last executing test programs: 357.164041ms ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x1) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 64) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f0000000840)={@val={0x0, 0x22f0}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, '\x00\a\x00', 0x18, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x4b, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x1f, 0x3}}]}]}}}}}}, 0x52) (async) sendfile(r2, r2, 0x0, 0x2000009) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x12100) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r10 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) (async) r11 = fsmount(r10, 0x0, 0xd) prctl$PR_SET_THP_DISABLE(0x41, 0x2) (async) fchdir(r11) open(&(0x7f0000000000)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x8080, 0x4) (async) close_range(r9, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r6, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x2000, 0x1ff, 0x4, 0x6, 0x0, [{0xfa, 0x6, 0x79, '\x00', 0x85}, {0x0, 0x0, 0x7, '\x00', 0x5}, {0x6, 0x5, 0x2, '\x00', 0x20}, {0x2, 0x6, 0x1, '\x00', 0x3}, {0xa, 0x9, 0xe, '\x00', 0xd}, {0x2, 0x77, 0x5, '\x00', 0x55}, {0x6, 0x7, 0xa}, {0x1, 0x8, 0x8f, '\x00', 0xf8}, {0x38, 0xe, 0x6, '\x00', 0x5}, {0x6, 0x5, 0xd, '\x00', 0x7}, {0xf, 0x0, 0x86, '\x00', 0x3}, {0x5, 0x1, 0x9, '\x00', 0x9}, {0x92, 0x4, 0x4, '\x00', 0x9}, {0x4, 0x7, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x7f, '\x00', 0x6}, {0xc0, 0x0, 0x1, '\x00', 0xc6}, {0x1, 0x9e, 0x4, '\x00', 0x7}, {0xa, 0xe, 0x8, '\x00', 0xfc}, {0x8, 0x0, 0x9, '\x00', 0x3}, {0xc, 0xfe, 0x1, '\x00', 0x7}, {0x9, 0x70, 0x5, '\x00', 0x60}, {0xe, 0x9, 0x81, '\x00', 0x9}, {0x2, 0x80, 0x8, '\x00', 0x40}, {0x3, 0x0, 0x3, '\x00', 0x62}]}}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc800}, 0x40) 306.642373ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006f7ffffffffffffff24ac14142600e5ffffffffffff0100"], 0x70}, 0x1, 0x7}, 0x0) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r8, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x9e, 0xd, 0x0, 0x3, 0x3, 0x9, 0x2ca, 0x38, 0x25e, 0x404, 0x0, 0x20, 0x2, 0xfff8, 0x3ff, 0x200}, [{0x6474e551, 0x7, 0x0, 0x4c9, 0x40, 0x20000000, 0xb8, 0x2}, {0x6474e551, 0xf, 0x8, 0x101, 0xffffffff, 0x3, 0x3, 0x8000}]}, 0x78) close(r8) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r9 = dup(r7) syz_ublk_setup_queues(r9, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 293.775163ms ago: executing program 2 (id=3): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x11c, 0x4, 0x3e0, 0x108, 0x1f0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100, 0x108}}}, {{@arp={@rand_addr, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = eventfd(0x8e) io_submit(0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x1, 0x106, r0, 0x0, 0x0, 0x1}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_io_uring_setup(0x36f7, &(0x7f00000002c0)={0x0, 0x612, 0x10000, 0x0, 0x1e6}, 0x0, 0x0, 0x0) 209.733805ms ago: executing program 3 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0x3, 0x6, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfa, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x47cb, 0x80000001]}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000840)={0x1, 0x0, [{0xbf9, 0x0, 0x2000000000}]}) 209.474955ms ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffefffd) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[], [{@euid_eq}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000440)='./file1\x00') rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(r5, &(0x7f00000003c0)='./file2\x00', 0x134) getpeername(r5, &(0x7f0000000240)=@caif=@util, &(0x7f00000002c0)=0x80) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/241, 0xf1}], 0x1, 0x176, 0x402) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_audit(0x10, 0x3, 0x9) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x7f, 0x6, @random="f8c08216b2eb"}, 0x14) write(r7, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 198.087225ms ago: executing program 0 (id=6): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="ac3b0001640101010100000000000000"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) r5 = socket$pppl2tp(0x18, 0x1, 0x1) dup2(r5, r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 135.198127ms ago: executing program 2 (id=7): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000900)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@seclabel}, {@euid_lt}], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents64(r0, 0x0, 0x22) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x34, 0x0, 0x30, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x35, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x61, 0x39, 0x65, 0x66, 0x30, 0x36, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff01ac2233445566778899aaaabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x37, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x39, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899eabbccddeeff00112233445533445766778871aabbccddeeff00e1ffffff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x61, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r2, r1) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 62.868889ms ago: executing program 3 (id=8): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket(0xf, 0x803, 0x0) 62.499729ms ago: executing program 3 (id=9): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008160c020000000000000109022d000100007001090400590b03000000092109000301222c000905810308000504000905ea02ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$rtl8150(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="40122c00"], 0x0, 0x0, 0x0, 0x0}, 0x0) 32.234539ms ago: executing program 2 (id=10): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x16) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f0000000600)=""/118, 0x76}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f0000000fc0)=""/4108, 0x100c}], 0x4}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x800003}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xaa}, {{0x0, 0x0, 0x0}, 0x80}], 0x7, 0x40000020, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x4040) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x600000000000007, 0x200) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x13, 0x11, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x24, 0x28, {0x28, 0xe, "f70ba3810b0000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/171, 0xab}], 0x2) sendto$packet(r5, &(0x7f0000000240)="504d3a443d0b5714d4a1d668e8d8b4a11933b1199223666fcedf8ec7e5585c7975f8c002ec49f01eb40ada44802c409a22daacc5b775afa0b72cbd0ed3a926cc95f2ce7f558339bfad8bf75a81ee14447c82cac0acc961dce077f2d9d39b985713a03c", 0x63, 0x20004014, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x81, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x81, 0x9, 0x3, 0x0, 0x0, 0xfe, {0x9, 0x21, 0x81, 0x0, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x8, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=11): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x8001) sendmsg$nl_generic(r0, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="f80000002f0000012dbd7000ffdbdf251100000014001600fc000000000000000000000000000001e754e04d6aa8f1584caa6531005f9dfc3dc06c071d6c5b40474d10bad60670aadc787d959b2874b6eab5bcbd717b105b9fcd603a0a94117ba160825603bcbd084dfd3496b5d9d7d6b68c29d205a1f891739b4ee3c8cd34b509b89ad950e45c4338a62aa66494e14ee0bdba777caecdb26ad79772482d7f71b70c002c00080000000000000047000c800c001a0066e9046d8cb7e2baa3ad5c6d8601641504000000000000008e552bf8bdae3bbf0bc575a86600609a60de87d091c8ca9a479c827db74fe0d85d0caab897e0212a49f78b16abe8ea08003000fcffffff000000003a3ce1695e94130d5c211e08b1ddb83b9ec91d248c9bd60d3796dcb255f14d"], 0xf8}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000000c0000000c000180080001"], 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000159e99eabc6934d95000288"], 0x48}}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) write(r3, &(0x7f0000000640)="700aaac6486c1664a1ab8699333f4970964c04a2582903c37bb07661648c9efd124f9697488c22f5753537a519a91e5dc6a3fef0de0b95cc92207c5daa319c894cf2eb71990aad03f4752eb04628116dedaacdfed65708c91f1ade15ba515253f01811a17717a6dd1db0cc48ee97259f6af0cccfd9a1209c886b2248ab86d279f8ee349b9fcf8a47e1251997ee35b8961d90070f39decaddce32e9f07fbace", 0x9f) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='dummy_udc.0\n', 0xc) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_opts(r6, 0x29, 0x39, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x80}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="980000000001010b00000000000000000300000728001700000000010000025100000ffe0000c9cb000000564cac085e0e5aa40100000b27000000000000000600000005540019800800010004000000080001000000000008000200c0000000080002000000000008000100280000000800020020080000080001008008000008000100100000000800020001000000080001009603000008000c4000000004d2557b82984871317a66215bb542bdc79c0e1d61"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0xc055) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f0000000140)={0x2, {{0x2, 0x4e22, @multicast1}}}, 0x88) mmap$IORING_OFF_SQ_RING(0x0, 0x4c00000, 0x3000007, 0x110, 0xffffffffffffffff, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) ioctl$RTC_IRQP_READ(r8, 0x8008700b, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.51' (ED25519) to the list of known hosts. [ 27.961941][ T36] audit: type=1400 audit(1786265252.890:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.963010][ T286] cgroup: Unknown subsys name 'net' [ 27.985245][ T36] audit: type=1400 audit(1786265252.890:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.016059][ T36] audit: type=1400 audit(1786265252.920:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.016374][ T286] cgroup: Unknown subsys name 'devices' [ 28.137348][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.144703][ T286] cgroup: Unknown subsys name 'rlimit' [ 28.255960][ T36] audit: type=1400 audit(1786265253.190:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.281774][ T36] audit: type=1400 audit(1786265253.190:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.309737][ T36] audit: type=1400 audit(1786265253.190:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.321840][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.349372][ T36] audit: type=1400 audit(1786265253.280:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 28.376493][ T36] audit: type=1400 audit(1786265253.280:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.438337][ T36] audit: type=1400 audit(1786265253.370:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.467277][ T36] audit: type=1400 audit(1786265253.370:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.467539][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.844338][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.851686][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.858958][ T293] bridge_slave_0: entered allmulticast mode [ 29.866004][ T293] bridge_slave_0: entered promiscuous mode [ 29.875724][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.882987][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.890598][ T293] bridge_slave_1: entered allmulticast mode [ 29.897537][ T293] bridge_slave_1: entered promiscuous mode [ 29.970524][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.977769][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.985123][ T296] bridge_slave_0: entered allmulticast mode [ 29.993070][ T296] bridge_slave_0: entered promiscuous mode [ 30.009249][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.016979][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.025219][ T296] bridge_slave_1: entered allmulticast mode [ 30.033309][ T296] bridge_slave_1: entered promiscuous mode [ 30.071433][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.079006][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.086149][ T294] bridge_slave_0: entered allmulticast mode [ 30.092356][ T294] bridge_slave_0: entered promiscuous mode [ 30.109877][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.117165][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.124222][ T294] bridge_slave_1: entered allmulticast mode [ 30.130648][ T294] bridge_slave_1: entered promiscuous mode [ 30.173940][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.181165][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.188328][ T295] bridge_slave_0: entered allmulticast mode [ 30.194621][ T295] bridge_slave_0: entered promiscuous mode [ 30.201179][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.208412][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.215666][ T295] bridge_slave_1: entered allmulticast mode [ 30.222002][ T295] bridge_slave_1: entered promiscuous mode [ 30.329702][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.338475][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.346177][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.353584][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.373279][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.380570][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.387970][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.395058][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.424460][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.431580][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.439093][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.446169][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.476649][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.485921][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.495995][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.506242][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.554979][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.562990][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.579896][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.587032][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.601388][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.608509][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.626226][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.633583][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.663865][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.670979][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.679152][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.686499][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.701779][ T293] veth0_vlan: entered promiscuous mode [ 30.714493][ T296] veth0_vlan: entered promiscuous mode [ 30.731758][ T295] veth0_vlan: entered promiscuous mode [ 30.746862][ T295] veth1_macvtap: entered promiscuous mode [ 30.764058][ T296] veth1_macvtap: entered promiscuous mode [ 30.773918][ T293] veth1_macvtap: entered promiscuous mode [ 30.814971][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.841131][ T294] veth0_vlan: entered promiscuous mode [ 30.893695][ T294] veth1_macvtap: entered promiscuous mode [ 30.920496][ T319] dummy_hcd dummy_hcd.0: remove, state 4 [ 30.926830][ T319] usb usb1: USB disconnect, device number 1 [ 30.939107][ T319] dummy_hcd dummy_hcd.0: stopped [ 30.946582][ T319] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 30.964311][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.014432][ T319] process 'syz.1.2' launched './file0' with NULL argv: empty string added [ 31.026048][ T319] Invalid argument reading file caps for ./file0 [ 31.112326][ T333] overlayfs: failed to resolve 'seclabel': -2 [ 31.123067][ T333] overlayfs: overlapping lowerdir path [ 31.187004][ T340] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.212446][ T342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=342 comm=syz.0.11 [ 31.239858][ T342] Zero length message leads to an empty skb [ 31.249277][ T342] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 31.263256][ T342] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 31.271796][ T342] CPU: 0 UID: 0 PID: 342 Comm: syz.0.11 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 31.284321][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.295635][ T342] RIP: 0010:dummy_set_selfpowered+0xc0/0x160 [ 31.302289][ T342] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3a c8 26 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 21 c8 26 fe 41 be 58 11 00 00 4d [ 31.322570][ T342] RSP: 0018:ffffc9000b7c7738 EFLAGS: 00010246 [ 31.328755][ T342] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 31.337084][ T342] RDX: ffff88810bb23900 RSI: 0000000000000003 RDI: 0000000000000005 [ 31.346221][ T342] RBP: ffffc9000b7c7758 R08: ffff888101652067 R09: 1ffff110202ca40c [ 31.354341][ T342] R10: 0000000000000000 R11: ffffffff83b96d40 R12: dffffc0000000000 [ 31.363147][ T342] R13: ffff8881134af4f0 R14: ffff888108291160 R15: 0000000000000000 [ 31.371527][ T342] FS: 00007f7576eca6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.380731][ T342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.388676][ T342] CR2: 0000001b2f312ff8 CR3: 000000010fb86000 CR4: 00000000003526b0 [ 31.396971][ T342] Call Trace: [ 31.400466][ T342] [ 31.403445][ T342] ? __cfi_dummy_set_selfpowered+0x10/0x10 [ 31.409571][ T342] usb_gadget_set_selfpowered+0x84/0x1a0 [ 31.415852][ T342] composite_dev_prepare+0x2f8/0x3e0 [ 31.421389][ T342] ? up_write+0x66/0x280 [ 31.426102][ T342] configfs_composite_bind+0xa8/0x15f0 [ 31.432482][ T342] ? __kasan_check_write+0x18/0x20 [ 31.438075][ T342] ? mutex_unlock+0x90/0x240 [ 31.444470][ T342] ? kernfs_put+0x314/0x360 [ 31.449288][ T342] ? __cfi_configfs_composite_bind+0x10/0x10 [ 31.456259][ T342] gadget_bind_driver+0x301/0x9c0 [ 31.461436][ T342] ? sysfs_create_link+0x6c/0x90 [ 31.466443][ T342] ? __cfi_gadget_bind_driver+0x10/0x10 [ 31.472168][ T342] really_probe+0x2e1/0x8b0 [ 31.477012][ T342] __driver_probe_device+0x193/0x280 [ 31.482440][ T342] driver_probe_device+0x54/0x3f0 [ 31.487507][ T342] __driver_attach+0x422/0x5e0 [ 31.492416][ T342] bus_for_each_dev+0x249/0x2d0 [ 31.497321][ T342] ? __cfi___driver_attach+0x10/0x10 [ 31.503119][ T342] ? __cfi_bus_for_each_dev+0x10/0x10 [ 31.508633][ T342] ? _raw_spin_unlock+0x45/0x60 [ 31.513546][ T342] ? klist_add_tail+0x1dd/0x220 [ 31.518800][ T342] driver_attach+0x46/0x50 [ 31.524397][ T342] bus_add_driver+0x393/0x730 [ 31.529224][ T342] driver_register+0x2b7/0x3c0 [ 31.534040][ T342] usb_gadget_register_driver_owner+0xfc/0x270 [ 31.540586][ T342] gadget_dev_desc_UDC_store+0x224/0x350 [ 31.546712][ T342] configfs_write_iter+0x32f/0x490 [ 31.552148][ T342] ? __cfi_gadget_dev_desc_UDC_store+0x10/0x10 [ 31.558382][ T342] vfs_write+0x75f/0xfd0 [ 31.562673][ T342] ? __cfi_vfs_write+0x10/0x10 [ 31.567478][ T342] ? __cfi_mutex_lock+0x10/0x10 [ 31.572391][ T342] ksys_write+0x145/0x260 [ 31.576756][ T342] ? xfd_validate_state+0x68/0x140 [ 31.582426][ T342] ? __cfi_ksys_write+0x10/0x10 [ 31.587406][ T342] ? __kasan_check_write+0x18/0x20 [ 31.592658][ T342] ? fpregs_restore_userregs+0x11c/0x260 [ 31.599049][ T342] __x64_sys_write+0x7f/0x90 [ 31.604655][ T342] x64_sys_call+0x271c/0x2ee0 [ 31.610391][ T342] do_syscall_64+0x57/0xf0 [ 31.616433][ T342] ? clear_bhb_loop+0x50/0xa0 [ 31.622208][ T342] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.628514][ T342] RIP: 0033:0x7f7575f9e0d9 [ 31.633094][ T342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.653878][ T342] RSP: 002b:00007f7576eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 31.662508][ T342] RAX: ffffffffffffffda RBX: 00007f7576225fa0 RCX: 00007f7575f9e0d9 [ 31.670516][ T342] RDX: 000000000000000c RSI: 0000200000000600 RDI: 0000000000000009 [ 31.680004][ T342] RBP: 00007f7576035024 R08: 0000000000000000 R09: 0000000000000000 [ 31.688631][ T342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.697018][ T342] R13: 00007f7576226038 R14: 00007f7576225fa0 R15: 00007ffc9431a9e8 [ 31.705319][ T342] [ 31.708394][ T342] Modules linked in: [ 31.713214][ T342] ---[ end trace 0000000000000000 ]--- [ 31.743697][ T342] RIP: 0010:dummy_set_selfpowered+0xc0/0x160 [ 31.755712][ T342] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3a c8 26 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 21 c8 26 fe 41 be 58 11 00 00 4d [ 31.779396][ T342] RSP: 0018:ffffc9000b7c7738 EFLAGS: 00010246 [ 31.787039][ T342] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 31.796502][ T342] RDX: ffff88810bb23900 RSI: 0000000000000003 RDI: 0000000000000005 [ 31.804664][ T342] RBP: ffffc9000b7c7758 R08: ffff888101652067 R09: 1ffff110202ca40c [ 31.814830][ T342] R10: 0000000000000000 R11: ffffffff83b96d40 R12: dffffc0000000000 [ 31.824610][ T342] R13: ffff8881134af4f0 R14: ffff888108291160 R15: 0000000000000000 [ 31.834014][ T342] FS: 00007f7576eca6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.843904][ T342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.851237][ T342] CR2: 00007f91358abd58 CR3: 000000010fb86000 CR4: 00000000003526b0 [ 31.859964][ T342] Kernel panic - not syncing: Fatal exception [ 31.866460][ T342] Kernel Offset: disabled [ 31.870825][ T342] Rebooting in 86400 seconds..