last executing test programs: 1.808418827s ago: executing program 0 (id=1): setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/209, 0xd1}], 0x1, 0x2000004c, 0x8) io_setup(0x6, &(0x7f00000001c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)='9', 0x20000101}]) getrandom(&(0x7f0000000880)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@empty, @private=0xa010102}, 0x8) close_range(r0, r0, 0x0) 1.742887513s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000002a40)={0x18, 0x0, r0, {0x7}}, 0x18) chdir(&(0x7f00000001c0)='./file0\x00') 1.721500026s ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000980)=0x0) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000000300)={0x0, 0xfcfd, 0x0, 0x0, 0x0, r0, &(0x7f0000000340)="187c", 0x2, 0x600}]) 1.660495722s ago: executing program 1 (id=8): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x3) pipe(&(0x7f0000000340)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xd54895b78f604514) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75725fba6974", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x32, 0x30, 0x32, 0x34, 0x64, 0x30, 0x30, 0x37, 0x57, 0x35, 0x32, 0x53, 0x35, 0x33, 0x63]}, &(0x7f0000000280)={0x0, "0011223344557c778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f00000068c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) r4 = add_key$fscrypt_v1(&(0x7f0000006940), &(0x7f0000006980)={'fscrypt:', @desc4}, &(0x7f00000069c0)={0x0, "1b699af42db92c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c49522f82f6ffcdcf860c0cadb646c435e077ecbbae7968117a70a9a1090", 0x29}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000006a40), &(0x7f0000006a80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000006ac0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000006b40), &(0x7f0000006b80)={'fscrypt:', @auto=[0x30, 0x30, 0x63, 0x30, 0x32, 0x38, 0x30, 0x30, 0x66, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000006bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x51, r3) add_key$fscrypt_v1(&(0x7f0000006c40), &(0x7f0000006c80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000006cc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000006d40), &(0x7f0000006d80)={'fscrypt:', @auto=[0x30, 0x31, 0x62, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x36, 0x30, 0x39]}, &(0x7f0000006dc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000006e40), &(0x7f0000006e80)={'fscrypt:', @auto=[0x36, 0x32, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x33]}, &(0x7f0000006ec0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$keyring(&(0x7f0000006f40), &(0x7f0000006f80)={'syz', 0x0}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000006fc0), &(0x7f0000007000)={'fscrypt:', @auto=[0x60, 0x37, 0x33, 0x39, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000007040)={0x0, "00112233445566778899aabbcc99aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889932bbccc0eeff00", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f00000070c0), &(0x7f0000007100)={'fscrypt:', @desc3}, &(0x7f0000007140)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff0011220011223344556677889c69bbccddeeff00", 0x22}, 0x48, r3) add_key$keyring(&(0x7f00000071c0), &(0x7f0000007200)={'syz', 0x2}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000007240), &(0x7f0000007280)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x32, 0x30, 0x30, 0x0, 0x35, 0x61, 0x33, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f00000072c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aa00ccddeeff00112233445566778899aabbccddee1ea0b92133445566778899aabbccddeeff", 0x41}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000007340), &(0x7f0000007380)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x62, 0x32, 0x66]}, &(0x7f00000073c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x48}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000007440), &(0x7f0000007480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x76, 0x32, 0x33, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x65, 0x65, 0x33]}, &(0x7f00000074c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$keyring(&(0x7f0000007540), &(0x7f0000007580)={'syz', 0x3}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f00000075c0), &(0x7f0000007600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x61, 0x31]}, &(0x7f0000007640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r3) keyctl$unlink(0x9, r4, r3) write$FUSE_INIT(r1, &(0x7f00000024c0)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000002540)='./file0\x00', 0x0, 0x18) 1.660016052s ago: executing program 1 (id=10): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x101701) r1 = syz_create_resource$futex(&(0x7f0000000300)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000800)) futex(r1, 0xb, 0x1, 0x0, r2, 0x0) futex(r2, 0xd, 0x2, 0x0, r1, 0x0) futex(r1, 0xc, 0x1, 0x0, r2, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000880)='./dev\x00', &(0x7f00000008c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1a7) mount(&(0x7f0000000940)=@filename='./dev/sda1\x00', &(0x7f0000000980)='./mnt\x00', &(0x7f00000009c0)='ext4\x00', 0x8410, 0x0) setxattr$incfs_metadata(&(0x7f0000000a00)='./mnt\x00', &(0x7f0000000a40), &(0x7f0000000a80)="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", 0xfbd, 0x0) exit(0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x30, 0x65, 0x32, 0x31, 0x66, 0x37, 0x37, 0x30, 0x61, 0x38, 0x36, 0x64, 0x32]}, &(0x7f0000000500)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x4) keyctl$set_timeout(0xf, r5, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000000140)={@void, @val={0x3, 0x3, 0x1b, 0x30, 0x32, 0x6}, @ipv6=@gre_packet={0x3, 0x6, '\x00', 0x4c, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @mcast2, {[@dstopts={0x6f}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x7e) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x1) memfd_create(&(0x7f00000001c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\\xe3\x03\xc8\xb6\xa9D\xcc\xf4#\x9e4vmB\xd3\'\a\"\x80_N\t>\xd6\x98\x06\x00\x00\x00\x00\x00\x00\x00l\xcf\xa2\xb8\xdf4\xd8\x1d\x83\xf3\xf4\xedn_\xad\xbdt', 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000580)={r5, 0xe6, 0x12}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'sha512-avx2\x00'}}, &(0x7f0000001a40)="bea82843fc423e03c708d7b9a1351cd5394c84d5a1d3b0dcc1f70b3b7cf814a630dffc3c28edd1c3e70de41fbef300ced1e4550bf146ce9ddee29d9fb3792375ff499400ac95df7fd923af7c8e62ab91237b8d35521e37d659f9c0c3533dbc0aecb726aff2771448010ac07eb3b3acc81974570c20573978b1fb79c540c2b9e8b447e3f042cbb0c6beb9d8bb09034a4974ce7acef84fb4189f6c4f351ef4abb4157db3c1f6e7cb82331480d30c5f83cb8b4ef0ac0ff95f950723cf85534b98b2063c9ca08e832217cc44c3609f4b1b8f94e67d9b3cfae1ab701abe6619d434ee7dd9bcfe34ec", &(0x7f00000007c0)="dd740b42923dec1c3498e150a767c260e699") openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="0500657273696f6e3d3970321d02303c0040c781bd514856b0824749a1a7020a0ff1b4f9dcc4e27e445e6471d7cfcca65c53f44fab1834bc1cec665d15eca80281ea081d"]) 1.591222889s ago: executing program 2 (id=12): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x82) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000040)=0x1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000000c0)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r0, 0x2e30d000) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000140)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x3, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) r5 = syz_io_uring_setup(0x2856, &(0x7f00000002c0)={0x0, 0x1cc1, 0x20, 0x0, 0x31e, 0x0, r3}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) poll(&(0x7f0000000400)=[{r5, 0x2044}, {r0, 0x1010}, {0xffffffffffffffff, 0x80}], 0x3, 0x0) read$char_usb(r3, &(0x7f0000000440)=""/160, 0xa0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r6, &(0x7f0000000540)={0x5, 0x20, 0x4, 0x20, 0x8000000000000000}, 0x48) writev(r2, &(0x7f0000000900)=[{&(0x7f00000005c0)="a8833ae533ef01d2d4aa562e3cc6672f048cae49ea565951a3c85bcca4263e4612c2803e496a681bfecd46e8af37f137b833e8589c1e066f92165bd6bc0ea50a793817f451969a8965572fa09d0935af5ffcceff3bae49baeb923745626008b3cd53810f5bcf154466d95dad473152aca2f0c1a791cec81235604406e3f88f1377cbb7cf917186c9f11958e7846c7620656a1afa81b62f1b60ecc7914ec6ecca4d4f129f9e6ff415f335b2cf18e62c48573f586f59c806400f025cdc15cdf4448afaf1931ec3803cf0e1", 0xca}, {&(0x7f00000006c0)="352b6f21d94995441c258bf1e22f4a24b69ff221c605e1f3f9efc7", 0x1b}, {&(0x7f0000000700)="a49adc071b6c72e5e68a91ff388dd6e6930aa35f35d8cb3dc6f223a7a6d76d8107b7f3a9091e9595044e0ba76e5b00a00c3b509af895a615676f95fc7b8bbc5be49cf6b1543b7a5911b470da85dabd49b4c856ec06cb5974e375ab52e78b65a649741deef17e779392f271170f183fb644ac732213d65c92fc2180e505bf236dff289d9b866897f1665407a81b3231ee30c019a43ab28e981e25514aee7655f2d619aeda974f47cbde2fb3d69731741ee07db2be1aca61a450f65fd8ce92512f06d2435bdf9632af21ced5f6695abb07cc947ac54f23", 0xd6}, {&(0x7f0000000800)="01a104dc20cfc40f7b353353614353f750282663042ee6378d0538c5abcec4f445062bfbba02063a7d288c3570beda1bd158eb8d371ec1ee2eaa852d269335dd662cd907af5ebe135ab69aa369fd0343783234926494a944542ba537307d5c5d3f8bb6b4", 0x64}, {&(0x7f0000000880)="9d508e8053cfea4dcf231a399c04ed50c61efbe5f976a2c8f7de1886a74a5d1857e613ed71b4", 0x26}, {&(0x7f00000008c0)="6608930f91e006e03909e79775b85cc681f444ebba6e6ef30b14a327a084a67d537ad188ce1bf01225", 0x29}], 0x6) socket$key(0xf, 0x3, 0x2) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(r7, 0x407, 0x4a3bf6a3) ioctl$TCSBRKP(r4, 0x5425, 0x100000001) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000029c0)={{{@in6=@local, @in=@remote}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000002ac0)=0xe8) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000002b00)=0xb000) r8 = socket$inet(0x2, 0xa, 0x2) userfaultfd(0x801) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, r6, 0xd0ade000) openat$tun(0xffffffffffffff9c, &(0x7f0000002b40), 0x40042, 0x0) close(r8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002b80)={{{@in6=@mcast1, @in6=@remote}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002c80)=0xe8) 1.465553621s ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000680)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000006c0)="3f0302e90302faff05001e0089e9aaa911d7c2290f008906", 0x18, 0x0, &(0x7f0000000700)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300)='ext4\x00', 0x1008c10, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (rerun: 32) socket$inet(0x2, 0x3, 0x1) chdir(&(0x7f0000000340)='./file0\x00') (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async) mkdir(&(0x7f0000000740)='dir0\x00', 0x1ff) (async) mount(0x0, &(0x7f00000007c0)='dir0\x00', &(0x7f0000000900)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='dir0/tracing_on\x00', 0x1, 0x0) write(r2, &(0x7f0000000980)="ca3e30", 0x3) r3 = open$dir(&(0x7f0000000380)='.\x00', 0x181000, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f00000003c0)={@desc={0x1, 0x2000000, @desc1}}) setxattr$security_ima(&(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500), &(0x7f0000000540)=@sha1={0x1, "a1e98d951687c929a50e62cec43a06d2437ab0cb"}, 0x15, 0x1) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000004e004026093333400000000001090224000100000000090400000103010000092100000001220100090581a2be848f4e074932a3f30cb20fcb722a1c22df997aa31feb9e2112c9f1e3408988cbc012d03860b102d6126425d7ce442425fce85f553a961bcad3d56f26ab8d9b48972edb47e65109e6a2fbe748353ad495c5e702ebf997feb0fa7142dc9930a269a8c30d002d86483ea1332ad4cfa6627da298e1a933845676e9d6b90a36c2f1d83093384d9a519701bda4f5a4f03a408a16"], 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x4, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, &(0x7f00000007c0)) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)={0x30, 0x21, 0x1, 0x0, 0x8000, "", [@typed={0xa, 0x100, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @typed={0x14, 0xe, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}], 0x1}, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x804) (async) ptrace(0x10, r6) (async, rerun: 64) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000040)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async, rerun: 64) ptrace$getregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000180)=""/120, 0x78}) 1.211485847s ago: executing program 0 (id=16): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921080800012201000905810377fe"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000010c0)={0x24, &(0x7f0000001100)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001140)={0x2c, &(0x7f0000001180)={0x40, 0x18, 0x4, '\b\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001980)={0x84, &(0x7f0000001580)={0x20, 0xd, 0x1b, "abb2de8428385650a8b1e8ef8529ea9d74977c4e338d32190e3a7c"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001640)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000001680)={0x20, 0x0, 0x4, {0x2c0, 0x10}}, &(0x7f00000016c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001700)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001740)={0x40, 0xb, 0x2, "c2a8"}, &(0x7f0000001780)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000017c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001800)={0x40, 0x17, 0x6}, &(0x7f0000000040)={0x40, 0x19, 0x2}, &(0x7f0000001880)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f00000018c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001900)={0x40, 0x1e, 0x1}, &(0x7f0000001940)={0x40, 0x21, 0x1, 0x41}}) 734.223826ms ago: executing program 3 (id=18): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = open(0x0, 0x10507e, 0xa6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40042, 0x1) syz_ublk_setup_queues(r0, 0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x19a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x0, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab60, 0x2, 0x1, 0xfffffffe}}], 0x1, 0x0, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x0) 733.642196ms ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000002a40)={0x18, 0x0, r0, {0x7}}, 0x18) chdir(&(0x7f00000001c0)='./file0\x00') 712.895228ms ago: executing program 3 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', &(0x7f0000001580)={[&(0x7f0000001480)='proc\x00', &(0x7f0000001440)='{\x00', &(0x7f00000019c0)='f\xa7\x85~\x81\xf3tWv\v\xc7\xfa_>y\\\xd1\x9b\x9b)u\xed\x13\xe2\xbc\x1e\x96C\xc1c\x0e\xd6\xd9\x97Y\xfc&\x1d\x85N]\xc8\x8d\xd0\xd6\x82\xa6\x8c\xc0\x03\x1fK\x1au\xac\xbdU;\xef4\f\xd1a2:M\x98^\xcf8e\x1a\xbd\x87\xd0\xe3\x19xZ\xaa\x88\xc2\x18t\x9b\xc9\xbf\xd0F\x8c\xf0\x12\x96\xb9\x11\x9b\x9b\xc4\x00'/110, &(0x7f0000001840)='proc\x00', &(0x7f0000001a40)='H\xe0\x00\xc7x\xe47\xb2\xf4V\xf5\x05}\xea\x8e^\x82C#w\xcb\xd0b\xcf\x86u\xc4}F}-\"\xdc\x0e\x924\xa8\xa3\xbf$\xd6\x9a\xd0\xe8\x87\xcb\xeaV\x9d\xa4\xcd\xa1}x\xe7QB~\x9c\x18o\x81#\xb1\xd7\x81\x9d\x81\xcd.\v\xe8\xf5\xa9\x99\xde\x1e\"\xc3\xae\x1a|\xa6!\x94\x96*h\xba\xcc\xc7GP\x82\x8d\xad\xbe:\b', &(0x7f0000001540)='proc\x00']}, &(0x7f00000017c0)={[&(0x7f00000015c0)='proc\x00', &(0x7f0000001600)='proc\x00', &(0x7f0000001640)='proc\x00', &(0x7f0000001680)='proc\x00', &(0x7f00000016c0)='=$,[\x00', &(0x7f0000001700)='proc\x00', &(0x7f0000001740)=']&$\x00', &(0x7f0000001780)='\x00']}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000014c0)=0x100000001, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x12) 672.069522ms ago: executing program 3 (id=21): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000100)=0xa40, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0xffff, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x7, 0x9, 0x80000000, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb8, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0x6, 0x3, 0xbbf, 0x7ff, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0xffffffff, 0x91, 0x4, 0x10, 0x16, 0x10, 0x5, 0x401, 0xffff0e3e, 0x405, 0xa, 0x81, 0x9, 0x7ff, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x8, 0x4007f, 0xffffffff, 0x9, 0x4], [0x2, 0x3, 0x9, 0x9, 0xffffff0f, 0x1, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x4, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x0, 0x9, 0xfffffff8, 0x401, 0x46, 0xf1, 0xd, 0xab0005f, 0x5, 0x6, 0x2, 0xfffffffd, 0x80000001, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x1, 0xb1, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80, 0x5, 0x40, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x3d, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x0, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f3, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x5, 0x7f, 0x10000, 0x1, 0x2, 0x1, 0x0, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x8000006, 0x10000, 0xfffffffd, 0x9b9, 0x1], [0x7ff, 0x6, 0x6, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8, 0x1e, 0x9, 0x81, 0x100010, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x3e, 0x5396, 0x3, 0x6, 0x80008001, 0x777b, 0x3, 0x4, 0x400100, 0x0, 0x7fffffff, 0x100009, 0xe, 0xfffffffd, 0x3, 0x1ff, 0x2000c03, 0x2, 0x10000, 0x3, 0x8004, 0x7fff, 0x3, 0x8000006, 0xf, 0xe, 0x1, 0x26d, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x1009, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4607fc3c4f010001000000000002003e000700000094020000000000004000000000000000dd0100000000000033000000000038000100000033030000030000000000000004000000070000000000000001000000c801000000000000e8"], 0xec) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000280)={'binder0\x00'}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000000600)={0xa, 0x4e22, 0xca208f2, @local, 0x2000}, 0x1c, &(0x7f00000032c0)=[{&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="d8f906abb0f551fae8f770ff55c8cec7ab480f0eab43e76a96cd446428c3ed0d149c9435f4556a318a911fc9c01c5a8d2582b8ce2a3ad07cb5911124900826d7ba8f4667fadeb3ba10133de5ea", 0x4d}, {&(0x7f00000021c0)="2af5c5a0825c5cc536a7d679dd7fd3eb7e4cf5e65248e50872ae85b1afc5af50df27e7e8fc0202ed40f549c65bb0a38e254a140ffa82e8d9a7c93e4b633fd795391d4a6bfffcbee27293c21ccb836ffdc81cdf7733ddcd552ce42d27125ba17707589a0ca9a4fec553cd0ce0e3f0de6bce1283570527b0a90ebab8a88b173ecc3b5377fc54525ae3bd6f7e633e834cd699b5744a7cc564df93a46ab32e3474aab8d54a7e4e31e7b515279f91cebe6fd3ce0609caa49f1dd33b2a4430e1b8807d5dace3c3c66fc84dcbfe038ec91b0737c70118398da4c776fc3fd9d0f967bc260facdc31594b3d1a7ad4b860d6e585b49bd7b7c23200c8e9", 0xf8}, {&(0x7f00000022c0)="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", 0x1000}], 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="a4000000000000002900000432000000fe80000000000000aac40001006f977216ff3403be2994857438d3ef7142e869faa515b27558e6893433db64c5531eb92dc3eadeaa829f14c9a9994a8e4e6410606efe0074253b50", @ANYRES32=0x0, @ANYBLOB="00000000140000000000000029000000080000000100000000000000a80000000000000029000000370000000011000000000000072800000001080481000900000000000000ff00000000000000000001000000000009000000000000000401c4c9102001000000000000000000000000000001060000000000000001000401010740000000010e040600fbffffffffffffff0900000000000000018000000000000007000000000000000000000000630a000400000000000000010000000000000000200000000000000029000000360000000000000000000000c204000000050000"], 0x108}, 0x48400) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x3639171b, @remote, 0x1}, 0x1c) r6 = inotify_init1(0x80000) close(r6) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x7, 0xeeee8000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 475.862002ms ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000980)=0x0) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000000300)={0x0, 0xfdef, 0x0, 0x0, 0x0, r0, &(0x7f0000000340)="187c", 0x2, 0x600}]) 356.654964ms ago: executing program 3 (id=23): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000380)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x50, &(0x7f0000000040)={0x0, 0x0}, 0x10) 126.357597ms ago: executing program 2 (id=24): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) (async) r3 = getpgrp(0xffffffffffffffff) tkill(r3, 0x11) sched_setattr(r3, &(0x7f0000000000)={0x38, 0x0, 0x1, 0xfffffffc, 0xd, 0x6, 0x40, 0x1, 0x800, 0xc5}, 0x0) (async) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0) 103.76003ms ago: executing program 2 (id=25): r0 = socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x4f, {"f3430f09440fae07450f380255000f0d1766b8e9008ec066baa00066eddbf60f20d835200000000f22d8c462710da7029fd4bdc403350ca449675700000a"}}], 0x4f}) ioctl$KVM_RUN(r4, 0xae80, 0x0) accept4$tipc(r0, &(0x7f00000019c0)=@id, &(0x7f0000000000)=0x10, 0x800) 4.51402ms ago: executing program 1 (id=26): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) syz_clone3(&(0x7f0000000680)={0x180801400, &(0x7f0000000700)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) (async) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) (async) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x0, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}]}) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000400)) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000540)=@filename='./dev/sda1\x00', &(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='ext4\x00', 0x8410, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x519001, 0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000640)=0x2000000) (async) write$tun(r4, &(0x7f0000000680)=ANY=[], 0x1d4c0) (async) close(0x3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'\x00', 0x824403d2e3bc09e9}) (async) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20240, 0x0) syz_io_uring_setup(0x369, &(0x7f0000000000)={0x0, 0xa2d1, 0x10, 0x1, 0xb8, 0x0, r5}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2.90823ms ago: executing program 2 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x4e) mount(0x0, &(0x7f0000000040)='./debugfs\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debugfs/kvm/halt_poll_fail_ns\x00', 0x109101, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_ublk_setup_io_uring(0x3, &(0x7f0000000480)={0x0, 0x4, 0x1000}, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2002, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) openat$kvm(0x0, &(0x7f00000006c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000007c0)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000800)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0d1, 0x4000, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x905b, 0x800, 0x0, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x40040001, 0x3cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x0, 0xfffffffb}}], 0x1, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x6a) r6 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r6, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r6, 0xc138fd09, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0xc001, 0x0, 0x0, @by_dev={r7}, [@snapshot={0x0, 0xc0, 0x0, 0x80, 'snapshot-merge\x00', {@ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'p', 0x20, '7', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000300)=0x0) getgroups(0x2, &(0x7f0000000340)=[0xee01, 0xffffffffffffffff]) fchownat(r0, &(0x7f00000002c0)='./debugfs\x00', r8, r9, 0x800) 2.72485ms ago: executing program 1 (id=28): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = open(0x0, 0x10507e, 0xa6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40042, 0x1) syz_ublk_setup_queues(r0, 0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x19a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x0, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab60, 0x2, 0x1, 0xfffffffe}}], 0x1, 0x0, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x0) 0s ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000002a40)={0x18, 0x0, r1, {0x7}}, 0x18) chdir(&(0x7f00000001c0)='./file0\x00') kernel console output (not intermixed with test programs): [ 7.096934][ T36] audit: type=1400 audit(1794052723.830:58): avc: denied { read } for pid=203 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 21.173157][ T36] audit: type=1400 audit(1794052737.910:59): avc: denied { transition } for pid=275 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.176716][ T36] audit: type=1400 audit(1794052737.910:60): avc: denied { noatsecure } for pid=275 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.179722][ T36] audit: type=1400 audit(1794052737.920:61): avc: denied { write } for pid=275 comm="sh" path="pipe:[2991]" dev="pipefs" ino=2991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.183435][ T36] audit: type=1400 audit(1794052737.920:62): avc: denied { rlimitinh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.186404][ T36] audit: type=1400 audit(1794052737.920:63): avc: denied { siginh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 28.239979][ T36] audit: type=1400 audit(1794052744.980:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.263012][ T36] audit: type=1400 audit(1794052745.010:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.264147][ T287] cgroup: Unknown subsys name 'net' [ 28.290821][ T36] audit: type=1400 audit(1794052745.030:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.290984][ T287] cgroup: Unknown subsys name 'devices' [ 28.415275][ T287] cgroup: Unknown subsys name 'hugetlb' [ 28.421177][ T287] cgroup: Unknown subsys name 'rlimit' [ 28.513692][ T36] audit: type=1400 audit(1794052745.260:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.536919][ T36] audit: type=1400 audit(1794052745.260:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.561670][ T36] audit: type=1400 audit(1794052745.260:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.569572][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.593546][ T36] audit: type=1400 audit(1794052745.340:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.618972][ T36] audit: type=1400 audit(1794052745.340:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.625663][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.644849][ T36] audit: type=1400 audit(1794052745.360:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.678766][ T36] audit: type=1400 audit(1794052745.360:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.560281][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.567412][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.574511][ T294] bridge_slave_0: entered allmulticast mode [ 29.580681][ T294] bridge_slave_0: entered promiscuous mode [ 29.595921][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.602980][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.610260][ T294] bridge_slave_1: entered allmulticast mode [ 29.616522][ T294] bridge_slave_1: entered promiscuous mode [ 29.632865][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.640355][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.647452][ T295] bridge_slave_0: entered allmulticast mode [ 29.653787][ T295] bridge_slave_0: entered promiscuous mode [ 29.663317][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.670367][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.677452][ T295] bridge_slave_1: entered allmulticast mode [ 29.683698][ T295] bridge_slave_1: entered promiscuous mode [ 29.693909][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.700952][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.708006][ T296] bridge_slave_0: entered allmulticast mode [ 29.714235][ T296] bridge_slave_0: entered promiscuous mode [ 29.734156][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.741220][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.748668][ T296] bridge_slave_1: entered allmulticast mode [ 29.754913][ T296] bridge_slave_1: entered promiscuous mode [ 29.780139][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.787219][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.794287][ T297] bridge_slave_0: entered allmulticast mode [ 29.800445][ T297] bridge_slave_0: entered promiscuous mode [ 29.806916][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.813969][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.821017][ T297] bridge_slave_1: entered allmulticast mode [ 29.827291][ T297] bridge_slave_1: entered promiscuous mode [ 29.978801][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.985895][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.993179][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.000235][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.010255][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.017328][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.024607][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.031630][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.049984][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.057080][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.064382][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.071415][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.113088][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.120197][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.127518][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.134687][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.154083][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.161395][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.168732][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.176733][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.183996][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.191114][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.198673][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.205838][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.223131][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.230211][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.240262][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.247326][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.264779][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.271850][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.279644][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.286722][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.294666][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.301716][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.309389][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.316464][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.368127][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.375220][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.384309][ T297] veth0_vlan: entered promiscuous mode [ 30.400548][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.407646][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.417875][ T294] veth0_vlan: entered promiscuous mode [ 30.432538][ T296] veth0_vlan: entered promiscuous mode [ 30.449018][ T294] veth1_macvtap: entered promiscuous mode [ 30.462141][ T296] veth1_macvtap: entered promiscuous mode [ 30.477355][ T297] veth1_macvtap: entered promiscuous mode [ 30.525953][ T295] veth0_vlan: entered promiscuous mode [ 30.526213][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.565804][ T295] veth1_macvtap: entered promiscuous mode [ 30.636548][ T322] fuse: Bad value for 'fd' [ 30.677224][ T328] fuse: Unknown parameter 'grour_šit00000000000000000000' [ 30.731954][ T340] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 30.820639][ T338] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.10' sets config #0 [ 30.845601][ T344] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 30.890339][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.905327][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.916710][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 30.928232][ T355] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 30.936242][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 30.947676][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 30.957547][ T349] netlink: 'syz.2.14': attribute type 14 has an invalid length. [ 30.963311][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 30.982548][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 30.999492][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.007679][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.016015][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.023818][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.031587][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.039575][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.047633][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.055457][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.063207][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.071180][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.078988][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.086781][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.094594][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.102360][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.110154][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.118069][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.126100][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.133699][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.141458][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.149317][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.157207][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.165466][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.173366][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.181116][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.188964][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.197103][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.204897][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.212639][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.220422][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.228202][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.236168][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.243950][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.251671][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.259457][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.267288][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.275674][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.284028][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.291784][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.299638][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.307522][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.315312][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.323055][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.330929][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.338763][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.346734][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.355346][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.363173][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.370970][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.378851][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33982, setting to 1024 [ 31.390034][ T311] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 31.400106][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.407884][ T311] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.417048][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.424807][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.433087][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.441386][ T311] usb 3-1: config 0 descriptor?? [ 31.446393][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.454331][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.462198][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.462682][ T350] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.470101][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.483088][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.484890][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.500661][ T311] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 31.508018][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.517443][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.525253][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.533019][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.540866][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.548638][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: unknown main item tag 0x0 [ 31.557074][ T31] hid-generic 0DDE:FFFFFFFF:0004.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 31.597318][ T391] fido_id[391]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 31.628275][ T404] fuse: Bad value for 'fd' [ 31.633275][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 31.643159][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.654715][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 31.667245][ T66] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 31.678797][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.689554][ T66] usb 1-1: config 0 descriptor?? [ 31.696720][ T390] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 31.704712][ T66] hub 1-1:0.0: USB hub found [ 31.707725][ T31] usb 3-1: USB disconnect, device number 2 [ 31.710268][ T408] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.741790][ T408] process 'syz.3.21' launched './file1' with NULL argv: empty string added [ 31.904900][ T66] hub 1-1:0.0: 1 port detected [ 32.331062][ T31] rust_binder: 423: undelivered TRANSACTION_COMPLETE [ 32.345220][ T31] rust_binder: 423: undelivered transaction 2, process died [ 32.424882][ T437] ================================================================== [ 32.432975][ T437] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 32.440551][ T437] Read of size 8 at addr ffff8881133e3398 by task syz.2.27/437 [ 32.448102][ T437] [ 32.450431][ T437] CPU: 0 UID: 0 PID: 437 Comm: syz.2.27 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 32.450449][ T437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 32.450457][ T437] Call Trace: [ 32.450462][ T437] [ 32.450467][ T437] __dump_stack+0x21/0x30 [ 32.450483][ T437] dump_stack_lvl+0x140/0x1c0 [ 32.450495][ T437] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.450507][ T437] ? __cfi__printk+0x10/0x10 [ 32.450525][ T437] print_address_description+0x71/0x210 [ 32.450538][ T437] print_report+0x4a/0x70 [ 32.450549][ T437] kasan_report+0x162/0x1a0 [ 32.450563][ T437] ? snapshot_ctr+0x586/0x1350 [ 32.450578][ T437] ? snapshot_ctr+0x586/0x1350 [ 32.450592][ T437] __asan_report_load8_noabort+0x18/0x20 [ 32.450608][ T437] snapshot_ctr+0x586/0x1350 [ 32.450621][ T437] ? dm_split_args+0xa1/0x740 [ 32.450633][ T437] ? __cfi_snapshot_ctr+0x10/0x10 [ 32.450646][ T437] ? dm_split_args+0x5d0/0x740 [ 32.450657][ T437] dm_table_add_target+0x59f/0xcb0 [ 32.450670][ T437] table_load+0x2eb/0x7d0 [ 32.450685][ T437] ? __check_object_size+0x99/0x870 [ 32.450703][ T437] ? __cfi_table_load+0x10/0x10 [ 32.450719][ T437] ? __kasan_check_write+0x18/0x20 [ 32.450735][ T437] ? __cfi_table_load+0x10/0x10 [ 32.450751][ T437] dm_ctl_ioctl+0x8f3/0xde0 [ 32.450769][ T437] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 32.450787][ T437] ? __fget_files+0x2bc/0x330 [ 32.450809][ T437] ? bpf_lsm_file_ioctl+0xd/0x20 [ 32.450822][ T437] ? security_file_ioctl+0x3e/0x110 [ 32.450838][ T437] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 32.450853][ T437] __se_sys_ioctl+0x123/0x1b0 [ 32.450866][ T437] __x64_sys_ioctl+0x7f/0xa0 [ 32.450878][ T437] x64_sys_call+0x1878/0x2ee0 [ 32.450891][ T437] do_syscall_64+0x57/0xf0 [ 32.450904][ T437] ? clear_bhb_loop+0x50/0xa0 [ 32.450921][ T437] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.450938][ T437] RIP: 0033:0x7ff9c219fb19 [ 32.450950][ T437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.450960][ T437] RSP: 002b:00007ff9c30bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.450975][ T437] RAX: ffffffffffffffda RBX: 00007ff9c2426090 RCX: 00007ff9c219fb19 [ 32.450984][ T437] RDX: 0000200000000940 RSI: 00000000c138fd09 RDI: 0000000000000017 [ 32.450992][ T437] RBP: 00007ff9c2237b70 R08: 0000000000000000 R09: 0000000000000000 [ 32.451000][ T437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.451007][ T437] R13: 00007ff9c2426128 R14: 00007ff9c2426090 R15: 00007ffca3b90008 [ 32.451017][ T437] [ 32.451021][ T437] [ 32.711321][ T437] Allocated by task 437: [ 32.715558][ T437] kasan_save_track+0x3e/0x80 [ 32.720324][ T437] kasan_save_alloc_info+0x3a/0x50 [ 32.725437][ T437] __kasan_kmalloc+0x96/0xb0 [ 32.730036][ T437] __kmalloc_cache_node_noprof+0x225/0x430 [ 32.735841][ T437] dm_get_table_device+0x1e3/0x6c0 [ 32.740964][ T437] dm_get_device+0x32b/0x7f0 [ 32.745544][ T437] snapshot_ctr+0x292/0x1350 [ 32.750125][ T437] dm_table_add_target+0x59f/0xcb0 [ 32.755239][ T437] table_load+0x2eb/0x7d0 [ 32.759586][ T437] dm_ctl_ioctl+0x8f3/0xde0 [ 32.764110][ T437] __se_sys_ioctl+0x123/0x1b0 [ 32.768792][ T437] __x64_sys_ioctl+0x7f/0xa0 [ 32.773373][ T437] x64_sys_call+0x1878/0x2ee0 [ 32.779147][ T437] do_syscall_64+0x57/0xf0 [ 32.783594][ T437] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.789488][ T437] [ 32.791825][ T437] Freed by task 437: [ 32.795715][ T437] kasan_save_track+0x3e/0x80 [ 32.800402][ T437] kasan_save_free_info+0x44/0x50 [ 32.805444][ T437] __kasan_slab_free+0x5f/0x80 [ 32.810216][ T437] kfree+0x158/0x440 [ 32.814133][ T437] dm_put_table_device+0x298/0x2e0 [ 32.819280][ T437] dm_get_device+0x571/0x7f0 [ 32.823886][ T437] snapshot_ctr+0x435/0x1350 [ 32.828476][ T437] dm_table_add_target+0x59f/0xcb0 [ 32.833579][ T437] table_load+0x2eb/0x7d0 [ 32.837911][ T437] dm_ctl_ioctl+0x8f3/0xde0 [ 32.842435][ T437] __se_sys_ioctl+0x123/0x1b0 [ 32.847114][ T437] __x64_sys_ioctl+0x7f/0xa0 [ 32.851731][ T437] x64_sys_call+0x1878/0x2ee0 [ 32.856400][ T437] do_syscall_64+0x57/0xf0 [ 32.860823][ T437] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.866720][ T437] [ 32.869038][ T437] The buggy address belongs to the object at ffff8881133e3380 [ 32.869038][ T437] which belongs to the cache kmalloc-96 of size 96 [ 32.882912][ T437] The buggy address is located 24 bytes inside of [ 32.882912][ T437] freed 96-byte region [ffff8881133e3380, ffff8881133e33e0) [ 32.896553][ T437] [ 32.898874][ T437] The buggy address belongs to the physical page: [ 32.905272][ T437] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1133e3 [ 32.914134][ T437] flags: 0x4000000000000000(zone=1) [ 32.919332][ T437] page_type: f5(slab) [ 32.923325][ T437] raw: 4000000000000000 ffff888100041280 dead000000000100 dead000000000122 [ 32.931922][ T437] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 32.940501][ T437] page dumped because: kasan: bad access detected [ 32.946903][ T437] page_owner tracks the page as allocated [ 32.952605][ T437] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 112, tgid 112 (udevadm), ts 5336541577, free_ts 5336506190 [ 32.971100][ T437] post_alloc_hook+0x37d/0x3b0 [ 32.975870][ T437] prep_new_page+0x2d/0x180 [ 32.980373][ T437] get_page_from_freelist+0x4aea/0x4ba0 [ 32.985942][ T437] __alloc_pages_noprof+0x35a/0x7e0 [ 32.991154][ T437] alloc_slab_page+0x6b/0x1e0 [ 32.995825][ T437] allocate_slab+0x69/0x430 [ 33.000339][ T437] ___slab_alloc+0x591/0x8c0 [ 33.004920][ T437] __kmalloc_cache_noprof+0x2cd/0x470 [ 33.010303][ T437] kernfs_fop_open+0x716/0xd50 [ 33.015060][ T437] do_dentry_open+0x97c/0x1510 [ 33.019817][ T437] vfs_open+0x86/0x240 [ 33.023892][ T437] path_openat+0x2c49/0x35a0 [ 33.028477][ T437] do_filp_open+0x1f2/0x440 [ 33.032992][ T437] do_sys_openat2+0x134/0x1d0 [ 33.037663][ T437] __x64_sys_openat+0x13a/0x170 [ 33.042535][ T437] x64_sys_call+0xe69/0x2ee0 [ 33.047130][ T437] page last free pid 112 tgid 112 stack trace: [ 33.053280][ T437] free_unref_page+0xb99/0xf50 [ 33.058125][ T437] __free_pages+0x6b/0x3b0 [ 33.062549][ T437] free_pages+0x86/0x90 [ 33.066717][ T437] selinux_genfs_get_sid+0x209/0x2d0 [ 33.072006][ T437] inode_doinit_with_dentry+0x8f8/0xde0 [ 33.077544][ T437] selinux_d_instantiate+0x2b/0x40 [ 33.082645][ T437] security_d_instantiate+0xb8/0xf0 [ 33.087837][ T437] d_splice_alias+0x71/0x3a0 [ 33.092427][ T437] kernfs_iop_lookup+0x2c6/0x320 [ 33.097356][ T437] path_openat+0x1127/0x35a0 [ 33.101969][ T437] do_filp_open+0x1f2/0x440 [ 33.106475][ T437] do_sys_openat2+0x134/0x1d0 [ 33.111185][ T437] __x64_sys_openat+0x13a/0x170 [ 33.116043][ T437] x64_sys_call+0xe69/0x2ee0 [ 33.120658][ T437] do_syscall_64+0x57/0xf0 [ 33.125102][ T437] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.131021][ T437] [ 33.133347][ T437] Memory state around the buggy address: [ 33.138974][ T437] ffff8881133e3280: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 33.147030][ T437] ffff8881133e3300: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 33.155086][ T437] >ffff8881133e3380: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 33.163133][ T437] ^ [ 33.167988][ T437] ffff8881133e3400: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 33.176060][ T437] ffff8881133e3480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 33.184118][ T437] ================================================================== [ 33.194133][ T437] Disabling lock debugging due to kernel taint [ 33.212161][ T437] device-mapper: table: 252:0: device 1:4 not in table devices list [ 33.220303][ T437] device-mapper: table: 252:0: snapshot-merge: COW device cannot be the same as origin device (-EINVAL) [ 33.231531][ T437] device-mapper: ioctl: error adding target to table [ 33.238260][ T437] device-mapper: table: 252:0: dm_table_destroy: dm_put_device call missing for 1:4 [ 33.253633][ T36] kauditd_printk_skb: 103 callbacks suppressed [ 33.253649][ T36] audit: type=1400 audit(1794052750.000:177): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 33.394170][ T10] usb 1-1: USB disconnect, device number 2