last executing test programs: 8.37018538s ago: executing program 3 (id=9): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e043b324000010203010902600003017cc0efcd04000000010100000a240101000a0002010209040100000102000009040101010102000009050109400001f2070725010c0f04ffea040200000102000009040201010102000009058209200006ff0807250104084401"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002780)={'tunl0\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x280001, 0x0) (async, rerun: 64) sendto$packet(r0, &(0x7f00000000c0)="98e2a72937fd08a5fe0d126aff1e687ff95a60fd6a4f8c8def27bc6906ece74ef45a1ca7b6a6", 0x26, 0x4000084, &(0x7f0000002800)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (rerun: 64) r3 = dup3(r0, r0, 0x80000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20018000}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) (async, rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x480, 0x4) (rerun: 32) 7.164823253s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000440)='./bus\x00') mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x80, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r0, 0x100, 0x1) getdents64(r0, 0x0, 0x4f) 7.093839689s ago: executing program 3 (id=20): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0x76, {0x2, 0x4e24, @multicast1}, 'pimreg1\x00'}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000071c000/0x1000)=nil) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xa0402, 0x0) (async) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000180)=' ', 0x1, 0x4000e3}]) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/options/bin\x00', 0xe0202, 0x70) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x841}, 0xa4) (async) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)="7d33de23e4a6a68186b3b126bb563ee5c9aa7e8e47c43ceee2bc664604a05cc941940557b07c2a1b34e48ab7599de8a5b5c29283ec6141610a0d86b555499309514d22f25dd8103de51ec7df21853b2355712c03bdf49060ffc898e0e76b5f3640bf22e6", 0x64, 0x5, 0x0, 0x2, r3}]) 6.023995758s ago: executing program 3 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000500)={0xc1, 0x0, 0x4}) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000500)={0xc1, 0x0, 0x4}) syz_usb_connect(0x3, 0x51, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0200000000000904000005ff"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x60, &(0x7f0000000000)=@string={0x60, 0x3, "44454680cf81a7c148c33721f55936420aa9b6e6497c0225b634b52d34495af54237d423aacce3d10fa778ea52250e9ac936fb345451e805b33bb5ca51e615582dc4bc077cecc5189b87831a1e2a012cff8b53dd211c6754e346a98f7435"}}, {0x6a, &(0x7f0000000100)=@string={0x6a, 0x3, "3b85d394d28e932ec6a1c6243f8095fad4d36bd5b3cccaa3e5e1b688957f3a87ceea06cd9c83b907cdb9835d9be7b65c88356cfb45a801710a1dfe4bcb70cf19e106553ef4a4a12ec47c29efa4764fad12903597d4c1f6b18bb078156fdd727ac54ede4955e86b2e"}}, {0x102, &(0x7f00000001c0)=@string={0x102, 0x3, "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"}}, {0xa7, &(0x7f0000000300)=@string={0xa7, 0x3, "60c37e151611a5368c3214b2ba2ea9a67e922a69faf63dcc89a1f0befe8f8d4aa88b6fe57a03628c6c4fe6b7936201f857bcc6175b50534f238a04132830f4936ab9826ab2ea1858e5cc5299abb2adbbd3d6043d68f3b7853d1ac18c46f73783df545b86301370b6a0c5e719e0f3078e1a2094e52185995b43036dc6a1d266e7afd983e43bac4ce00bc11e90033abc96758195976553194846f7ebfe99a299c25f77e70955"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x427}}]}) 5.878232493s ago: executing program 0 (id=31): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/68, 0x44}], 0x1, 0x5c, 0x65a) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x5, 0x10, 0x36, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x10, 0x7, 0x80000001, 0x7e17b904}}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x30, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x36]}, &(0x7f0000000340)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x4) keyctl$get_security(0x11, r2, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000240)={0xfffffff9, {{0x2, 0x4e24, @loopback}}}, 0x88) read$rfkill(r1, &(0x7f0000000200), 0x8) 5.871734844s ago: executing program 0 (id=32): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @empty}}, 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x119) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) mkdirat(r1, &(0x7f0000000000)='./bus\x00', 0x0) syz_clone3(&(0x7f0000000180)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.447095217s ago: executing program 0 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) mkdir(&(0x7f0000000a40)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYRESDEC], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109dc8102c0c0"], 0x0}, 0x0) 4.72264578s ago: executing program 3 (id=36): socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x18f) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x18f) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda\x00', 0x42, 0x0) ioctl$BLKROSET(r0, 0x2282, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000340)=""/46, &(0x7f0000000380)=0x2e) (async) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000340)=""/46, &(0x7f0000000380)=0x2e) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104c1, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./mysys\x00', 0x8ec5d82ac9a81a9c) mount(0x0, &(0x7f00000027c0)='./mysys\x00', &(0x7f0000002800)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f00000027c0)='./mysys\x00', &(0x7f0000002800)='sysfs\x00', 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x201b06a}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x3, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}}, 0x8010) r3 = openat(0xffffffffffffff9c, &(0x7f0000002840)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000002880)={@host}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x4000) syz_clone(0x6411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000de5000/0x4000)=nil) 4.506899452s ago: executing program 3 (id=37): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002380)={0x80, 0x1000}, 0xfffffda5) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000002500)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000002640)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000002780)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000028c0)={0x24, {{0xa, 0x0, 0xfef, @mcast1={0xff, 0x7}, 0xac2f}}, {{0xa, 0x0, 0x0, @remote, 0x3}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000002a00)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002b40)={0x1, &(0x7f0000002b80)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000023c0)='./cgroup/syz0\x00', 0x1ff) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000300)=0x7) kcmp(0x0, r5, 0x4, r0, r0) write$input_event(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000002400), 0xffffffffffffff04) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1fe) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='romfs\x00', 0x18080, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x82001, 0x102) syz_open_dev$usbfs(&(0x7f0000000200), 0x9, 0x2) socket$netlink(0x10, 0x3, 0x0) 3.532810191s ago: executing program 1 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x149000, 0x19a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newsa={0x15c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@local, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0x1, 0x3, 0x0, 0x0, 0x8, 0x4, 0x9}, {0x1, 0x400800, 0x9, 0x295}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x6c, 0x2, {{'cbc(camellia)\x00'}, 0x120, "6e000b000000002000000000190000000000feffff7f00007be62a4adbb91d0dee4e9d8c"}}]}, 0x15c}}, 0x44050) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0xa, 0x7fffffff, 0x3}) 3.202653735s ago: executing program 1 (id=46): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000090b00000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) sigaltstack(&(0x7f0000000240)={&(0x7f0000000280)=""/4096, 0x1, 0x1000}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0000000000000000000000000000acfee5450d7d3695db2c14cb830a5d678a7f7ca1b0eb24b26823042bb8afec281138f0bc083994a8059a06f332254bb5be21a0d1566283067eb58b6738ac86faba8a8043aa9567444aec60e1c65c741bc4d67f50e9db0000c0d8ea1c083a28d5590781dd3a34f49a5eff7bab01699edd619812217a277d6adb06e83611f938e32975edab9827b538929c8cd0657c4fcd571a1a6800cc951d6cf24da3ebb148da21e24d5a63774c04c899c9720bc36c2efbf9a5f3206197e91b4ba90e871d3834e97257da456e7686bbdceaff62980d7ac663282f68310ebb9f35"], 0x14}}, 0x10) 3.130181211s ago: executing program 1 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000440)='./bus\x00') mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x80, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r0, 0x100, 0x1) getdents64(r0, 0x0, 0x4f) 3.129819702s ago: executing program 1 (id=48): r0 = socket(0x11, 0x3, 0x0) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4642, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x10, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x4}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000140)="7ba59ae356bb19194e32629c72417acaefd489432e934611610185dd6a069f6b17286ba967492b8d7a368dda2ef029eb643fe55bf615166ea52d8b4fe860398d7ee6301f3e9ca806a1346260166f4be0ee759f9b368a15cd4e90e38d15171da49ad506f2dc7811d94e7c0fd80718702bed62c604a4b9d914fc58077c88e4c695d1415b30c9c063cc17233a493794545f7c99935f0fca74df7333c2c79c238267083eb31ac0daa93c6e2e285f343978b614e37d8f53", 0xb5) 2.415907714s ago: executing program 0 (id=49): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syslog(0x2, &(0x7f0000000180)=""/146, 0x92) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="8f", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x18, 0x40000000}, 0xc808) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c, 0x6, 0x4, 0xc0, 0x6, 0x4, 0x1, 0x80, 0xba, 0xf, [0x3ff, 0x101, 0x2, 0x80, 0x1, 0x4, 0x3ff, 0xffffffff]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r2) recvmmsg(r0, &(0x7f0000001140), 0x71e, 0x2, 0x0) 2.117838765s ago: executing program 2 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004"], 0x54}}, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x15, 0x4, @l2={'eth', 0x3a, 'bridge0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004"], 0x54}}, 0x0) (async) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x15, 0x4, @l2={'eth', 0x3a, 'bridge0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) (async) 2.023457094s ago: executing program 2 (id=52): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x2}}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = fsopen(&(0x7f0000000500)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000540)=@get={0x1, &(0x7f0000000580)=""/4096, 0x5}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x1}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, 0xee01, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x82000, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000480)=0x40) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f00000004c0)={0x8, 0x2, 0xce, 0x9, 0x9, "7d0946376753416e6e1c697c1e877c035f8b36", 0x344, 0x7f}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r7, 0x1, 0x70bd29, 0x35dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004) write(r4, &(0x7f0000000380)="7ba75cb1e8a02cfe36da50a067156d1cf1759877c5cfc0499e136644067b143ec73213a982e73a20d06cd1a3eaf760ba3db2270f1d8359fbcb7b3b9177253f7d8db41f9d5ba442da900e25b54bcd687118e7ef9ac7e800c5467d2fd22e042a439344d2eb5c4bed2d37d096334cb2982ec154cd77d2ded11f20c6e97f7ab5d12e1a2a1df831", 0x85) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0x7, 0x4) bind$tipc(r0, 0x0, 0x0) 1.855206761s ago: executing program 2 (id=53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000006c0)=[@text32={0x20, &(0x7f0000000700)="6607388173ab0fc76fb4360fc90f01cb7666ba6bb74189000003c70fae6e2fc416610f2367260f01ca660f38817700c4c2459d78ad", 0x35}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000007c0)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x9}}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000002840)={0x1, 0x9, 0x2}) syz_open_dev$mouse(&(0x7f0000000740), 0x2, 0x8380c0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000240)={r3, &(0x7f0000000040)='/}/--#^\',\x9d-\x00', 0x94100, &(0x7f0000000200)={@_ha_fsid={[0x6, 0x9]}, {0xfff5, 0x6, 0x10, 0x7}}, 0x1b, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000280)=0x40}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000340)={0x1d, r6}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@local, 0x4e22, 0x8c0, 0x4e21, 0x200, 0xa, 0x20, 0x100, 0x4, r6, r7}, {0x9, 0x4, 0x401, 0x9, 0x8, 0xd52b, 0x81, 0x9}, {0x9, 0xe, 0x6}, 0x7ff, 0x6e6bbe, 0x1, 0x0, 0x1, 0x1}, {{@in6=@private0, 0x4d2, 0x2b}, 0xa, @in=@remote, 0x0, 0x0, 0x3, 0x8, 0x10, 0xffff, 0x3}}, 0xe8) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r9, 0x20, &(0x7f00000002c0)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) syz_memcpy_off$KVM_EXIT_MMIO(r9, 0x20, &(0x7f0000000600)="a5512570aa2413ded90f395bed192174af7a48fd30ddcd6b", 0x0, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f00000001c0)='10', 0x2) unshare(0x40000000) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r8, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f3420f21e8c481895fddf30fe69600000000f3420f09660fdb9c51000000000f01c9f3ab0f01d1f3420fc774130f2e4a0fc79a00470000", 0x37}], 0x1, 0x61, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.47425095s ago: executing program 0 (id=54): r0 = landlock_create_ruleset(&(0x7f0000000780)={0x1000, 0x2, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r2, 0x6, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) (rerun: 32) 1.312222856s ago: executing program 2 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xffffffffffefffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x800, {0x20, 0x1, 0x3}, 0xd, 0x0, 0x0, 0x8, 0x8, 0x8, 0x5, 0x9, 0x8, 0x6, 0x0, 0x2b07, 0x8, 0x400, 0x3f7ff922, 0x3, 0x2}}, 0xa0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000002340)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) 649.527183ms ago: executing program 0 (id=56): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00']) lstat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000540)) sendmsg$nl_generic(r0, 0x0, 0x8018) mkdir(&(0x7f00000001c0)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='fd/3\x00') read$ptp(r1, &(0x7f0000000400)=""/231, 0xe7) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x0) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x82) rmdir(&(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000040)={'dvmrp0\x00'}) syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a030800030101072501", @ANYRES8=r0], 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./config/usb_gadget/g1\x00', &(0x7f0000000600), 0x100000, &(0x7f0000000640)={[{@verity_off}], [{@permit_directio}, {@flag='lazytime'}]}) 398.095169ms ago: executing program 2 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000440)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) r4 = dup(r2) syz_ublk_setup_queues(r4, r1, &(0x7f0000000480)={0x0, 0x42cc, 0x4000, 0xfffffffe, 0x7f}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4be3, 0x2, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x4000, 0x4, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0xfffffffc, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x20, 0x1, 0x230}}], 0x1, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x7ffff000}, {&(0x7f00000002c0)=""/152, 0x98}], 0x2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/95, 0x7ffff000}], 0x286, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x64003, 0x42) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0x8001}}, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) getpid() (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000440)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) (async) dup(r2) (async) syz_ublk_setup_queues(r4, r1, &(0x7f0000000480)={0x0, 0x42cc, 0x4000, 0xfffffffe, 0x7f}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4be3, 0x2, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x4000, 0x4, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0xfffffffc, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x20, 0x1, 0x230}}], 0x1, 0x0, 0x0) (async) process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x7ffff000}, {&(0x7f00000002c0)=""/152, 0x98}], 0x2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/95, 0x7ffff000}], 0x286, 0x0) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x7) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x64003, 0x42) (async) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0x8001}}, 0x30) (async) 381.133631ms ago: executing program 2 (id=58): r0 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x168) (async) mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f0000000080)=0xc) (async, rerun: 64) memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) (async) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f0000000380)='.\x00', 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) (async, rerun: 64) inotify_init() (async, rerun: 64) r2 = fsopen(&(0x7f0000000400)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000440)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x180) (async) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) r5 = fsopen(&(0x7f00000005c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x8) (async) socket$key(0xf, 0x3, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x121000, 0x0) syz_usb_connect(0x4, 0xb3, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r6], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x1008000, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './file1'}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, r1}}]}) (rerun: 64) 83.593301ms ago: executing program 1 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000440)='./bus\x00') mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x80, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r0, 0x100, 0x1) getdents64(r0, 0x0, 0x4f) 0s ago: executing program 1 (id=60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000a40)={0x0, &(0x7f0000000a80)=[@enable_nested={0x12c, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro_nat=0x6400, 0x0, 0x6}}], 0x50}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 22.280837][ T36] audit: type=1400 audit(1794049127.260:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.303976][ T36] audit: type=1400 audit(1794049127.280:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.307309][ T286] cgroup: Unknown subsys name 'net' [ 22.332017][ T36] audit: type=1400 audit(1794049127.320:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.332448][ T286] cgroup: Unknown subsys name 'devices' [ 22.458883][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.464521][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.601892][ T36] audit: type=1400 audit(1794049127.580:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.625451][ T36] audit: type=1400 audit(1794049127.580:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.650417][ T36] audit: type=1400 audit(1794049127.580:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.675699][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.684783][ T36] audit: type=1400 audit(1794049127.670:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.710261][ T36] audit: type=1400 audit(1794049127.670:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.755088][ T36] audit: type=1400 audit(1794049127.730:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.756321][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.780682][ T36] audit: type=1400 audit(1794049127.730:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.210457][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.217593][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.224711][ T294] bridge_slave_0: entered allmulticast mode [ 24.231254][ T294] bridge_slave_0: entered promiscuous mode [ 24.238891][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.245982][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.253147][ T294] bridge_slave_1: entered allmulticast mode [ 24.259559][ T294] bridge_slave_1: entered promiscuous mode [ 24.268919][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.276008][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.283186][ T293] bridge_slave_0: entered allmulticast mode [ 24.289471][ T293] bridge_slave_0: entered promiscuous mode [ 24.307181][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.314266][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.321436][ T293] bridge_slave_1: entered allmulticast mode [ 24.327737][ T293] bridge_slave_1: entered promiscuous mode [ 24.371271][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.378387][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.385587][ T295] bridge_slave_0: entered allmulticast mode [ 24.392073][ T295] bridge_slave_0: entered promiscuous mode [ 24.401384][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.408509][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.415589][ T295] bridge_slave_1: entered allmulticast mode [ 24.421918][ T295] bridge_slave_1: entered promiscuous mode [ 24.469448][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.476616][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.483698][ T296] bridge_slave_0: entered allmulticast mode [ 24.490129][ T296] bridge_slave_0: entered promiscuous mode [ 24.499502][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.506589][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.513687][ T296] bridge_slave_1: entered allmulticast mode [ 24.520075][ T296] bridge_slave_1: entered promiscuous mode [ 24.610944][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.618045][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.625348][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.632755][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.672530][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.679677][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.687020][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.694092][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.702533][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.709619][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.716957][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.724005][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.762974][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.770076][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.777420][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.784469][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.804385][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.811848][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.819858][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.827373][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.835079][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.842687][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.849921][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.857266][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.875579][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.882683][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.890575][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.897756][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.914440][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.921517][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.929219][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.936428][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.956376][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.963440][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.984220][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.991286][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.007947][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.015000][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.023096][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.030166][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.052804][ T293] veth0_vlan: entered promiscuous mode [ 25.081366][ T295] veth0_vlan: entered promiscuous mode [ 25.089193][ T294] veth0_vlan: entered promiscuous mode [ 25.110378][ T293] veth1_macvtap: entered promiscuous mode [ 25.123761][ T295] veth1_macvtap: entered promiscuous mode [ 25.138843][ T294] veth1_macvtap: entered promiscuous mode [ 25.148760][ T296] veth0_vlan: entered promiscuous mode [ 25.190346][ T296] veth1_macvtap: entered promiscuous mode [ 25.212831][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.266053][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.295253][ T318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 25.297621][ T322] Dead loop on virtual device ip6_vti0, fix it urgently! [ 25.416363][ T330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7'. [ 25.528706][ T334] overlayfs: invalid origin (0000) [ 25.650304][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 25.696669][ T45] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 25.747087][ T309] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.809813][ T366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.821526][ T366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.857738][ T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 25.869411][ T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.879536][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 25.890332][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.906859][ T45] hub 1-1:4.0: USB hub found [ 25.912319][ T309] usb 4-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 25.927214][ T309] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 25.937815][ T309] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 25.947786][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.955887][ T309] usb 4-1: Product: syz [ 25.961310][ T309] usb 4-1: Manufacturer: syz [ 25.966523][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.967208][ T309] usb 4-1: SerialNumber: syz [ 26.076572][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.101266][ T45] hub 1-1:4.0: 16 ports detected [ 26.106725][ T45] usb 1-1: selecting invalid altsetting 1 [ 26.112550][ T45] hub 1-1:4.0: Using single TT (err -22) [ 26.119268][ T45] hub 1-1:4.0: insufficient power available to use all downstream ports [ 26.136532][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 26.147314][ T355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.162847][ T355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.171307][ T355] netlink: 'syz.2.15': attribute type 49 has an invalid length. [ 26.219697][ T355] team_slave_1: entered promiscuous mode [ 26.225983][ T355] team_slave_1: entered allmulticast mode [ 26.231850][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 26.236378][ T372] capability: warning: `syz.2.15' uses deprecated v2 capabilities in a way that may be insecure [ 26.240842][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.259196][ T310] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 26.267253][ T310] usb 3-1: can't read configurations, error -71 [ 26.275297][ T9] usb 2-1: config 64 has an invalid interface number: 242 but max is 0 [ 26.287469][ T9] usb 2-1: config 64 has an invalid interface number: 185 but max is 0 [ 26.295946][ T9] usb 2-1: config 64 has an invalid interface number: 243 but max is 0 [ 26.304662][ T9] usb 2-1: config 64 has an invalid interface number: 202 but max is 0 [ 26.313140][ T9] usb 2-1: config 64 has an invalid interface number: 167 but max is 0 [ 26.321868][ T9] usb 2-1: config 64 has 5 interfaces, different from the descriptor's value: 1 [ 26.331122][ T9] usb 2-1: config 64 has no interface number 0 [ 26.337742][ T9] usb 2-1: config 64 has no interface number 1 [ 26.343982][ T9] usb 2-1: config 64 has no interface number 2 [ 26.355329][ T9] usb 2-1: config 64 has no interface number 3 [ 26.362738][ T9] usb 2-1: config 64 has no interface number 4 [ 26.369750][ T9] usb 2-1: config 64 interface 242 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 26.378989][ T309] usb 4-1: USB disconnect, device number 2 [ 26.392320][ T9] usb 2-1: config 64 interface 242 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 26.408555][ T9] usb 2-1: config 64 interface 242 altsetting 2 bulk endpoint 0x9 has invalid maxpacket 64 [ 26.421388][ T9] usb 2-1: config 64 interface 242 altsetting 2 has a duplicate endpoint with address 0x84, skipping [ 26.432880][ T9] usb 2-1: config 64 interface 242 altsetting 2 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 26.446404][ T9] usb 2-1: too many endpoints for config 64 interface 185 altsetting 213: 120, using maximum allowed: 30 [ 26.458562][ T9] usb 2-1: config 64 interface 185 altsetting 213 endpoint 0x8 has an invalid bInterval 21, changing to 7 [ 26.470412][ T9] usb 2-1: config 64 interface 185 altsetting 213 has 1 endpoint descriptor, different from the interface descriptor's value: 120 [ 26.484503][ T9] usb 2-1: too many endpoints for config 64 interface 243 altsetting 155: 164, using maximum allowed: 30 [ 26.495942][ T9] usb 2-1: config 64 interface 243 altsetting 155 has a duplicate endpoint with address 0xF, skipping [ 26.507797][ T9] usb 2-1: config 64 interface 243 altsetting 155 has a duplicate endpoint with address 0xE, skipping [ 26.522819][ T9] usb 2-1: config 64 interface 243 altsetting 155 has 2 endpoint descriptors, different from the interface descriptor's value: 164 [ 26.539203][ T45] usb 1-1: USB disconnect, device number 2 [ 26.544926][ T9] usb 2-1: config 64 interface 202 altsetting 11 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 26.559177][ T9] usb 2-1: config 64 interface 202 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 26.570249][ T9] usb 2-1: config 64 interface 202 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 26.587370][ T9] usb 2-1: config 64 interface 202 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 26.601688][ T9] usb 2-1: config 64 interface 202 altsetting 11 has an endpoint descriptor with address 0x58, changing to 0x8 [ 26.613678][ T9] usb 2-1: config 64 interface 202 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 26.624850][ T9] usb 2-1: config 64 interface 202 altsetting 11 has a duplicate endpoint with address 0x2, skipping [ 26.635941][ T9] usb 2-1: config 64 interface 202 altsetting 11 has 7 endpoint descriptors, different from the interface descriptor's value: 24 [ 26.652829][ T9] usb 2-1: too many endpoints for config 64 interface 167 altsetting 119: 104, using maximum allowed: 30 [ 26.664250][ T9] usb 2-1: config 64 interface 167 altsetting 119 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 26.678290][ T9] usb 2-1: config 64 interface 242 has no altsetting 0 [ 26.685188][ T9] usb 2-1: config 64 interface 185 has no altsetting 0 [ 26.692299][ T9] usb 2-1: config 64 interface 243 has no altsetting 0 [ 26.700625][ T9] usb 2-1: config 64 interface 202 has no altsetting 0 [ 26.707769][ T9] usb 2-1: config 64 interface 167 has no altsetting 0 [ 26.728707][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.b6 [ 26.748038][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.756102][ T9] usb 2-1: Product: 櫊嬠ᨦ綂ᚂ撿遤ꌖ磌쳞訔滸簢鑄ᥕ둞ᩢꦆԐﮏ囙ꪧ᥋彠扌ꢫ反g㐐禫붹Ɜ鄵转搞鷪㊿뤆ꀷ悘㹞䤬篝஥Ժ⋗熠쒹妡騍⤿Ē唣밧氧檐 [ 26.786511][ T9] usb 2-1: Manufacturer: 袃팈规✀苷㉐χ⛖댖蜃醶殰䥒径␎콩浂ꎑ쬪㘊띍Ọ뇙跍情缌﮽ፌࡘȴ덼Ⴠ潣酂鵾ク諵類⌏ⶻ뗪咧莠陠㑟둗祊꼎︄꣉৩냐摒ቂ负Ợ䍵딤㎐삜慬涭羒ڼ໾뿪픳 [ 26.816768][ T9] usb 2-1: SerialNumber: я [ 26.831443][ T365] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 26.846196][ T365] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 26.998100][ T399] cgroup: fork rejected by pids controller in /syz3 [ 27.096640][ T9] usb 2-1: USB disconnect, device number 2 [ 27.316572][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.460802][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 27.460821][ T36] audit: type=1400 audit(1794049132.440:167): avc: denied { read write } for pid=462 comm="syz.0.24" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.464369][ T464] netlink: 'syz.0.24': attribute type 4 has an invalid length. [ 27.467157][ T36] audit: type=1400 audit(1794049132.440:168): avc: denied { open } for pid=462 comm="syz.0.24" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.520603][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 27.529524][ T36] audit: type=1400 audit(1794049132.440:169): avc: denied { read write } for pid=462 comm="syz.0.24" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.534343][ T464] netlink: 'syz.0.24': attribute type 4 has an invalid length. [ 27.552993][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.568980][ T36] audit: type=1400 audit(1794049132.440:170): avc: denied { open } for pid=462 comm="syz.0.24" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.596982][ T310] usb 3-1: config 138 has an invalid interface number: 221 but max is 0 [ 27.605457][ T310] usb 3-1: config 138 has no interface number 0 [ 27.611823][ T310] usb 3-1: config 138 interface 221 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10 [ 27.624032][ T36] audit: type=1400 audit(1794049132.440:171): avc: denied { ioctl } for pid=462 comm="syz.0.24" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.649401][ T310] usb 3-1: config 138 interface 221 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024 [ 27.662172][ T310] usb 3-1: config 138 interface 221 has no altsetting 0 [ 27.669420][ T36] audit: type=1400 audit(1794049132.510:172): avc: denied { bind } for pid=462 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.682406][ T470] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 27.689795][ T36] audit: type=1400 audit(1794049132.510:173): avc: denied { ioctl } for pid=462 comm="syz.0.24" path="socket:[4338]" dev="sockfs" ino=4338 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.698715][ T470] rust_binder: Read failure Err(EFAULT) in pid:23 [ 27.721733][ T36] audit: type=1400 audit(1794049132.660:174): avc: denied { map } for pid=468 comm="syz.1.25" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.755051][ T45] rust_binder: 468: undelivered death notification, 0000000000000000 [ 27.756689][ T310] usb 3-1: New USB device found, idVendor=0582, idProduct=ed81, bcdDevice=a7.d3 [ 27.776530][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.784591][ T310] usb 3-1: Product: syz [ 27.792769][ T310] usb 3-1: Manufacturer: syz [ 27.797600][ T36] audit: type=1400 audit(1794049132.660:175): avc: denied { read write } for pid=468 comm="syz.1.25" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.820677][ T310] usb 3-1: SerialNumber: syz [ 27.825814][ T36] audit: type=1400 audit(1794049132.660:176): avc: denied { open } for pid=468 comm="syz.1.25" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.849860][ T400] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 27.858739][ T477] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 27.872387][ T478] ======================================================= [ 27.872387][ T478] WARNING: The mand mount option has been deprecated and [ 27.872387][ T478] and is ignored by this kernel. Remove the mand [ 27.872387][ T478] option from the mount to silence this warning. [ 27.872387][ T478] ======================================================= [ 27.922754][ T478] overlayfs: failed to resolve './file1/file0': -2 [ 27.948094][ T487] netlink: 'syz.1.30': attribute type 27 has an invalid length. [ 27.970788][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.978098][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.068928][ T396] tipc: Failed to remove unknown binding: 66,0,0/0:3980150891/3980150893 [ 28.077585][ T396] tipc: Failed to remove unknown binding: 66,0,0/0:3980150891/3980150892 [ 28.086439][ T396] tipc: Failed to remove unknown binding: 66,0,0/0:3980150891/3980150893 [ 28.095353][ T396] tipc: Failed to remove unknown binding: 66,0,0/0:3980150891/3980150892 [ 28.106540][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.127282][ T310] usb 3-1: USB disconnect, device number 3 [ 28.140366][ T482] udevd[482]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:138.221/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.256554][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 28.264035][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.272775][ T45] usb 4-1: config index 0 descriptor too short (expected 575, got 63) [ 28.281215][ T45] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 28.289389][ T309] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.297220][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.307797][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 28.317135][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 28.331748][ T45] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 28.341040][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.349244][ T45] usb 4-1: Manufacturer: 蔻铓軒⺓ꇆⓆ耿歹폔핫첳ꏊ袶羕蜺촆莜޹맍嶃岶㖈ﭬꡅ焁ᴊ䯾烋᧏ۡ㹕ꓴ⺡糄皤굏递霵쇔뇶낋ᕸ穲仅䧞⹫ [ 28.366913][ T45] usb 4-1: SerialNumber: 썠ᕾᄖ㚥㊌눔⺺ꚩ鉾椪창ꆉ뻰迾䪍讨ͺ豢佬럦抓뱗ំ偛体訣ጄ〨鏴륪檂堘쳥饒늫뮭훓㴄薷ᨽ賁茷哟虛ጰ뙰얠᧧踇‚蔡宙̓왭튡갻섋逞㨃隼腵鞕卥䠙ﻫꊙ슙睟১ [ 28.396793][ T45] usb 4-1: config 0 descriptor?? [ 28.411198][ T45] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 28.428963][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.466587][ T309] usb 2-1: Using ep0 maxpacket: 16 [ 28.472831][ T309] usb 2-1: config 1 has an invalid interface number: 10 but max is 2 [ 28.481288][ T309] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.491424][ T309] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 28.500461][ T309] usb 2-1: config 1 has no interface number 3 [ 28.506687][ T309] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 28.517767][ T309] usb 2-1: config 1 interface 10 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 28.530806][ T309] usb 2-1: config 1 interface 10 has no altsetting 0 [ 28.539003][ T309] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 28.548275][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.556292][ T309] usb 2-1: Product: syz [ 28.560613][ T309] usb 2-1: Manufacturer: syz [ 28.565228][ T309] usb 2-1: SerialNumber: syz [ 28.607406][ T373] usb 4-1: USB disconnect, device number 3 [ 28.686591][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.816537][ T310] usb 1-1: device descriptor read/64, error -71 [ 28.904992][ T309] usb 2-1: USB disconnect, device number 3 [ 28.931766][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.056588][ T310] usb 1-1: device descriptor read/64, error -71 [ 29.306547][ T310] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.427775][ T511] overlayfs: failed to resolve './file1/file0': -2 [ 29.436534][ T310] usb 1-1: device descriptor read/64, error -71 [ 29.603480][ T521] FAULT_INJECTION: forcing a failure. [ 29.603480][ T521] name failslab, interval 1, probability 0, space 0, times 1 [ 29.620589][ T521] CPU: 0 UID: 0 PID: 521 Comm: syz.1.43 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 29.620625][ T521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 29.620648][ T521] Call Trace: [ 29.620656][ T521] [ 29.620664][ T521] __dump_stack+0x21/0x30 [ 29.620692][ T521] dump_stack_lvl+0x140/0x1c0 [ 29.620713][ T521] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.620735][ T521] ? avc_has_perm_noaudit+0x289/0x360 [ 29.620775][ T521] dump_stack+0x19/0x20 [ 29.620795][ T521] should_fail_ex+0x3c2/0x510 [ 29.620817][ T521] should_failslab+0xac/0x100 [ 29.620841][ T521] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 29.620875][ T521] ? sock_alloc_inode+0x48/0x150 [ 29.620899][ T521] sock_alloc_inode+0x48/0x150 [ 29.620921][ T521] ? __cfi_sock_alloc_inode+0x10/0x10 [ 29.620943][ T521] alloc_inode+0x7a/0x270 [ 29.620968][ T521] ? bpf_lsm_socket_create+0xd/0x20 [ 29.621003][ T521] new_inode_pseudo+0x19/0x40 [ 29.621029][ T521] __sock_create+0x130/0x810 [ 29.621055][ T521] __sys_socket+0xe1/0x1c0 [ 29.621079][ T521] __x64_sys_socket+0x7e/0x90 [ 29.621104][ T521] x64_sys_call+0x2608/0x2ee0 [ 29.621128][ T521] do_syscall_64+0x57/0xf0 [ 29.621151][ T521] ? clear_bhb_loop+0x50/0xa0 [ 29.621183][ T521] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.621213][ T521] RIP: 0033:0x7f26a8d9fb19 [ 29.621235][ T521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.621254][ T521] RSP: 002b:00007f26a9bf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 29.621279][ T521] RAX: ffffffffffffffda RBX: 00007f26a9025fa0 RCX: 00007f26a8d9fb19 [ 29.621296][ T521] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 29.621309][ T521] RBP: 00007f26a8e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 29.621324][ T521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.621337][ T521] R13: 00007f26a9026038 R14: 00007f26a9025fa0 R15: 00007ffe0f473ff8 [ 29.621358][ T521] [ 29.621368][ T521] socket: no more sockets [ 29.856542][ T309] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.886550][ T310] usb 1-1: device descriptor read/64, error -71 [ 29.996630][ T310] usb usb1-port1: attempt power cycle [ 30.019156][ T309] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 30.029669][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.037878][ T309] usb 3-1: Product: syz [ 30.042389][ T309] usb 3-1: Manufacturer: syz [ 30.047176][ T309] usb 3-1: SerialNumber: syz [ 30.346561][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.377563][ T310] usb 1-1: device descriptor read/8, error -71 [ 30.507565][ T310] usb 1-1: device descriptor read/8, error -71 [ 30.726114][ T535] overlayfs: failed to resolve './file1/file0': -2 [ 30.746532][ T310] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 30.797477][ T310] usb 1-1: device descriptor read/8, error -71 [ 30.871902][ T309] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 30.927592][ T310] usb 1-1: device descriptor read/8, error -71 [ 30.996551][ T31] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 31.036782][ T310] usb usb1-port1: unable to enumerate USB device [ 31.080039][ T309] usb 3-1: USB disconnect, device number 4 [ 31.156537][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 31.296606][ T31] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 31.466623][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 31.478695][ T31] usb usb2-port1: attempt power cycle [ 31.629821][ T570] kvm: kvm [569]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 31.638833][ T570] kvm: kvm [569]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 31.738305][ T576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'. [ 31.747165][ T576] tipc: Invalid UDP bearer configuration [ 31.747188][ T576] tipc: Enabling of bearer rejected, failed to enable media [ 31.761837][ T576] syz.2.51: attempt to access beyond end of device [ 31.761837][ T576] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 31.774749][ T576] exFAT-fs (loop2): unable to read boot sector [ 31.781108][ T576] exFAT-fs (loop2): failed to read boot sector [ 31.787452][ T576] exFAT-fs (loop2): failed to recognize exfat type [ 31.795768][ T578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'. [ 31.795894][ T579] syz.2.51: attempt to access beyond end of device [ 31.795894][ T579] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 31.806573][ T578] tipc: Invalid UDP bearer configuration [ 31.817422][ T578] tipc: Enabling of bearer rejected, failed to enable media [ 31.831849][ T579] exFAT-fs (loop2): unable to read boot sector [ 31.838280][ T579] exFAT-fs (loop2): failed to read boot sector [ 31.844796][ T579] exFAT-fs (loop2): failed to recognize exfat type [ 31.846587][ T31] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 31.875362][ T582] tipc: Can't bind to reserved service type 0 [ 31.881948][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 32.036855][ T31] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 32.068919][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 32.074426][ T31] usb usb2-port1: unable to enumerate USB device [ 32.100126][ T585] FAULT_INJECTION: forcing a failure. [ 32.100126][ T585] name failslab, interval 1, probability 0, space 0, times 0 [ 32.112978][ T585] CPU: 1 UID: 0 PID: 585 Comm: syz.2.53 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 32.113022][ T585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 32.113048][ T585] Call Trace: [ 32.113056][ T585] [ 32.113064][ T585] __dump_stack+0x21/0x30 [ 32.113093][ T585] dump_stack_lvl+0x140/0x1c0 [ 32.113116][ T585] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.113141][ T585] dump_stack+0x19/0x20 [ 32.113162][ T585] should_fail_ex+0x3c2/0x510 [ 32.113185][ T585] should_failslab+0xac/0x100 [ 32.113211][ T585] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 32.113249][ T585] ? __cfi_proc_create_net_data+0x10/0x10 [ 32.113284][ T585] ? nf_log_net_init+0x97/0x750 [ 32.113319][ T585] kmemdup_noprof+0x31/0x80 [ 32.113355][ T585] nf_log_net_init+0x97/0x750 [ 32.113388][ T585] ops_init+0x302/0x5d0 [ 32.113414][ T585] ? __kasan_check_write+0x18/0x20 [ 32.113445][ T585] ? rwsem_read_trylock+0x275/0x5a0 [ 32.113472][ T585] setup_net+0x227/0x9b0 [ 32.113503][ T585] ? copy_net_ns+0xa20/0xa20 [ 32.113535][ T585] ? down_read_killable+0x7f/0x100 [ 32.113565][ T585] ? __cfi_down_read_killable+0x10/0x10 [ 32.113597][ T585] copy_net_ns+0x4fc/0xa20 [ 32.113630][ T585] create_new_namespaces+0x390/0x6f0 [ 32.113654][ T585] unshare_nsproxy_namespaces+0x124/0x180 [ 32.113701][ T585] ksys_unshare+0x4f9/0x920 [ 32.113727][ T585] ? fput+0x1a4/0x230 [ 32.113756][ T585] ? __cfi_ksys_unshare+0x10/0x10 [ 32.113778][ T585] ? __kasan_check_write+0x18/0x20 [ 32.113813][ T585] __x64_sys_unshare+0x3c/0x50 [ 32.113835][ T585] x64_sys_call+0x2998/0x2ee0 [ 32.113860][ T585] do_syscall_64+0x57/0xf0 [ 32.113884][ T585] ? clear_bhb_loop+0x50/0xa0 [ 32.113923][ T585] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.113955][ T585] RIP: 0033:0x7f6e8219fb19 [ 32.113976][ T585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.113995][ T585] RSP: 002b:00007f6e83125028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 32.114019][ T585] RAX: ffffffffffffffda RBX: 00007f6e82425fa0 RCX: 00007f6e8219fb19 [ 32.114045][ T585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 32.114061][ T585] RBP: 00007f6e82237b70 R08: 0000000000000000 R09: 0000000000000000 [ 32.114076][ T585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.114091][ T585] R13: 00007f6e82426038 R14: 00007f6e82425fa0 R15: 00007fffaa32bfb8 [ 32.114111][ T585] [ 32.516542][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 32.516570][ T36] audit: type=1400 audit(1794049137.490:221): avc: denied { connect } for pid=587 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.665207][ T591] cgroup: fork rejected by pids controller in /syz0 [ 33.250215][ T36] audit: type=1400 audit(1794049138.230:222): avc: denied { mounton } for pid=661 comm="syz.0.56" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 33.273876][ T662] tmpfs: Unknown parameter '' [ 33.283735][ T36] audit: type=1400 audit(1794049138.270:223): avc: denied { mount } for pid=661 comm="syz.0.56" name="/" dev="configfs" ino=2474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 33.311448][ T36] audit: type=1400 audit(1794049138.270:224): avc: denied { read } for pid=661 comm="syz.0.56" dev="sockfs" ino=3845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.333408][ T36] audit: type=1400 audit(1794049138.270:225): avc: denied { search } for pid=661 comm="syz.0.56" name="/" dev="configfs" ino=2474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.356149][ T36] audit: type=1400 audit(1794049138.270:226): avc: denied { write } for pid=661 comm="syz.0.56" name="usb_gadget" dev="configfs" ino=2475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.378968][ T36] audit: type=1400 audit(1794049138.270:227): avc: denied { add_name } for pid=661 comm="syz.0.56" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.399232][ T36] audit: type=1400 audit(1794049138.270:228): avc: denied { create } for pid=661 comm="syz.0.56" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 33.419007][ T36] audit: type=1400 audit(1794049138.270:229): avc: denied { remove_name } for pid=661 comm="syz.0.56" name="acm.usb0" dev="configfs" ino=3857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.453835][ T36] audit: type=1400 audit(1794049138.270:230): avc: denied { rmdir } for pid=661 comm="syz.0.56" name="acm.usb0" dev="configfs" ino=3857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.526561][ T373] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 33.554521][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.562993][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.571714][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.580263][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.588772][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.597373][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.605779][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.614516][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.623290][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.631918][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.640474][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.649059][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.657573][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.665963][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.674612][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.683365][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.691959][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.700247][ T373] usb 1-1: Using ep0 maxpacket: 8 [ 33.706002][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.715742][ T373] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 33.726184][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.735256][ T373] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 33.744232][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.753072][ T373] usb 1-1: config 3 has no interface number 0 [ 33.759643][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.767906][ T373] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.781143][ T373] usb 1-1: config 3 interface 45 has no altsetting 0 [ 33.783918][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.799583][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.808300][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.817159][ T373] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 33.826248][ T373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.834579][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.842858][ T373] usb 1-1: Product: syz [ 33.847392][ T373] usb 1-1: Manufacturer: syz [ 33.852287][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.860564][ T373] usb 1-1: SerialNumber: syz [ 33.870850][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.886129][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.895062][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.904794][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.917549][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.925991][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.929021][ T293] ------------[ cut here ]------------ [ 33.939743][ T293] WARNING: CPU: 0 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 33.949145][ T293] Modules linked in: [ 33.953119][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 33.964823][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 33.974960][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 33.980683][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 6e 54 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 64 61 03 cc e8 76 97 3d ff <0f> 0b e9 3e ff ff ff e8 6a 97 3d ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 34.000420][ T293] RSP: 0018:ffffc90008e779e8 EFLAGS: 00010293 [ 34.006561][ T293] RAX: ffffffff824bd25a RBX: 0000000000000000 RCX: ffff888104788000 [ 34.014613][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.022683][ T293] RBP: ffffc90008e77a10 R08: ffff8881225e0f3f R09: 1ffff110244bc1e7 [ 34.030733][ T293] R10: dffffc0000000000 R11: ffffed10244bc1e8 R12: 0000000000000000 [ 34.038777][ T293] R13: dffffc0000000000 R14: ffff8881225e0ea0 R15: ffff888119c00aa0 [ 34.046815][ T293] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 34.055815][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.062495][ T293] CR2: 00007ffdaddd49d0 CR3: 0000000125240000 CR4: 00000000003526b0 [ 34.070577][ T293] Call Trace: [ 34.073905][ T293] [ 34.076903][ T293] ovl_do_remove+0x824/0xd10 [ 34.081557][ T293] ? ovl_set_redirect+0x780/0x780 [ 34.086700][ T293] ? __cfi_down_write+0x10/0x10 [ 34.091615][ T293] ovl_rmdir+0x1e/0x30 [ 34.095833][ T293] vfs_rmdir+0x3db/0x560 [ 34.100162][ T293] incfs_kill_sb+0x102/0x220 [ 34.104802][ T293] deactivate_locked_super+0xd5/0x270 [ 34.110301][ T293] deactivate_super+0xb8/0xe0 [ 34.115061][ T293] cleanup_mnt+0x438/0x4d0 [ 34.119591][ T293] __cleanup_mnt+0x1d/0x40 [ 34.124061][ T293] task_work_run+0x1e8/0x260 [ 34.128757][ T293] ? __cfi_task_work_run+0x10/0x10 [ 34.133941][ T293] ? free_nsproxy+0x223/0x290 [ 34.138724][ T293] do_exit+0xa46/0x2850 [ 34.142937][ T293] ? __cfi_do_exit+0x10/0x10 [ 34.147603][ T293] ? __kasan_check_write+0x18/0x20 [ 34.152765][ T293] ? _raw_spin_lock_irq+0x93/0x120 [ 34.157971][ T293] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.163567][ T293] ? zap_other_threads+0x32e/0x3a0 [ 34.168760][ T293] do_group_exit+0x21f/0x2f0 [ 34.173423][ T293] __x64_sys_exit_group+0x43/0x50 [ 34.178537][ T293] x64_sys_call+0x2ed2/0x2ee0 [ 34.183262][ T293] do_syscall_64+0x57/0xf0 [ 34.187743][ T293] ? clear_bhb_loop+0x50/0xa0 [ 34.192480][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.198462][ T293] RIP: 0033:0x7f26a8d9fb19 [ 34.202916][ T293] Code: Unable to access opcode bytes at 0x7f26a8d9faef. [ 34.209990][ T293] RSP: 002b:00007ffe0f472068 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 34.218498][ T293] RAX: ffffffffffffffda RBX: 00007f26a8e36fd8 RCX: 00007f26a8d9fb19 [ 34.226534][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 34.234551][ T293] RBP: 0000000000000028 R08: 0000000000000000 R09: 00007f26a8e36fb3 [ 34.242610][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0f473320 [ 34.250671][ T293] R13: 00007f26a8e36fb3 R14: 0000000000008443 R15: 00007ffe0f4743f0 [ 34.258719][ T293] [ 34.261772][ T293] ---[ end trace 0000000000000000 ]--- [ 34.267456][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.269000][ T293] ------------[ cut here ]------------ [ 34.281147][ T293] WARNING: CPU: 0 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 34.290529][ T293] Modules linked in: [ 34.294524][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 34.307746][ T293] Tainted: [W]=WARN [ 34.311581][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 34.321736][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 34.327456][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 6e 54 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 64 61 03 cc e8 76 97 3d ff <0f> 0b e9 3e ff ff ff e8 6a 97 3d ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 34.347142][ T293] RSP: 0018:ffffc90008e779e8 EFLAGS: 00010293 [ 34.353247][ T293] RAX: ffffffff824bd25a RBX: 0000000000000000 RCX: ffff888104788000 [ 34.361330][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.369392][ T293] RBP: ffffc90008e77a10 R08: ffff8881225e0f3f R09: 1ffff110244bc1e7 [ 34.377432][ T293] R10: dffffc0000000000 R11: ffffed10244bc1e8 R12: 0000000000000000 [ 34.385437][ T293] R13: dffffc0000000000 R14: ffff8881225e0ea0 R15: ffff888119c00aa0 [ 34.393482][ T293] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 34.402475][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.409132][ T293] CR2: 00007ffdaddd49d0 CR3: 0000000125240000 CR4: 00000000003526b0 [ 34.417193][ T293] Call Trace: [ 34.420511][ T293] [ 34.423472][ T293] ovl_do_remove+0x824/0xd10 [ 34.428152][ T293] ? ovl_set_redirect+0x780/0x780 [ 34.433243][ T293] ? __cfi_down_write+0x10/0x10 [ 34.438188][ T293] ovl_rmdir+0x1e/0x30 [ 34.442310][ T293] vfs_rmdir+0x3db/0x560 [ 34.446634][ T293] incfs_kill_sb+0x197/0x220 [ 34.451341][ T293] deactivate_locked_super+0xd5/0x270 [ 34.456794][ T293] deactivate_super+0xb8/0xe0 [ 34.461511][ T293] cleanup_mnt+0x438/0x4d0 [ 34.465967][ T293] __cleanup_mnt+0x1d/0x40 [ 34.470459][ T293] task_work_run+0x1e8/0x260 [ 34.475117][ T293] ? __cfi_task_work_run+0x10/0x10 [ 34.480320][ T293] ? free_nsproxy+0x223/0x290 [ 34.485035][ T293] do_exit+0xa46/0x2850 [ 34.489325][ T293] ? __cfi_do_exit+0x10/0x10 [ 34.494000][ T293] ? __kasan_check_write+0x18/0x20 [ 34.499199][ T293] ? _raw_spin_lock_irq+0x93/0x120 [ 34.504363][ T293] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.509999][ T293] ? zap_other_threads+0x32e/0x3a0 [ 34.515189][ T293] do_group_exit+0x21f/0x2f0 [ 34.519873][ T293] __x64_sys_exit_group+0x43/0x50 [ 34.524935][ T293] x64_sys_call+0x2ed2/0x2ee0 [ 34.529779][ T293] do_syscall_64+0x57/0xf0 [ 34.534232][ T293] ? clear_bhb_loop+0x50/0xa0 [ 34.539023][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.545103][ T293] RIP: 0033:0x7f26a8d9fb19 [ 34.549594][ T293] Code: Unable to access opcode bytes at 0x7f26a8d9faef. [ 34.556669][ T293] RSP: 002b:00007ffe0f472068 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 34.565126][ T293] RAX: ffffffffffffffda RBX: 00007f26a8e36fd8 RCX: 00007f26a8d9fb19 [ 34.573260][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 34.581296][ T293] RBP: 0000000000000028 R08: 0000000000000000 R09: 00007f26a8e36fb3 [ 34.589385][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0f473320 [ 34.597410][ T293] R13: 00007f26a8e36fb3 R14: 0000000000008443 R15: 00007ffe0f4743f0 [ 34.605424][ T293] [ 34.608523][ T293] ---[ end trace 0000000000000000 ]--- [ 34.614138][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.623553][ T373] usb 1-1: USB disconnect, device number 7 [ 34.630396][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.649115][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.662366][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.671068][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.680075][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.683690][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.705404][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.715062][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.723995][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.734985][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.743393][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.754186][ T670] bridge_slave_1: left allmulticast mode [ 34.759903][ T670] bridge_slave_1: left promiscuous mode [ 34.765567][ T670] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.787019][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.795777][ T670] bridge_slave_0: left allmulticast mode [ 34.801712][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.810165][ T670] bridge_slave_0: left promiscuous mode [ 34.815841][ T670] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.823199][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.832513][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.846945][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.855586][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.865313][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.878020][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.896750][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.905637][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.916180][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.926697][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.935132][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.946537][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.954999][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.963862][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.972398][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.981008][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.989571][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.998345][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 35.006922][ T674] SELinux: security_context_str_to_sid (user_u) failed with errno=-22