last executing test programs: 3.12438912s ago: executing program 3 (id=140): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000200002}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1e0001000000000000000000000000fe80000000000000000000000000002000000000030000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.067657372s ago: executing program 3 (id=142): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0)) (async) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff01030207072405010763"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) keyctl$set_reqkey_keyring(0xe, 0x4) syz_usb_connect$uac2(0x3, 0x98, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000080c201810cef0db3c2f9d56ab58c533d51ce340000102030109028600030180e007080b0101010a20000904000000010120000924010200032600c511240806010000010000000200feff03000c2403fd0004a80306f9ff0a0904010000010220000995d3b09204010101010220000905010940000504000825018109090200090402000001022000090402010101022000090582"], 0x0) 2.180345525s ago: executing program 1 (id=146): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000200000000000000000020000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P\x00'], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.172189395s ago: executing program 1 (id=148): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38", 0xf4}, {&(0x7f0000000cc0)="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", 0x12e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}], 0x1}}], 0x3, 0x2090) (async) sendto(r3, &(0x7f00000002c0)=' ', 0x1, 0x404c801, 0x0, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) (async) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) mmap(&(0x7f0000134000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x4b0c7000) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) preadv(r7, &(0x7f0000001fc0)=[{&(0x7f0000004580)=""/4109, 0x100d}, {0x0, 0xfffffe3a}], 0x2, 0xacf4, 0x5d) (async) r8 = fcntl$getown(r1, 0x9) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r8) 2.146093145s ago: executing program 1 (id=149): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r0, &(0x7f0000000000)='\xa6%[\x00', 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = getuid() r3 = geteuid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc818, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xac3c8ab2d04098a9}}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@blksize={'blksize', 0x3d, 0x1400}}], [{@fsname}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_eq={'euid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, '\xa6%[\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfshat={'smackfshat', 0x3d, '\xa6%[\x00'}}]}}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x100) fcntl$setpipe(r4, 0x407, 0x1) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0x4002, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r6, 0x803c8000) personality(0x10) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000340)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000380)={0x9, 0x3, 0x934f, 0xb6c8, 0xd}, 0x14) setuid(r3) r7 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f00000004c0)={r6, &(0x7f00000003c0)='!\x00', 0x2002, &(0x7f0000000400)={@align=0x10000, {0x401, 0x112f, 0x68e, 0x1}}, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000500)={'sit0\x00', 0x400}) sendto$inet6(r5, &(0x7f0000000540)="c7302b4448a1d254b78a63876b90a3570974961d903c9d2ae5f90529fa821ba77f06a19179d7ef00107a66ca1640c304d72ec71363a4f0d63658dc5fe2e3a69c12f29d79afeae5b660a14f281344e81aae6f863d9ae68eeda5129689cd945a4a66076757ed14d0bbb9e2469f752fdb37d006d7d01d0f9c9425e729d258376ae53248526d15d6808c6a1f20a5bd7a8624f49f69aee7041b92656968d30bbfde4cf319bd8e85c3eb4e0fe666198646", 0xae, 0x800, &(0x7f0000000600)={0xa, 0x4e21, 0x1, @local}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x1d, r9}, 0x10, &(0x7f0000000740)={&(0x7f00000006c0)={0x4, 0x11c9, 0x3, {}, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "f624a6b405d0dfff"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x84) io_cancel(0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000007c0)="5e089e8752cd8f2421d8238a1feb71f8e72045ae07f99ac58116439bd9bb6a8254cc00bec8d55ad73cc7bcab6da0fde63901d0ddcd10be116642252b27953e79274d7e9fde5e4fffaf3f71036c7d5416f0ccbd3ebf39210b2b", 0x59, 0x7fffffffffffffff, 0x0, 0x3}, &(0x7f0000000880)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvmsg$inet_nvme(r10, &(0x7f0000000b00)={&(0x7f0000000900)=@phonet, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/34, 0x22}], 0x1, &(0x7f0000000a00)=""/252, 0xfc}, 0x21) setns(r5, 0x80) ioctl$XFS_IOC_FSGEOMETRY(r7, 0x8100587e, &(0x7f0000000b40)) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000c40)={0x16, @remote, 0x4e22, 0x4, 'sed\x00', 0x20, 0x7, 0x23}, 0x2c) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r10, 0x40109441, &(0x7f0000000c80)={0x5, 0x3, 0x80}) 2.076362707s ago: executing program 1 (id=150): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x0, 0x402226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x85) fchdir(r3) (async) fchdir(r3) utime(&(0x7f0000000200)='.\x00', 0x0) (async) utime(&(0x7f0000000200)='.\x00', 0x0) close(r1) (async) close(r1) 2.075075017s ago: executing program 1 (id=151): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000200002}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1e0001000000000000000000000000fe800000000000000000000000000020000000000a0000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.074869137s ago: executing program 1 (id=152): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES8=0x0, @ANYRES8, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="5d2bb1c5b9b460c1e26ccb7efd1c30a86ee5014cbd4eecbe9b55f4e57ff67ec75ac20cd35bd21706995c1ae90a6679981fc60d0a454bc82203c7329f79daa5d6fb6c5291154ae32ca3611d2b24666ba457c3b6683ee87b289082361bc9788673a271159e1a45083cb915b1e579c077163716b679e1068d2ee2e08a7a1e33239f8efd130f28e5275e24ab6edeb209d4f4", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESHEX], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x183d83, 0x0) socket(0x1e, 0x5, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x65, 0x65, 0x36, 0x61, 0x37, 0x37, 0x61, 0x66, 0x33, 0x38, 0x30, 0x65, 0x32, 0x36, 0x66, 0x39]}, &(0x7f0000000200)={0x0, "ac5a025976f3ddaa0dc7ed65e7b6df1e5824c9e0622b0cd1db69ab49c776dcc9cebfe94f3227ba07c2acccc6ece586b85215bd5dde890bb4ef46872df5d7bb54", 0x1d}, 0x48, 0xfffffffffffffffb) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000feffff60626322dae4495532346e6465666768696a6b6c6d6e6f70631d312b7d8b"], 0x18, r2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae03, 0xda) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r7, &(0x7f0000000000)="3002", 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000300)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./trace\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB='\a'], 0x0) r8 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r9 = syz_open_procfs(r8, &(0x7f00000000c0)='environ\x00') pread64(r9, 0x0, 0x0, 0x4) setsockopt$inet6_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "4c8752a42081a23d", "ae3f556dd3803bc5cf1db666c79e8fef", "d906fe6d", "c46144376820bdd7"}, 0x28) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\v)\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.883100552s ago: executing program 3 (id=153): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x4, 0x4) 1.739254915s ago: executing program 3 (id=154): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'veth0_to_hsr\x00', {0x2, 0x0, @broadcast}}) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103"], 0x0) 480.305608ms ago: executing program 0 (id=155): r0 = userfaultfd(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x181}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff3) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)='^\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r1, 0x3000) 444.764099ms ago: executing program 3 (id=156): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000200000000000000000020000a02e000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 420.550099ms ago: executing program 3 (id=157): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0x41, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x39, 0x6, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0xa2145bb0cd7033f3, 0x24, 0x3a, {0x3a, 0x30, "5581e484d8034bdfcfaadd2f6c76f2ed5870d0581ead2af8b4cf19e5e1573a3dc52f75b7e3314ed4e4f7fe838e8f145a15d33667c677c17e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x5, 0x67, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x7, 0xa0, 0xfa, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0xa, {{0xa, 0x24, 0x6, 0x0, 0x0, "2b395b51f8"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x5}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x31, 0x8ea}, @acm={0x4, 0x24, 0x2, 0xa}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xc0, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x3, 0x77}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x7, 0x6}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x3, 0x5, 0xe, 0x20, 0x1}, 0x2e, &(0x7f0000000180)={0x5, 0xf, 0x2e, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x68, 0x2, 0x1ff, 0xf00f, 0x2, [0x3f, 0xc0f0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0x8, 0x7fff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x112, 0x4, 0x63, 0x9, 0x80}, @generic={0x3, 0x10, 0xa}]}, 0x5, [{0x27, &(0x7f00000001c0)=@string={0x27, 0x3, "6008572e95b0e72154e1da5ece4fd2a2a1cd57363ad4e3213d1294f398677e4a90a2fda582"}}, {0x86, &(0x7f0000000280)=@string={0x86, 0x3, "7273d75b3e4c305507f15f24959ab7a11541d70af6ef074b1c31f2c112d0ab6e0fd1b81bdcbeb60bc2f47e4e9997e549660e8cf9f879c5112d8bd66608ba55095bed62b91b8dad720e4fbb72baddf03d6c989077b39b1d1513104935c5dbc4e388679c54d8bea0d27f64e21905f2c043257ec54fa16bf18dbc96d75b02a7742dbc327f03"}}, {0x85, &(0x7f0000000340)=@string={0x85, 0x3, "4eea9e9148a676fd058d6dc183252ae8939e66beee8a376a04fd4c9d53518a54f9c320770b396bf32891e68e6ecafd548c7661a6b87c3f2eff9e9b6a18c62b77e004e946ac07e2189843ca5c3b2792dd85425127555421d3b713f7961367ab562f2282af2afd03c07cd807b6816002cdda28a82facf64cd51b17c42e142d3ac3ddfcfb"}}, {0xa6, &(0x7f0000000400)=@string={0xa6, 0x3, "fefaf4f53d504db87c99b7a190ae7f43ae69b3d13b5a9f721d93c8d3860fd14f0063584c16297cd1b29de971ea58732c0ed43ef9edcfd43fd7ff080a11883276ef2797afddfac0cbbce6423051b1a5e18d69a1e1bd5229a7766cf588d6041a5d35648bf5782ba8ebe7ff3630b0ecdb10a31c2a94e9fc51f49117e4a19b176d2e5df3e0c0edb9a25a669407feef6df2930e68119aecb5f3985e5041995b826e9c124c711d"}}, {0xb7, &(0x7f00000004c0)=@string={0xb7, 0x3, "14c3d7e538b37b08daad9a73f986a1c722a4a5591f2e43850745ff203d1fda75dd8484c916885a8370e2500a4abcad6c5c5f4c3258d02f44c50a812fe05af19ef09b463442601419c3b4b448f46b5a8eab183aa3776fbb1eae682f55dd4b0714b1ed7861f1407ffda5a4e37b8a42f279999f8e28e5aba8ff1b35321474536f007b74c25e846d302630dac2279be8cb1d9e09d42345ce79b13ea2c7d7606c1964e1d4a48b30527d4ce863fff3ed2a2a16d2ae4666c5"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000680)={0x14, &(0x7f0000000600)={0x40, 0xf, 0x17, {0x17, 0x21, "886c061da7d137e2b4addb7d85ca47d12576b1a923"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, &(0x7f00000006c0)={0x0, 0x5, 0xac, "5599dc7b661569b54f7ab8cc5d2fffa7f9894e87d309ab6f99775f374751247ae8c6f5c80884c979a6f1eb2b74bf2e5973e91465782e84b87b005cc7a271423ac503abb1903ac4c8231512bcff5788fd4f118e6fe795fffbc60b21e2079a49c3561f8331e54597b4bcbe407ccc0742559b42b6bf69ae1b2179e15cf3afea1e4c049a6da3777ef4b5d6bf0df9239895e86f3fb7b2d5cfffdcf0b67d3acd7bb62e2dc927dbfec6309ef7718982"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}}) 343.503291ms ago: executing program 0 (id=158): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000001c0), 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) r3 = socket$inet_udp(0x2, 0x2, 0x0) lseek(r3, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x3004408c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="020dfd000a00000000000000ffffffff05000500000000000a004e2200000005000000000000000000ffe0000002b8d00000000000000b0006000000d20002004e21e000000100"/80], 0x50}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x0, 0x8, 0x1) write$P9_RCREATE(r8, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x1, 0x4, 0x7}, 0x3ff}}, 0x18) dup(r6) timer_create(0x5, &(0x7f0000000440)={0x0, 0x3, 0x2, @thr={&(0x7f0000000340)="0c40ac89929781c990e6c93d54a1265526598a4eeeefecf3cd61a69260d6e59aca05c01dad5c34ec2f1e37637c550a2bf389533318519275936ab0cab402f1b81da531105c418dbcb21bbc80b2519f9578c862131ae16c10b966cd4dc882df94409cc16e0b25e191b34e44ce786d0d895e7cf01de2ce3ddfa72d55b08413beca499e2fcf82580e182cb342f81198f58db48b86906c241e6560c5e313f3430e2341a7c4fe094f2f4c", &(0x7f0000000400)="fd9614af3c1c994f9f0967eb3317128ed7933d8373da67455001e758449f90e16a3d8fb9e316885e44af93f5"}}, &(0x7f0000000480)=0x0) timer_gettime(r9, &(0x7f0000000540)) 342.578771ms ago: executing program 0 (id=159): ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000140)) r0 = socket(0x10, 0x802, 0x0) setgroups(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc2802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)='\x00!G', 0x3}], 0x1, 0x5, 0x407ff) getsockopt$inet_opts(r1, 0x88, 0x68, 0x0, &(0x7f0000000080)) write(r0, &(0x7f0000000100)="1c00000018000718ab092500090007000a0700000000000600003693", 0x1c) 281.602743ms ago: executing program 0 (id=161): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000200002}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1e0001000000000000000000000000fe800000000000000000000000000020000000002e0000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 228.350584ms ago: executing program 0 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xb000, 0x10000, 0x4, 0x6, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x5, 0x16, 0xfd}, {0x200000, 0xeeee8000, 0x3, 0x2, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x7, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0xb, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xf}, {0x10000, 0xe000, 0x2, 0x3, 0x3, 0x6, 0xab, 0xe, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xa, 0x7, 0xb1, 0x8, 0x21, 0x80, 0x80, 0x0, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x9, 0x5, 0x81, 0x1, 0x70}, {0x9000, 0xd000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x4, 0x1000}, {0x2000, 0x5}, 0x1b, 0x0, 0x3000, 0x2024, 0x3, 0x7901, 0x3000, [0xf90000000000, 0x4, 0x84, 0xfff]}) 190.394775ms ago: executing program 0 (id=164): setuid(0xee01) (async) r0 = eventfd(0x2) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) close(0xffffffffffffffff) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="003146000065ef40394e9000715f3d4e309cf774dccdbba94c6e514a3e3ea25783dc3f1e178a83ae04e811e9299436d7e8cf741475865dd16296a78e9c41412260c5e09a258797ee6f1c738f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0xee00, &(0x7f0000000180)) (async) fchmod(r0, 0xa0ffff) (async) r2 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) (async) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r5, 0xfffd) (async) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000140)={r5, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r6, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r2, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) read(r7, &(0x7f0000000740)=""/4096, 0x20) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) socket$inet6(0xa, 0x1, 0x6) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000000006f808050ae500"], 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000040)) 149.258376ms ago: executing program 2 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000180)={@mcast1, 0x0}, &(0x7f00000001c0)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x158, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xdc, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1, 0xec, 0x2, 0x8, 0x0, 0x1, 0x1}) r6 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r6, 0x0, &(0x7f0000000080)) fcntl$dupfd(r5, 0x406, r0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00:'], 0x28) 64.968768ms ago: executing program 2 (id=167): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x74}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40010}, 0x40084) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f00000002c0)=@v3={0x3000000, [{0x9, 0x9}, {0x2, 0x6}], r1}, 0x18, 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x3) ioctl$KVM_TDX_INIT_VCPU(r0, 0xc008aeba, &(0x7f0000000380)={0x2, 0x0, 0x50}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000003c0)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa46839b6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x40400) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000540)={'vlan1\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000780)={{r0, &(0x7f0000000580)='{K\x1a**-\x00', 0x101080, &(0x7f00000005c0)={@_ha_fsid={[0x4, 0x8]}, {0xf51a, 0xc0d, 0x3, 0x8000000000000000}}, 0x101, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x7fffffff}, 0x1, &(0x7f0000000740)=[{0x1, 0xd, &(0x7f0000000680)='i%]e.\x00', &(0x7f00000006c0)="04dfff10c87a5892289433a787c1c2c11ba8b813c0a2f321686ca8b89ae331bf0fccc64cde8fe1bce38b78febe4ccf4ff7af4ebfdf10afa070b8725ae903547beef5d168c648e911f1efcaa2235bc42f", 0x50, 0x38}]}) ioctl$KVM_TDX_INIT_VCPU(r4, 0xc008aeba, &(0x7f0000000800)={0x2, 0x0, 0xfffffffffffffff7}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000008c0)={&(0x7f0000000840)=""/87, 0x57, 0x800, 0x5}) setfsuid(r1) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000000900)={0x5, 0x0, [{0x827, 0x0, 0xffffffffffffffff}, {0x823, 0x0, 0x3}, {0xbe1, 0x0, 0x100}, {0x198, 0x0, 0x9fa7}, {0x9c2}]}) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) r5 = signalfd4(r0, &(0x7f0000000980)={[0x5d43]}, 0x8, 0x0) getsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000a40)) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) r6 = syz_open_dev$evdev(&(0x7f0000000c80), 0xf, 0x204300) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000000cc0)=0x8) r7 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000001100)={0x0, &(0x7f0000000d00)=[@code={0xa, 0x47, {"f20f00d13e2e6526f3440fc770f80f01d1c442252f010f3067f36665f346e30066b880008ec8b9000200000f32d9edb97a0a00000f32"}}, @nested_amd_invlpga={0x17d, 0x20, {0x1, 0xe656}}, @out_dx={0x6a, 0x28, {0x7757, 0x0, 0xfffffffffffffff8}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x8f, 0x2, 0x5, 0x2}}, @nested_load_syzos={0x136, 0x68, {0x0, 0x4, [@nested_amd_vmload={0x182, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x92c}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x96, 0x4, 0x4, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x5c, 0x40, 0xa5, 0x5}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x8b3}}, @nested_amd_vmsave={0x183, 0x18}, @set_irq_handler={0xc8, 0x20, {0x16, 0x2}}, @in_dx={0x69, 0x20, {0x54a4, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0x210c, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x2000, 0x118c}}, @nested_load_code={0x12e, 0x54, {0x1, "400f01cf430f8a8848c8553e0f0726450f78ec66ba6100b805a00000ef36450fd5e666420f3881b6962b00000f661966420f58afece043f7470f79e4"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_code={0x12e, 0x57, {0x2, "c4027d79fbc40219932c1041f10fc731672e2e400fc71e0fc76b5266410f381002c4629d3b8905000000c74424002c000000c744240208900000ff2c240f09"}}, @in_dx={0x69, 0x20, {0xfcb8}}, @in_dx={0x69, 0x20, {0xd9bc, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest64=0x280a, 0x81, 0x4}}], 0x3e2}) ioctl$BTRFS_IOC_GET_FEATURES(r8, 0x80189439, &(0x7f0000001140)) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000001180)={0x0, 0x7ff}, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f00000011c0)={0x6, 'veth0_to_hsr\x00', {0x8}, 0x2}) r9 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000a62000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f0000001400)={0x0, &(0x7f0000001200)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x5b, 0xaae, 0x1, 0x7}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x8c3c3a526593f44}}, @wrmsr={0x65, 0x20, {0x2d8, 0x7}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0x6c, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0xffffffff}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_load_code={0x12e, 0x7a, {0x0, "450f00d2c48245376434d7c744240000f0ffffc744240200000000c7442406000000000f011c24b805000000b9000000800f01c166baf80cb89a0aab85ef66bafc0c66ed65410f7861a5360f019e05000000660ffcea65f20f38f14900f20f2d6863"}}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x4}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x9, 0x2, 0x1}}], 0x1d2}) 64.546928ms ago: executing program 2 (id=168): prctl$PR_SET_FPEXC(0xc, 0x40000) prctl$PR_SET_FPEXC(0xc, 0x40000) prctl$PR_SET_FPEXC(0xc, 0x40000) prctl$PR_SET_FPEXC(0xc, 0x1) prctl$PR_SET_FPEXC(0xc, 0x80) prctl$PR_SET_FPEXC(0xc, 0x100000) prctl$PR_SET_FPEXC(0xc, 0x40000) prctl$PR_SET_FPEXC(0xc, 0x80) prctl$PR_SET_FPEXC(0xc, 0x80000) prctl$PR_SET_FPEXC(0xc, 0x80000) prctl$PR_SET_FPEXC(0xc, 0x20000) prctl$PR_SET_FPEXC(0xc, 0x80000) prctl$PR_SET_FPEXC(0xc, 0x80) prctl$PR_SET_FPEXC(0xc, 0x100000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x2b, 0x43c94d46, @vifc_lcl_ifindex=r0, @broadcast}, 0x10) prctl$PR_SET_FPEXC(0xc, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000100)={@loopback, 0x66, r0}) prctl$PR_SET_FPEXC(0xc, 0x0) prctl$PR_SET_FPEXC(0xc, 0x80) prctl$PR_SET_FPEXC(0xc, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) prctl$PR_SET_FPEXC(0xc, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) prctl$PR_SET_FPEXC(0xc, 0x20000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=0x0) fcntl$lock(r2, 0x6, &(0x7f0000000300)={0x1, 0x2, 0x0, 0x8, r4}) prctl$PR_SET_FPEXC(0xc, 0x1) 63.883828ms ago: executing program 2 (id=169): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f00000000c0)=0xfffffffd, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f00000000c0)=0xfffffffd, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000080)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000100)=ANY=[@ANYBLOB="3010300e0f749f1851896d305430303030300e2d000000000000000000de162166e51a4990b64c101bf0f86435a1c106cb749b1282ea7f"]) 365.77µs ago: executing program 2 (id=170): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000200002}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1e0001000000000000000000000000fe80000000000000000000000000002000000001a80000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 2 (id=171): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x4001}) write$tun(r2, &(0x7f0000000840)={@val={0xa, 0x6003}, @val={0x3, 0x3, 0x6, 0x9, 0x4, 0x3}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@llc={0x4, {@snap={0x0, 0x1, "0ecc", "03fd98", 0x10, "05b3ce2febd42cc81c6be5c2a0db77f34179db80886eb93cde10f1d7e84dd834a4d8d08e7e48ba3d7919ad92a2ea9bba8de11c3ba69afed7cb9d438bc2652eaf8720dbc73e787d5e6cb385a26e91479d5bf3bfab7d52077cc9f3e2f2d12faf5ef5b815e02629b1cff0568b2e17ed6e3bf02bc338ac808c0de8ce5842dcd829277a7fd1d694dec9100b1b9b3b7851e76dfe87fb1c51cd68447a2565d695658192c0464d72af"}}}}}}, 0xca) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRES32=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYBLOB="cd3a05292b4ca8"]) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a8048000300"], 0x2c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="4d5fd5ad4ec50a80d5086bf531e1e6d480d4618c242a03a686c27e3ac02d0d772e46257b7362d7353aaaf994ca7fb7a8326eb1c90fea3e655417ef73345c4de923547fb8b85e1bd5b4455a1c7443ce", 0x4f) write(r5, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x29) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x3, 0xfffffffe, 0x0, [{0x2, 0x4, 0x7, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x10, 0xc, '\x00', 0x5}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0x5, '\x00', 0xb}, {0xd7, 0xd, 0x9, '\x00', 0x6}, {0x0, 0x28, 0x5, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26, '\x00', 0xff}, {0xd0, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x2, '\x00', 0xb}, {0xc7, 0x6, 0xa, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xc1, 0x7, '\x00', 0x6}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x45, 0x4, '\x00', 0x23}]}}) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) listen(r1, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x0, 0x80800) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0x8}, @global=@item_012={0x1, 0x1, 0x9, "e1"}]}}, 0x0}, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002063071220400001020301090211f901010e503f090400000001032040"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 21.217199][ T36] audit: type=1400 audit(1786131856.589:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.218386][ T286] cgroup: Unknown subsys name 'net' [ 21.239870][ T36] audit: type=1400 audit(1786131856.589:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.267178][ T36] audit: type=1400 audit(1786131856.629:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.267371][ T286] cgroup: Unknown subsys name 'devices' [ 21.384057][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.389670][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.501883][ T36] audit: type=1400 audit(1786131856.869:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.525120][ T36] audit: type=1400 audit(1786131856.869:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.550051][ T36] audit: type=1400 audit(1786131856.869:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.558894][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.581970][ T36] audit: type=1400 audit(1786131856.949:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.607486][ T36] audit: type=1400 audit(1786131856.949:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.645393][ T36] audit: type=1400 audit(1786131857.019:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.671555][ T36] audit: type=1400 audit(1786131857.019:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.671822][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.454422][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.461493][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.468725][ T294] bridge_slave_0: entered allmulticast mode [ 22.475072][ T294] bridge_slave_0: entered promiscuous mode [ 22.493318][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.500370][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.507498][ T294] bridge_slave_1: entered allmulticast mode [ 22.513834][ T294] bridge_slave_1: entered promiscuous mode [ 22.553126][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.560184][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.567274][ T295] bridge_slave_0: entered allmulticast mode [ 22.573485][ T295] bridge_slave_0: entered promiscuous mode [ 22.589588][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.596686][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.603815][ T295] bridge_slave_1: entered allmulticast mode [ 22.609971][ T295] bridge_slave_1: entered promiscuous mode [ 22.622107][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.629219][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.636383][ T293] bridge_slave_0: entered allmulticast mode [ 22.642562][ T293] bridge_slave_0: entered promiscuous mode [ 22.660753][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.667810][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.674941][ T293] bridge_slave_1: entered allmulticast mode [ 22.681098][ T293] bridge_slave_1: entered promiscuous mode [ 22.704641][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.711697][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.718809][ T296] bridge_slave_0: entered allmulticast mode [ 22.725000][ T296] bridge_slave_0: entered promiscuous mode [ 22.734540][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.741666][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.748779][ T296] bridge_slave_1: entered allmulticast mode [ 22.755110][ T296] bridge_slave_1: entered promiscuous mode [ 22.874558][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.881619][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.888988][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.896054][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.907727][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.914788][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.922054][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.929101][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.951678][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.958780][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.966104][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.973149][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.003238][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.010316][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.017620][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.024653][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.042498][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.050158][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.057550][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.064748][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.071869][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.079460][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.086707][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.106449][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.113516][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.121262][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.128322][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.136063][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.143111][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.166537][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.173701][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.181462][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.188550][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.215156][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.222230][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.229794][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.236867][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.268985][ T296] veth0_vlan: entered promiscuous mode [ 23.284161][ T295] veth0_vlan: entered promiscuous mode [ 23.291735][ T294] veth0_vlan: entered promiscuous mode [ 23.310878][ T296] veth1_macvtap: entered promiscuous mode [ 23.318777][ T293] veth0_vlan: entered promiscuous mode [ 23.327750][ T294] veth1_macvtap: entered promiscuous mode [ 23.339173][ T295] veth1_macvtap: entered promiscuous mode [ 23.366165][ T293] veth1_macvtap: entered promiscuous mode [ 23.399607][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.500166][ T326] x_tables: duplicate underflow at hook 1 [ 23.591963][ T342] ======================================================= [ 23.591963][ T342] WARNING: The mand mount option has been deprecated and [ 23.591963][ T342] and is ignored by this kernel. Remove the mand [ 23.591963][ T342] option from the mount to silence this warning. [ 23.591963][ T342] ======================================================= [ 23.712354][ T66] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 23.713029][ T312] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.872524][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 23.874228][ T66] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 23.879532][ T312] usb 2-1: config 1 interface 0 altsetting 61 bulk endpoint 0x82 has invalid maxpacket 1023 [ 23.886096][ T66] usb 3-1: config 0 has no interface number 0 [ 23.896241][ T312] usb 2-1: config 1 interface 0 altsetting 61 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 23.902715][ T317] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 23.915446][ T312] usb 2-1: config 1 interface 0 has no altsetting 0 [ 23.923753][ T66] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 23.931456][ T312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 23.940529][ T66] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 23.949619][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.963482][ T66] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 23.968963][ T312] usb 2-1: Product: 걼䡸콟頣旋쒨澗讪༄粜찾燕攲ѿ藒똁ᤓ권졻聦࠻ퟒ↘鰓ʒ좞须閎턄礁ᗨརᜯꇝ奃㶫▦峸ﬓ簎ᚏ꼕ㇲ먻׈눁შ쯼ޤ᭶᪄ [ 23.978379][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.997001][ T312] usb 2-1: Manufacturer: Ч [ 24.004920][ T66] usb 3-1: Product: syz [ 24.009373][ T312] usb 2-1: SerialNumber: ц [ 24.013660][ T66] usb 3-1: Manufacturer: syz [ 24.022858][ T66] usb 3-1: SerialNumber: syz [ 24.027586][ T322] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 24.035165][ T322] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 24.043171][ T66] usb 3-1: config 0 descriptor?? [ 24.049734][ T315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 24.056963][ T315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 24.064951][ T66] smsc95xx v2.0.0 [ 24.102972][ T317] usb 1-1: not running at top speed; connect to a high speed hub [ 24.111474][ T317] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.122076][ T317] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 24.131164][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.141569][ T317] usb 1-1: Found UVC 1.00 device (046d:0825) [ 24.148608][ T317] usb 1-1: No streaming interface found for terminal 2. [ 24.264764][ T315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 24.272117][ T315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 24.348119][ T311] usb 1-1: USB disconnect, device number 2 [ 24.445452][ T312] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 24.456511][ T312] usb 2-1: USB disconnect, device number 2 [ 24.527320][ T356] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.682822][ T66] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 24.693632][ T66] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 24.696230][ T360] tipc: Started in network mode [ 24.707793][ T360] tipc: Node identity 1, cluster identity 4711 [ 24.714024][ T360] tipc: Node number set to 1 [ 24.721904][ T360] tipc: New replicast peer: 127.0.0.1 [ 24.727686][ T360] tipc: Enabled bearer , priority 10 [ 24.735490][ T360] tipc: Disabling bearer [ 24.859254][ T363] netlink: 80 bytes leftover after parsing attributes in process `syz.0.15'. [ 24.879153][ T365] mmap: syz.0.16 (365) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 24.884176][ T315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.899517][ T315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.914580][ T66] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 24.931506][ T66] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 24.967518][ T66] usb 3-1: USB disconnect, device number 2 [ 25.006718][ T386] cgroup: Unknown subsys name 'measure' [ 25.042958][ T389] netlink: 'syz.0.24': attribute type 15 has an invalid length. [ 25.063668][ T391] netlink: 80 bytes leftover after parsing attributes in process `syz.0.25'. [ 25.312549][ T317] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.422287][ T312] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.442250][ T317] usb 2-1: device descriptor read/64, error -71 [ 25.573631][ T312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 25.582015][ T312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.592251][ T312] usb 1-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 25.605337][ T312] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.613255][ T312] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.622512][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.630497][ T312] usb 1-1: Product: syz [ 25.634882][ T312] usb 1-1: Manufacturer: syz [ 25.639478][ T312] usb 1-1: SerialNumber: syz [ 25.682277][ T317] usb 2-1: device descriptor read/64, error -71 [ 25.752279][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.847161][ T312] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 25.854330][ T312] cdc_mbim 1-1:1.0: bind() failure [ 25.860618][ T312] usb 1-1: USB disconnect, device number 3 [ 25.922298][ T317] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.052328][ T317] usb 2-1: device descriptor read/64, error -71 [ 26.122272][ T66] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.252259][ T66] usb 3-1: device descriptor read/64, error -71 [ 26.292241][ T317] usb 2-1: device descriptor read/64, error -71 [ 26.359216][ T36] kauditd_printk_skb: 92 callbacks suppressed [ 26.359233][ T36] audit: type=1400 audit(1786131861.729:166): avc: denied { create } for pid=418 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.385737][ T36] audit: type=1400 audit(1786131861.729:167): avc: denied { write } for pid=418 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.412342][ T317] usb usb2-port1: attempt power cycle [ 26.419102][ T421] netlink: 80 bytes leftover after parsing attributes in process `syz.0.36'. [ 26.443302][ T36] audit: type=1400 audit(1786131861.809:168): avc: denied { append } for pid=422 comm="syz.0.37" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.492263][ T66] usb 3-1: device descriptor read/64, error -71 [ 26.682271][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 26.732273][ T66] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 26.752415][ T317] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 26.773373][ T317] usb 2-1: device descriptor read/8, error -71 [ 26.842356][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 26.848586][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.858847][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 26.867862][ T66] usb 3-1: device descriptor read/64, error -71 [ 26.874231][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.885571][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 26.894685][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.902844][ T10] usb 1-1: Product: syz [ 26.907095][ T10] usb 1-1: Manufacturer: syz [ 26.911865][ T10] usb 1-1: SerialNumber: syz [ 26.917157][ T317] usb 2-1: device descriptor read/8, error -71 [ 27.122254][ T66] usb 3-1: device descriptor read/64, error -71 [ 27.172330][ T317] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 27.193319][ T317] usb 2-1: device descriptor read/8, error -71 [ 27.232739][ T66] usb usb3-port1: attempt power cycle [ 27.323241][ T317] usb 2-1: device descriptor read/8, error -71 [ 27.329326][ T36] audit: type=1400 audit(1786131862.699:169): avc: denied { create } for pid=422 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.442326][ T317] usb usb2-port1: unable to enumerate USB device [ 27.572337][ T66] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 27.593287][ T66] usb 3-1: device descriptor read/8, error -71 [ 27.723305][ T66] usb 3-1: device descriptor read/8, error -71 [ 27.758261][ T10] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 27.765034][ T10] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 27.777728][ T10] usb 1-1: USB disconnect, device number 4 [ 27.788602][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.962304][ T66] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 27.983298][ T66] usb 3-1: device descriptor read/8, error -71 [ 28.094759][ T430] netlink: 84 bytes leftover after parsing attributes in process `syz.1.38'. [ 28.114027][ T66] usb 3-1: device descriptor read/8, error -71 [ 28.128073][ T36] audit: type=1400 audit(1786131863.499:170): avc: denied { append } for pid=434 comm="syz.1.40" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 28.210033][ T437] Zero length message leads to an empty skb [ 28.232524][ T66] usb usb3-port1: unable to enumerate USB device [ 28.471003][ T36] audit: type=1400 audit(1786131863.839:171): avc: denied { connect } for pid=441 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.659444][ T36] audit: type=1400 audit(1786131864.029:172): avc: denied { name_bind } for pid=448 comm="syz.3.44" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 28.729597][ T453] netlink: 80 bytes leftover after parsing attributes in process `syz.3.45'. [ 28.761232][ T36] audit: type=1400 audit(1786131864.129:173): avc: denied { mount } for pid=454 comm="syz.3.46" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 28.783054][ T36] audit: type=1400 audit(1786131864.129:174): avc: denied { mount } for pid=454 comm="syz.3.46" name="/" dev="pstore" ino=2142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 28.849406][ T36] audit: type=1400 audit(1786131864.219:175): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 28.888653][ T459] process 'syz.3.47' launched './file0' with NULL argv: empty string added [ 28.975847][ T472] netlink: 220 bytes leftover after parsing attributes in process `syz.3.52'. [ 29.004481][ T474] netlink: 80 bytes leftover after parsing attributes in process `syz.3.54'. [ 29.161051][ T481] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 29.282260][ T66] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 29.432597][ T66] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 29.445875][ T66] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 29.455023][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.464886][ T66] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 29.471905][ T66] usb 3-1: No valid video chain found. [ 29.582278][ T311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.589838][ T31] usb 4-1: device descriptor read/64, error -71 [ 29.673825][ T471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.682457][ T471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.691161][ T66] usb 3-1: USB disconnect, device number 7 [ 29.722226][ T311] usb 1-1: device descriptor read/64, error -71 [ 29.832232][ T31] usb 4-1: device descriptor read/64, error -71 [ 29.962225][ T311] usb 1-1: device descriptor read/64, error -71 [ 30.072294][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.202218][ T311] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 30.209849][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.302273][ T66] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 30.352242][ T311] usb 1-1: device descriptor read/64, error -71 [ 30.442216][ T66] usb 2-1: device descriptor read/64, error -71 [ 30.452235][ T354] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 30.459866][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.572308][ T31] usb usb4-port1: attempt power cycle [ 30.592318][ T311] usb 1-1: device descriptor read/64, error -71 [ 30.612242][ T354] usb 3-1: Using ep0 maxpacket: 32 [ 30.618752][ T354] usb 3-1: unable to get BOS descriptor or descriptor too short [ 30.628490][ T354] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 30.637558][ T354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.645671][ T354] usb 3-1: Product: syz [ 30.649834][ T354] usb 3-1: Manufacturer: syz [ 30.654640][ T354] usb 3-1: SerialNumber: syz [ 30.682229][ T66] usb 2-1: device descriptor read/64, error -71 [ 30.702326][ T311] usb usb1-port1: attempt power cycle [ 30.865389][ T354] usb 3-1: USB disconnect, device number 8 [ 30.891277][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.922223][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.932190][ T66] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 30.943257][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.042206][ T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 31.063425][ T311] usb 1-1: device descriptor read/8, error -71 [ 31.072392][ T66] usb 2-1: device descriptor read/64, error -71 [ 31.073260][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.193271][ T311] usb 1-1: device descriptor read/8, error -71 [ 31.312214][ T66] usb 2-1: device descriptor read/64, error -71 [ 31.322226][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.343224][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.389127][ T502] netlink: 80 bytes leftover after parsing attributes in process `syz.2.63'. [ 31.422267][ T66] usb usb2-port1: attempt power cycle [ 31.430074][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 31.430089][ T36] audit: type=1400 audit(7144528484.400:192): avc: denied { mounton } for pid=505 comm="syz.2.65" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.458923][ T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 31.487523][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.497306][ T311] usb 1-1: device descriptor read/8, error -71 [ 31.513200][ T36] audit: type=1400 audit(7144528484.490:193): avc: denied { read write } for pid=514 comm="syz.2.68" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 31.536490][ T36] audit: type=1400 audit(7144528484.490:194): avc: denied { open } for pid=514 comm="syz.2.68" path="/17/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 31.559879][ T36] audit: type=1400 audit(7144528484.490:195): avc: denied { ioctl } for pid=514 comm="syz.2.68" path="/17/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0xaa01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 31.584674][ T36] audit: type=1400 audit(7144528484.500:196): avc: denied { setopt } for pid=514 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.605135][ T31] usb usb4-port1: unable to enumerate USB device [ 31.643277][ T311] usb 1-1: device descriptor read/8, error -71 [ 31.752290][ T311] usb usb1-port1: unable to enumerate USB device [ 31.772234][ T66] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 31.793664][ T66] usb 2-1: device descriptor read/8, error -71 [ 31.923154][ T66] usb 2-1: device descriptor read/8, error -71 [ 32.042476][ T36] audit: type=1400 audit(7144528485.020:197): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.075456][ T36] audit: type=1400 audit(7144528485.050:198): avc: denied { mmap_zero } for pid=518 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 32.107069][ T36] audit: type=1400 audit(7144528485.080:199): avc: denied { setopt } for pid=518 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.126885][ T36] audit: type=1400 audit(7144528485.080:200): avc: denied { search } for pid=518 comm="syz.2.70" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 32.148351][ T36] audit: type=1400 audit(7144528485.080:201): avc: denied { read } for pid=518 comm="syz.2.70" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 32.170847][ T66] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 32.193209][ T66] usb 2-1: device descriptor read/8, error -71 [ 32.210015][ T526] netlink: 80 bytes leftover after parsing attributes in process `syz.3.73'. [ 32.323226][ T66] usb 2-1: device descriptor read/8, error -71 [ 32.432424][ T66] usb usb2-port1: unable to enumerate USB device [ 32.535140][ T548] netlink: 80 bytes leftover after parsing attributes in process `syz.2.82'. [ 32.742170][ T31] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 32.802153][ T311] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 32.893473][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.901849][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 32.912905][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 32.922579][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 32.932501][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 32.942230][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 32.952128][ T66] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 32.961545][ T31] usb 1-1: string descriptor 0 read error: -22 [ 32.967866][ T31] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 32.977008][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.985804][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 32.998943][ T31] usb 1-1: config 0 descriptor?? [ 33.004087][ T311] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 33.013178][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.013338][ T540] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 33.031563][ T311] usb 4-1: config 0 descriptor?? [ 33.047518][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.103235][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.114212][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.124033][ T66] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 33.133338][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.141967][ T66] usb 3-1: config 0 descriptor?? [ 33.237285][ T425] usb 1-1: USB disconnect, device number 9 [ 33.352976][ T66] usbhid 3-1:0.0: can't add hid device: -71 [ 33.359015][ T66] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.368167][ T66] usb 3-1: USB disconnect, device number 9 [ 33.422302][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 33.450510][ T311] betop 0003:11C2:2208.0001: item fetching failed at offset 0/6 [ 33.458492][ T311] betop 0003:11C2:2208.0001: parse failed [ 33.464462][ T311] betop 0003:11C2:2208.0001: probe with driver betop failed with error -22 [ 33.572153][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 33.578487][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.590037][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40 [ 33.599222][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.607246][ T10] usb 2-1: Product: syz [ 33.611406][ T10] usb 2-1: Manufacturer: syz [ 33.616008][ T10] usb 2-1: SerialNumber: syz [ 33.651692][ T311] usb 4-1: USB disconnect, device number 6 [ 33.702127][ T66] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 33.755815][ T566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=566 comm=syz.0.88 [ 33.826447][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 33.836644][ T10] usb-storage 2-1:1.2: USB Mass Storage device detected [ 33.852134][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 33.860901][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.872941][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.883017][ T66] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.897555][ T10] usb 2-1: USB disconnect, device number 11 [ 33.906404][ T66] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 33.918166][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.927473][ T66] usb 3-1: config 0 descriptor?? [ 34.136454][ T564] tipc: Started in network mode [ 34.141551][ T564] tipc: Node identity e2df64878511, cluster identity 4711 [ 34.148798][ T564] tipc: Enabled bearer , priority 0 [ 34.156312][ T564] +: renamed from syzkaller0 [ 34.161616][ T564] tipc: Disabling bearer [ 34.203617][ T575] netlink: 80 bytes leftover after parsing attributes in process `syz.3.91'. [ 34.244852][ T579] cgroup: fork rejected by pids controller in /syz3 [ 34.344396][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 34.407122][ T586] 9pnet_fd: Insufficient options for proto=fd [ 34.416528][ T66] usbhid 3-1:0.0: can't add hid device: -71 [ 34.423769][ T66] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 34.434585][ T66] usb 3-1: USB disconnect, device number 10 [ 34.506577][ T31] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 34.514804][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.527182][ T31] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.541854][ T31] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 34.551611][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.560948][ T591] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.568268][ T591] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.568455][ T31] usb 1-1: Product: syz [ 34.575421][ T591] bridge_slave_0: entered allmulticast mode [ 34.580065][ T31] usb 1-1: Manufacturer: syz [ 34.586010][ T591] bridge_slave_0: entered promiscuous mode [ 34.590320][ T31] usb 1-1: SerialNumber: syz [ 34.596751][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.607772][ T591] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.614925][ T591] bridge_slave_1: entered allmulticast mode [ 34.621270][ T591] bridge_slave_1: entered promiscuous mode [ 34.640566][ T300] bridge_slave_1: left allmulticast mode [ 34.646462][ T300] bridge_slave_1: left promiscuous mode [ 34.653360][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.661292][ T300] bridge_slave_0: left allmulticast mode [ 34.667596][ T300] bridge_slave_0: left promiscuous mode [ 34.679377][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.757456][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.764542][ T591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.771845][ T591] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.778899][ T591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.789905][ T300] tipc: Left network mode [ 34.796689][ T300] veth1_macvtap: left promiscuous mode [ 34.802607][ T300] veth0_vlan: left promiscuous mode [ 34.870940][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.878389][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.892363][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.899559][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.909279][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.916473][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.947959][ T609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.968309][ T609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.970031][ T591] veth0_vlan: entered promiscuous mode [ 34.983963][ T611] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.006064][ T591] veth1_macvtap: entered promiscuous mode [ 35.260913][ T655] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.260935][ T655] rust_binder: Read failure Err(EFAULT) in pid:82 [ 35.269743][ T655] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.276284][ T655] rust_binder: Read failure Err(EFAULT) in pid:82 [ 35.285129][ T655] exFAT-fs (rnullb0): invalid boot record signature [ 35.298279][ T655] exFAT-fs (rnullb0): failed to read boot sector [ 35.304863][ T317] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 35.308995][ T655] exFAT-fs (rnullb0): failed to recognize exfat type [ 35.322304][ T425] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.462074][ T317] usb 3-1: Using ep0 maxpacket: 8 [ 35.467528][ T317] usb 3-1: too many configurations: 15, using maximum allowed: 8 [ 35.481273][ T317] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 35.490393][ T425] usb 4-1: Using ep0 maxpacket: 8 [ 35.495501][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.504873][ T425] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.512818][ T317] usb 3-1: config 0 descriptor?? [ 35.520950][ T657] tipc: Started in network mode [ 35.521599][ T317] hub 3-1:0.0: Invalid hub with more than one config or interface [ 35.529846][ T657] tipc: Node identity ac14140f, cluster identity 4711 [ 35.533959][ T317] hub 3-1:0.0: probe with driver hub failed with error -22 [ 35.541017][ T657] tipc: New replicast peer: 255.255.255.255 [ 35.547838][ T425] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 35.562290][ T657] tipc: Enabled bearer , priority 10 [ 35.566041][ T425] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 35.573449][ T657] netlink: 128 bytes leftover after parsing attributes in process `syz.1.114'. [ 35.577261][ T425] usb 4-1: config 4 has no interface number 0 [ 35.603067][ T425] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 35.612155][ T425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.620172][ T425] usb 4-1: Product: syz [ 35.624369][ T425] usb 4-1: Manufacturer: syz [ 35.628970][ T425] usb 4-1: SerialNumber: syz [ 35.656977][ T663] virtio-fs: tag not found [ 35.719060][ T615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.727759][ T615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.736089][ T317] usb 3-1: USB disconnect, device number 11 [ 35.847769][ T617] netlink: 'syz.3.97': attribute type 4 has an invalid length. [ 35.855404][ T617] netlink: 'syz.3.97': attribute type 2 has an invalid length. [ 35.863080][ T617] netlink: 3613 bytes leftover after parsing attributes in process `syz.3.97'. [ 35.915420][ T425] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 35.921896][ T425] uvcvideo 4-1:4.147: Entity type for entity Output 251 was not initialized! [ 35.930975][ T425] usb 4-1: Failed to create links for entity 251 [ 35.937427][ T425] usb 4-1: Failed to register entities (-22). [ 35.945812][ T425] usb 4-1: USB disconnect, device number 7 [ 36.444031][ T682] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=682 comm=syz.2.121 [ 36.468441][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 36.468458][ T36] audit: type=1400 audit(7144528489.440:236): avc: denied { cmd } for pid=684 comm="iou-wrk-685" path="socket:[6081]" dev="sockfs" ino=6081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 36.522744][ T693] overlayfs: missing 'lowerdir' [ 36.637287][ T699] syzkaller0: entered promiscuous mode [ 36.662769][ T36] audit: type=1400 audit(7144528489.640:237): avc: denied { write } for pid=700 comm="syz.3.126" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 36.676192][ T699] syzkaller0: entered allmulticast mode [ 36.715594][ T354] tipc: Node number set to 2886997007 [ 36.737258][ T36] audit: type=1400 audit(7144528489.710:238): avc: denied { mounton } for pid=709 comm="syz.3.128" path="/proc/19/task" dev="proc" ino=6117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 36.785691][ T713] input: syz1 as /devices/virtual/input/input4 [ 36.792198][ T498] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 36.881310][ T36] audit: type=1400 audit(7144528489.850:239): avc: denied { write } for pid=717 comm="syz.3.131" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.992144][ T498] usb 2-1: Using ep0 maxpacket: 16 [ 37.004043][ T498] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.015416][ T498] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.046055][ T498] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 37.066574][ T498] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.085421][ T498] usb 2-1: config 0 descriptor?? [ 37.212636][ T31] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 37.250749][ T31] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 37.279524][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 37.294285][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.310770][ T31] usb 1-1: USB disconnect, device number 10 [ 37.463140][ T36] audit: type=1400 audit(7144528490.440:240): avc: denied { read } for pid=731 comm="syz.0.135" path="socket:[6266]" dev="sockfs" ino=6266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.486644][ T36] audit: type=1400 audit(7144528490.440:241): avc: denied { map } for pid=731 comm="syz.0.135" path="socket:[6266]" dev="sockfs" ino=6266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.524413][ T498] HID 045e:07da: Invalid code 65791 type 1 [ 37.536591][ T498] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input5 [ 37.550555][ T36] audit: type=1400 audit(7144528490.530:242): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=488 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.601977][ T36] audit: type=1400 audit(7144528490.530:243): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=488 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.652089][ T36] audit: type=1400 audit(7144528490.600:244): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=488 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.773292][ T498] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 37.794761][ T425] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 37.873941][ T36] audit: type=1400 audit(7144528490.850:245): avc: denied { create } for pid=763 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.996181][ T425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.007161][ T425] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 38.016384][ T425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.026613][ T425] usb 3-1: config 0 descriptor?? [ 38.091994][ T498] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 38.157173][ T10] usb 2-1: USB disconnect, device number 12 [ 38.243297][ T498] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.251768][ T498] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 38.260018][ T498] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 38.270411][ T498] usb 4-1: config 63 has no interface number 0 [ 38.277352][ T498] usb 4-1: config 63 interface 66 has no altsetting 0 [ 38.285547][ T498] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 38.294692][ T498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.302736][ T498] usb 4-1: Product: syz [ 38.306903][ T498] usb 4-1: Manufacturer: syz [ 38.311499][ T498] usb 4-1: SerialNumber: syz [ 38.437580][ T425] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 38.447610][ T425] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input6 [ 38.519228][ T761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.528435][ T761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.538421][ T425] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 38.539708][ T498] usb 4-1: USB disconnect, device number 8 [ 38.641694][ T745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.650396][ T745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.712675][ T775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.716135][ T776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 38.721290][ T775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.011962][ T425] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 39.091962][ T498] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 39.171975][ T425] usb 1-1: Using ep0 maxpacket: 16 [ 39.180917][ T425] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.201913][ T425] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.215551][ T425] usb 1-1: config 0 interface 0 has no altsetting 0 [ 39.222194][ T425] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 39.222331][ T498] usb 2-1: device descriptor read/64, error -71 [ 39.231299][ T425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.238680][ T425] usb 1-1: config 0 descriptor?? Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 39.441912][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 39.491945][ T498] usb 2-1: device descriptor read/64, error -71 OK Stopping iptables: OK Stopping system message bus: done [ 39.613042][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 39.621838][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.632091][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.641133][ T31] usb 4-1: config 1 has no interface number 1 [ 39.647330][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 39.661719][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.662199][ T425] kye 0003:0458:5015.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 39.670895][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.681626][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.696293][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.702446][ T31] usb 4-1: Product: syz [ 39.707388][ T31] usb 4-1: Manufacturer: syz [ 39.711088][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.712496][ T31] usb 4-1: SerialNumber: syz [ 39.718919][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.731820][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.738611][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.745393][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.761565][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.761918][ T498] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 39.768410][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.793772][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.824934][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x2 [ 39.831706][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.843413][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.850180][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 Stopping klogd: [ 39.856953][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.865160][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.873256][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.880534][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 OK [ 39.887890][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.894699][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.901430][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 Stopping acpid: [ 39.908435][ T498] usb 2-1: device descriptor read/64, error -71 [ 39.917115][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.923869][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.930740][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.933189][ T31] usb 4-1: MIDIStreaming interface descriptor not found [ 39.937521][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.951273][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.953747][ T31] usb 4-1: USB disconnect, device number 9 [ 39.958690][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.973901][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.980690][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.987725][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 39.994469][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 40.001202][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 40.007919][ T425] kye 0003:0458:5015.0004: unknown main item tag 0x0 [ 40.015180][ T425] kye 0003:0458:5015.0004: hidraw1: USB HID v0.81 Device [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 40.026098][ T425] kye 0003:0458:5015.0004: tablet-enabling feature report not found [ 40.034369][ T425] kye 0003:0458:5015.0004: tablet enabling failed [ 40.043543][ T425] usb 1-1: USB disconnect, device number 11 [ 40.151938][ T498] usb 2-1: device descriptor read/64, error -71 [ 40.262024][ T498] usb usb2-port1: attempt power cycle [ 40.494904][ T844] netlink: 80 bytes leftover after parsing attributes in process `syz.3.156'. [ 40.565906][ T850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 40.573163][ T850] IPv6: NLM_F_CREATE should be set when creating new route [ 40.580373][ T850] IPv6: NLM_F_CREATE should be set when creating new route [ 40.602382][ T498] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 40.602970][ T425] usb 3-1: USB disconnect, device number 12 [ 40.623181][ T498] usb 2-1: device descriptor read/8, error -71 [ 40.751796][ T870] netlink: 80 bytes leftover after parsing attributes in process `syz.2.165'. [ 40.762290][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 40.762346][ T498] usb 2-1: device descriptor read/8, error -71 [ 40.872194][ T878] binder: Unknown parameter '00tQm0T00000-' [ 40.932285][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 65, using maximum allowed: 30 [ 40.943400][ T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 40.954784][ T10] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 40.967899][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 40.974553][ T10] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 OK[ 40.983695][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.992567][ T10] usb 4-1: config 0 descriptor?? Stopping syslogd: [ 41.011886][ T498] usb 2-1: new high-speed USB device number 16 using dummy_hcd stopped /sbin/syslogd (pid 92) OK [ 41.042878][ T498] usb 2-1: device descriptor read/8, error -71 umount: can't remount debugfs read-only [ 41.141893][ T425] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 41.173098][ T498] usb 2-1: device descriptor read/8, error -71 Connection to 10.128.0.63 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 41.301688][ T498] usb usb2-port1: unable to enumerate USB device [ 41.403079][ T13] bridge_slave_1: left allmulticast mode [ 41.408839][ T13] bridge_slave_1: left promiscuous mode [ 41.414476][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.422053][ T13] bridge_slave_0: left allmulticast mode [ 41.427717][ T13] bridge_slave_0: left promiscuous mode [ 41.433376][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.458252][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 41.472387][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 41.491855][ T10] usb 4-1: USB disconnect, device number 10 [ 41.594512][ T13] veth1_macvtap: left promiscuous mode [ 41.600042][ T13] veth0_vlan: left promiscuous mode [ 41.721949][ T425] usb 3-1: device not accepting address 13, error -71 [ 41.784582][ T13] bridge_slave_1: left allmulticast mode [ 41.790421][ T13] bridge_slave_1: left promiscuous mode [ 41.796194][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.804076][ T13] bridge_slave_0: left allmulticast mode [ 41.809721][ T13] bridge_slave_0: left promiscuous mode [ 41.815423][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.823299][ T13] bridge_slave_1: left allmulticast mode [ 41.829057][ T13] bridge_slave_1: left promiscuous mode [ 41.834790][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.842403][ T13] bridge_slave_0: left allmulticast mode [ 41.848054][ T13] bridge_slave_0: left promiscuous mode [ 41.853770][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.861735][ T13] bridge_slave_1: left allmulticast mode [ 41.867521][ T13] bridge_slave_1: left promiscuous mode [ 41.873143][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.880631][ T13] bridge_slave_0: left allmulticast mode [ 41.886368][ T13] bridge_slave_0: left promiscuous mode [ 41.892210][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.044687][ T13] tipc: Disabling bearer [ 42.050019][ T13] tipc: Left network mode [ 42.054648][ T13] tipc: Left network mode [ 42.060313][ T13] veth1_macvtap: left promiscuous mode [ 42.065871][ T13] veth0_vlan: left promiscuous mode [ 42.071222][ T13] veth1_macvtap: left promiscuous mode [ 42.076737][ T13] veth0_vlan: left promiscuous mode [ 42.082316][ T13] veth1_macvtap: left promiscuous mode [ 42.087846][ T13] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 42.554368][ T13] ------------[ cut here ]------------ [ 42.559873][ T13] WARNING: CPU: 0 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 42.569847][ T13] Modules linked in: [ 42.573890][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 42.585527][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.595631][ T13] Workqueue: netns cleanup_net [ 42.600418][ T13] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 42.606415][ T13] Code: e8 c1 62 d6 fc 4b 83 3c 3e 00 75 19 e8 45 9e 7d fc 49 81 ff f8 07 00 00 74 1b e8 37 9e 7d fc 49 83 c7 08 eb c9 e8 2c 9e 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 42.626065][ T13] RSP: 0018:ffffc900000d7b90 EFLAGS: 00010293 [ 42.632163][ T13] RAX: ffffffff8509d394 RBX: ffff88812c074700 RCX: ffff888103654c00 [ 42.640211][ T13] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103f787f0 [ 42.648199][ T13] RBP: ffffc900000d7bb0 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 42.656194][ T13] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: dffffc0000000000 [ 42.664181][ T13] R13: dffffc0000000000 R14: ffff888103f78000 R15: 00000000000007f0 [ 42.672238][ T13] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 42.681170][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.687888][ T13] CR2: 00007fddd1cc0bd0 CR3: 000000010af8a000 CR4: 00000000003526b0 [ 42.696022][ T13] Call Trace: [ 42.699333][ T13] [ 42.702341][ T13] cleanup_net+0x6ba/0xc90 [ 42.706766][ T13] ? __cfi_cleanup_net+0x10/0x10 [ 42.711699][ T13] ? kick_pool+0xb9/0x540 [ 42.716049][ T13] process_scheduled_works+0x7f7/0x1060 [ 42.721591][ T13] worker_thread+0xc99/0x13f0 [ 42.726293][ T13] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 42.732130][ T13] ? __kasan_check_read+0x15/0x20 [ 42.737152][ T13] kthread+0x2c7/0x360 [ 42.741223][ T13] ? __cfi_worker_thread+0x10/0x10 [ 42.746349][ T13] ? __cfi_kthread+0x10/0x10 [ 42.750933][ T13] ret_from_fork+0x67/0xa0 [ 42.755360][ T13] ? __cfi_kthread+0x10/0x10 [ 42.759949][ T13] ret_from_fork_asm+0x1a/0x30 [ 42.764753][ T13] [ 42.767764][ T13] ---[ end trace 0000000000000000 ]--- [ 42.773405][ T13] ------------[ cut here ]------------ [ 42.778941][ T13] WARNING: CPU: 1 PID: 13 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 42.788972][ T13] Modules linked in: [ 42.792875][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 42.805900][ T13] Tainted: [W]=WARN [ 42.809680][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.819754][ T13] Workqueue: netns cleanup_net [ 42.824570][ T13] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 42.830639][ T13] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 9d 7d fc 49 81 ff f8 07 00 00 74 1b e8 e2 9d 7d fc 49 83 c7 08 eb c5 e8 d7 9d 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 9d 7d fc 5b 41 5c 41 5e 41 [ 42.850551][ T13] RSP: 0018:ffffc900000d7b90 EFLAGS: 00010293 [ 42.856629][ T13] RAX: ffffffff8509d3e9 RBX: ffff888103f78800 RCX: ffff888103654c00 [ 42.864623][ T13] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103f78808 [ 42.872609][ T13] RBP: ffffc900000d7bb0 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 42.880693][ T13] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: dffffc0000000000 [ 42.888755][ T13] R13: dffffc0000000000 R14: ffff888103f78000 R15: 0000000000000008 [ 42.896776][ T13] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.905740][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.912338][ T13] CR2: 00007ffc66a48fc4 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 42.920313][ T13] Call Trace: [ 42.923644][ T13] [ 42.926574][ T13] cleanup_net+0x6ba/0xc90 [ 42.930986][ T13] ? __cfi_cleanup_net+0x10/0x10 [ 42.935969][ T13] ? kick_pool+0xb9/0x540 [ 42.940399][ T13] process_scheduled_works+0x7f7/0x1060 [ 42.946029][ T13] worker_thread+0xc99/0x13f0 [ 42.950722][ T13] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 42.956522][ T13] ? __kasan_check_read+0x15/0x20 [ 42.961574][ T13] kthread+0x2c7/0x360 [ 42.965735][ T13] ? __cfi_worker_thread+0x10/0x10 [ 42.970859][ T13] ? __cfi_kthread+0x10/0x10 [ 42.975481][ T13] ret_from_fork+0x67/0xa0 [ 42.979912][ T13] ? __cfi_kthread+0x10/0x10 [ 42.984576][ T13] ret_from_fork_asm+0x1a/0x30 [ 42.989339][ T13] [ 42.992410][ T13] ---[ end trace 0000000000000000 ]--- [ 43.003762][ T13] ------------[ cut here ]------------ [ 43.009258][ T13] WARNING: CPU: 0 PID: 13 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 43.018688][ T13] Modules linked in: [ 43.022630][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 43.035683][ T13] Tainted: [W]=WARN [ 43.039485][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.049816][ T13] Workqueue: netns cleanup_net [ 43.054603][ T13] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 43.060162][ T13] Code: 3c 20 00 74 08 48 89 df e8 ff 20 f1 fc 48 8b 3b e8 27 13 dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 89 b7 00 cc e8 72 5c 98 fc <0f> 0b e9 b0 fd ff ff e8 66 5c 98 fc 0f 0b e9 18 fe ff ff e8 5a 5c [ 43.079844][ T13] RSP: 0018:ffffc900000d7b70 EFLAGS: 00010293 [ 43.085951][ T13] RAX: ffffffff84ef154e RBX: ffff88812c074700 RCX: ffff888103654c00 [ 43.093969][ T13] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103654c00 [ 43.101991][ T13] RBP: ffffc900000d7b98 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 43.109958][ T13] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: 1ffffffff0fa8250 [ 43.117933][ T13] R13: dffffc0000000000 R14: ffff88812c075300 R15: dffffc0000000000 [ 43.125942][ T13] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 43.135033][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.141626][ T13] CR2: 00007fddd1cc0bd0 CR3: 000000010af8a000 CR4: 00000000003526b0 [ 43.149620][ T13] Call Trace: [ 43.152930][ T13] [ 43.155863][ T13] xfrm_net_exit+0x31/0x80 [ 43.160299][ T13] cleanup_net+0x6ba/0xc90 [ 43.164765][ T13] ? __cfi_cleanup_net+0x10/0x10 [ 43.169752][ T13] ? kick_pool+0xb9/0x540 [ 43.174126][ T13] process_scheduled_works+0x7f7/0x1060 [ 43.179686][ T13] worker_thread+0xc99/0x13f0 [ 43.184398][ T13] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 43.190109][ T13] ? __kasan_check_read+0x15/0x20 [ 43.195154][ T13] kthread+0x2c7/0x360 [ 43.199278][ T13] ? __cfi_worker_thread+0x10/0x10 [ 43.204391][ T13] ? __cfi_kthread+0x10/0x10 [ 43.208969][ T13] ret_from_fork+0x67/0xa0 [ 43.213492][ T13] ? __cfi_kthread+0x10/0x10 [ 43.218071][ T13] ret_from_fork_asm+0x1a/0x30 [ 43.222831][ T13] [ 43.225850][ T13] ---[ end trace 0000000000000000 ]--- [ 43.375343][ T890] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 43.381959][ T890] ACPI: PM: Preparing to enter system sleep state S5 [ 43.389017][ T890] kvm: exiting hardware virtualization [ 43.394538][ T890] reboot: Power down serialport: VM disconnected.