last executing test programs: 3.235026057s ago: executing program 3 (id=4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) r2 = fsopen(0x0, 0x0) fsmount(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300054700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.164096138s ago: executing program 3 (id=5): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x101, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40086315}], 0x0, 0x0, 0x0}) 3.138457989s ago: executing program 3 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee01]) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB=' \n,'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x40, 0x3, 0x35, {0x35, 0x10, "a75f6d9939d492a5027dd38e729a617b5a9d987298ce094630ea348dd811d903e90150f9094bd7185f2abc4d5b2523d8f5a645"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x39, 0x7e, 0x49, "bee1de18", "902a198c"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x3, 0xf, 0x9, 0x81, 0xf}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x1, 0xf5, "c8d8da19dcb0aef70b71d628daf11fab70526d9fb0b99cf5c969f989894f949725219ae193f560218cdeee0edf2211a815079d64275947053cb33146ed84df45112f58436dee603812ee3f91309641f117f2ff84051f33d6e673ca30af7111a77087579c9fb58abae8c40432fd1b079185197ebf2c4d8bcb22a8208462de8d76bf46509e280e52e765ee13bffc0e9ff356452368c9a11f9a2edafc852bb405202ea570bbfcd9a04c58e6076c28b1cef80d03d333e7fb370ae0e904a66ec86fb395cf1a295c161c3022c6082afbbe97c2f2b5d6098361283e42c2117314672d35f7b752770187c0a30ca5421881db3bf6adbfeac56c"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x34}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1c00, 0x8}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0xd}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "d611"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000540)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "f670"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x35}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x7}}) timer_create(0x0, &(0x7f0000002c00)={0x0, 0x22, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002c40)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {r4, r5+60000000}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f00000001c0)) setfsgid(r1) setfsgid(r1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x400, 0xa4) openat$incfs(r8, &(0x7f00000000c0)='.log\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4563471659f66384, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.920050067s ago: executing program 1 (id=15): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="24000000210001000000000000ffffff810000000000000101620000080006"], 0x24}], 0x1}, 0x0) 1.919944297s ago: executing program 1 (id=16): syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.905786657s ago: executing program 1 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\t\x00'/16], 0x10}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000040)={0x2, 0x3, 0x4000800}) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="8bea7f29", 0x4, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x0) add_key$user(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x0}, &(0x7f0000000e00)="07ac738b65", 0x5, 0xfffffffffffffffe) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f00000000c0)) 1.75768717s ago: executing program 1 (id=19): syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffe, 0x8401) r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x800) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2451], 0x993) syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffff, 0x2000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="b27384ab073b6f87ad8983e246eea00cc1372286ed8ca42a6db874f3e4c42d3a4ac427eb03a772c9744e789ac875e458", @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf25540000000800030003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8030}, 0x50) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r5, r2, 0x2) mkdirat(r2, &(0x7f0000000340)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000380)='./file2\x00', 0x200, 0x1) syz_open_procfs$pagemap(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x7ffffffc, 0x6, 0xcd0b, 0xf, 0x6, 0x45, 0xfc, 0xf, 0xff, 0x0, 0x1, 0x6, 0xff, 0x0, 0x6}}) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x3}, 0x10) 1.75163583s ago: executing program 1 (id=20): setgroups(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x8100}], 0x1, 0x0, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000200), 0x0, 0x5, &(0x7f0000000240)={[0x4]}, 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x3, 0x5, 0x3, 0x1ff}, {0x6, 0x0, 0x2, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$inet6(0xa, 0x800000000000002, 0xffffffff) connect$inet6(r2, &(0x7f0000001100)={0xa, 0x0, 0x40, @remote, 0xfff}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a", 0xfdef) lstat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000100)=[r3]) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_RESET(r4, 0xc00c5512) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "2832fcdf481731ce", "050000002f9005948ab0f908fbe1ee8d23c4f5000200", "355ab68f"}, 0x38) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r8 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r8, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000040}, 0x8000) ioctl$sock_SIOCADDDLCI(r8, 0x8980, &(0x7f0000000080)={'wlan1\x00', 0x81}) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x30) preadv(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r4, &(0x7f0000000780)=[{&(0x7f00000004c0)="c0bca06b418fa08f1459cb8ed6f07ae3e974e663fcf613222a23b90e1fd20ff5f453257eb6e201c45c537e280416906afd4296a1a69dfb63697fc447805bac68312cfae471b4a757c83a3b491abbbc695271f3b4b3d677bfc1912f88e792dbb598943ee86b3989af7bddf7b00bec875888487bc4390cbc93e16661c79d768e943d4ad23cec8042c1e499e0ab6d40c721395bd137d4bd82518e4f4ac1e55c1ddcc98b631cc41f6ce4cad94102f13086a2058524d5fafe983156f7f90867bceb9f409ac6fc9d6c", 0xc6}, {&(0x7f00000005c0)="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", 0xfe}, {&(0x7f00000006c0)="3fd2831ed67ecc9939fed2a8988527ed52515d34afce53146824aeba2a88e054485c662dfb828eddd3bd648be96e237846943a745a985cdeb5763dc682f95a5e674503dde67f6f3d0cc135dff82ccce8ea77dc2d108068677d0a6973e8da1bfd16948eee7338deef50d257c7e9e9a2d0c0af71910481bd13ed185dfb5229989f33e771e567e61772595a35fd651b9b7988c7ce4f612ac22ad435d9db0ab5", 0x9e}], 0x3) write$FUSE_INIT(r7, &(0x7f0000000400)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0xd, 0x20001, 0x2, 0x7, 0x1, 0x3, 0x0, 0x0, 0x20, 0xffffffff}}, 0x50) read(r7, &(0x7f0000003200)=""/4112, 0xfffffca4) setsockopt$inet6_opts(r5, 0x29, 0x40, 0x0, 0xd0060) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0xffffde01, @mcast2, 0x343b}, 0x1c) 1.705010342s ago: executing program 1 (id=21): syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000580)=ANY=[@ANYBLOB="1201500200000040e4087f01400001020301090269000301f14007080b010101042006090400000001016e0009240171fe0409004509040100000102200009040101010102200009050109ff03008b090825010100090b00090402000001022000090402010101022000090582092000d600c408250102030a0080"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0xcc840000) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet(0x2, 0x6, 0x5) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x4820, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000007980)=ANY=[@ANYBLOB="6c6600001000010002000000fedbdf250c000000070000000000000044661180280012800c001e000100000000000000080000002d7bf200080002"], 0x666c}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x145d, 0x2, 0x2, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b0, 0x80, 0x0, 0x3ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x1000, 0x3, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa61, 0x800, 0x2, 0x202ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x4000, 0x2, 0x821d}}], 0x4, &(0x7f00000002c0)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) socket(0x28, 0x1, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f00000005c0)={0x0, 0x0, 0x8000, 0x3, 0x255, 0x0, r14}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x400146, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4, 0x3be, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x2, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r11, '\x00', {0x5, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r14, 0x0, 0x2c, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x8084) r15 = inotify_init() inotify_add_watch(r15, &(0x7f00000003c0)='.\x00', 0x5db) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = open(&(0x7f0000000100)='./bus\x00', 0x141b42, 0xa) splice(r16, 0x0, r18, 0x0, 0x1000, 0x800000000000000) r19 = inotify_init1(0x80000) inotify_add_watch(r19, &(0x7f0000000140)='./bus\x00', 0x400002a2) write$tun(r17, &(0x7f00000033c0)=ANY=[], 0x107c) 1.041824866s ago: executing program 2 (id=22): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x41b1, "a5fd72"}, 0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x0) 1.037382656s ago: executing program 2 (id=23): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) (fail_nth: 5) 549.796797ms ago: executing program 2 (id=25): syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 549.682357ms ago: executing program 2 (id=26): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a0605080000002bbd7000fbdbdf2505000600334000000a00ce2100000de8000000000000000000000000000000000101000000000000010014"], 0x40}}, 0x20800) (fail_nth: 1) 327.096073ms ago: executing program 2 (id=27): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a0605080000002bbd7000fbdbdf2505000600334000000a00ce2100000de8000000000000000000000000000000000101000000000000010014"], 0x40}}, 0x20800) 315.161013ms ago: executing program 2 (id=28): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101a02, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_usb_connect(0x2, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203bc63af3fa6d199ac41010900000000000000800904000001437b6a000905000000000000000705", @ANYRESHEX=r2], 0x0) 205.804585ms ago: executing program 0 (id=29): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc845}, 0x880) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040)={0x2, 0x4}, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x100000000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x40}}, 0x20800) 141.846787ms ago: executing program 0 (id=30): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000840)={&(0x7f0000000080), 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}], &(0x7f0000000800)}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000400)=""/60, 0x12b000, 0x1000, 0x40000000, 0x1}, 0x20) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) dup2(r3, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @any, 0xfffd, 0x1}, 0xe) 120.113807ms ago: executing program 0 (id=31): r0 = getpid() prlimit64(r0, 0x9, &(0x7f0000000140)={0x8, 0x40002000000008d}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x1ac902) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, &(0x7f0000000040)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) setreuid(0x0, 0xee01) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f190900000000000171250000000000017000", [0x7, 0xffffffff9673e35d]}}) (async) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000080)={0x2, 0x2}) (async) r6 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000100)='map_files\x00') (async) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r6, 0x0, 0x4004) (async) fallocate(r3, 0x11, 0x0, 0x4) 73.741238ms ago: executing program 0 (id=32): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x3000, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@mcast1, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x1000}, {0x3, 0x6, 0x80}, 0xfffffffc}, [@tmpl={0x104, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x0, 0x0, 0xbd0}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@broadcast, 0xfffffffd, 0x1, 0x0, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in=@local, 0x4, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20002884}, 0x800) 21.411289ms ago: executing program 0 (id=33): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x400000000000000, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0xf, 0x4, 0x8, 0x7, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_address={0x5, 0x17, 0xff, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x80000000, @empty, 0x4}}]}, 0x38}}, 0x80) 21.002089ms ago: executing program 0 (id=34): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000300)={0x1100, 0x2, 0x0, 0x6}) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x1f6, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000440)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x6c537e1ba7be777c, 0x45833af92e4b39ff, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010000000000f1000000180000000c000000ff0f00000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0xfbfff2d4, @mcast2, 0x80001}, 0x10) fcntl$setlease(r3, 0x400, 0x1) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) close_range(r3, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000000c0)={0x1a0000, 0x0, {[0x0, 0x5, 0x101, 0xfffffffffffffffd, 0x1ff, 0xd, 0xe, 0x7fff]}}) pipe(&(0x7f0000000040)) 0s ago: executing program 3 (id=35): syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): T36] audit: type=1400 audit(1784266447.510:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.542751][ T36] audit: type=1400 audit(1784266447.510:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 20.899227][ T36] audit: type=1400 audit(1784266454.870:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.900468][ T286] cgroup: Unknown subsys name 'net' [ 20.921907][ T36] audit: type=1400 audit(1784266454.870:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.949165][ T36] audit: type=1400 audit(1784266454.900:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.949403][ T286] cgroup: Unknown subsys name 'devices' [ 21.072093][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.077729][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.180078][ T36] audit: type=1400 audit(1784266455.150:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.203259][ T36] audit: type=1400 audit(1784266455.150:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.213231][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.228131][ T36] audit: type=1400 audit(1784266455.160:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.246874][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.259746][ T36] audit: type=1400 audit(1784266455.220:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.294328][ T36] audit: type=1400 audit(1784266455.220:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.320126][ T36] audit: type=1400 audit(1784266455.220:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.345808][ T36] audit: type=1400 audit(1784266455.220:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.110237][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.117496][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.124772][ T295] bridge_slave_0: entered allmulticast mode [ 22.131197][ T295] bridge_slave_0: entered promiscuous mode [ 22.139122][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.146696][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.153806][ T295] bridge_slave_1: entered allmulticast mode [ 22.159944][ T295] bridge_slave_1: entered promiscuous mode [ 22.180794][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.187857][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.194990][ T296] bridge_slave_0: entered allmulticast mode [ 22.201186][ T296] bridge_slave_0: entered promiscuous mode [ 22.217737][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.224869][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.232038][ T296] bridge_slave_1: entered allmulticast mode [ 22.238257][ T296] bridge_slave_1: entered promiscuous mode [ 22.280605][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.287772][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.295039][ T293] bridge_slave_0: entered allmulticast mode [ 22.301398][ T293] bridge_slave_0: entered promiscuous mode [ 22.308164][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.315303][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.322444][ T293] bridge_slave_1: entered allmulticast mode [ 22.329077][ T293] bridge_slave_1: entered promiscuous mode [ 22.340890][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.347983][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.355214][ T294] bridge_slave_0: entered allmulticast mode [ 22.361638][ T294] bridge_slave_0: entered promiscuous mode [ 22.380927][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.387983][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.395259][ T294] bridge_slave_1: entered allmulticast mode [ 22.401613][ T294] bridge_slave_1: entered promiscuous mode [ 22.542147][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.549565][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.556940][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.564003][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.572692][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.579743][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.587173][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.594387][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.619051][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.626144][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.633460][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.640522][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.657481][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.664649][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.672442][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.679473][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.693163][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.700811][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.708104][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.715950][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.724360][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.731610][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.738939][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.746554][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.771980][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.779238][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.786940][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.794001][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.802425][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.810576][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.824862][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.832037][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.877629][ T294] veth0_vlan: entered promiscuous mode [ 22.892286][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.899332][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.907051][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.914295][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.925898][ T295] veth0_vlan: entered promiscuous mode [ 22.942418][ T295] veth1_macvtap: entered promiscuous mode [ 22.953963][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.961056][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.974445][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.981504][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.989502][ T294] veth1_macvtap: entered promiscuous mode [ 23.026370][ T293] veth0_vlan: entered promiscuous mode [ 23.050124][ T293] veth1_macvtap: entered promiscuous mode [ 23.058337][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.092443][ T296] veth0_vlan: entered promiscuous mode [ 23.110160][ T316] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 23.131514][ T296] veth1_macvtap: entered promiscuous mode [ 23.155965][ T315] fuse: Bad value for 'fd' [ 23.175189][ T322] rust_binder: Write failure EFAULT in pid:4 [ 23.274810][ T340] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.440878][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.460444][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 23.520674][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.590351][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 23.596974][ T311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.608001][ T311] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 23.617999][ T311] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 23.621640][ T10] usb 4-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 23.627750][ T311] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 23.642084][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 23.655559][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 23.660697][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 23.660724][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.671188][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 23.682200][ T10] usb 4-1: config 0 descriptor?? [ 23.690650][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 23.707947][ T311] usb 1-1: SerialNumber: syz [ 23.713222][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 23.723478][ T31] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 23.732855][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.742592][ T320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 23.749778][ T320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 23.757869][ T311] hub 1-1:1.0: bad descriptor, ignoring hub [ 23.764138][ T31] usb 3-1: config 0 descriptor?? [ 23.769284][ T311] hub 1-1:1.0: probe with driver hub failed with error -5 [ 23.777393][ T31] usb 3-1: bad CDC descriptors [ 23.782880][ T31] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 23.790908][ T31] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 23.797395][ T31] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 23.960351][ T320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 23.967566][ T320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 23.990419][ T31] usb 3-1: USB disconnect, device number 2 [ 24.100869][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.108358][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.115812][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.123160][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.130774][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.138106][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.145729][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.153164][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.160570][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.167890][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.175237][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.182571][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.189912][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.197300][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.204713][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.213476][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.221331][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.228651][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.236034][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.243658][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.251034][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.258354][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.265690][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.273323][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.281438][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.288762][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.296249][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.303974][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.311665][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.319095][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.327483][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.335713][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.341933][ T352] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 24.343229][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.358797][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.369161][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.378933][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.381668][ T311] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 24.388550][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.407872][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.430636][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.438001][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.445613][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.453357][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.463396][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.471515][ T10] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 24.479959][ T10] magicmouse 0003:05AC:0265.0001: hidraw0: USB HID v0.09 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 24.491850][ T10] magicmouse 0003:05AC:0265.0001: magicmouse input not registered [ 24.502820][ T10] magicmouse 0003:05AC:0265.0001: probe with driver magicmouse failed with error -12 [ 24.599805][ T377] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.677258][ T382] incfs: ino conflict with backing FS 3 [ 24.790380][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.850813][ T10] usb 1-1: USB disconnect, device number 2 [ 24.857108][ T10] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 24.880332][ T342] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.951539][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.962980][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.974276][ T311] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 24.983631][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.992558][ T311] usb 3-1: config 0 descriptor?? [ 25.041761][ T342] usb 2-1: unable to get BOS descriptor or descriptor too short [ 25.050772][ T342] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 25.062733][ T342] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 214, changing to 7 [ 25.076366][ T342] usb 2-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 25.085731][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.094081][ T342] usb 2-1: Product: syz [ 25.098496][ T342] usb 2-1: Manufacturer: syz [ 25.103966][ T342] usb 2-1: SerialNumber: syz [ 25.242006][ T311] usbhid 3-1:0.0: can't add hid device: -71 [ 25.253551][ T311] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 25.263401][ T311] usb 3-1: USB disconnect, device number 3 [ 25.303447][ T418] FAULT_INJECTION: forcing a failure. [ 25.303447][ T418] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 25.313261][ T381] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.21'. [ 25.317101][ T418] CPU: 0 UID: 0 PID: 418 Comm: syz.2.23 Not tainted syzkaller #0 17468f79762d441aae0c9e322606c977245b4172 [ 25.317129][ T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.317147][ T418] Call Trace: [ 25.317153][ T418] [ 25.317161][ T418] __dump_stack+0x21/0x30 [ 25.317194][ T418] dump_stack_lvl+0x140/0x1c0 [ 25.317216][ T418] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.317238][ T418] ? restore_altstack+0x2d5/0x500 [ 25.317256][ T418] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 25.317355][ T418] dump_stack+0x19/0x20 [ 25.317375][ T418] should_fail_ex+0x3c2/0x510 [ 25.317395][ T418] should_fail+0xf/0x20 [ 25.317411][ T418] should_fail_usercopy+0x1e/0x30 [ 25.317431][ T418] _copy_from_user+0x20/0xa0 [ 25.317453][ T418] __ia32_sys_rt_sigreturn+0x272/0x830 [ 25.317471][ T418] ? _raw_spin_unlock_irq+0x45/0x70 [ 25.317489][ T418] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 25.317510][ T418] ? __kasan_check_read+0x15/0x20 [ 25.317528][ T418] x64_sys_call+0x2c14/0x2ee0 [ 25.317544][ T418] do_syscall_64+0x57/0xf0 [ 25.317566][ T418] ? clear_bhb_loop+0x50/0xa0 [ 25.317586][ T418] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.317607][ T418] RIP: 0033:0x7fe4cd13f219 [ 25.317627][ T418] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 25.317641][ T418] RSP: 002b:00007fe4ce031a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 25.317664][ T418] RAX: ffffffffffffffda RBX: 00007fe4cd425fa0 RCX: 00007fe4cd13f219 [ 25.317677][ T418] RDX: 00007fe4ce031a80 RSI: 00007fe4ce031bb0 RDI: 0000000000000021 [ 25.317688][ T418] RBP: 00007fe4ce032090 R08: 0000000000000000 R09: 0000000000000000 [ 25.317699][ T418] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 25.317710][ T418] R13: 00007fe4cd426038 R14: 00007fe4cd425fa0 R15: 00007ffc1d0c8a28 [ 25.317725][ T418] [ 25.542043][ T381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 25.635952][ T446] kvm: pic: non byte write [ 25.647767][ T342] usb 2-1: unknown interface protocol 0x6e, assuming v1 [ 25.655568][ T342] usb 2-1: skipping empty audio interface (v1) [ 25.665065][ T342] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 25.676540][ T342] usb 2-1: USB disconnect, device number 2 [ 25.687375][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.752262][ T453] FAULT_INJECTION: forcing a failure. [ 25.752262][ T453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 25.766294][ T453] CPU: 1 UID: 0 PID: 453 Comm: syz.2.26 Not tainted syzkaller #0 17468f79762d441aae0c9e322606c977245b4172 [ 25.766325][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.766336][ T453] Call Trace: [ 25.766341][ T453] [ 25.766349][ T453] __dump_stack+0x21/0x30 [ 25.766377][ T453] dump_stack_lvl+0x140/0x1c0 [ 25.766399][ T453] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.766423][ T453] ? _parse_integer+0x2e/0x40 [ 25.766441][ T453] ? kstrtoull+0x13b/0x1e0 [ 25.766458][ T453] dump_stack+0x19/0x20 [ 25.766480][ T453] should_fail_ex+0x3c2/0x510 [ 25.766500][ T453] should_fail+0xf/0x20 [ 25.766518][ T453] should_fail_usercopy+0x1e/0x30 [ 25.766538][ T453] _copy_from_user+0x20/0xa0 [ 25.766561][ T453] ___sys_sendmsg+0x1c7/0x370 [ 25.766580][ T453] ? __sys_sendmsg+0x2a0/0x2a0 [ 25.766597][ T453] ? proc_fail_nth_write+0x184/0x220 [ 25.766622][ T453] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 25.766649][ T453] ? __fget_files+0x2bc/0x330 [ 25.766671][ T453] __x64_sys_sendmsg+0x206/0x2e0 [ 25.766689][ T453] ? fput+0x1a4/0x230 [ 25.766715][ T453] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 25.766732][ T453] ? ksys_write+0x1f3/0x260 [ 25.766752][ T453] ? __kasan_check_read+0x15/0x20 [ 25.766777][ T453] x64_sys_call+0x2a4c/0x2ee0 [ 25.766793][ T453] do_syscall_64+0x57/0xf0 [ 25.766812][ T453] ? clear_bhb_loop+0x50/0xa0 [ 25.766834][ T453] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.766855][ T453] RIP: 0033:0x7fe4cd19de99 [ 25.766871][ T453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.766885][ T453] RSP: 002b:00007fe4ce032028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 25.766905][ T453] RAX: ffffffffffffffda RBX: 00007fe4cd425fa0 RCX: 00007fe4cd19de99 [ 25.766923][ T453] RDX: 0000000000020800 RSI: 0000200000000100 RDI: 0000000000000003 [ 25.766935][ T453] RBP: 00007fe4ce032090 R08: 0000000000000000 R09: 0000000000000000 [ 25.766947][ T453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.766958][ T453] R13: 00007fe4cd426038 R14: 00007fe4cd425fa0 R15: 00007ffc1d0c8a28 [ 25.766974][ T453] [ 26.018351][ T36] kauditd_printk_skb: 88 callbacks suppressed [ 26.018368][ T36] audit: type=1400 audit(1784266459.990:162): avc: denied { setopt } for pid=458 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.075906][ T36] audit: type=1400 audit(1784266460.050:163): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 26.103749][ T461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=461 comm=syz.0.29 [ 26.116975][ T36] audit: type=1400 audit(1784266460.090:164): avc: denied { read } for pid=460 comm="syz.0.29" dev="nsfs" ino=4026532314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.138724][ T36] audit: type=1400 audit(1784266460.090:165): avc: denied { open } for pid=460 comm="syz.0.29" path="net:[4026532314]" dev="nsfs" ino=4026532314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.162741][ T36] audit: type=1400 audit(1784266460.090:166): avc: denied { create } for pid=460 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.183662][ T36] audit: type=1400 audit(1784266460.090:167): avc: denied { setopt } for pid=460 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.205284][ T36] audit: type=1400 audit(1784266460.140:168): avc: denied { ioctl } for pid=463 comm="syz.0.30" path="socket:[3547]" dev="sockfs" ino=3547 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.232584][ T36] audit: type=1400 audit(1784266460.140:169): avc: denied { create } for pid=463 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.253159][ T36] audit: type=1400 audit(1784266460.140:170): avc: denied { setopt } for pid=463 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.273670][ T36] audit: type=1400 audit(1784266460.140:171): avc: denied { bind } for pid=463 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.293282][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 26.314088][ T9] usb 4-1: USB disconnect, device number 2 [ 26.335937][ T294] ------------[ cut here ]------------ [ 26.341493][ T294] WARNING: CPU: 0 PID: 294 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 26.350877][ T294] Modules linked in: [ 26.354787][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Not tainted syzkaller #0 17468f79762d441aae0c9e322606c977245b4172 [ 26.366482][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.376729][ T294] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 26.382439][ T294] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 83 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 36 d0 3e ff <0f> 0b e9 3e ff ff ff e8 2a d0 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 26.402289][ T294] RSP: 0018:ffffc9000118fb88 EFLAGS: 00010293 [ 26.408371][ T294] RAX: ffffffff8248a1ba RBX: 0000000000000000 RCX: ffff888100ab2600 [ 26.416399][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.424407][ T294] RBP: ffffc9000118fbb0 R08: ffff888110541a1f R09: 1ffff110220a8343 [ 26.432507][ T294] R10: dffffc0000000000 R11: ffffed10220a8344 R12: 0000000000000000 [ 26.440822][ T294] R13: dffffc0000000000 R14: ffff888110541980 R15: ffff8881107e2bb0 [ 26.448808][ T294] FS: 000055555c21b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.457885][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.464526][ T294] CR2: 000055555c23e958 CR3: 0000000126bb0000 CR4: 00000000003526b0 [ 26.472549][ T294] Call Trace: [ 26.475831][ T294] [ 26.478759][ T294] ovl_do_remove+0x824/0xd10 [ 26.483567][ T294] ? ovl_set_redirect+0x780/0x780 [ 26.488622][ T294] ? __cfi_down_write+0x10/0x10 [ 26.493534][ T294] ovl_rmdir+0x1e/0x30 [ 26.497828][ T294] vfs_rmdir+0x3db/0x560 [ 26.502132][ T294] incfs_kill_sb+0x102/0x220 [ 26.506732][ T294] deactivate_locked_super+0xd2/0x270 [ 26.512236][ T294] deactivate_super+0xb8/0xe0 [ 26.516931][ T294] cleanup_mnt+0x438/0x4d0 [ 26.521424][ T294] __cleanup_mnt+0x1d/0x40 [ 26.527438][ T294] task_work_run+0x1e8/0x260 [ 26.532310][ T294] ? __cfi_task_work_run+0x10/0x10 [ 26.537442][ T294] ? __x64_sys_umount+0x12e/0x180 [ 26.542936][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.549229][ T294] resume_user_mode_work+0x35/0x50 [ 26.554392][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 26.559877][ T294] do_syscall_64+0x63/0xf0 [ 26.564347][ T294] ? clear_bhb_loop+0x50/0xa0 [ 26.569044][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.576997][ T294] RIP: 0033:0x7ff6fe59f0d7 [ 26.581443][ T294] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.602477][ T294] RSP: 002b:00007ffd4f6ca168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.611093][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff6fe59f0d7 [ 26.619422][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4f6ca220 [ 26.628142][ T294] RBP: 00007ffd4f6ca220 R08: 00007ffd4f6cb220 R09: 00000000ffffffff [ 26.637002][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4f6cb310 [ 26.645040][ T294] R13: 00007ff6fe63330a R14: 0000000000006062 R15: 00007ffd4f6cc3e0 [ 26.653281][ T294] [ 26.656615][ T294] ---[ end trace 0000000000000000 ]--- [ 26.663026][ T294] ------------[ cut here ]------------ [ 26.668678][ T294] WARNING: CPU: 1 PID: 294 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 26.678037][ T294] Modules linked in: [ 26.682097][ T294] CPU: 1 UID: 0 PID: 294 Comm: syz-executor Tainted: G W syzkaller #0 17468f79762d441aae0c9e322606c977245b4172 [ 26.696446][ T294] Tainted: [W]=WARN [ 26.700454][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.711047][ T294] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 26.716729][ T294] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 83 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 36 d0 3e ff <0f> 0b e9 3e ff ff ff e8 2a d0 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 26.737186][ T294] RSP: 0018:ffffc9000118fb88 EFLAGS: 00010293 [ 26.743591][ T294] RAX: ffffffff8248a1ba RBX: 0000000000000000 RCX: ffff888100ab2600 [ 26.751936][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.759917][ T294] RBP: ffffc9000118fbb0 R08: ffff888110541a1f R09: 1ffff110220a8343 [ 26.760726][ T10] usb 3-1: too many configurations: 188, using maximum allowed: 8 [ 26.769080][ T294] R10: dffffc0000000000 R11: ffffed10220a8344 R12: 0000000000000000 [ 26.778594][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 26.785359][ T294] R13: dffffc0000000000 R14: ffff888110541980 R15: ffff8881107e2bb0 [ 26.794199][ T10] usb 3-1: can't read configurations, error -61 [ 26.801598][ T294] FS: 000055555c21b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.816911][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.823551][ T294] CR2: 00007f6df0deb580 CR3: 0000000126bb0000 CR4: 00000000003526b0 [ 26.831579][ T294] Call Trace: [ 26.834949][ T294] [ 26.837884][ T294] ovl_do_remove+0x824/0xd10 [ 26.842508][ T294] ? ovl_set_redirect+0x780/0x780 [ 26.847549][ T294] ? __cfi_down_write+0x10/0x10 [ 26.852432][ T294] ovl_rmdir+0x1e/0x30 [ 26.856509][ T294] vfs_rmdir+0x3db/0x560 [ 26.861059][ T294] incfs_kill_sb+0x197/0x220 [ 26.865673][ T294] deactivate_locked_super+0xd2/0x270 [ 26.871100][ T294] deactivate_super+0xb8/0xe0 [ 26.875826][ T294] cleanup_mnt+0x438/0x4d0 [ 26.880371][ T294] __cleanup_mnt+0x1d/0x40 [ 26.884813][ T294] task_work_run+0x1e8/0x260 [ 26.889408][ T294] ? __cfi_task_work_run+0x10/0x10 [ 26.894589][ T294] ? __x64_sys_umount+0x12e/0x180 [ 26.899723][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.905144][ T294] resume_user_mode_work+0x35/0x50 [ 26.910414][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 26.915975][ T294] do_syscall_64+0x63/0xf0 [ 26.920559][ T294] ? clear_bhb_loop+0x50/0xa0 [ 26.925267][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.933119][ T294] RIP: 0033:0x7ff6fe59f0d7 [ 26.937546][ T294] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.958218][ T294] RSP: 002b:00007ffd4f6ca168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.960408][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 26.966692][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff6fe59f0d7 [ 26.982173][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4f6ca220 [ 26.990895][ T294] RBP: 00007ffd4f6ca220 R08: 00007ffd4f6cb220 R09: 00000000ffffffff [ 26.998972][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4f6cb310 [ 27.007010][ T294] R13: 00007ff6fe63330a R14: 0000000000006062 R15: 00007ffd4f6cc3e0 [ 27.015213][ T294] [ 27.018232][ T294] ---[ end trace 0000000000000000 ]--- [ 27.061562][ T476] ip6gretap0: entered promiscuous mode [ 27.067166][ T476] ip6gretap0: entered allmulticast mode [ 27.131026][ T10] usb 3-1: too many configurations: 188, using maximum allowed: 8 [ 27.140040][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 27.147715][ T10] usb 3-1: can't read configurations, error -61 [ 27.154143][ T10] usb usb3-port1: attempt power cycle [ 27.490376][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 27.511202][ T10] usb 3-1: too many configurations: 188, using maximum allowed: 8 [ 27.520336][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 27.528028][ T10] usb 3-1: can't read configurations, error -61 [ 27.660716][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 27.681167][ T10] usb 3-1: too many configurations: 188, using maximum allowed: 8 [ 27.691375][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 27.700017][ T10] usb 3-1: can't read configurations, error -61 [ 27.706618][ T10] usb usb3-port1: unable to enumerate USB device