [ 37.624993][ T387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.634520][ T387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.643539][ T31] usb 4-1: selecting invalid altsetting 1 [ 37.650615][ T424] mmap: syz.0.33 (424) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.676026][ T424] netlink: 76 bytes leftover after parsing attributes in process `syz.0.33'. [ 37.754108][ T436] netlink: 'syz.0.35': attribute type 16 has an invalid length. [ 37.765297][ T436] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.35'. [ 37.775855][ T436] netlink: 'syz.0.35': attribute type 16 has an invalid length. [ 37.783575][ T436] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.35'. [ 37.793410][ T436] netlink: 'syz.0.35': attribute type 16 has an invalid length. [ 37.804902][ T436] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.35'. [ 37.814316][ T436] netlink: 'syz.0.35': attribute type 16 has an invalid length. [ 37.822000][ T436] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.35'. [ 37.831475][ T436] netlink: 'syz.0.35': attribute type 16 has an invalid length. [ 37.839334][ T436] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.35'. [ 37.849616][ T31] usb 4-1: cannot request logical cluster ID: 0 (err: -5) [ 37.860652][ T31] usb 4-1: invalid MIXER UNIT descriptor 6 [ 37.868896][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 37.884548][ T436] netlink: 'syz.0.35': attribute type 16 has an invalid length. [ 37.892289][ T436] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.35'. [ 37.894463][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.922831][ T436] netlink: 'syz.0.35': attribute type 16 has an invalid length. [ 37.931280][ T436] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.35'. [ 37.940643][ T436] netlink: 'syz.0.35': attribute type 16 has an invalid length. [ 37.948581][ T436] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.35'. [ 37.957988][ T436] netlink: 'syz.0.35': attribute type 16 has an invalid length. [ 37.966730][ T436] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.35'. [ 37.976209][ T436] netlink: 'syz.0.35': attribute type 16 has an invalid length. [ 38.161875][ T453] fuse: Unknown parameter 'b' [ 38.167542][ T67] usb 4-1: USB disconnect, device number 6 [ 38.305341][ T459] overlayfs: failed to resolve './file0/file0': -2 [ 38.380252][ T470] binder: Binderfs stats mode cannot be changed during a remount [ 38.495266][ T473] overlayfs: missing 'lowerdir' [ 38.710696][ T481] SELinux: failed to load policy [ 38.959070][ T483] overlayfs: workdir and upperdir must reside under the same mount [ 38.984081][ T67] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 39.145315][ T67] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 39.156524][ T67] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.170169][ T67] usb 4-1: config 0 interface 0 has no altsetting 0 [ 39.176922][ T67] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 39.186145][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.196298][ T67] usb 4-1: config 0 descriptor?? [ 39.203523][ T485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 39.418057][ T483] overlayfs: workdir and upperdir must reside under the same mount [ 39.618689][ T67] zydacron 0003:13EC:0006.0002: unbalanced collection at end of report description [ 39.629015][ T67] zydacron 0003:13EC:0006.0002: parse failed [ 39.635157][ T67] zydacron 0003:13EC:0006.0002: probe with driver zydacron failed with error -22 [ 39.831792][ T485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.841385][ T485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.906029][ T485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.921960][ T485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.933631][ T485] capability: warning: `syz.3.45' uses 32-bit capabilities (legacy support in use) [ 39.985472][ T67] usb 4-1: USB disconnect, device number 7 [ 40.246558][ T483] overlayfs: workdir and upperdir must reside under the same mount [ 40.264692][ T520] EXT4-fs warning (device sda1): ext4_resize_fs:2019: can't read last block, resize aborted [ 40.332200][ T353] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 40.339704][ T521] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 40.446732][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 40.446750][ T36] audit: type=1400 audit(1794030149.150:209): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.505172][ T353] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 40.515588][ T353] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.534772][ T353] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 40.544227][ T353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 40.552457][ T36] audit: type=1400 audit(1794030149.250:210): avc: denied { write } for pid=524 comm="syz.3.54" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.575271][ T353] usb 3-1: SerialNumber: syz [ 40.582425][ T353] usb 3-1: 0:2 : does not exist [ 40.587638][ T353] usb 3-1: unit 255 not found! [ 40.598663][ T527] SELinux: policydb magic number 0x2e757063 does not match expected magic number 0xf97cff8c [ 40.617523][ T527] SELinux: failed to load policy [ 40.726632][ T67] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.795476][ T514] devtmpfs: Unknown parameter 'rootcontextó nª¥mµÆŸŸ¬–2vòaÌ' [ 40.816052][ T353] usb 3-1: USB disconnect, device number 4 [ 40.894042][ T67] usb 2-1: Using ep0 maxpacket: 8 [ 40.913399][ T67] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.923755][ T67] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.942758][ T67] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 40.952060][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.960181][ T67] usb 2-1: Product: syz [ 40.964498][ T67] usb 2-1: Manufacturer: syz [ 40.969137][ T67] usb 2-1: SerialNumber: syz [ 41.004083][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.045675][ T50] bridge_slave_1: left allmulticast mode [ 41.051634][ T50] bridge_slave_1: left promiscuous mode [ 41.057371][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.065189][ T50] bridge_slave_0: left allmulticast mode [ 41.070880][ T50] bridge_slave_0: left promiscuous mode [ 41.076907][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.154077][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 41.160932][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.169749][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 41.182185][ T523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.194061][ T31] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 41.204129][ T523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.212047][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.220775][ T31] usb 4-1: Product: syz [ 41.221114][ T50] veth1_macvtap: left promiscuous mode [ 41.224800][ T67] usb 2-1: selecting invalid altsetting 1 [ 41.234349][ T50] veth0_vlan: left promiscuous mode [ 41.242599][ T31] usb 4-1: Manufacturer: syz [ 41.247473][ T31] usb 4-1: SerialNumber: syz [ 41.374621][ T531] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.381751][ T531] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.388947][ T531] bridge_slave_0: entered allmulticast mode [ 41.395509][ T531] bridge_slave_0: entered promiscuous mode [ 41.402423][ T531] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.409601][ T531] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.416782][ T531] bridge_slave_1: entered allmulticast mode [ 41.421986][ T67] usb 2-1: cannot request logical cluster ID: 0 (err: -5) [ 41.424389][ T531] bridge_slave_1: entered promiscuous mode [ 41.431576][ T67] usb 2-1: invalid MIXER UNIT descriptor 6 [ 41.446681][ T67] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 41.458057][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.474954][ T31] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 41.483269][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 41.531090][ T531] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.538238][ T531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.545593][ T531] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.552656][ T531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.582066][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.589267][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.597129][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.607473][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.614594][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.624138][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.631394][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.666951][ T531] veth0_vlan: entered promiscuous mode [ 41.674942][ T31] usb 4-1: 2:1 : can't get High Capability descriptor [ 41.685104][ T531] veth1_macvtap: entered promiscuous mode [ 41.724127][ T45] usb 3-1: device descriptor read/64, error -71 [ 41.741492][ T540] overlayfs: missing 'lowerdir' [ 41.784855][ T31] usb 2-1: USB disconnect, device number 4 [ 41.876615][ T67] usb 4-1: USB disconnect, device number 8 [ 41.964160][ T45] usb 3-1: device descriptor read/64, error -71 [ 41.984080][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.144171][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 42.150556][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.160785][ T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.171783][ T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.181601][ T10] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 42.195055][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 42.201696][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 42.205062][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.211450][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.227228][ T10] usb 5-1: config 0 descriptor?? [ 42.344450][ T45] usb 3-1: device descriptor read/64, error -71 [ 42.430962][ T36] audit: type=1400 audit(1794030151.130:211): avc: denied { append } for pid=544 comm="syz.1.61" name="sda1" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.584138][ T45] usb 3-1: device descriptor read/64, error -71 [ 42.644168][ T310] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 42.658497][ T10] logitech-djreceiver 0003:046D:C53A.0003: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 42.694188][ T45] usb usb3-port1: attempt power cycle [ 42.796591][ T310] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 42.805822][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.813935][ T310] usb 4-1: Product: syz [ 42.818232][ T310] usb 4-1: Manufacturer: syz [ 42.822881][ T310] usb 4-1: SerialNumber: syz [ 43.034071][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.055455][ T45] usb 3-1: device descriptor read/8, error -71 [ 43.185192][ T45] usb 3-1: device descriptor read/8, error -71 [ 43.265368][ T36] audit: type=1400 audit(1794030151.970:212): avc: denied { unlink } for pid=553 comm="syz.1.63" name="#7" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.268439][ T554] overlay: ./file1 is not a directory [ 43.297696][ T36] audit: type=1400 audit(1794030152.000:213): avc: denied { create } for pid=553 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.297705][ T554] FAULT_INJECTION: forcing a failure. [ 43.297705][ T554] name failslab, interval 1, probability 0, space 0, times 1 [ 43.297749][ T554] CPU: 0 UID: 0 PID: 554 Comm: syz.1.63 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 43.297863][ T554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 43.297937][ T554] Call Trace: [ 43.297966][ T554] [ 43.297994][ T554] __dump_stack+0x21/0x30 [ 43.298077][ T554] dump_stack_lvl+0x140/0x1c0 [ 43.298139][ T554] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.298204][ T554] ? pcpu_block_update_hint_alloc+0x8a0/0xc50 [ 43.298279][ T554] dump_stack+0x19/0x20 [ 43.298334][ T554] should_fail_ex+0x3c2/0x510 [ 43.298396][ T554] should_failslab+0xac/0x100 [ 43.298455][ T554] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 43.298548][ T554] ? __d_alloc+0x42/0x8c0 [ 43.298633][ T554] ? expand_files+0xda/0x6f0 [ 43.298700][ T554] __d_alloc+0x42/0x8c0 [ 43.298820][ T554] d_alloc_pseudo+0x23/0xc0 [ 43.298898][ T554] alloc_file_pseudo+0xde/0x1f0 [ 43.298981][ T554] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 43.299055][ T554] ? _raw_spin_unlock+0x45/0x60 [ 43.299129][ T554] sock_alloc_file+0xbe/0x2b0 [ 43.299192][ T554] __sys_socket+0x14c/0x1c0 [ 43.299272][ T554] __x64_sys_socket+0x7e/0x90 [ 43.299359][ T554] x64_sys_call+0x2608/0x2ee0 [ 43.299418][ T554] do_syscall_64+0x57/0xf0 [ 43.299482][ T554] ? clear_bhb_loop+0x50/0xa0 [ 43.299569][ T554] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.299664][ T554] RIP: 0033:0x7f807b39fb19 [ 43.299753][ T554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.299807][ T554] RSP: 002b:00007f807c21e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 43.299885][ T554] RAX: ffffffffffffffda RBX: 00007f807b625fa0 RCX: 00007f807b39fb19 [ 43.299941][ T554] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 43.299983][ T554] RBP: 00007f807b437b70 R08: 0000000000000000 R09: 0000000000000000 [ 43.300019][ T554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.300061][ T554] R13: 00007f807b626038 R14: 00007f807b625fa0 R15: 00007ffe0ce6b098 [ 43.300114][ T554] [ 43.356260][ T555] overlayfs: workdir and upperdir must reside under the same mount [ 43.357757][ T36] audit: type=1400 audit(1794030152.060:214): avc: denied { mounton } for pid=553 comm="syz.1.63" path="/17/file0" dev="incremental-fs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.480802][ T310] rtl8150 4-1:1.0: couldn't reset the device [ 43.493680][ T36] audit: type=1400 audit(1794030152.060:215): avc: denied { getattr } for pid=553 comm="syz.1.63" name="/" dev="incremental-fs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 43.506102][ T310] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 43.512422][ T36] audit: type=1400 audit(1794030152.110:216): avc: denied { write } for pid=553 comm="syz.1.63" name="/" dev="incremental-fs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.544470][ T310] usb 4-1: USB disconnect, device number 9 [ 43.551609][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.588169][ T36] audit: type=1400 audit(1794030152.110:217): avc: denied { remove_name } for pid=553 comm="syz.1.63" name="file1" dev="incremental-fs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.626295][ T45] usb 3-1: device descriptor read/8, error -71 [ 43.636398][ T36] audit: type=1400 audit(1794030152.110:218): avc: denied { unlink } for pid=553 comm="syz.1.63" name="file1" dev="incremental-fs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.700262][ T296] ------------[ cut here ]------------ [ 43.705966][ T296] WARNING: CPU: 1 PID: 296 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 43.715387][ T296] Modules linked in: [ 43.719390][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 43.731196][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 43.741542][ T296] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 43.747351][ T296] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 6e 54 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 64 61 03 cc e8 76 97 3d ff <0f> 0b e9 3e ff ff ff e8 6a 97 3d ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 43.767626][ T296] RSP: 0018:ffffc9000b67fb88 EFLAGS: 00010293 [ 43.773781][ T296] RAX: ffffffff824bd25a RBX: 0000000000000000 RCX: ffff888125620000 [ 43.781838][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.789912][ T296] RBP: ffffc9000b67fbb0 R08: ffff888115b40b9f R09: 1ffff11022b68173 [ 43.797974][ T296] R10: dffffc0000000000 R11: ffffed1022b68174 R12: 0000000000000000 [ 43.806050][ T296] R13: dffffc0000000000 R14: ffff888115b40b00 R15: ffff888111012990 [ 43.814164][ T296] FS: 000055555b743500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 43.823193][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.829883][ T296] CR2: 0000001b2f520ff8 CR3: 0000000121e24000 CR4: 00000000003526b0 [ 43.837931][ T296] Call Trace: [ 43.841333][ T296] [ 43.844327][ T296] ovl_do_remove+0x824/0xd10 [ 43.848970][ T296] ? ovl_set_redirect+0x780/0x780 [ 43.854073][ T296] ? __cfi_down_write+0x10/0x10 [ 43.858973][ T296] ovl_rmdir+0x1e/0x30 [ 43.863088][ T296] vfs_rmdir+0x3db/0x560 [ 43.867401][ T296] incfs_kill_sb+0x102/0x220 [ 43.872035][ T296] deactivate_locked_super+0xd5/0x270 [ 43.877483][ T296] deactivate_super+0xb8/0xe0 [ 43.882249][ T296] cleanup_mnt+0x438/0x4d0 [ 43.886939][ T296] __cleanup_mnt+0x1d/0x40 [ 43.891408][ T296] task_work_run+0x1e8/0x260 [ 43.896072][ T296] ? __cfi_task_work_run+0x10/0x10 [ 43.901246][ T296] ? __x64_sys_umount+0x12e/0x180 [ 43.906342][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 43.911767][ T296] ? __kasan_check_read+0x15/0x20 [ 43.916892][ T296] resume_user_mode_work+0x35/0x50 [ 43.922052][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 43.927790][ T296] do_syscall_64+0x63/0xf0 [ 43.932267][ T296] ? clear_bhb_loop+0x50/0xa0 [ 43.937036][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.942973][ T296] RIP: 0033:0x7f807b3a0d57 [ 43.947465][ T296] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 43.967283][ T296] RSP: 002b:00007ffe0ce6a308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 43.975800][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f807b3a0d57 [ 43.983813][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0ce6a3c0 [ 43.991883][ T296] RBP: 00007ffe0ce6a3c0 R08: 00007ffe0ce6b3c0 R09: 00000000ffffffff [ 43.999903][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0ce6b450 [ 44.007935][ T296] R13: 00007f807b436fb3 R14: 000000000000a9e2 R15: 00007ffe0ce6b490 [ 44.015956][ T296] [ 44.018982][ T296] ---[ end trace 0000000000000000 ]--- [ 44.024825][ T296] ------------[ cut here ]------------ [ 44.030338][ T296] WARNING: CPU: 0 PID: 296 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 44.039766][ T296] Modules linked in: [ 44.043695][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G W syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 44.056906][ T296] Tainted: [W]=WARN [ 44.060732][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 44.070868][ T296] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 44.076584][ T296] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 6e 54 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 64 61 03 cc e8 76 97 3d ff <0f> 0b e9 3e ff ff ff e8 6a 97 3d ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 44.096393][ T296] RSP: 0018:ffffc9000b67fb88 EFLAGS: 00010293 [ 44.102514][ T296] RAX: ffffffff824bd25a RBX: 0000000000000000 RCX: ffff888125620000 [ 44.110601][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.118696][ T296] RBP: ffffc9000b67fbb0 R08: ffff888115b40b9f R09: 1ffff11022b68173 [ 44.126756][ T296] R10: dffffc0000000000 R11: ffffed1022b68174 R12: 0000000000000000 [ 44.134855][ T296] R13: dffffc0000000000 R14: ffff888115b40b00 R15: ffff888111012990 [ 44.142878][ T296] FS: 000055555b743500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 44.151930][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.158588][ T296] CR2: 0000562f02975af8 CR3: 0000000121e24000 CR4: 00000000003526b0 [ 44.166648][ T296] Call Trace: [ 44.170001][ T296] [ 44.173065][ T296] ovl_do_remove+0x824/0xd10 [ 44.177755][ T296] ? ovl_set_redirect+0x780/0x780 [ 44.182860][ T296] ? __cfi_down_write+0x10/0x10 [ 44.187814][ T296] ovl_rmdir+0x1e/0x30 [ 44.191925][ T296] vfs_rmdir+0x3db/0x560 [ 44.196249][ T296] incfs_kill_sb+0x197/0x220 [ 44.200872][ T296] deactivate_locked_super+0xd5/0x270 [ 44.206348][ T296] deactivate_super+0xb8/0xe0 [ 44.211075][ T296] cleanup_mnt+0x438/0x4d0 [ 44.215565][ T296] __cleanup_mnt+0x1d/0x40 [ 44.220060][ T296] task_work_run+0x1e8/0x260 [ 44.224730][ T296] ? __cfi_task_work_run+0x10/0x10 [ 44.229896][ T296] ? __x64_sys_umount+0x12e/0x180 [ 44.235023][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 44.240440][ T296] ? __kasan_check_read+0x15/0x20 [ 44.245596][ T296] resume_user_mode_work+0x35/0x50 [ 44.250753][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 44.256299][ T296] do_syscall_64+0x63/0xf0 [ 44.260760][ T296] ? clear_bhb_loop+0x50/0xa0 [ 44.265618][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.271567][ T296] RIP: 0033:0x7f807b3a0d57 [ 44.276058][ T296] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 44.295780][ T296] RSP: 002b:00007ffe0ce6a308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 44.304300][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f807b3a0d57 [ 44.312304][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0ce6a3c0 [ 44.320375][ T296] RBP: 00007ffe0ce6a3c0 R08: 00007ffe0ce6b3c0 R09: 00000000ffffffff [ 44.328586][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0ce6b450 [ 44.336820][ T296] R13: 00007f807b436fb3 R14: 000000000000a9e2 R15: 00007ffe0ce6b490 [ 44.344891][ T296] [ 44.347957][ T296] ---[ end trace 0000000000000000 ]--- [ 44.427057][ T45] usb 3-1: device descriptor read/8, error -71 [ 44.434338][ T12] bridge_slave_1: left allmulticast mode [ 44.440034][ T12] bridge_slave_1: left promiscuous mode [ 44.446370][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.468055][ T12] bridge_slave_0: left allmulticast mode [ 44.473778][ T12] bridge_slave_0: left promiscuous mode [ 44.479567][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.534226][ T45] usb usb3-port1: unable to enumerate USB device [ 44.597006][ T12] veth1_macvtap: left promiscuous mode [ 44.602543][ T12] veth0_vlan: left promiscuous mode [ 44.774789][ T10] usb 5-1: USB disconnect, device number 2 [ 44.826484][ T12] bridge_slave_1: left allmulticast mode [ 44.832179][ T12] bridge_slave_1: left promiscuous mode [ 44.837922][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.846337][ T12] bridge_slave_0: left allmulticast mode [ 44.852238][ T12] bridge_slave_0: left promiscuous mode [ 44.858075][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.866269][ T12] bridge_slave_1: left allmulticast mode [ 44.871938][ T12] bridge_slave_1: left promiscuous mode [ 44.877657][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.885396][ T12] bridge_slave_0: left allmulticast mode [ 44.891067][ T12] bridge_slave_0: left promiscuous mode [ 44.896862][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.904839][ T12] bridge_slave_1: left allmulticast mode [ 44.910532][ T12] bridge_slave_1: left promiscuous mode [ 44.916363][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.923937][ T12] bridge_slave_0: left allmulticast mode [ 44.929761][ T12] bridge_slave_0: left promiscuous mode [ 44.935452][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.179714][ T12] veth1_macvtap: left promiscuous mode [ 45.185287][ T12] veth0_vlan: left promiscuous mode [ 45.190906][ T12] veth1_macvtap: left promiscuous mode [ 45.196584][ T12] veth0_vlan: left promiscuous mode [ 45.202230][ T12] veth1_macvtap: left promiscuous mode [ 45.207859][ T12] veth0_vlan: left promiscuous mode