last executing test programs: 27.247772925s ago: executing program 3 (id=551): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) (async, rerun: 32) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) (rerun: 32) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000840)={{r0}, r2, 0x12, @inherit={0x60, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000300000000000000719e000000000000546600000000000003000000000000000200000000000000045b0000000000000600000000000000040000000000000002000000000000000900000000000000743b00000000000035971efd9f2474522747c499f73f300071c35f69a26e04cafc6fe4333a6587e6393e45d1bb735d8d008d860d31d61a7d4265be2f3c75b526da889367a34e7a548e550431e475051902ffbd87e72958b31633e85f0a37f0169a4072063c856d4297be779830cfc60655423f062cea4f9f5e751ab395371c1e"]}, @name="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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r3, 0x0, 0x22, 0x0, &(0x7f0000000280)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e121a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 27.225596246s ago: executing program 3 (id=552): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x8004, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000000c0)=@dstopts={0x87, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x8}]}, 0x10) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@code={0x1, 0x6a, {"c423657e130cf30f01df36f00fc1a000000000470f01738766b8dc008ec00f23f566baf80cb8e6bc6b82ef66bafc0cecb9eb0a0000b89e004ce8ba9bb7f3190f3066baa100b87467c9bbefb9800000c00f3235001000000f30"}}, @code={0x1, 0x56, {"8fc878c12450000f015e00c7442400b3000000c744240200500000ff1c24410f32c4e1eddb940a0000000065470f89418d0c70c46179e7a918000000670f08defe36440f08"}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x80000000, 0x43}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x7ff}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x52, {"420f2285c421c1e32a66baa100ec66bad104edc441f91102440f20c03505000000440f22c0c4c10971d383f3410f09c4617e2cc8b805000000b9a00000000f01c1"}}, @cpuid={0x2, 0x18, {0x6, 0x2}}, @code={0x1, 0x75, {"c4017c53cff20f32c42279bde8440f07c74424008e000000c74424025d550000ff2c24664f0f7ed148b800000100000000000f23d00f21f835000000050f23f8c442819aa100000080470f3248b803000000000000000f23d80f21f835c00000500f23f8"}}, @cpuid={0x2, 0x18, {0x7, 0x5}}, @code={0x1, 0x67, {"0f01c566baf80cb88e46d98bef66bafc0cb000ee460ff6c4b99e000000b8b4000000ba000000000f3041f6ef66430ffaaa738300008f4948942ab952090000b8b5d80000ba000000000f308fc938017cfc00440f01ca"}}, @cpuid={0x2, 0x18, {0x1, 0x5}}, @cpuid={0x2, 0x18, {0xa, 0x9}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0xfffffe72, {0x31df0604, 0x35}}, @code={0x1, 0x75, {"6547aec74424001d000000c7442402ba7b6683ff1c24c74424000c000000c74424024c48c747c7442406000000000f0114243666400f5803c74424000e000000c7442402e3fb0000ff2c243e0f30450f35430f017e0db9510b00000f3266ba2100b0f8ee"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x64, 0x7}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x1000}, @cpuid={0x2, 0x18, {0x0, 0x3}}, @code={0x1, 0x63, {"66ba200066edc744240056000000c744240208000000c7442406000000000f011424450f1c21c442750312b8010000000f01d947ded901acac06800000420f2361b805000000b90d0000000f01c166f245f4"}}], 0x45e}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000140)=0x4000) 26.96977048s ago: executing program 3 (id=555): r0 = socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x5, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) mmap(&(0x7f0000850000/0x2000)=nil, 0x2000, 0x1, 0x20010, r0, 0xdc511000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) pwritev2(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="2de8", 0x2}], 0x1, 0xffffffff, 0xb, 0x16) socket$key(0xf, 0x3, 0x2) (async) socket$unix(0x1, 0x5, 0x0) (async) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) (async) mmap(&(0x7f0000850000/0x2000)=nil, 0x2000, 0x1, 0x20010, r0, 0xdc511000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x0, 0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x3) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) (async) pwritev2(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="2de8", 0x2}], 0x1, 0xffffffff, 0xb, 0x16) (async) 26.883304521s ago: executing program 3 (id=558): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) tee(r0, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) (async) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0xbcaaf1788315a778, &(0x7f0000000140)='\x9a\xb5\xbe1\x9cMP\xae\x93\x10\xb0\xcfv\xac\xdd\"\xd65\x01 \xef\x10\xd6%\xf4`cq\x1ddG\xd4BN\x15\xdaX\x03\xdc\xe9;hxX\xa1\xe7\xa3\rZ,\xbb\n\x92K\xd6\xc8\xf2\x97F&\xe0\xd3\xd3\x11 Y\x04\x82\x1a\xe5\x8d\xf4\xf1\xc7\x8eL\x03O\x9b\xf4\xa7\x04\n\xbc&\x1b\x88?\\~n*\x02\xef\xce\xe4\x9a|\xe1n\x86\x93\x92\xed\xc1\x1bv1\xbd\x85\xd1\xdbv>\x99\x82\x19\xf3\xe6\x17\'\xfc\x17\x8b\xf2\xba\xd8\xb2c\xeb\xffK\x9b\x1b\x0f\xf1\xa7[G\x89\xb7\x9dp#F1\x16\x8b\x11`\xcd[\x9c\xac\t)\xd8R\xc7\xac\xc8I?\xe4u\x8b\x81\xa3\xe4 \xfbt\xd5\\\x02\xab\x00E#o-v*\xff\xf0yTG\xca\'\xed.\x878\xc4\x81\x06\xe9\x7fL\xf6\xf0X\r\x1f\xaaq\xa5/\x91\xec\xc0,\x01Z\x91\xc3\x95\x14<\v>P\xe1\xff\x1d\x14\x9c\'\x95\x00\x00\x00\x00\xe6Jg\x8b\x85pT\x87\x89r\xd2\xafei\x84\x82O\xae\x80\xe2\xad\xac\xfa\xd8\xa4\xf6\x03\xb5\x18,\xc2\xae}\x11>\xce\xba\x8a0\a\x85g\xde\xde\xafT.\xa9V>o\xed\xca\xd6\xf0\x19\x90\xb4l\xff\x13\x14\xea;\x8f\x93wUoFE') (async) socket$key(0xf, 0x3, 0x2) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) recvmmsg(r1, 0x0, 0x0, 0x2000000022, 0x0) 26.806081113s ago: executing program 3 (id=559): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x6, 0x0, 0xa}, @flat=@binder={0x73622a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/54, 0x36, 0x1, 0x24}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x6, 0x0, 0xa}, @flat=@binder={0x73622a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/54, 0x36, 0x1, 0x24}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) (async) 26.805437713s ago: executing program 3 (id=560): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$DCCPDIAG_GETSOCK(r1, 0x0, 0x4000001) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r2) fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000001200), 0x44, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fowner_eq={'fowner', 0x3d, r3}}]}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r4, 0x407, 0x2000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) 11.743535851s ago: executing program 32 (id=560): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$DCCPDIAG_GETSOCK(r1, 0x0, 0x4000001) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r2) fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000001200), 0x44, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fowner_eq={'fowner', 0x3d, r3}}]}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r4, 0x407, 0x2000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) 1.672171264s ago: executing program 2 (id=1085): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x28, 0x20d6, 0xcb17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x89, 0x70, 0x8f, [{{0x9, 0x4, 0x0, 0x23, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x40, 0xfd, 0x1, {0x22, 0xd4d}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x6, 0xe7}}}}}]}}]}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x43, 0x81, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/144, 0x90}], 0x1, 0x78, 0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.194486632s ago: executing program 0 (id=1100): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030241d2418"]) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.145945483s ago: executing program 2 (id=1102): mkdir(&(0x7f00000000c0)='./bus\x00', 0xcd) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.121401863s ago: executing program 2 (id=1103): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x80108907, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, 0x0, &(0x7f0000000080)) 1.105706623s ago: executing program 2 (id=1104): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000180)='./bus/file0\x00', &(0x7f0000000840), 0x1044000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) poll(0x0, 0x0, 0xe4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000002300)=[{0x7, 0x0, 0x7, 0x5}]}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) 1.034205225s ago: executing program 0 (id=1105): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_clone3(&(0x7f0000000280)={0x10048000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x19}, &(0x7f0000000140)=""/115, 0x73, &(0x7f00000001c0)=""/67, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r1, &(0x7f0000000300)='mountinfo\x00') r3 = socket$packet(0x11, 0xa, 0x300) read$FUSE(r3, &(0x7f000000c3c0)={0x2020}, 0x73) sendfile(r0, r3, 0x0, 0x3) 520.755572ms ago: executing program 0 (id=1112): mkdir(&(0x7f00000000c0)='./bus\x00', 0xcd) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 491.760652ms ago: executing program 0 (id=1113): unshare(0x44040200) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x79, 0x3, 0xe, 0x6, 0xb79]}, &(0x7f0000000bc0)=0x54) open(&(0x7f0000000100)='./cgroup\x00', 0x65c081, 0x10) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x808081, 0x0) 418.185593ms ago: executing program 0 (id=1114): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000003000)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004014}, 0xc840) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 409.334744ms ago: executing program 0 (id=1116): getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@private=0xa010102, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x3506, 0x0, 0x0, 0xff, 0x0, 0x7}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@local, 0x0, 0x5e}, 0x2, @in=@rand_addr=0x64010102, 0x0, 0x1}]}]}, 0x17c}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r3, 0xc3d33000) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 359.211974ms ago: executing program 2 (id=1119): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10) sendmmsg$inet(r1, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}, {&(0x7f00000001c0)="9f189b8d5e6ee068cce816de05698d4fe01cdb8e875eefe3db5e153722b1745423f726b35f80b980f8a7e6cab9983bc947924f6d30813d0899d80c2cb6a3cb80a16f14c194157b98c823780ea180f5f304f5694e0b90569c14c118c5896396f9c79d867b5026d66ae9eda462f1233702f941cf239ec1bfe8c9ca3c5faa4c0efa368def9717a2da7e0cde5146db635972858964020d656353a476e01071bc9367c8ab8ee6b5ff6cd25be88a2326b81df502c8b117250afb4a1b9f205eac48359e3c4323ff3e32f2be7c235dfb3613995f704263f6085512d9e267d49f43cb", 0xde}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bdc2cadebaba4621", 0x77}, {&(0x7f0000000040)="dcf6c7a8594cbefed4f7b6af317a47ee47be6e2d4a61e5cc0a2a79081670698a39", 0x21}, {&(0x7f0000000380)="cebdd21fe03e57c125bd9c3965b579407c9962373117b122c45bf84c98a973ecb6b9ad663b6a07bdfb5c17a5a2cd48dc09da2f20c69872e6399874332704872ec2a432d22928522671038af0783ef06a2f8ef5bf4c1852cc25f1ab39b7c146d2cb25084504d5606202f98d0b03dc", 0x6e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="32012c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000006c0)="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", 0x14b}], 0x1}}], 0x3, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 358.141294ms ago: executing program 4 (id=1120): syz_clone3(&(0x7f0000000200)={0x206083100, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r1, &(0x7f0000002240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) madvise(&(0x7f0000211000/0x1000)=nil, 0x1000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 317.639985ms ago: executing program 2 (id=1121): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) (async) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) (async) prlimit64(0x0, 0x8, &(0x7f0000000180)={0x3}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x20, 0x3, 0x1, 0x40}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c000000080003", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) writev(r4, 0x0, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xe, 0x0, 0x0, '\x00', 0x400000000000008}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 317.100475ms ago: executing program 4 (id=1122): mkdir(&(0x7f00000000c0)='./bus\x00', 0xcd) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 289.614056ms ago: executing program 4 (id=1123): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f00000005c0)=""/182, 0xb6) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, 0x0) 230.221087ms ago: executing program 4 (id=1124): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000000c0)="a2e3ef") r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xffffffbf) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0xfffff000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, 0x0, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x4, {0x2, 0x4e20, @multicast1=0xe000cc02}}) read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000bc0)='\x00\x05\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbcQ=v-<\r\xd1?$\x8b\x17Bn\x17h\xee\x96\x99I\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hX1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x18\x8f\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\xde\xff\xff\x06\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8C\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7z\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz\x03\x00\x00\x00\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7V\xfe\x0e\x94\xb1\x15w\xc4\x9c\xb6s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\b\x02\xd5\xe9YE]\x8a\xb6n\x8f\x8dQ9\x13#\xed\x00\x00\x00\x00\x00') 208.628087ms ago: executing program 4 (id=1125): tkill(0x0, 0xa) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0xffffffffffffff4e, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT={0x0, 0x7, 0x1, 0x0, 0x8}]}, 0x18}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/61, 0x0, 0x1, 0x8}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 196.900287ms ago: executing program 4 (id=1126): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(0x0, &(0x7f0000000800)='./bus\x00', 0x0, 0x1004000, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x7, 0x80000006, 0x30, @empty, @empty, 0x40, 0x20, 0x0, 0xa7a}}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) r2 = getpid() futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file4\x00', &(0x7f0000000200)={{}, {0x0, 0xea60}}) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000dc0)={0x24, &(0x7f0000000c40)={0x40, 0xc, 0x2, {0x2, 0x4}}, 0x0, &(0x7f0000000d40), &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x68b}}}}, &(0x7f0000000f40)={0x2c, &(0x7f0000000e00)={0x40, 0x30, 0xe, "798b13a59dd0f22ac8c14c3178b8"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0xfc}, 0x0, &(0x7f0000000ec0), &(0x7f0000000f00)={0x20, 0x3, 0x1, 0x4}}) umount2(&(0x7f0000000040)='.\x00', 0x2) 130.601628ms ago: executing program 1 (id=1127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000380)="0f6ff3f2fc0f20e06635200000000f22e0b8320b8ed0baf80c66b808ff658466efbafc0cb80071ef2e0f01d1baf80c66b8857a018466efbafc0cb000ee66b93c0a000066b80000008066ba000000000f30baf80c66b801943f8e66efbafc0cecf2e0cf", 0x63}], 0x1, 0x14, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setresuid(0xee01, 0xee01, 0x0) r6 = socket(0x2, 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000240)="baf80c66b8b4803c8566efbafc0c66ed66b9320800000f32670f209666b93f0a00000f320f01c30f381e93ad81f30f352e0faef12e640f01d166b9800000c00f326635004000000f30"}], 0x1, 0x2, &(0x7f00000004c0)=[@cr4={0x1, 0x100404}], 0x1000000000000016) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0xffffffffffffff7a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x8d) fchdir(r9) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) fremovexattr(r10, &(0x7f00000002c0)=@random={'trusted.', '$+\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40003, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="f2ee224166b83e008ec0260f01c40f01c20f01f50f001d0000000036360f01c80f48c166ed", 0x25}], 0x1, 0xa, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r14 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r14, 0x4040ae9e, &(0x7f0000000140)={0x8200000000000000, 0x2000, 0x5, 0x8, 0x19}) 127.934988ms ago: executing program 1 (id=1128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x300, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048000}, 0x2000c095) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 127.026198ms ago: executing program 1 (id=1129): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10) sendmmsg$inet(r1, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}, {&(0x7f00000001c0)="9f189b8d5e6ee068cce816de05698d4fe01cdb8e875eefe3db5e153722b1745423f726b35f80b980f8a7e6cab9983bc947924f6d30813d0899d80c2cb6a3cb80a16f14c194157b98c823780ea180f5f304f5694e0b90569c14c118c5896396f9c79d867b5026d66ae9eda462f1233702f941cf239ec1bfe8c9ca3c5faa4c0efa368def9717a2da7e0cde5146db635972858964020d656353a476e01071bc9367c8ab8ee6b5ff6cd25be88a2326b81df502c8b117250afb4a1b9f205eac48359e3c4323ff3e32f2be7c235dfb3613995f704263f6085512d9e267d49f43cb", 0xde}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bdc2cadebaba4621", 0x77}, {&(0x7f0000000040)="dcf6c7a8594cbefed4f7b6af317a47ee47be6e2d4a61e5cc0a2a79081670698a39", 0x21}, {&(0x7f0000000380)="cebdd21fe03e57c125bd9c3965b579407c9962373117b122c45bf84c98a973ecb6b9ad663b6a07bdfb5c17a5a2cd48dc09da2f20c69872e6399874332704872ec2a432d22928522671038af0783ef06a2f8ef5bf4c1852cc25f1ab39b7c146d2cb25084504d5606202f98d0b03dc", 0x6e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="32012c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000006c0)="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", 0x14b}], 0x1}}], 0x3, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 113.820118ms ago: executing program 1 (id=1130): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f00000d0000/0x2000)=nil, 0x2000, 0x2, 0x50, r0, 0x2000) clock_getres(0xfffffffffffffff1, &(0x7f0000000040)) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0x246742, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000140), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) capset(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_type(r8, &(0x7f0000000240), 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4c24, @broadcast}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x187, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ff, 0x45, 0xd6}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 58.177059ms ago: executing program 1 (id=1131): sched_setscheduler(0x0, 0x1, 0x0) unshare(0x2040400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f0000000240)=ANY=[], 0xd0060) timer_create(0x3, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c008f353202c1d02fa220baa76636028d46395fb62ded9e641b3f68b8068144988d7f38"]) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r0, 0x0, 0x80000000) 0s ago: executing program 1 (id=1132): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x149) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r2, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xcd) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 21.833151][ T36] audit: type=1400 audit(1752721014.880:64): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.834633][ T280] cgroup: Unknown subsys name 'net' [ 21.855885][ T36] audit: type=1400 audit(1752721014.880:65): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.883176][ T36] audit: type=1400 audit(1752721014.910:66): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.883433][ T280] cgroup: Unknown subsys name 'devices' [ 22.030021][ T280] cgroup: Unknown subsys name 'hugetlb' [ 22.035668][ T280] cgroup: Unknown subsys name 'rlimit' [ 22.170173][ T36] audit: type=1400 audit(1752721015.220:67): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.193385][ T36] audit: type=1400 audit(1752721015.220:68): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.218228][ T36] audit: type=1400 audit(1752721015.220:69): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.229578][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.250227][ T36] audit: type=1400 audit(1752721015.300:70): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.275781][ T36] audit: type=1400 audit(1752721015.300:71): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.306806][ T36] audit: type=1400 audit(1752721015.360:72): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.332398][ T36] audit: type=1400 audit(1752721015.360:73): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.332455][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.206961][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.214031][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.221246][ T287] bridge_slave_0: entered allmulticast mode [ 23.227622][ T287] bridge_slave_0: entered promiscuous mode [ 23.235530][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.242670][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.249849][ T289] bridge_slave_0: entered allmulticast mode [ 23.256121][ T289] bridge_slave_0: entered promiscuous mode [ 23.264783][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.271939][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.279076][ T287] bridge_slave_1: entered allmulticast mode [ 23.285330][ T287] bridge_slave_1: entered promiscuous mode [ 23.293175][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.300291][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.307410][ T289] bridge_slave_1: entered allmulticast mode [ 23.313759][ T289] bridge_slave_1: entered promiscuous mode [ 23.356503][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.363589][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.370716][ T288] bridge_slave_0: entered allmulticast mode [ 23.377064][ T288] bridge_slave_0: entered promiscuous mode [ 23.386976][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.394044][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.401274][ T290] bridge_slave_0: entered allmulticast mode [ 23.407598][ T290] bridge_slave_0: entered promiscuous mode [ 23.413835][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.420993][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.428122][ T288] bridge_slave_1: entered allmulticast mode [ 23.434351][ T288] bridge_slave_1: entered promiscuous mode [ 23.447311][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.454388][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.461509][ T290] bridge_slave_1: entered allmulticast mode [ 23.467818][ T290] bridge_slave_1: entered promiscuous mode [ 23.629353][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.636549][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.643861][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.650924][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.673455][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.680568][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.687855][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.694878][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.713154][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.720266][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.727582][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.734629][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.748441][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.755513][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.762825][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.769879][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.808085][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.815452][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.823467][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.830922][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.838581][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.845802][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.853132][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.860464][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.883368][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.890485][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.910434][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.917533][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.926107][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.933200][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.941646][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.948727][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.967989][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.975135][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.987484][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.994556][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.005323][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.012438][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.021774][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.028862][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.049059][ T290] veth0_vlan: entered promiscuous mode [ 24.082653][ T290] veth1_macvtap: entered promiscuous mode [ 24.101765][ T287] veth0_vlan: entered promiscuous mode [ 24.122318][ T287] veth1_macvtap: entered promiscuous mode [ 24.132916][ T288] veth0_vlan: entered promiscuous mode [ 24.147417][ T288] veth1_macvtap: entered promiscuous mode [ 24.157130][ T289] veth0_vlan: entered promiscuous mode [ 24.190938][ T289] veth1_macvtap: entered promiscuous mode [ 24.206773][ T287] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.285595][ T311] overlayfs: upper fs does not support tmpfile. [ 24.306253][ T311] ======================================================= [ 24.306253][ T311] WARNING: The mand mount option has been deprecated and [ 24.306253][ T311] and is ignored by this kernel. Remove the mand [ 24.306253][ T311] option from the mount to silence this warning. [ 24.306253][ T311] ======================================================= [ 24.344826][ T311] overlayfs: upper fs does not support tmpfile. [ 24.371018][ T327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.371673][ T307] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 24.386701][ T325] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.417797][ T307] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 24.453530][ T325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 24.453593][ T325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:4 [ 24.496276][ T331] fido_id[331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 24.602540][ T340] Invalid ELF header len 16 [ 24.687955][ T345] exFAT-fs (rnullb0): invalid boot record signature [ 24.694619][ T345] exFAT-fs (rnullb0): failed to read boot sector [ 24.708899][ T345] exFAT-fs (rnullb0): failed to recognize exfat type [ 24.740459][ T347] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 24.756399][ T307] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.896411][ T307] usb 1-1: device descriptor read/64, error -71 [ 24.946907][ T359] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 24.964189][ T360] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 25.099311][ T369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.099508][ T369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21 [ 25.146382][ T307] usb 1-1: device descriptor read/64, error -71 [ 25.316387][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.406393][ T307] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.467567][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.477849][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 25.487082][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.505026][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.514472][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.522891][ T10] usb 3-1: Product: syz [ 25.527318][ T10] usb 3-1: Manufacturer: syz [ 25.532598][ T10] usb 3-1: SerialNumber: syz [ 25.542334][ T10] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 25.546397][ T307] usb 1-1: device descriptor read/64, error -71 [ 25.553380][ T10] cdc_ncm 3-1:1.0: bind() failure [ 25.747454][ T396] devpts: called with bogus options [ 25.754689][ T397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.764419][ T397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.783327][ T389] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 25.817738][ T307] usb 1-1: device descriptor read/64, error -71 [ 25.847666][ T404] netlink: 'syz.1.28': attribute type 4 has an invalid length. [ 25.855387][ T404] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.28'. [ 25.936748][ T307] usb usb1-port1: attempt power cycle [ 26.286622][ T307] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 26.307432][ T307] usb 1-1: device descriptor read/8, error -71 [ 26.447533][ T307] usb 1-1: device descriptor read/8, error -71 [ 26.686436][ T307] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 26.707554][ T307] usb 1-1: device descriptor read/8, error -71 [ 26.837443][ T307] usb 1-1: device descriptor read/8, error -71 [ 26.934191][ T36] kauditd_printk_skb: 121 callbacks suppressed [ 26.934211][ T36] audit: type=1400 audit(1752721019.980:195): avc: denied { setopt } for pid=431 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.965437][ T36] audit: type=1400 audit(1752721020.010:196): avc: denied { create } for pid=433 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.966562][ T307] usb usb1-port1: unable to enumerate USB device [ 27.002172][ T31] usb 3-1: USB disconnect, device number 2 [ 27.016126][ T36] audit: type=1400 audit(1752721020.060:197): avc: denied { write } for pid=437 comm="syz.2.37" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.039197][ T36] audit: type=1400 audit(1752721020.060:198): avc: denied { open } for pid=437 comm="syz.2.37" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.061315][ T36] audit: type=1400 audit(1752721020.070:199): avc: denied { read append } for pid=437 comm="syz.2.37" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.083369][ T36] audit: type=1400 audit(1752721020.070:200): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 27.119628][ T36] audit: type=1400 audit(1752721020.170:201): avc: denied { append } for pid=443 comm="syz.2.39" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.128371][ T444] __vm_enough_memory: pid: 444, comm: syz.2.39, bytes: 1152922604118523904 not enough memory for the allocation [ 27.142339][ T36] audit: type=1400 audit(1752721020.170:202): avc: denied { map } for pid=443 comm="syz.2.39" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.184674][ T36] audit: type=1400 audit(1752721020.230:203): avc: denied { create } for pid=445 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 27.249859][ T36] audit: type=1400 audit(1752721020.300:204): avc: denied { getopt } for pid=447 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.312749][ T457] netlink: 'syz.1.44': attribute type 12 has an invalid length. [ 27.544546][ T478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17 [ 27.545273][ T478] overlay: Unknown parameter 'dont_measure' [ 27.896525][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 27.993485][ T498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16469 sclass=netlink_route_socket pid=498 comm=syz.2.55 [ 28.056915][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 28.063450][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.075281][ T45] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 28.084624][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.094196][ T45] usb 1-1: Product: syz [ 28.098599][ T45] usb 1-1: Manufacturer: syz [ 28.103282][ T45] usb 1-1: SerialNumber: syz [ 28.110274][ T45] usb 1-1: config 0 descriptor?? [ 28.117203][ T45] cdc_ether 1-1:0.0: skipping garbage [ 28.122740][ T45] usb 1-1: bad CDC descriptors [ 28.127756][ T45] usb 1-1: unsupported MDLM descriptors [ 28.324613][ T370] usb 1-1: USB disconnect, device number 6 [ 28.475701][ T509] overlayfs: failed to clone upperpath [ 28.529691][ T523] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 28.550529][ T528] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.706366][ T370] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 28.876381][ T370] usb 1-1: Using ep0 maxpacket: 16 [ 28.883334][ T370] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.913543][ T370] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.920300][ T575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 28.924452][ T370] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.941436][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.949639][ T370] usb 1-1: Product: syz [ 28.954136][ T370] usb 1-1: Manufacturer: syz [ 28.959060][ T370] usb 1-1: SerialNumber: syz [ 29.145612][ T601] usb usb8: usbfs: process 601 (syz.2.88) did not claim interface 0 before use [ 29.155695][ T601] /dev/nbd2: Can't lookup blockdev [ 29.168922][ T505] rust_binder: 505: no such ref 3 [ 29.180204][ T370] usb 1-1: 0:2 : does not exist [ 29.191466][ T370] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 29.213292][ T370] usb 1-1: USB disconnect, device number 7 [ 29.229463][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.279105][ T620] netlink: 'syz.3.96': attribute type 64 has an invalid length. [ 29.286891][ T620] netlink: 5 bytes leftover after parsing attributes in process `syz.3.96'. [ 29.436361][ T507] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.577594][ T507] usb 3-1: device descriptor read/64, error -71 [ 29.767721][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.775839][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 29.816824][ T507] usb 3-1: device descriptor read/64, error -71 [ 29.928869][ T650] binder: Unknown parameter 'fsct' [ 30.028930][ T659] netlink: 2608 bytes leftover after parsing attributes in process `syz.3.110'. [ 30.041140][ T659] fuse: Bad value for 'user_id' [ 30.046020][ T659] fuse: Bad value for 'user_id' [ 30.056704][ T507] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.084132][ T662] SELinux: Context system_u:object_r:lastlog_t:s0 is not valid (left unmapped). [ 30.108629][ T666] binder: Unknown parameter '00000000000000000003' [ 30.186373][ T507] usb 3-1: device descriptor read/64, error -71 [ 30.266820][ T678] TCP: TCP_TX_DELAY enabled [ 30.426384][ T507] usb 3-1: device descriptor read/64, error -71 [ 30.497269][ T698] rust_binder: Write failure EFAULT in pid:76 [ 30.536630][ T507] usb usb3-port1: attempt power cycle [ 30.735088][ T728] process 'syz.1.128' launched './file0' with NULL argv: empty string added [ 30.896393][ T507] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.927375][ T507] usb 3-1: device descriptor read/8, error -71 [ 31.058038][ T507] usb 3-1: device descriptor read/8, error -71 [ 31.305951][ T507] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 31.337374][ T507] usb 3-1: device descriptor read/8, error -71 [ 31.402649][ T770] netlink: 'syz.0.143': attribute type 27 has an invalid length. [ 31.411365][ T770] fuseblk: Unknown parameter '²zousù9i00000000000000000000' [ 31.470980][ T507] usb 3-1: device descriptor read/8, error -71 [ 31.473609][ T780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.147'. [ 31.587776][ T507] usb usb3-port1: unable to enumerate USB device [ 31.623663][ T801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.154'. [ 31.634062][ T800] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.746380][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 31.896546][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 31.904159][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 31.913276][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.921316][ T31] usb 1-1: Product: syz [ 31.925492][ T31] usb 1-1: Manufacturer: syz [ 31.930117][ T31] usb 1-1: SerialNumber: syz [ 31.937364][ T31] r8152-cfgselector 1-1: Unknown version 0x0000 [ 31.943681][ T31] r8152-cfgselector 1-1: config 0 descriptor?? [ 32.151575][ T31] r8152-cfgselector 1-1: Needed 2 retries to read version [ 32.158870][ T31] r8152-cfgselector 1-1: Unknown version 0x0000 [ 32.165212][ T31] r8152-cfgselector 1-1: bad CDC descriptors [ 32.176230][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 32.176251][ T36] audit: type=1326 audit(1752721025.214:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=764 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52818e929 code=0x7fc00000 [ 32.231759][ T36] audit: type=1326 audit(1752721025.214:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=764 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb52818e929 code=0x7fc00000 [ 32.255168][ T36] audit: type=1326 audit(1752721025.214:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=764 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52818e929 code=0x7fc00000 [ 32.255276][ T813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 32.278634][ T36] audit: type=1326 audit(1752721025.214:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=764 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52818e929 code=0x7fc00000 [ 32.318346][ T36] audit: type=1326 audit(1752721025.214:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=764 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52818e929 code=0x7fc00000 [ 32.390376][ T831] 9pnet_fd: Insufficient options for proto=fd [ 32.399612][ T31] r8152-cfgselector 1-1: USB disconnect, device number 8 [ 32.414790][ T833] overlayfs: failed to clone upperpath [ 32.421493][ T833] tmpfs: Unknown parameter 'no' [ 32.592695][ T847] capability: warning: `syz.2.173' uses 32-bit capabilities (legacy support in use) [ 32.614401][ T36] audit: type=1400 audit(1752721025.654:262): avc: denied { create } for pid=846 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 32.627356][ T853] netlink: 'syz.3.175': attribute type 1 has an invalid length. [ 32.651373][ T853] overlayfs: failed to clone lowerpath [ 32.673252][ T507] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.681506][ T507] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 32.682055][ T857] netlink: 3 bytes leftover after parsing attributes in process `syz.3.177'. [ 32.715014][ T857] netlink: 3 bytes leftover after parsing attributes in process `syz.3.177'. [ 32.736242][ T857] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 32.770018][ T36] audit: type=1400 audit(1752721025.814:263): avc: denied { create } for pid=860 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 32.856386][ T867] overlayfs: failed to clone upperpath [ 32.898726][ T36] audit: type=1400 audit(1752721025.944:264): avc: denied { write } for pid=868 comm="syz.2.180" name="netlink" dev="proc" ino=4026532475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 32.953544][ T36] audit: type=1400 audit(1752721025.994:265): avc: denied { setopt } for pid=872 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.986807][ T36] audit: type=1400 audit(1752721026.034:266): avc: denied { read } for pid=872 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.386374][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 33.516357][ T31] usb 3-1: device descriptor read/64, error -71 [ 33.648359][ T910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 33.756375][ T31] usb 3-1: device descriptor read/64, error -71 [ 33.996376][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 34.090536][ T914] Zero length message leads to an empty skb [ 34.138908][ T31] usb 3-1: device descriptor read/64, error -71 [ 34.376375][ T31] usb 3-1: device descriptor read/64, error -71 [ 34.466420][ T426] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 34.486468][ T31] usb usb3-port1: attempt power cycle [ 34.618419][ T426] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.628676][ T426] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.639685][ T426] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 34.649820][ T426] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.664274][ T426] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.673519][ T426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.681607][ T426] usb 1-1: Product: syz [ 34.685788][ T426] usb 1-1: Manufacturer: syz [ 34.690498][ T426] usb 1-1: SerialNumber: syz [ 34.826360][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 34.847413][ T31] usb 3-1: device descriptor read/8, error -71 [ 34.897882][ T935] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 34.977435][ T31] usb 3-1: device descriptor read/8, error -71 [ 35.216358][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 35.237336][ T31] usb 3-1: device descriptor read/8, error -71 [ 35.347795][ T935] rust_binder: 935: no such ref 1 [ 35.367347][ T31] usb 3-1: device descriptor read/8, error -71 [ 35.399299][ T937] rust_binder: 935 RLIMIT_NICE not set [ 35.399621][ T935] rust_binder: Error while translating object. [ 35.405176][ T935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.411489][ T935] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 35.420937][ T935] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:138 [ 35.476486][ T31] usb usb3-port1: unable to enumerate USB device [ 35.492024][ T426] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 35.498397][ T426] cdc_mbim 1-1:1.0: bind() failure [ 35.504449][ T426] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 35.511489][ T426] cdc_ncm 1-1:1.1: bind() failure [ 35.517725][ T426] usb 1-1: USB disconnect, device number 9 [ 36.008354][ T939] @: renamed from vlan0 (while UP) [ 36.256567][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 36.348228][ T961] x_tables: duplicate underflow at hook 4 [ 36.392696][ T973] netlink: 44 bytes leftover after parsing attributes in process `syz.1.213'. [ 36.402432][ T973] netlink: 'syz.1.213': attribute type 6 has an invalid length. [ 36.410430][ T973] netlink: 'syz.1.213': attribute type 5 has an invalid length. [ 36.418161][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 36.426227][ T973] netlink: 'syz.1.213': attribute type 4 has an invalid length. [ 36.434690][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 58, changing to 9 [ 36.460001][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50453, setting to 1024 [ 36.477045][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 36.486714][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.495931][ T10] usb 1-1: config 0 descriptor?? [ 36.502058][ T940] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 36.510660][ T10] hub 1-1:0.0: USB hub found [ 36.709898][ T10] hub 1-1:0.0: 1 port detected [ 37.011219][ T989] overlayfs: failed to clone upperpath [ 37.020216][ T989] mmap: syz.1.218 (989) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.063272][ T1003] cgroup: name respecified [ 37.094133][ T1007] fuseblk: Bad value for 'fd' [ 37.428220][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 37.428241][ T36] audit: type=1400 audit(1752721030.474:277): avc: denied { nlmsg_read } for pid=1028 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.513010][ T507] usb 1-1: USB disconnect, device number 10 [ 37.519164][ T10] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 37.526543][ T10] usb 1-1-port1: connect-debounce failed [ 37.584137][ T36] audit: type=1400 audit(1752721030.624:278): avc: denied { create } for pid=1038 comm="syz.3.234" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 37.605874][ T36] audit: type=1400 audit(1752721030.624:279): avc: denied { link } for pid=1038 comm="syz.3.234" name="file1" dev="tmpfs" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 37.632781][ T36] audit: type=1400 audit(1752721030.654:280): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 37.785085][ T36] audit: type=1400 audit(1752721030.824:281): avc: denied { read } for pid=1043 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.869271][ T1049] netlink: 25 bytes leftover after parsing attributes in process `syz.2.238'. [ 37.933513][ T1062] netlink: 'syz.2.241': attribute type 4 has an invalid length. [ 38.001812][ T36] audit: type=1400 audit(1752721031.044:282): avc: denied { getopt } for pid=1067 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.371743][ T36] audit: type=1400 audit(1752721031.414:283): avc: denied { listen } for pid=1106 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.400516][ T36] audit: type=1400 audit(1752721031.414:284): avc: denied { accept } for pid=1106 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.428225][ T36] audit: type=1400 audit(1752721031.464:285): avc: denied { accept } for pid=1106 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 38.478401][ T1122] 9pnet_fd: Insufficient options for proto=fd [ 38.775004][ T1139] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿßaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 39.127145][ T1161] syz.0.272 (1161): /proc/1159/oom_adj is deprecated, please use /proc/1159/oom_score_adj instead. [ 39.545154][ T1196] rust_binder: Error while translating object. [ 39.545195][ T1196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 39.551531][ T1196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:178 [ 39.887650][ T1224] 9pnet_fd: Insufficient options for proto=fd [ 39.928710][ T1228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 39.942069][ T1230] incfs: Options parsing error. -22 [ 39.951282][ T1230] incfs: mount failed -22 [ 40.013688][ T1246] overlayfs: failed to clone upperpath [ 40.283372][ T1261] netlink: 'syz.2.305': attribute type 4 has an invalid length. [ 40.528707][ T1269] overlayfs: missing 'lowerdir' [ 40.549184][ T1271] @: renamed from vlan0 (while UP) [ 40.597674][ T1284] tipc: Started in network mode [ 40.602576][ T1284] tipc: Node identity 3c, cluster identity 4711 [ 40.608871][ T1284] tipc: Node number set to 60 [ 40.817785][ T1303] netlink: 'syz.1.321': attribute type 7 has an invalid length. [ 40.825500][ T1303] netlink: 'syz.1.321': attribute type 5 has an invalid length. [ 40.833222][ T1303] netlink: 17 bytes leftover after parsing attributes in process `syz.1.321'. [ 40.859105][ T1304] rust_binder: 1301 RLIMIT_NICE not set [ 40.859370][ T1301] rust_binder: 1301: no such ref 3 [ 40.870313][ T1301] rust_binder: Error while translating object. [ 40.870357][ T1301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.876624][ T1301] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 40.886102][ T1301] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:204 [ 40.998518][ T1316] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 41.138482][ T1330] tipc: Started in network mode [ 41.143494][ T1330] tipc: Node identity 0000000000004000000000000000f3, cluster identity 4711 [ 41.152791][ T1330] tipc: Enabling of bearer rejected, failed to enable media [ 41.276377][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 41.426352][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 41.432632][ T10] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 41.440911][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.451124][ T10] usb 1-1: config 0 has no interface number 0 [ 41.457274][ T10] usb 1-1: config 0 interface 230 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.470319][ T10] usb 1-1: config 0 interface 230 has no altsetting 0 [ 41.478451][ T10] usb 1-1: New USB device found, idVendor=0781, idProduct=3b49, bcdDevice=2b.44 [ 41.492206][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.500556][ T10] usb 1-1: Product: syz [ 41.504760][ T10] usb 1-1: Manufacturer: syz [ 41.509551][ T10] usb 1-1: SerialNumber: syz [ 41.515051][ T10] usb 1-1: config 0 descriptor?? [ 41.724805][ T31] usb 1-1: USB disconnect, device number 11 [ 42.110637][ T1412] overlayfs: failed to clone upperpath [ 42.288573][ T1437] binder: Unknown parameter 'se' [ 42.398099][ T1453] capability: warning: `syz.0.374' uses deprecated v2 capabilities in a way that may be insecure [ 42.575692][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 42.575712][ T36] audit: type=1400 audit(1752721035.614:307): avc: denied { accept } for pid=1470 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.601436][ T36] audit: type=1400 audit(1752721035.624:308): avc: denied { write } for pid=1470 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.694741][ T1477] can0: slcan on ttyS3. [ 42.697869][ T36] audit: type=1400 audit(1752721035.744:309): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.737036][ T1477] can0 (unregistered): slcan off ttyS3. [ 42.760921][ T1479] binder: Bad value for 'defcontext' [ 42.791771][ T36] audit: type=1400 audit(1752721035.834:310): avc: denied { ioctl } for pid=1482 comm="syz.2.386" path="socket:[8551]" dev="sockfs" ino=8551 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.817720][ T36] audit: type=1400 audit(1752721035.864:311): avc: denied { getopt } for pid=1482 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.848238][ T36] audit: type=1400 audit(1752721035.894:312): avc: denied { append } for pid=1486 comm="syz.0.388" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.982643][ T1493] netlink: 'syz.1.390': attribute type 40 has an invalid length. [ 43.046228][ T1499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=1499 comm=syz.1.393 [ 43.058760][ T1499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.393'. [ 43.068674][ T36] audit: type=1400 audit(1752721036.114:313): avc: denied { map } for pid=1498 comm="syz.1.393" path="socket:[8572]" dev="sockfs" ino=8572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 43.093204][ T36] audit: type=1400 audit(1752721036.114:314): avc: denied { accept } for pid=1498 comm="syz.1.393" path="socket:[8572]" dev="sockfs" ino=8572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 43.096639][ T427] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 43.177892][ T1513] netlink: 84 bytes leftover after parsing attributes in process `syz.1.400'. [ 43.254075][ T1526] fuse: Bad value for 'group_id' [ 43.259352][ T1526] fuse: Bad value for 'group_id' [ 43.276369][ T427] usb 1-1: Using ep0 maxpacket: 16 [ 43.282806][ T427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.294183][ T427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.304331][ T427] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.317317][ T427] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 43.326499][ T427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.335441][ T427] usb 1-1: config 0 descriptor?? [ 43.414272][ T1528] overlayfs: failed to clone upperpath [ 43.692944][ T1543] veth0_vlan: entered allmulticast mode [ 43.703630][ T1543] veth0_vlan: left promiscuous mode [ 43.709348][ T1543] veth0_vlan: entered promiscuous mode [ 43.743032][ T427] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 43.753025][ T427] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 43.760860][ T1552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.414'. [ 43.763671][ T427] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 43.777832][ T427] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 43.785382][ T427] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 43.792946][ T427] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 43.800670][ T427] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 43.808268][ T427] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 43.810502][ T36] audit: type=1400 audit(1752721036.854:315): avc: denied { create } for pid=1555 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 43.815522][ T427] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 43.838064][ T36] audit: type=1400 audit(1752721036.884:316): avc: denied { write } for pid=1555 comm="syz.3.416" path="socket:[8686]" dev="sockfs" ino=8686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 43.846523][ T427] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 43.875123][ T427] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 43.882630][ T427] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 43.942470][ T427] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 43.954529][ T427] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 43.984525][ T427] microsoft 0003:045E:07DA.0004: no inputs found [ 43.994573][ T427] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 44.055472][ T427] usb 1-1: USB disconnect, device number 12 [ 44.085667][ T1573] 9pnet_fd: Insufficient options for proto=fd [ 44.157224][ T1586] binder: Bad value for 'max' [ 44.162752][ T1588] binder: Bad value for 'max' [ 44.546364][ T507] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 44.696692][ T507] usb 1-1: Using ep0 maxpacket: 16 [ 44.707073][ T507] usb 1-1: too many endpoints for config 0 interface 0 altsetting 253: 130, using maximum allowed: 30 [ 44.718186][ T507] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.729299][ T507] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.739309][ T507] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 44.752511][ T507] usb 1-1: config 0 interface 0 has no altsetting 0 [ 44.759181][ T507] usb 1-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 44.770599][ T507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.786592][ T507] usb 1-1: config 0 descriptor?? [ 44.808415][ T1616] 8021q: VLANs not supported on lo [ 44.846673][ T1620] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 44.997567][ T1630] devpts: called with bogus options [ 45.000312][ T507] hid (null): invalid report_count 903462111 [ 45.003102][ T1630] devpts: called with bogus options [ 45.017458][ T507] wacom 0003:056A:0304.0005: invalid report_count 903462111 [ 45.026349][ T507] wacom 0003:056A:0304.0005: item 0 4 1 9 parsing failed [ 45.033634][ T507] wacom 0003:056A:0304.0005: parse failed [ 45.048618][ T507] wacom 0003:056A:0304.0005: probe with driver wacom failed with error -22 [ 45.229041][ T507] usb 1-1: USB disconnect, device number 13 [ 45.478863][ T1649] incfs: Options parsing error. -22 [ 45.484166][ T1649] incfs: mount failed -22 [ 45.621818][ T1679] fuse: Bad value for 'user_id' [ 45.626805][ T1679] fuse: Bad value for 'user_id' [ 46.060261][ T1716] netlink: 'syz.3.465': attribute type 6 has an invalid length. [ 46.068077][ T1716] netlink: 'syz.3.465': attribute type 4 has an invalid length. [ 46.075743][ T1716] netlink: 'syz.3.465': attribute type 6 has an invalid length. [ 46.083686][ T1716] netlink: 'syz.3.465': attribute type 13 has an invalid length. [ 46.091592][ T1716] netlink: 'syz.3.465': attribute type 15 has an invalid length. [ 46.099896][ T1716] netlink: 'syz.3.465': attribute type 19 has an invalid length. [ 46.107850][ T1716] netlink: 3684 bytes leftover after parsing attributes in process `syz.3.465'. [ 46.151636][ T1725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 46.765871][ T1740] netlink: 'syz.2.473': attribute type 14 has an invalid length. [ 46.915102][ T1748] netlink: 84 bytes leftover after parsing attributes in process `syz.3.477'. [ 46.924830][ T1749] 9pnet_fd: Insufficient options for proto=fd [ 46.977303][ T1764] overlayfs: failed to clone upperpath [ 47.703887][ T1840] syz.3.507 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.775166][ T1848] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.510'. [ 47.824510][ T1859] bpf: Bad value for 'uid' [ 47.915830][ T1877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=1877 comm=syz.3.520 [ 47.946139][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 47.946158][ T36] audit: type=1400 audit(1752721040.984:337): avc: denied { create } for pid=1881 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 48.029665][ T1899] netlink: 'syz.3.526': attribute type 16 has an invalid length. [ 48.065800][ T1905] overlayfs: failed to clone upperpath [ 48.095250][ T1911] netlink: 3 bytes leftover after parsing attributes in process `syz.1.532'. [ 48.107117][ T1911] netlink: 3 bytes leftover after parsing attributes in process `syz.1.532'. [ 48.116436][ T1911] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 48.137018][ T1911] netlink: 3 bytes leftover after parsing attributes in process `syz.1.532'. [ 48.152077][ T1918] 9pnet_fd: Insufficient options for proto=fd [ 48.164131][ T1911] netlink: 3 bytes leftover after parsing attributes in process `syz.1.532'. [ 48.186330][ T1911] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 48.244627][ T1931] fuseblk: Bad value for 'fd' [ 48.617567][ T36] audit: type=1400 audit(1752721041.664:338): avc: denied { lock } for pid=1933 comm="syz.0.540" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.673573][ T1935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:289 [ 48.673731][ T1936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:289 [ 48.683207][ T1935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:289 [ 48.802451][ T1940] syzkaller0: entered promiscuous mode [ 48.817330][ T1940] syzkaller0: entered allmulticast mode [ 49.007530][ T36] audit: type=1400 audit(1752721042.054:339): avc: denied { bind } for pid=1946 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.018081][ T1947] 9pnet_fd: Insufficient options for proto=fd [ 49.088281][ T1954] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 49.479131][ T36] audit: type=1400 audit(1752721042.524:340): avc: denied { map } for pid=1977 comm="syz.3.555" path="socket:[9632]" dev="sockfs" ino=9632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.776377][ T426] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 49.946347][ T426] usb 1-1: Using ep0 maxpacket: 16 [ 49.957438][ T426] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.969813][ T426] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 49.987454][ T426] usb 1-1: config 1 interface 0 has no altsetting 0 [ 49.999933][ T426] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 50.009281][ T426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.018701][ T426] usb 1-1: Product: 衠ﮄ泄䃮牊Õæ ·ç¸æ½åŸæ´¯æ„…ꜧäªë²“ꉚ儾â¢ã‡´í…’祀괳貸å«ï§šêŽÕ®çª¬åœâ„†ï¢‘禖ㄽ鸃玛ۭ౮áŽë›‰î®á­à·¿î»ì´¨è²‚먔鳱嚛₭Œ芬 [ 50.037513][ T426] usb 1-1: Manufacturer: ጠ[ 50.042221][ T426] usb 1-1: SerialNumber: ⊠[ 50.151565][ T2004] devpts: called with bogus options [ 50.253090][ T426] usbhid 1-1:1.0: can't add hid device: -71 [ 50.259249][ T426] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 50.268364][ T426] usb 1-1: USB disconnect, device number 14 [ 50.767695][ T2019] netlink: 104 bytes leftover after parsing attributes in process `syz.0.568'. [ 51.126375][ T306] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 51.269456][ T36] audit: type=1400 audit(1752721044.314:341): avc: denied { setattr } for pid=2040 comm="syz.2.576" name="NETLINK" dev="sockfs" ino=9702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.293617][ T306] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 51.308644][ T306] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 51.319676][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 51.328186][ T306] usb 1-1: Product: syz [ 51.332385][ T306] usb 1-1: Manufacturer: syz [ 51.337196][ T306] usb 1-1: SerialNumber: syz [ 51.342690][ T306] usb 1-1: config 0 descriptor?? [ 51.350907][ T306] cdc_acm 1-1:0.0: Zero length descriptor references [ 51.357919][ T306] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 51.551325][ T2027] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 51.551346][ T2027] rust_binder: Read failure Err(EFAULT) in pid:312 [ 51.559991][ T31] usb 1-1: USB disconnect, device number 15 [ 51.800526][ T36] audit: type=1400 audit(1752721044.844:342): avc: denied { watch watch_reads } for pid=2066 comm="syz.1.585" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.877765][ T36] audit: type=1326 audit(1752721044.924:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2079 comm="syz.1.590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62dbf8e929 code=0x0 [ 52.436357][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 52.586356][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 52.592608][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.604334][ T31] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 52.613505][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.621554][ T31] usb 1-1: Product: syz [ 52.625737][ T31] usb 1-1: Manufacturer: syz [ 52.630373][ T31] usb 1-1: SerialNumber: syz [ 52.635601][ T31] usb 1-1: config 0 descriptor?? [ 52.641396][ T31] cdc_ether 1-1:0.0: skipping garbage [ 52.646862][ T31] usb 1-1: bad CDC descriptors [ 52.651801][ T31] usb 1-1: unsupported MDLM descriptors [ 52.847249][ T2090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.856239][ T2090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.000291][ T507] usb 1-1: USB disconnect, device number 16 [ 53.280146][ T2118] syz.1.602 uses obsolete (PF_INET,SOCK_PACKET) [ 53.474225][ T2155] overlayfs: conflicting options: userxattr,metacopy=on [ 53.697301][ T2182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2182 comm=syz.0.626 [ 53.743741][ T36] audit: type=1326 audit(1752721046.784:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2185 comm="syz.2.629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7bcd8e929 code=0x0 [ 54.008418][ T2211] binder: Unknown parameter '' [ 54.063924][ T2213] binder: Bad value for 'max' [ 54.439792][ T36] audit: type=1400 audit(1752721047.485:345): avc: denied { map } for pid=2230 comm="syz.0.645" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.537276][ T36] audit: type=1400 audit(1752721047.585:346): avc: denied { execute } for pid=2243 comm="syz.1.651" name="file0" dev="ramfs" ino=10024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 54.559689][ T36] audit: type=1400 audit(1752721047.585:347): avc: denied { execute_no_trans } for pid=2243 comm="syz.1.651" path="/file0" dev="ramfs" ino=10024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 54.622096][ T2254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 54.634659][ T2246] rust_binder: 2235 RLIMIT_NICE not set [ 54.713881][ T303] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.727861][ T2268] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 54.737542][ T36] audit: type=1400 audit(1752721047.775:348): avc: denied { load_policy } for pid=2267 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.737590][ T2268] SELinux: failed to load policy [ 55.226336][ T36] audit: type=1400 audit(1752721048.265:349): avc: denied { create } for pid=2286 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 55.247617][ T2289] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 55.254668][ T2289] overlayfs: failed to set xattr on upper [ 55.260787][ T2289] overlayfs: ...falling back to redirect_dir=nofollow. [ 55.268067][ T2289] overlayfs: ...falling back to uuid=null. [ 55.274079][ T2289] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 55.377668][ T2295] overlayfs: failed to clone upperpath [ 55.411362][ T2298] overlayfs: failed to clone lowerpath [ 55.446616][ T2304] fuse: Unknown parameter '' [ 55.478654][ T2315] netlink: 'syz.2.677': attribute type 27 has an invalid length. [ 55.496011][ T2315] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.503319][ T2315] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.531196][ T2315] veth0_vlan: left allmulticast mode [ 56.007322][ T2323] fuse: Unknown parameter '0xffffffffffffffff0177777777777777777777700000000000000000000' [ 56.007933][ T2322] fuse: Unknown parameter '0xffffffffffffffff0177777777777777777777700000000000000000000' [ 56.279256][ T2384] netlink: 'syz.1.698': attribute type 3 has an invalid length. [ 56.776402][ T2269] Bluetooth: hci0: command 0x1003 tx timeout [ 56.776412][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.899416][ T2392] netlink: 104 bytes leftover after parsing attributes in process `syz.0.702'. [ 56.961289][ T36] audit: type=1400 audit(1752721050.005:350): avc: denied { read } for pid=2407 comm="syz.1.707" path="socket:[11222]" dev="sockfs" ino=11222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.096715][ T2422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:374 [ 57.450872][ T2448] overlayfs: failed to clone upperpath [ 57.571293][ T36] audit: type=1400 audit(1752721050.615:351): avc: denied { getopt } for pid=2463 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.614037][ T2470] overlayfs: missing 'lowerdir' [ 58.153522][ T2476] netlink: 1016 bytes leftover after parsing attributes in process `syz.2.732'. [ 58.163012][ T2477] 9pnet_fd: Insufficient options for proto=fd [ 58.416961][ T36] audit: type=1400 audit(1752721051.465:352): avc: denied { create } for pid=2503 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 58.556630][ T2522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 58.642728][ T2526] netlink: 'syz.2.749': attribute type 12 has an invalid length. [ 58.652686][ T36] audit: type=1400 audit(1752721051.695:353): avc: denied { create } for pid=2525 comm="syz.2.749" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.740962][ T2545] overlay: filesystem on ./bus not supported as upperdir [ 59.333833][ T2562] devpts: called with bogus options [ 59.880131][ T2585] netlink: 'syz.1.770': attribute type 4 has an invalid length. [ 59.887880][ T2585] netlink: 'syz.1.770': attribute type 27 has an invalid length. [ 59.895624][ T2585] netlink: 3609 bytes leftover after parsing attributes in process `syz.1.770'. [ 60.095634][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 60.095652][ T36] audit: type=1400 audit(1752721053.135:358): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 60.133127][ T2596] tipc: Started in network mode [ 60.138121][ T2596] tipc: Node identity 7, cluster identity 4711 [ 60.144301][ T2596] tipc: Node number set to 7 [ 60.386375][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 60.536354][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 60.542676][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.553124][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.567897][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 60.577111][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.585349][ T45] usb 1-1: Product: syz [ 60.589915][ T45] usb 1-1: Manufacturer: syz [ 60.594706][ T45] usb 1-1: SerialNumber: syz [ 60.600760][ T45] usb 1-1: config 0 descriptor?? [ 60.712696][ T2642] 9pnet_fd: Insufficient options for proto=fd [ 60.808295][ T45] usb 1-1: USB disconnect, device number 17 [ 61.335912][ T2689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.804'. [ 61.387253][ T2704] binder: Bad value for 'max' [ 61.433187][ T36] audit: type=1400 audit(1752721054.475:359): avc: denied { mount } for pid=2707 comm="syz.0.809" name="/" dev="configfs" ino=2162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 61.456375][ T36] audit: type=1400 audit(1752721054.475:360): avc: denied { search } for pid=2707 comm="syz.0.809" name="/" dev="configfs" ino=2162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.478548][ T36] audit: type=1400 audit(1752721054.475:361): avc: denied { setattr } for pid=2707 comm="syz.0.809" name="/" dev="configfs" ino=2162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.575203][ T2715] tmpfs: Bad value for 'nr_inodes' [ 62.102218][ T2730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'. [ 62.117784][ T2732] netlink: 'syz.2.817': attribute type 29 has an invalid length. [ 62.131059][ T36] audit: type=1400 audit(1752721055.175:362): avc: denied { shutdown } for pid=2733 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.168480][ T36] audit: type=1400 audit(1752721055.215:363): avc: denied { read } for pid=2735 comm="syz.1.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.573125][ T36] audit: type=1400 audit(1752721055.615:364): avc: denied { write } for pid=2741 comm="syz.0.822" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.772153][ T36] audit: type=1400 audit(1752721055.815:365): avc: denied { map } for pid=2746 comm="syz.0.824" path="socket:[11821]" dev="sockfs" ino=11821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.795849][ T36] audit: type=1400 audit(1752721055.815:366): avc: denied { read } for pid=2746 comm="syz.0.824" path="socket:[11821]" dev="sockfs" ino=11821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.858765][ T36] audit: type=1400 audit(1752721055.905:367): avc: denied { map } for pid=2750 comm="syz.0.826" path="socket:[12800]" dev="sockfs" ino=12800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.067620][ T2756] 9p: Unknown access argument 00000000000000000000lVw÷jÄû [ 63.067620][ T2756] Õl‘Neñ¸æ: -22 [ 63.763391][ T2763] can0: slcan on ttyS3. [ 63.802917][ T2765] can0 (unregistered): slcan off ttyS3. [ 64.127342][ T2813] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 64.666958][ T2815] 9pnet_fd: Insufficient options for proto=fd [ 64.886063][ T2836] 9pnet_fd: Insufficient options for proto=fd [ 64.916420][ T2836] netlink: 'syz.1.845': attribute type 7 has an invalid length. [ 64.927550][ T2836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=2836 comm=syz.1.845 [ 64.956638][ T2832] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.963733][ T2832] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.994575][ T2832] bridge_slave_0: entered allmulticast mode [ 65.007670][ T2832] bridge_slave_0: entered promiscuous mode [ 65.016080][ T2848] tipc: Can't bind to reserved service type 3 [ 65.023838][ T2850] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 65.033369][ T2832] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.041316][ T2848] 9pnet_fd: Insufficient options for proto=fd [ 65.047521][ T2832] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.066377][ T2832] bridge_slave_1: entered allmulticast mode [ 65.076382][ T2832] bridge_slave_1: entered promiscuous mode [ 65.103152][ T2854] overlayfs: failed to clone upperpath [ 65.221376][ T2832] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.228501][ T2832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.235825][ T2832] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.242931][ T2832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.282904][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.296596][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.318239][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.325354][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.354249][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.361361][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.394527][ T2878] 9pnet_fd: Insufficient options for proto=fd [ 65.415996][ T2832] veth0_vlan: entered promiscuous mode [ 65.436528][ T2832] veth1_macvtap: entered promiscuous mode [ 65.444021][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 65.444037][ T36] audit: type=1400 audit(1752721058.485:391): avc: denied { create } for pid=2879 comm="syz.2.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 65.498942][ T36] audit: type=1400 audit(1752721058.545:392): avc: denied { mounton } for pid=2832 comm="syz-executor" path="/root/syzkaller.2l48cp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.557614][ T2887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 65.567492][ T36] audit: type=1400 audit(1752721058.615:393): avc: denied { execute } for pid=2885 comm="syz.4.839" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.606003][ T2891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 65.618484][ T2893] sock: sock_timestamping_bind_phc: sock not bind to device [ 65.627291][ T2891] erspan0: entered promiscuous mode [ 65.702679][ T2907] overlayfs: failed to clone upperpath [ 65.931742][ T36] audit: type=1401 audit(1752721058.975:394): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A667361646D5F657865635F743A73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E2F66696C653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 65.986583][ T36] audit: type=1400 audit(1752721059.035:395): avc: denied { getopt } for pid=2947 comm="syz.4.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.097689][ T306] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 66.136161][ T2953] 9pnet_fd: Insufficient options for proto=fd [ 66.236391][ T306] usb 1-1: device descriptor read/64, error -71 [ 66.367459][ T2974] 9pnet_fd: Insufficient options for proto=fd [ 66.486372][ T306] usb 1-1: device descriptor read/64, error -71 [ 66.726382][ T306] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 66.822967][ T2980] netlink: 3 bytes leftover after parsing attributes in process `syz.2.897'. [ 66.831897][ T2980] netlink: 3 bytes leftover after parsing attributes in process `syz.2.897'. [ 66.840825][ T2980] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 66.856202][ T2981] netlink: 3 bytes leftover after parsing attributes in process `syz.2.897'. [ 66.865084][ T306] usb 1-1: device descriptor read/64, error -71 [ 66.871454][ T2981] netlink: 3 bytes leftover after parsing attributes in process `syz.2.897'. [ 66.885496][ T2981] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 66.908384][ T2984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 67.096031][ T3008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 67.106954][ T306] usb 1-1: device descriptor read/64, error -71 [ 67.163065][ T3016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=3016 comm=syz.4.911 [ 67.206143][ T36] audit: type=1400 audit(1752721066.248:396): avc: denied { write } for pid=3022 comm="syz.4.913" name="file0" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.228853][ T306] usb usb1-port1: attempt power cycle [ 67.586385][ T306] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 67.623911][ T306] usb 1-1: device descriptor read/8, error -71 [ 67.771483][ T306] usb 1-1: device descriptor read/8, error -71 [ 67.845687][ T3085] bpf: Bad value for 'mode' [ 67.861580][ T36] audit: type=1400 audit(1752721066.908:397): avc: denied { module_load } for pid=3086 comm="syz.2.936" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 67.861601][ T3087] Invalid ELF header len 16 [ 67.913252][ T3094] batadv_slave_1: entered promiscuous mode [ 67.919636][ T3094] batadv_slave_1: left promiscuous mode [ 68.026367][ T306] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 68.047408][ T306] usb 1-1: device descriptor read/8, error -71 [ 68.177391][ T306] usb 1-1: device descriptor read/8, error -71 [ 68.200758][ T3103] overlayfs: failed to clone upperpath [ 68.286544][ T306] usb usb1-port1: unable to enumerate USB device [ 68.449707][ T36] audit: type=1400 audit(1752721067.498:398): avc: denied { watch watch_reads } for pid=3118 comm="syz.1.948" path="/306/file0" dev="tmpfs" ino=1686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.514426][ T3127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3127 comm=syz.1.950 [ 68.777478][ T36] audit: type=1400 audit(1752721067.818:399): avc: denied { create } for pid=3139 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.804572][ T36] audit: type=1400 audit(1752721067.818:400): avc: denied { setopt } for pid=3139 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.127463][ T3170] 9pnet_fd: Insufficient options for proto=fd [ 70.081355][ T3234] netlink: 'syz.4.983': attribute type 3 has an invalid length. [ 70.208331][ T3248] netlink: 104 bytes leftover after parsing attributes in process `syz.0.988'. [ 70.383436][ T3263] input: syz1 as /devices/virtual/input/input5 [ 70.524191][ T3277] rust_binder: 3277: no such ref 1 [ 70.575848][ T3282] rust_binder: 3277 RLIMIT_NICE not set [ 70.576002][ T3277] rust_binder: Error while translating object. [ 70.581804][ T3277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.588300][ T3277] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 70.598008][ T3277] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:467 [ 70.610600][ T3283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.811499][ T3293] rust_binder: Error while translating object. [ 70.818885][ T3293] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.825473][ T3293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:477 [ 70.927256][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 70.927277][ T36] audit: type=1400 audit(1752721069.978:404): avc: denied { setattr } for pid=3304 comm="syz.0.1009" name="AF_VSOCK" dev="sockfs" ino=13927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.987457][ T36] audit: type=1400 audit(1752721070.038:405): avc: denied { ioctl } for pid=3306 comm="syz.2.1010" path="socket:[14661]" dev="sockfs" ino=14661 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.030791][ T36] audit: type=1400 audit(1752721070.078:406): avc: denied { bind } for pid=3311 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.051735][ T3310] overlayfs: upper fs does not support tmpfile. [ 71.065648][ T3310] overlayfs: upper fs does not support tmpfile. [ 71.134785][ T36] audit: type=1400 audit(1752721070.178:407): avc: denied { bind } for pid=3334 comm="syz.2.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.172982][ T36] audit: type=1400 audit(1752721070.218:408): avc: denied { getopt } for pid=3319 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.324769][ T3362] @: renamed from vlan0 [ 71.736507][ T426] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 71.887359][ T426] usb 1-1: No LPM exit latency info found, disabling LPM. [ 71.897387][ T426] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 71.908551][ T426] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.924396][ T426] usb 1-1: string descriptor 0 read error: -22 [ 71.930299][ T36] audit: type=1326 audit(1752721070.978:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3401 comm="syz.2.1043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7bcd8e929 code=0x0 [ 71.930944][ T426] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 71.962816][ T426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.971755][ T3386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.181882][ T36] audit: type=1326 audit(1752721071.228:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3385 comm="syz.0.1037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bc958e929 code=0x0 [ 72.274123][ T36] audit: type=1326 audit(1752721071.318:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3381 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8686b8e929 code=0x7fc00000 [ 72.304330][ T36] audit: type=1326 audit(1752721071.318:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3381 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8686b8e929 code=0x7fc00000 [ 72.327804][ T36] audit: type=1326 audit(1752721071.318:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3381 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8686b8e929 code=0x7fc00000 [ 72.340424][ T3408] tipc: Started in network mode [ 72.356141][ T3408] tipc: Node identity 3c, cluster identity 4711 [ 72.362636][ T3408] tipc: Node number set to 60 [ 72.783178][ T3416] overlayfs: upper fs does not support tmpfile. [ 72.791523][ T3416] overlayfs: upper fs does not support tmpfile. [ 73.644197][ T3447] cgroup: Invalid name [ 73.670862][ T3451] overlayfs: missing 'lowerdir' [ 73.849645][ T3468] overlayfs: upper fs does not support tmpfile. [ 73.858890][ T3468] overlayfs: upper fs does not support tmpfile. [ 74.507114][ T426] usbhid 1-1:1.0: can't add hid device: -71 [ 74.521107][ T426] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 74.533924][ T3487] SELinux: policydb table sizes (0,34) do not match mine (8,7) [ 74.538754][ T426] usb 1-1: USB disconnect, device number 22 [ 74.560622][ T3487] SELinux: failed to load policy [ 74.591870][ T3485] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1072'. [ 74.672676][ T3502] exFAT-fs (rnullb0): invalid boot record signature [ 74.682518][ T3502] exFAT-fs (rnullb0): failed to read boot sector [ 74.692539][ T3502] exFAT-fs (rnullb0): failed to recognize exfat type [ 74.802531][ T3526] 9pnet_fd: Insufficient options for proto=fd [ 74.820173][ T3529] overlayfs: upper fs does not support tmpfile. [ 74.833703][ T3529] overlayfs: upper fs does not support tmpfile. [ 74.866601][ T3535] x_tables: duplicate underflow at hook 1 [ 74.929970][ T3537] rust_binder: Error while translating object. [ 74.930023][ T3537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.936233][ T3537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:538 [ 75.179256][ T3546] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 75.197297][ T3546] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 75.209343][ T3546] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 75.218669][ T3546] SELinux: Context system_u:object_r:ssh_keysign_exec_t:s0 is not valid (left unmapped). [ 75.239602][ T3550] bpf: Bad value for 'mode' [ 75.281889][ T3554] overlayfs: failed to clone upperpath [ 75.288238][ T3554] overlayfs: failed to clone upperpath [ 75.486524][ T3575] @: renamed from vlan0 (while UP) [ 75.911535][ T3579] overlayfs: upper fs does not support tmpfile. [ 75.918990][ T3579] overlayfs: upper fs does not support tmpfile. [ 76.021851][ T3587] raw_sendmsg: syz.4.1115 forgot to set AF_INET. Fix it! [ 76.075372][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 76.075393][ T36] audit: type=1400 audit(1752721075.118:421): avc: denied { map } for pid=3588 comm="syz.0.1116" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.116655][ T3605] overlayfs: failed to clone upperpath [ 76.122703][ T3605] overlayfs: failed to clone upperpath [ 76.155093][ T3610] netlink: 'syz.4.1124': attribute type 12 has an invalid length. [ 76.437351][ T3627] ------------[ cut here ]------------ [ 76.442897][ T3627] WARNING: CPU: 1 PID: 3627 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 76.451036][ T3627] Modules linked in: [ 76.454974][ T3627] CPU: 1 UID: 0 PID: 3627 Comm: syz.1.1132 Not tainted 6.12.30-syzkaller-g3bff0858a069 #0 051941c7a2def972631bf72fe68480c4884f2578 [ 76.468728][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.478859][ T3627] RIP: 0010:drop_nlink+0xce/0x110 [ 76.483905][ T3627] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 57 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 76.503670][ T3627] RSP: 0018:ffffc9000ec070d0 EFLAGS: 00010283 [ 76.509816][ T3627] RAX: ffffffff81ed532e RBX: ffff888118f023c0 RCX: 0000000000080000 [ 76.517860][ T3627] RDX: ffffc900015d1000 RSI: 0000000000000e01 RDI: 0000000000000e02 [ 76.525891][ T3627] RBP: ffffc9000ec070f8 R08: 0000000000000003 R09: 0000000000000004 [ 76.534034][ T3627] R10: dffffc0000000000 R11: fffff52001d80e10 R12: dffffc0000000000 [ 76.542167][ T3627] R13: 1ffff110231e0481 R14: ffff888118f02408 R15: 0000000000000000 [ 76.550300][ T3627] FS: 00007f62da5f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 76.559355][ T3627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.565966][ T3627] CR2: 0000200000001000 CR3: 00000001407fe000 CR4: 00000000003526b0 [ 76.574002][ T3627] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.582028][ T3627] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.590063][ T3627] Call Trace: [ 76.593361][ T3627] [ 76.596348][ T3627] simple_rmdir+0x153/0x260 [ 76.600875][ T3627] vfs_rmdir+0x3e0/0x560 [ 76.605138][ T3627] dir_rmdir+0x236/0x320 [ 76.609427][ T3627] ? __cfi_dir_rmdir+0x10/0x10 [ 76.614227][ T3627] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 76.619348][ T3627] vfs_rmdir+0x3e0/0x560 [ 76.623623][ T3627] dir_rmdir+0x236/0x320 [ 76.627961][ T3627] ? __cfi_dir_rmdir+0x10/0x10 [ 76.632781][ T3627] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 76.637884][ T3627] vfs_rmdir+0x3e0/0x560 [ 76.642175][ T3627] ovl_workdir_cleanup+0x192/0x780 [ 76.647362][ T3627] ? lookup_one_len+0x2f0/0x2f0 [ 76.652259][ T3627] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 76.657956][ T3627] ? lookup_one+0x197/0x2e0 [ 76.662499][ T3627] ? __cfi_lookup_one+0x10/0x10 [ 76.667430][ T3627] ? kasan_save_alloc_info+0x40/0x50 [ 76.672765][ T3627] ovl_workdir_create+0x2af/0x750 [ 76.677853][ T3627] ? __kasan_check_write+0x18/0x20 [ 76.683007][ T3627] ? ovl_statfs+0x2d0/0x2d0 [ 76.687562][ T3627] ? _raw_spin_lock+0x8c/0x120 [ 76.692354][ T3627] ? _raw_spin_unlock+0x45/0x60 [ 76.697245][ T3627] ? mnt_want_write+0x321/0x510 [ 76.702120][ T3627] ovl_get_workdir+0x328/0x1650 [ 76.707031][ T3627] ? ovl_fill_super+0x36f0/0x36f0 [ 76.712101][ T3627] ? __kasan_check_write+0x18/0x20 [ 76.717266][ T3627] ? _raw_spin_lock+0x8c/0x120 [ 76.722055][ T3627] ? __cfi__raw_spin_lock+0x10/0x10 [ 76.727303][ T3627] ? __kasan_check_write+0x18/0x20 [ 76.732445][ T3627] ? _raw_spin_lock+0x8c/0x120 [ 76.737250][ T3627] ? __cfi__raw_spin_lock+0x10/0x10 [ 76.742483][ T3627] ? __kasan_check_write+0x18/0x20 [ 76.747679][ T3627] ? up_read+0x26/0x1d0 [ 76.751884][ T3627] ? _raw_spin_unlock+0x45/0x60 [ 76.756829][ T3627] ? ovl_inuse_trylock+0xbd/0x110 [ 76.761897][ T3627] ovl_fill_super+0x133f/0x36f0 [ 76.766853][ T3627] ? xas_nomem+0x71/0x2d0 [ 76.771219][ T3627] ? ida_alloc_range+0xa12/0xa50 [ 76.776173][ T3627] ? __cfi_ovl_fill_super+0x10/0x10 [ 76.781435][ T3627] ? __kasan_kmalloc+0x96/0xb0 [ 76.786236][ T3627] ? __kasan_check_write+0x18/0x20 [ 76.791418][ T3627] ? mutex_unlock+0x8b/0x240 [ 76.796023][ T3627] ? __cfi_mutex_unlock+0x10/0x10 [ 76.801096][ T3627] ? __kasan_check_write+0x18/0x20 [ 76.806240][ T3627] ? _raw_spin_lock+0x8c/0x120 [ 76.811096][ T3627] ? sget_fc+0x9ce/0xad0 [ 76.815360][ T3627] ? __cfi_set_anon_super_fc+0x10/0x10 [ 76.820922][ T3627] get_tree_nodev+0xcb/0x170 [ 76.825556][ T3627] ? __cfi_ovl_fill_super+0x10/0x10 [ 76.830826][ T3627] ovl_get_tree+0x20/0x30 [ 76.835195][ T3627] vfs_get_tree+0xa1/0x290 [ 76.839690][ T3627] do_new_mount+0x251/0xb40 [ 76.844237][ T3627] ? security_capable+0xcf/0xf0 [ 76.849136][ T3627] path_mount+0x688/0x1050 [ 76.853587][ T3627] ? putname+0x113/0x150 [ 76.857906][ T3627] __se_sys_mount+0x2bd/0x480 [ 76.862642][ T3627] ? __x64_sys_mount+0xf0/0xf0 [ 76.867473][ T3627] ? __kasan_check_write+0x18/0x20 [ 76.872617][ T3627] ? fpregs_restore_userregs+0x11d/0x260 [ 76.878311][ T3627] __x64_sys_mount+0xc3/0xf0 [ 76.882935][ T3627] x64_sys_call+0x2021/0x2ee0 [ 76.887662][ T3627] do_syscall_64+0x58/0xf0 [ 76.892110][ T3627] ? clear_bhb_loop+0x50/0xa0 [ 76.896850][ T3627] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.902784][ T3627] RIP: 0033:0x7f62dbf8e929 [ 76.907253][ T3627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.926963][ T3627] RSP: 002b:00007f62da5f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.935391][ T3627] RAX: ffffffffffffffda RBX: 00007f62dc1b5fa0 RCX: 00007f62dbf8e929 [ 76.943471][ T3627] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 76.951603][ T3627] RBP: 00007f62dc010ca1 R08: 0000200000000340 R09: 0000000000000000 [ 76.959651][ T3627] R10: 0000000001004040 R11: 0000000000000246 R12: 0000000000000000 [ 76.967684][ T3627] R13: 0000000000000000 R14: 00007f62dc1b5fa0 R15: 00007ffea92abdb8 [ 76.975682][ T3627] [ 76.978759][ T3627] ---[ end trace 0000000000000000 ]--- [ 76.984617][ T3627] ------------[ cut here ]------------ [ 76.990152][ T3627] WARNING: CPU: 1 PID: 3627 at fs/dcache.c:774 dput+0x3cd/0x510 [ 76.997883][ T3627] Modules linked in: [ 77.001829][ T3627] CPU: 1 UID: 0 PID: 3627 Comm: syz.1.1132 Tainted: G W 6.12.30-syzkaller-g3bff0858a069 #0 051941c7a2def972631bf72fe68480c4884f2578 [ 77.016901][ T3627] Tainted: [W]=WARN [ 77.020752][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.030863][ T3627] RIP: 0010:dput+0x3cd/0x510 [ 77.035501][ T3627] Code: 55 99 ff 48 b8 00 00 00 00 00 fc ff df 48 8b 4d d0 0f b6 04 01 84 c0 0f 85 21 01 00 00 80 0b 40 e9 a8 fe ff ff e8 33 55 99 ff <0f> 0b e9 9c fe ff ff e8 27 55 99 ff 48 89 df e8 2f 01 00 00 84 c0 [ 77.055173][ T3627] RSP: 0018:ffffc9000ec073b0 EFLAGS: 00010246 [ 77.061326][ T3627] RAX: ffffffff81ec55cd RBX: ffff88812b4a0dd0 RCX: 0000000000080000 [ 77.069362][ T3627] RDX: ffffc900015d1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 77.077395][ T3627] RBP: ffffc9000ec073e0 R08: 0000000000000003 R09: 0000000000000004 [ 77.085392][ T3627] R10: dffffc0000000000 R11: fffff52001d80e68 R12: 00000000ffffff80 [ 77.093418][ T3627] R13: ffff88812b4a0e54 R14: ffff88812b4a0e50 R15: 1ffff110256941ca [ 77.101446][ T3627] FS: 00007f62da5f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 77.110430][ T3627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.117071][ T3627] CR2: 0000200000001000 CR3: 00000001407fe000 CR4: 00000000003526b0 [ 77.125065][ T3627] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.133072][ T3627] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.141129][ T3627] Call Trace: [ 77.144430][ T3627] [ 77.147397][ T3627] path_put+0x3d/0x70 [ 77.151422][ T3627] dentry_release+0x53/0xb0 [ 77.155978][ T3627] ? __cfi_dentry_release+0x10/0x10 [ 77.161287][ T3627] __dentry_kill+0x22b/0x5f0 [ 77.165911][ T3627] ? lock_for_kill+0xa7/0x230 [ 77.170650][ T3627] dput+0x3f2/0x510 [ 77.174488][ T3627] path_put+0x3d/0x70 [ 77.178741][ T3627] dentry_release+0x53/0xb0 [ 77.183296][ T3627] ? __cfi_dentry_release+0x10/0x10 [ 77.188542][ T3627] __dentry_kill+0x22b/0x5f0 [ 77.193167][ T3627] ? lock_for_kill+0xae/0x230 [ 77.197915][ T3627] dput+0x3f2/0x510 [ 77.201755][ T3627] ovl_workdir_create+0x2bf/0x750 [ 77.206830][ T3627] ? __kasan_check_write+0x18/0x20 [ 77.212018][ T3627] ? ovl_statfs+0x2d0/0x2d0 [ 77.216579][ T3627] ? _raw_spin_lock+0x8c/0x120 [ 77.221378][ T3627] ? _raw_spin_unlock+0x45/0x60 [ 77.226234][ T3627] ? mnt_want_write+0x321/0x510 [ 77.231144][ T3627] ovl_get_workdir+0x328/0x1650 [ 77.236040][ T3627] ? ovl_fill_super+0x36f0/0x36f0 [ 77.241125][ T3627] ? __kasan_check_write+0x18/0x20 [ 77.246271][ T3627] ? _raw_spin_lock+0x8c/0x120 [ 77.251189][ T3627] ? __cfi__raw_spin_lock+0x10/0x10 [ 77.256663][ T3627] ? __kasan_check_write+0x18/0x20 [ 77.261830][ T3627] ? _raw_spin_lock+0x8c/0x120 [ 77.266677][ T3627] ? __cfi__raw_spin_lock+0x10/0x10 [ 77.271915][ T3627] ? __kasan_check_write+0x18/0x20 [ 77.277088][ T3627] ? up_read+0x26/0x1d0 [ 77.281272][ T3627] ? _raw_spin_unlock+0x45/0x60 [ 77.286130][ T3627] ? ovl_inuse_trylock+0xbd/0x110 [ 77.291207][ T3627] ovl_fill_super+0x133f/0x36f0 [ 77.296109][ T3627] ? xas_nomem+0x71/0x2d0 [ 77.300488][ T3627] ? ida_alloc_range+0xa12/0xa50 [ 77.305554][ T3627] ? __cfi_ovl_fill_super+0x10/0x10 [ 77.310802][ T3627] ? __kasan_kmalloc+0x96/0xb0 [ 77.315610][ T3627] ? __kasan_check_write+0x18/0x20 [ 77.320794][ T3627] ? mutex_unlock+0x8b/0x240 [ 77.325423][ T3627] ? __cfi_mutex_unlock+0x10/0x10 [ 77.330507][ T3627] ? __kasan_check_write+0x18/0x20 [ 77.335652][ T3627] ? _raw_spin_lock+0x8c/0x120 [ 77.340468][ T3627] ? sget_fc+0x9ce/0xad0 [ 77.344775][ T3627] ? __cfi_set_anon_super_fc+0x10/0x10 [ 77.350301][ T3627] get_tree_nodev+0xcb/0x170 [ 77.354928][ T3627] ? __cfi_ovl_fill_super+0x10/0x10 [ 77.360179][ T3627] ovl_get_tree+0x20/0x30 [ 77.364546][ T3627] vfs_get_tree+0xa1/0x290 [ 77.369033][ T3627] do_new_mount+0x251/0xb40 [ 77.373582][ T3627] ? security_capable+0xcf/0xf0 [ 77.378521][ T3627] path_mount+0x688/0x1050 [ 77.382973][ T3627] ? putname+0x113/0x150 [ 77.387275][ T3627] __se_sys_mount+0x2bd/0x480 [ 77.391988][ T3627] ? __x64_sys_mount+0xf0/0xf0 [ 77.396805][ T3627] ? __kasan_check_write+0x18/0x20 [ 77.401949][ T3627] ? fpregs_restore_userregs+0x11d/0x260 [ 77.407620][ T3627] __x64_sys_mount+0xc3/0xf0 [ 77.412249][ T3627] x64_sys_call+0x2021/0x2ee0 [ 77.416972][ T3627] do_syscall_64+0x58/0xf0 [ 77.421414][ T3627] ? clear_bhb_loop+0x50/0xa0 [ 77.426138][ T3627] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.432091][ T3627] RIP: 0033:0x7f62dbf8e929 [ 77.436581][ T3627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.456244][ T3627] RSP: 002b:00007f62da5f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.464714][ T3627] RAX: ffffffffffffffda RBX: 00007f62dc1b5fa0 RCX: 00007f62dbf8e929 [ 77.472731][ T3627] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 77.480769][ T3627] RBP: 00007f62dc010ca1 R08: 0000200000000340 R09: 0000000000000000 [ 77.488825][ T3627] R10: 0000000001004040 R11: 0000000000000246 R12: 0000000000000000 [ 77.496887][ T3627] R13: 0000000000000000 R14: 00007f62dc1b5fa0 R15: 00007ffea92abdb8 [ 77.504882][ T3627] [ 77.507947][ T3627] ---[ end trace 0000000000000000 ]--- [ 77.513689][ T3627] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 77.523273][ T3627] overlayfs: maximum fs stacking depth exceeded