last executing test programs: 23.756776629s ago: executing program 1 (id=2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x108, 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'wg2\x00', 0x112}) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 23.673379523s ago: executing program 1 (id=5): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0xfffffff8, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) read$FUSE(r4, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140016"], 0x40}], 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) (async) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) 23.657050613s ago: executing program 2 (id=3): pipe(0x0) socket$packet(0x11, 0x2, 0x300) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap$dontunmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x4000)=nil) r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000000)={0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r2 = getpgid(0x0) setreuid(0xee01, 0xee01) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00000000c0), 0x4) r4 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r4, 0x21, 0x0, 0x4) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e23, 0xe9db8df3, @local, 0x2}, 0x1c) process_vm_writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/12, 0xc}], 0x1, &(0x7f0000000400)=[{&(0x7f0000000280)=""/202, 0xca}, {&(0x7f0000000380)=""/49, 0x31}, {&(0x7f00000003c0)=""/42, 0x2a}], 0x3, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @private=0xa010101}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) timerfd_settime(0xffffffffffffffff, 0xf06a19edeaaab97b, &(0x7f0000000880)={{}, {0x0, 0x989680}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) 23.557323498s ago: executing program 2 (id=7): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f0000000380)={0x8, {"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", 0x1000}}, 0x1006) 23.556968848s ago: executing program 2 (id=8): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0xb26fd3ae, 0x4, &(0x7f0000000040)={0x3, 0xf, 0x84b6, 0x9, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x0, &(0x7f0000000100)}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000380)={0x1f, @none}, 0x2) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 23.52265319s ago: executing program 2 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x100a2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) umount2(&(0x7f0000000240)='./file0\x00', 0x1) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104) write(r3, &(0x7f0000000000)='3', 0x4e) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount_setattr(r2, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x9, 0xd, 0x80000}, 0x20) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22a440, 0x0) clock_nanosleep(0xc, 0x1, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xc) 23.463428073s ago: executing program 2 (id=11): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x101341) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x81, 0x0, "4a9401d073aa4f0b36d079db219bc5678175ff89f8b3bb61120b03a48cf47df7a1d41b8e0cf6f8bcd268c793456b76fdc33fe12ee1418e662591fa0a50fb5f61607e5d79472014de10a22baa26b0e6f88244f1f63558ed40336c3148c1fe4096072c50d6fb206205046a930b2a9d225e5afef5a26664f33c1e833ac104dabae8826bdcf89e1bf217bc770f35d7c29afb5f4ac2810d722e85e8f6496cbfc0f5c8df08b195ae6795b1ad0878255560fbcc8d5dda94d8a316a0d64d2d0edb21f7683cfea39c5306c7838fe4abda1ddcf68c0c2d292249d885c8f73510d5f73203d9172b26ca9deda08b55c098dc9ee02925cd41b9895a95d51d00"}) 22.707248618s ago: executing program 3 (id=15): socket$netlink(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x40, 0x10, 0x40002, 0x1e3}, &(0x7f0000000500)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$packet(0x11, 0x3, 0x300) syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18c2, 0x800, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x43}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x200019b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x4000, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x1, 0xd55, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x1000, 0x401, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x16, &(0x7f0000001540)={0x2e, 0x6, 0x300, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x44, 0x0, 0x0}}, 0x0) 22.43111749s ago: executing program 3 (id=16): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x4e23, 0x1ff, 0x4e24, 0x1, 0xa, 0x0, 0xa0, 0x2f}, 0x6e6bc0, 0x1}, [@policy_type={0xa}]}, 0x5c}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) 22.407886802s ago: executing program 3 (id=17): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x2, 0x25000, 0x2000, &(0x7f0000732000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 22.213530271s ago: executing program 3 (id=18): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x2f89, r2}, 0x14, &(0x7f0000000080)=[{&(0x7f0000000140)="22a2", 0x2}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 22.212557601s ago: executing program 3 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x100a2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) umount2(&(0x7f0000000240)='./file0\x00', 0x1) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104) write(r3, &(0x7f0000000000)='3', 0x4e) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount_setattr(r2, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x9, 0xd, 0x80000}, 0x20) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22a440, 0x0) clock_nanosleep(0xc, 0x1, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xc) 22.177652313s ago: executing program 3 (id=20): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0xdc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x74, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2004}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x81, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x7}, 0x4) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb0, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x84, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6160}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x99}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'macsec0\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0xb0}}, 0x80) 20.667974853s ago: executing program 1 (id=26): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x7fff, 0x9b99}, 0x25, [0x8, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x7f, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x2, 0x401, 0xfffffffe, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x40000002, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x2, 0xa8a9, 0x0, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x4, 0x40, 0x8000a6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff0, 0x4, 0x46, 0xee, 0x7, 0xab00060, 0x2, 0x9, 0xfffffffc, 0x5, 0x3ff, 0x1f9, 0x800, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x190, 0xffd, 0x2, 0xc], [0x9, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf782, 0x80000001, 0x4005, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x8, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x7, 0x0, 0x19, 0x3, 0xc7, 0xfff, 0x100008, 0x3, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x2002, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0x1, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x8, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d86, 0x9, 0x8, 0x6, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffef, 0x100009, 0xc, 0x32d, 0x3, 0x1fb, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x9, 0x6, 0xf, 0xe, 0x40c, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000000)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "6f449e", 0x15, 0x6, 0x1, @remote, @mcast2, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8ed, 0x0, 0x6}, {'f'}}}}}}}}, 0x4f) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) tee(r4, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r5}, &(0x7f0000000380)=0x0) timer_settime(r6, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = gettid() tkill(r7, 0x16) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 19.625463082s ago: executing program 1 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x100a2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) umount2(&(0x7f0000000240)='./file0\x00', 0x1) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104) write(r3, &(0x7f0000000000)='3', 0x4e) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount_setattr(r2, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x9, 0xd, 0x80000}, 0x20) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22a440, 0x0) clock_nanosleep(0xc, 0x1, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xc) 19.621938522s ago: executing program 1 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x98, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x30, 0x66, 0x39, 0x7, 0x50, 0x65], 0x2d, [0x62, 0x32, 0x63, 0x36], 0x2d, [0x63, 0x65, 0x61, 0x37], 0x2d, [0x61, 0x66, 0x35, 0x36], 0x2d, [0x61, 0x34, 0x36, 0x62, 0x39, 0x39, 0x37, 0x61]}}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) r1 = socket$inet6(0xa, 0x3, 0xff) shutdown(r1, 0x1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r2 = dup2(r1, r1) write$tun(r2, 0x0, 0x46) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) 8.149514159s ago: executing program 32 (id=11): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x101341) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x81, 0x0, "4a9401d073aa4f0b36d079db219bc5678175ff89f8b3bb61120b03a48cf47df7a1d41b8e0cf6f8bcd268c793456b76fdc33fe12ee1418e662591fa0a50fb5f61607e5d79472014de10a22baa26b0e6f88244f1f63558ed40336c3148c1fe4096072c50d6fb206205046a930b2a9d225e5afef5a26664f33c1e833ac104dabae8826bdcf89e1bf217bc770f35d7c29afb5f4ac2810d722e85e8f6496cbfc0f5c8df08b195ae6795b1ad0878255560fbcc8d5dda94d8a316a0d64d2d0edb21f7683cfea39c5306c7838fe4abda1ddcf68c0c2d292249d885c8f73510d5f73203d9172b26ca9deda08b55c098dc9ee02925cd41b9895a95d51d00"}) 7.128808217s ago: executing program 33 (id=20): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0xdc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x74, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2004}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x81, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x7}, 0x4) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb0, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x84, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6160}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x99}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'macsec0\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0xb0}}, 0x80) 4.595727275s ago: executing program 34 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x98, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x30, 0x66, 0x39, 0x7, 0x50, 0x65], 0x2d, [0x62, 0x32, 0x63, 0x36], 0x2d, [0x63, 0x65, 0x61, 0x37], 0x2d, [0x61, 0x66, 0x35, 0x36], 0x2d, [0x61, 0x34, 0x36, 0x62, 0x39, 0x39, 0x37, 0x61]}}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) r1 = socket$inet6(0xa, 0x3, 0xff) shutdown(r1, 0x1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r2 = dup2(r1, r1) write$tun(r2, 0x0, 0x46) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) 3.475751808s ago: executing program 6 (id=76): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01040000000000000000050000000900010073797a30000000004c000000030a01040000000000000000050000000900010073797a30000000000900030073797a300000000020000480080001000000000008000200000000000c00030073797a5f74756e0054000000060a01040000000000000000050000000900010073797a30000000000900020073797a300000000028000480240001800b0001"], 0xe8}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) 3.42927368s ago: executing program 6 (id=78): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5414, &(0x7f0000000000)) 3.349269423s ago: executing program 6 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:02.0/driver\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:02.0', 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='pch_udc', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/pch_udc\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000280)='bind\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='0000:00:02.0', 0xc) 3.276231567s ago: executing program 6 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)="10151003", 0x4) 2.961473981s ago: executing program 5 (id=91): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x1, 0x1}) 2.854728207s ago: executing program 5 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid5', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='2', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='65536', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='1:0', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='active', 0x6) 2.78923039s ago: executing program 5 (id=100): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 2.78708815s ago: executing program 5 (id=103): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@typed={0xd, 0x9e, 0x0, 0x0, @binary="281cdf2ed8e8f7af74"}]}, 0x24}}, 0x0) 2.752943181s ago: executing program 5 (id=104): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x40044c4) 2.705363724s ago: executing program 5 (id=107): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./sys\x00', &(0x7f0000000f00)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/adsl_state\x00', 0x2, 0x0) write(r1, &(0x7f0000001200)='stop', 0x4) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 1.729229719s ago: executing program 0 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) pipe(0x0) 1.728963429s ago: executing program 6 (id=136): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0000000290001000000000004000000fc000000000000000000000000000001fc0200000000000000000000000000ff00000005000000020a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e0000000000500000005080000000000000000000417d00000009c51400320400000476c7dab9887c5f1f3500000a00"], 0xa0}}, 0x0) 1.523566669s ago: executing program 0 (id=137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xbc8180, 0x0) close(r0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.49851853s ago: executing program 6 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_usb_connect(0x3, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) 1.445557432s ago: executing program 0 (id=139): sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44040080) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000017c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x13e) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x1d2f0, 0x402000, 0xf, 0xadea, 0x800000}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 1.430217904s ago: executing program 0 (id=141): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8946, 0x0) 1.416110534s ago: executing program 0 (id=142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x1224}], 0x1, 0x0, 0x2000000000000}, 0x700) 717.541006ms ago: executing program 4 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) pread64(r1, &(0x7f00000005c0)=""/29, 0x1d, 0x7) 703.676257ms ago: executing program 4 (id=159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000000050002000000000008000b40000000000900010073797a300000000014000000110001"], 0xd8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 669.443129ms ago: executing program 4 (id=160): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x8cd, 0x88000002, 0xfffff7fd, 0x9, 0x8f, "ffff7fd3ed7b00000000000000f3ff00000200", 0x7, 0x9}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 669.236519ms ago: executing program 4 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x181940, 0x0) read(r0, 0x0, 0x0) 611.728072ms ago: executing program 4 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 842.78µs ago: executing program 4 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='3', 0x1, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6042, 0x101) sendfile(r2, r1, 0x0, 0xe3aa6ea) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 0s ago: executing program 0 (id=171): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 30.060986][ T36] audit: type=1400 audit(1789677546.420:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.064389][ T287] cgroup: Unknown subsys name 'net' [ 30.083661][ T36] audit: type=1400 audit(1789677546.430:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.111019][ T36] audit: type=1400 audit(1789677546.450:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.111610][ T287] cgroup: Unknown subsys name 'devices' [ 30.213844][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.219488][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.315353][ T36] audit: type=1400 audit(1789677546.680:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.338561][ T36] audit: type=1400 audit(1789677546.680:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.363339][ T36] audit: type=1400 audit(1789677546.680:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.422277][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.431088][ T36] audit: type=1400 audit(1789677546.790:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 30.456623][ T36] audit: type=1400 audit(1789677546.790:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.490903][ T36] audit: type=1400 audit(1789677546.850:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.516535][ T36] audit: type=1400 audit(1789677546.850:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.517340][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.880674][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.891099][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.898471][ T294] bridge_slave_0: entered allmulticast mode [ 31.905119][ T294] bridge_slave_0: entered promiscuous mode [ 31.922768][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.929844][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.937148][ T294] bridge_slave_1: entered allmulticast mode [ 31.945673][ T294] bridge_slave_1: entered promiscuous mode [ 32.063595][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.070778][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.078071][ T300] bridge_slave_0: entered allmulticast mode [ 32.084563][ T300] bridge_slave_0: entered promiscuous mode [ 32.100650][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.107777][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.115087][ T300] bridge_slave_1: entered allmulticast mode [ 32.121487][ T300] bridge_slave_1: entered promiscuous mode [ 32.144556][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.151710][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.158810][ T298] bridge_slave_0: entered allmulticast mode [ 32.165288][ T298] bridge_slave_0: entered promiscuous mode [ 32.175068][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.182161][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.189393][ T298] bridge_slave_1: entered allmulticast mode [ 32.195806][ T298] bridge_slave_1: entered promiscuous mode [ 32.256801][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.263951][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.271034][ T299] bridge_slave_0: entered allmulticast mode [ 32.277490][ T299] bridge_slave_0: entered promiscuous mode [ 32.287202][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.294326][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.301622][ T299] bridge_slave_1: entered allmulticast mode [ 32.307841][ T299] bridge_slave_1: entered promiscuous mode [ 32.318019][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.325567][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.332935][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.340020][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.424302][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.431468][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.438780][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.445891][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.479344][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.486568][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.494072][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.501142][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.531320][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.538797][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.546866][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.554506][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.562783][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.570030][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.584057][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.591143][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.612493][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.619577][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.627968][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.635058][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.646403][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.653478][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.693165][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.700260][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.708563][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.715625][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.753678][ T300] veth0_vlan: entered promiscuous mode [ 32.770159][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.777277][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.791127][ T299] veth0_vlan: entered promiscuous mode [ 32.802781][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.809869][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.824062][ T300] veth1_macvtap: entered promiscuous mode [ 32.835818][ T294] veth0_vlan: entered promiscuous mode [ 32.847833][ T299] veth1_macvtap: entered promiscuous mode [ 32.879409][ T294] veth1_macvtap: entered promiscuous mode [ 32.909150][ T300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.921344][ T298] veth0_vlan: entered promiscuous mode [ 32.965456][ T298] veth1_macvtap: entered promiscuous mode [ 33.102225][ T330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.168697][ T335] SELinux: failed to load policy [ 33.347068][ T344] FAULT_INJECTION: forcing a failure. [ 33.347068][ T344] name failslab, interval 1, probability 0, space 0, times 1 [ 33.371452][ T344] CPU: 0 UID: 0 PID: 344 Comm: syz.3.12 Not tainted syzkaller #0 59fd58dbf897e2c8ba33f91efbb53ce34092dff9 [ 33.371488][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.371510][ T344] Call Trace: [ 33.371518][ T344] [ 33.371526][ T344] __dump_stack+0x21/0x30 [ 33.371569][ T344] dump_stack_lvl+0x140/0x1c0 [ 33.371609][ T344] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.371639][ T344] ? is_bpf_text_address+0x17b/0x1a0 [ 33.371674][ T344] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 33.371698][ T344] dump_stack+0x19/0x20 [ 33.371727][ T344] should_fail_ex+0x3c2/0x510 [ 33.371756][ T344] should_failslab+0xac/0x100 [ 33.371784][ T344] __kmalloc_node_noprof+0x69/0x500 [ 33.371817][ T344] ? __kvmalloc_node_noprof+0x128/0x300 [ 33.371839][ T344] ? __kasan_check_write+0x18/0x20 [ 33.371863][ T344] __kvmalloc_node_noprof+0x128/0x300 [ 33.371885][ T344] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 33.371906][ T344] ? xas_start+0x317/0x3e0 [ 33.371929][ T344] ? __kasan_check_write+0x18/0x20 [ 33.371951][ T344] ? enqueue_timer+0x1c5/0x4b0 [ 33.371982][ T344] __kvm_mmu_topup_memory_cache+0x58e/0x7e0 [ 33.372017][ T344] ? mutex_unlock+0x90/0x240 [ 33.372044][ T344] kvm_mmu_topup_memory_cache+0x24/0x30 [ 33.372077][ T344] kvm_mmu_load+0xa1/0x2900 [ 33.372106][ T344] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 33.372138][ T344] ? queue_delayed_work_on+0x16f/0x1f0 [ 33.372167][ T344] ? kvm_apic_has_interrupt+0x77a/0x790 [ 33.372199][ T344] vcpu_run+0x4d72/0x7830 [ 33.372230][ T344] ? kvm_sched_clock_read+0x15/0x30 [ 33.372272][ T344] ? signal_pending+0xc0/0xc0 [ 33.372300][ T344] ? __kasan_check_write+0x18/0x20 [ 33.372323][ T344] ? xfd_validate_state+0x68/0x140 [ 33.372372][ T344] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 33.372400][ T344] ? __kasan_check_write+0x18/0x20 [ 33.372423][ T344] ? fpregs_mark_activate+0x68/0x160 [ 33.372451][ T344] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 33.372477][ T344] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 33.372506][ T344] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 33.372538][ T344] ? _parse_integer_limit+0x195/0x1e0 [ 33.372566][ T344] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 33.372610][ T344] ? kstrtoull+0x13b/0x1e0 [ 33.372635][ T344] ? kstrtouint+0x78/0xf0 [ 33.372659][ T344] ? ioctl_has_perm+0x1bc/0x500 [ 33.372682][ T344] ? __asan_memcpy+0x5a/0x80 [ 33.372705][ T344] ? ioctl_has_perm+0x408/0x500 [ 33.372728][ T344] ? has_cap_mac_admin+0xd0/0xd0 [ 33.372752][ T344] ? __kasan_check_write+0x18/0x20 [ 33.372774][ T344] ? mutex_lock_killable+0x97/0x1d0 [ 33.372810][ T344] ? __cfi_mutex_lock_killable+0x10/0x10 [ 33.372855][ T344] ? proc_fail_nth_write+0x184/0x220 [ 33.372893][ T344] kvm_vcpu_ioctl+0xa43/0x1000 [ 33.372916][ T344] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 33.372939][ T344] ? __cfi_vfs_write+0x10/0x10 [ 33.372964][ T344] ? __kasan_check_write+0x18/0x20 [ 33.372987][ T344] ? mutex_unlock+0x90/0x240 [ 33.373013][ T344] ? __cfi_mutex_unlock+0x10/0x10 [ 33.373043][ T344] ? __fget_files+0x2bc/0x330 [ 33.373071][ T344] ? bpf_lsm_file_ioctl+0xd/0x20 [ 33.373101][ T344] ? security_file_ioctl+0x3e/0x110 [ 33.373124][ T344] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 33.373146][ T344] __se_sys_ioctl+0x123/0x1b0 [ 33.373174][ T344] __x64_sys_ioctl+0x7f/0xa0 [ 33.373202][ T344] x64_sys_call+0x1878/0x2ee0 [ 33.373223][ T344] do_syscall_64+0x57/0xf0 [ 33.373245][ T344] ? clear_bhb_loop+0x50/0xa0 [ 33.373274][ T344] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.373301][ T344] RIP: 0033:0x7fb45b19e159 [ 33.373327][ T344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.373346][ T344] RSP: 002b:00007fb45c0fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.373379][ T344] RAX: ffffffffffffffda RBX: 00007fb45b425fa0 RCX: 00007fb45b19e159 [ 33.373397][ T344] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 33.373411][ T344] RBP: 00007fb45c0fb090 R08: 0000000000000000 R09: 0000000000000000 [ 33.373426][ T344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.373439][ T344] R13: 00007fb45b426038 R14: 00007fb45b425fa0 R15: 00007ffc829bbd78 [ 33.373460][ T344] [ 33.544112][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.921648][ T351] rust_binder: 350:351 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1275068416 [ 33.951443][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 33.966200][ T31] usb 1-1: config 0 has no interfaces? [ 33.973432][ T31] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 33.991426][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.999728][ T31] usb 1-1: Product: syz [ 34.005082][ T31] usb 1-1: Manufacturer: syz [ 34.009718][ T31] usb 1-1: SerialNumber: syz [ 34.022814][ T31] usb 1-1: config 0 descriptor?? [ 34.253550][ T31] usb 1-1: USB disconnect, device number 2 [ 34.793608][ T393] rust_binder: 392:393 transaction call to 0:0 failed EINVAL, code 0 size 0-0 [ 34.826225][ T9] rust_binder: 392: undelivered TRANSACTION_ERROR: 29201 [ 35.280288][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 35.280309][ T36] audit: type=1400 audit(1789677551.640:146): avc: denied { setopt } for pid=403 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.343351][ T36] audit: type=1400 audit(1789677551.640:147): avc: denied { ioctl } for pid=403 comm="syz.0.25" path="socket:[4551]" dev="sockfs" ino=4551 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.367977][ T36] audit: type=1400 audit(1789677551.640:148): avc: denied { mount } for pid=403 comm="syz.0.25" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.531432][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.681408][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 35.687703][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.701408][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 35.733299][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.742565][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.750587][ T9] usb 1-1: Product: syz [ 35.771446][ T9] usb 1-1: Manufacturer: syz [ 35.776186][ T9] usb 1-1: SerialNumber: syz [ 35.792750][ T9] cdc_ether 1-1:1.0: skipping garbage [ 35.808542][ T9] usb 1-1: bad CDC descriptors [ 35.993382][ T405] af_packet: tpacket_rcv: packet too big, clamped from 65386 to 4294967272. macoff=96 [ 36.013371][ T31] usb 1-1: USB disconnect, device number 3 [ 36.065540][ T408] syzkaller1: entered promiscuous mode [ 36.081434][ T408] syzkaller1: entered allmulticast mode [ 36.529035][ T36] audit: type=1400 audit(1789677552.890:149): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 36.771710][ T31] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 36.942566][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 36.971405][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.004258][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.014839][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.032987][ T31] usb 1-1: SerialNumber: syz [ 37.052106][ T411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 37.264565][ T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 37.294040][ T31] usb 1-1: USB disconnect, device number 4 [ 48.810382][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.841397][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.848502][ T417] bridge_slave_0: entered allmulticast mode [ 48.881869][ T417] bridge_slave_0: entered promiscuous mode [ 48.889076][ T374] bridge_slave_1: left allmulticast mode [ 48.894808][ T374] bridge_slave_1: left promiscuous mode [ 48.900450][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.908410][ T374] bridge_slave_0: left allmulticast mode [ 48.914175][ T374] bridge_slave_0: left promiscuous mode [ 48.919809][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.032218][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.039302][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.061467][ T417] bridge_slave_1: entered allmulticast mode [ 49.067976][ T417] bridge_slave_1: entered promiscuous mode [ 49.082311][ T374] veth1_macvtap: left promiscuous mode [ 49.087851][ T374] veth0_vlan: left promiscuous mode [ 49.332120][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.339292][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.346633][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.353694][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.382555][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.390051][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.407526][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.414611][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.452443][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.459518][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.494890][ T417] veth0_vlan: entered promiscuous mode [ 49.523841][ T417] veth1_macvtap: entered promiscuous mode [ 49.686853][ T36] audit: type=1400 audit(1789677566.050:150): avc: denied { setopt } for pid=427 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.731406][ T36] audit: type=1400 audit(1789677566.050:151): avc: denied { getopt } for pid=427 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.774284][ T374] bridge_slave_1: left allmulticast mode [ 49.779972][ T374] bridge_slave_1: left promiscuous mode [ 49.788194][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.795993][ T374] bridge_slave_0: left allmulticast mode [ 49.801711][ T374] bridge_slave_0: left promiscuous mode [ 49.807351][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.925551][ T36] audit: type=1400 audit(1789677566.290:152): avc: denied { create } for pid=437 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.945288][ T438] Unsupported ieee802154 address type: 0 [ 49.945484][ T36] audit: type=1400 audit(1789677566.300:153): avc: denied { create } for pid=437 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.971821][ T374] veth1_macvtap: left promiscuous mode [ 49.977385][ T374] veth0_vlan: left promiscuous mode [ 49.982722][ T36] audit: type=1400 audit(1789677566.300:154): avc: denied { mmap_zero } for pid=437 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 50.002254][ T36] audit: type=1400 audit(1789677566.310:155): avc: denied { create } for pid=437 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.022669][ T36] audit: type=1400 audit(1789677566.310:156): avc: denied { bind } for pid=437 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.030199][ T438] FAULT_INJECTION: forcing a failure. [ 50.030199][ T438] name failslab, interval 1, probability 0, space 0, times 0 [ 50.081436][ T438] CPU: 1 UID: 0 PID: 438 Comm: syz.0.35 Not tainted syzkaller #0 59fd58dbf897e2c8ba33f91efbb53ce34092dff9 [ 50.081474][ T438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.081489][ T438] Call Trace: [ 50.081496][ T438] [ 50.081504][ T438] __dump_stack+0x21/0x30 [ 50.081541][ T438] dump_stack_lvl+0x140/0x1c0 [ 50.081573][ T438] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.081614][ T438] dump_stack+0x19/0x20 [ 50.081643][ T438] should_fail_ex+0x3c2/0x510 [ 50.081670][ T438] ? io_alloc_hash_table+0x52/0x160 [ 50.081693][ T438] should_failslab+0xac/0x100 [ 50.081721][ T438] __kmalloc_noprof+0x69/0x510 [ 50.081745][ T438] ? io_alloc_hash_table+0x52/0x160 [ 50.081767][ T438] ? __kasan_kmalloc+0x96/0xb0 [ 50.081796][ T438] io_alloc_hash_table+0x52/0x160 [ 50.081818][ T438] io_ring_ctx_alloc+0xd1/0x1dc0 [ 50.081840][ T438] ? __x64_sys_io_uring_enter+0x110/0x110 [ 50.081883][ T438] io_uring_create+0x2e0/0x13f0 [ 50.081906][ T438] ? __kasan_check_write+0x18/0x20 [ 50.081929][ T438] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 50.081961][ T438] ? __x64_sys_io_uring_setup+0x80/0x80 [ 50.081992][ T438] ? __fget_files+0x2bc/0x330 [ 50.082021][ T438] ? __kasan_check_read+0x15/0x20 [ 50.082044][ T438] __x64_sys_io_uring_setup+0x5f/0x80 [ 50.082075][ T438] x64_sys_call+0x22c0/0x2ee0 [ 50.082096][ T438] do_syscall_64+0x57/0xf0 [ 50.082116][ T438] ? clear_bhb_loop+0x50/0xa0 [ 50.082144][ T438] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.082170][ T438] RIP: 0033:0x7f288059e159 [ 50.082188][ T438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.082206][ T438] RSP: 002b:00007f28814efee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 50.082229][ T438] RAX: ffffffffffffffda RBX: 00002000000009e8 RCX: 00007f288059e159 [ 50.082246][ T438] RDX: 0000200000000a68 RSI: 00002000000009e8 RDI: 00000000000003c9 [ 50.082261][ T438] RBP: 00002000000009e0 R08: 0000000000000008 R09: 0000000000000000 [ 50.082275][ T438] R10: 0000200000000a70 R11: 0000000000000206 R12: 0000200000000a68 [ 50.082290][ T438] R13: 0000200000000a70 R14: 00007f28814effd8 R15: 0000000000000003 [ 50.082309][ T438] [ 50.314049][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.370417][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.377750][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.388168][ T430] bridge_slave_0: entered allmulticast mode [ 50.394951][ T430] bridge_slave_0: entered promiscuous mode [ 50.409011][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.416189][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.428333][ T430] bridge_slave_1: entered allmulticast mode [ 50.434953][ T430] bridge_slave_1: entered promiscuous mode [ 50.481401][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 50.487656][ T31] usb 5-1: config 0 has no interfaces? [ 50.494624][ T31] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 50.506071][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.514355][ T31] usb 5-1: Product: syz [ 50.518582][ T31] usb 5-1: Manufacturer: syz [ 50.523943][ T31] usb 5-1: SerialNumber: syz [ 50.537545][ T31] usb 5-1: config 0 descriptor?? [ 50.544006][ T36] audit: type=1400 audit(1789677566.900:157): avc: denied { create } for pid=443 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.584384][ T36] audit: type=1400 audit(1789677566.950:158): avc: denied { append } for pid=446 comm="syz.0.37" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.607991][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.615151][ T430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.622501][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.629558][ T430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.647630][ T36] audit: type=1400 audit(1789677567.000:159): avc: denied { write } for pid=446 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.699420][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.710496][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.731827][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.738906][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.748423][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.756810][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.778513][ T312] usb 5-1: USB disconnect, device number 2 [ 50.790439][ T451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 50.818860][ T430] veth0_vlan: entered promiscuous mode [ 50.833423][ T430] veth1_macvtap: entered promiscuous mode [ 51.321592][ T312] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 51.400807][ T464] 9pnet_virtio: no channels available for device syz [ 51.489339][ T312] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 51.498512][ T312] usb 6-1: config 0 has no interface number 0 [ 51.505097][ T312] usb 6-1: config 0 interface 41 has no altsetting 0 [ 51.535092][ T312] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 51.544588][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.552772][ T312] usb 6-1: Product: syz [ 51.557079][ T312] usb 6-1: Manufacturer: syz [ 51.563402][ T312] usb 6-1: SerialNumber: syz [ 51.573342][ T312] usb 6-1: config 0 descriptor?? [ 51.943541][ T9] rust_binder: 484: undelivered TRANSACTION_COMPLETE [ 51.957076][ T45] rust_binder: 484: undelivered transaction 6, process died [ 52.120138][ T491] 9pnet_virtio: no channels available for device syz [ 52.273928][ T368] bridge_slave_1: left allmulticast mode [ 52.285513][ T368] bridge_slave_1: left promiscuous mode [ 52.291210][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.300109][ T368] bridge_slave_0: left allmulticast mode [ 52.305934][ T368] bridge_slave_0: left promiscuous mode [ 52.311727][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.348179][ T502] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 52.422966][ T496] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.430647][ T496] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.437790][ T496] bridge_slave_0: entered allmulticast mode [ 52.444350][ T496] bridge_slave_0: entered promiscuous mode [ 52.460177][ T496] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.471157][ T496] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.485540][ T496] bridge_slave_1: entered allmulticast mode [ 52.492493][ T496] bridge_slave_1: entered promiscuous mode [ 52.502066][ T368] veth1_macvtap: left promiscuous mode [ 52.511767][ T368] veth0_vlan: left promiscuous mode [ 52.587524][ T312] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 52.599892][ T312] usb 6-1: USB disconnect, device number 2 [ 52.647383][ T496] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.654484][ T496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.661781][ T496] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.668825][ T496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.694641][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.704653][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.716109][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.723182][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.734885][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.741967][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.775951][ T496] veth0_vlan: entered promiscuous mode [ 52.802288][ T496] veth1_macvtap: entered promiscuous mode [ 52.868245][ T522] FAULT_INJECTION: forcing a failure. [ 52.868245][ T522] name fail_futex, interval 1, probability 0, space 0, times 1 [ 52.885556][ T522] CPU: 1 UID: 0 PID: 522 Comm: syz.4.66 Not tainted syzkaller #0 59fd58dbf897e2c8ba33f91efbb53ce34092dff9 [ 52.885589][ T522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.885610][ T522] Call Trace: [ 52.885617][ T522] [ 52.885625][ T522] __dump_stack+0x21/0x30 [ 52.885660][ T522] dump_stack_lvl+0x140/0x1c0 [ 52.885689][ T522] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.885721][ T522] dump_stack+0x19/0x20 [ 52.885750][ T522] should_fail_ex+0x3c2/0x510 [ 52.885777][ T522] should_fail+0xf/0x20 [ 52.885799][ T522] get_futex_key+0x178/0x940 [ 52.885826][ T522] ? __cfi_get_futex_key+0x10/0x10 [ 52.885851][ T522] ? preempt_schedule_common+0x2d/0x60 [ 52.885874][ T522] ? preempt_schedule+0xc5/0xe0 [ 52.885896][ T522] ? __cfi_preempt_schedule+0x10/0x10 [ 52.885918][ T522] futex_wait_setup+0xae/0x260 [ 52.885937][ T522] ? preempt_schedule_thunk+0x1a/0x40 [ 52.885960][ T522] ? __cfi_futex_wait_setup+0x10/0x10 [ 52.885980][ T522] ? __asan_memcpy+0x5a/0x80 [ 52.886002][ T522] __futex_wait+0x12c/0x3d0 [ 52.886021][ T522] ? __cfi___futex_wait+0x10/0x10 [ 52.886041][ T522] ? __cfi_futex_wake_mark+0x10/0x10 [ 52.886060][ T522] ? futex_wake+0x666/0x950 [ 52.886079][ T522] futex_wait+0x128/0x7c0 [ 52.886099][ T522] ? __cfi_futex_wait+0x10/0x10 [ 52.886121][ T522] do_futex+0x32a/0x510 [ 52.886149][ T522] ? __cfi_do_futex+0x10/0x10 [ 52.886178][ T522] __se_sys_futex+0x13c/0x320 [ 52.886206][ T522] ? __x64_sys_futex+0x110/0x110 [ 52.886235][ T522] ? __kasan_check_write+0x18/0x20 [ 52.886257][ T522] __x64_sys_futex+0xe9/0x110 [ 52.886285][ T522] x64_sys_call+0x227f/0x2ee0 [ 52.886303][ T522] do_syscall_64+0x57/0xf0 [ 52.886322][ T522] ? clear_bhb_loop+0x50/0xa0 [ 52.886348][ T522] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.886372][ T522] RIP: 0033:0x7f909bf9e159 [ 52.886401][ T522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.886417][ T522] RSP: 002b:00007f909cdb30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 52.886450][ T522] RAX: ffffffffffffffda RBX: 00007f909c225fa8 RCX: 00007f909bf9e159 [ 52.886463][ T522] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f909c225fa8 [ 52.886474][ T522] RBP: 00007f909c225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 52.886486][ T522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.886497][ T522] R13: 00007f909c226038 R14: 00007ffc94dbbeb0 R15: 00007ffc94dbbf98 [ 52.886513][ T522] [ 53.293793][ T549] FAULT_INJECTION: forcing a failure. [ 53.293793][ T549] name failslab, interval 1, probability 0, space 0, times 0 [ 53.366666][ T561] random: crng reseeded on system resumption [ 53.366987][ T549] CPU: 0 UID: 0 PID: 549 Comm: syz.4.80 Not tainted syzkaller #0 59fd58dbf897e2c8ba33f91efbb53ce34092dff9 [ 53.367065][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.367105][ T549] Call Trace: [ 53.367119][ T549] [ 53.367140][ T549] __dump_stack+0x21/0x30 [ 53.367242][ T549] dump_stack_lvl+0x140/0x1c0 [ 53.367322][ T549] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.367404][ T549] dump_stack+0x19/0x20 [ 53.367482][ T549] should_fail_ex+0x3c2/0x510 [ 53.367567][ T549] should_failslab+0xac/0x100 [ 53.367636][ T549] __kmalloc_cache_noprof+0x41/0x470 [ 53.367696][ T549] ? call_usermodehelper_setup+0x97/0x300 [ 53.367765][ T549] ? __cfi_sprintf+0x10/0x10 [ 53.367846][ T549] call_usermodehelper_setup+0x97/0x300 [ 53.367911][ T549] ? __cfi_umh_keys_init+0x10/0x10 [ 53.367982][ T549] ? __cfi_umh_keys_cleanup+0x10/0x10 [ 53.368054][ T549] ? keyring_alloc+0x8a/0xc0 [ 53.368114][ T549] call_sbin_request_key+0x7dc/0xbf0 [ 53.368189][ T549] ? __cfi_call_sbin_request_key+0x10/0x10 [ 53.368373][ T549] ? __cfi_key_instantiate_and_link+0x10/0x10 [ 53.368508][ T549] ? __cfi_request_key_auth_new+0x10/0x10 [ 53.368608][ T549] ? mutex_unlock+0x90/0x240 [ 53.368682][ T549] ? refcount_dec_and_lock+0x29/0xb0 [ 53.368767][ T549] request_key_and_link+0xbb8/0x1230 [ 53.368849][ T549] ? key_task_permission+0x3be/0x500 [ 53.368930][ T549] ? __cfi_request_key_and_link+0x10/0x10 [ 53.369011][ T549] ? downgrade_write+0x470/0x470 [ 53.369097][ T549] ? __cfi_asymmetric_key_cmp_partial+0x10/0x10 [ 53.369181][ T549] ? __cfi_keyring_search_iterator+0x10/0x10 [ 53.369251][ T549] __se_sys_request_key+0x29c/0x350 [ 53.369322][ T549] ? __x64_sys_request_key+0xc0/0xc0 [ 53.369393][ T549] ? __kasan_check_write+0x18/0x20 [ 53.369447][ T549] ? fpregs_restore_userregs+0x11c/0x260 [ 53.369551][ T549] __x64_sys_request_key+0x9f/0xc0 [ 53.369616][ T549] x64_sys_call+0x2b60/0x2ee0 [ 53.369659][ T549] do_syscall_64+0x57/0xf0 [ 53.369705][ T549] ? clear_bhb_loop+0x50/0xa0 [ 53.369791][ T549] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.369876][ T549] RIP: 0033:0x7f909bf9e159 [ 53.369915][ T549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.369960][ T549] RSP: 002b:00007f909cdb3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 53.370018][ T549] RAX: ffffffffffffffda RBX: 00007f909c225fa0 RCX: 00007f909bf9e159 [ 53.370070][ T549] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 53.370108][ T549] RBP: 00007f909c03506b R08: 0000000000000000 R09: 0000000000000000 [ 53.370138][ T549] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 53.370176][ T549] R13: 00007f909c226038 R14: 00007f909c225fa0 R15: 00007ffc94dbbf98 [ 53.370223][ T549] [ 53.714350][ T569] logitech-hidpp-device 0003:046D:C082.0001: received hid++ report of bad size (193) [ 53.727335][ T10] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 53.793770][ T576] fido_id[576]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.894379][ T474] rust_binder: 595: undelivered TRANSACTION_COMPLETE [ 53.906557][ T45] rust_binder: 595: undelivered transaction 11, process died [ 53.941424][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.042728][ T620] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 54.057028][ T620] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 54.072783][ T620] overlayfs: conflicting lowerdir path [ 54.113711][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.124089][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 54.134076][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.156722][ T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 54.166342][ T628] overlay: ./file0/file1 is not a directory [ 54.177982][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 54.186222][ T9] usb 7-1: Product: syz [ 54.190545][ T9] usb 7-1: Manufacturer: syz [ 54.205064][ T567] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 54.246799][ T636] Zero length message leads to an empty skb [ 54.252867][ T45] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 54.416470][ T45] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 54.425621][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.443708][ T10] usb 7-1: USB disconnect, device number 2 [ 54.936417][ T668] FAULT_INJECTION: forcing a failure. [ 54.936417][ T668] name failslab, interval 1, probability 0, space 0, times 0 [ 54.949178][ T668] CPU: 0 UID: 0 PID: 668 Comm: syz.0.135 Not tainted syzkaller #0 59fd58dbf897e2c8ba33f91efbb53ce34092dff9 [ 54.949217][ T668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.949232][ T668] Call Trace: [ 54.949240][ T668] [ 54.949249][ T668] __dump_stack+0x21/0x30 [ 54.949290][ T668] dump_stack_lvl+0x140/0x1c0 [ 54.949336][ T668] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.949386][ T668] ? do_pipe2+0xab/0x190 [ 54.949412][ T668] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.949443][ T668] dump_stack+0x19/0x20 [ 54.949475][ T668] should_fail_ex+0x3c2/0x510 [ 54.949515][ T668] should_failslab+0xac/0x100 [ 54.949545][ T668] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 54.949570][ T668] ? __d_alloc+0x42/0x8c0 [ 54.949592][ T668] __d_alloc+0x42/0x8c0 [ 54.949614][ T668] d_alloc_pseudo+0x23/0xc0 [ 54.949636][ T668] alloc_file_pseudo+0xde/0x1f0 [ 54.949668][ T668] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 54.949699][ T668] ? __mutex_init+0xa6/0x1a0 [ 54.949730][ T668] create_pipe_files+0x287/0x6c0 [ 54.949754][ T668] __do_pipe_flags+0x50/0x2f0 [ 54.949777][ T668] do_pipe2+0xab/0x190 [ 54.949800][ T668] ? __x64_sys_futex+0x110/0x110 [ 54.949830][ T668] ? pipe_fcntl+0x520/0x520 [ 54.949857][ T668] __x64_sys_pipe+0x3e/0x50 [ 54.949879][ T668] x64_sys_call+0xd3/0x2ee0 [ 54.949899][ T668] do_syscall_64+0x57/0xf0 [ 54.949920][ T668] ? clear_bhb_loop+0x50/0xa0 [ 54.949957][ T668] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.949985][ T668] RIP: 0033:0x7f288059e159 [ 54.950004][ T668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.950023][ T668] RSP: 002b:00007f28814f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 54.950048][ T668] RAX: ffffffffffffffda RBX: 00007f2880825fa0 RCX: 00007f288059e159 [ 54.950065][ T668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.950078][ T668] RBP: 00007f288063506b R08: 0000000000000000 R09: 0000000000000000 [ 54.950093][ T668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.950106][ T668] R13: 00007f2880826038 R14: 00007f2880825fa0 R15: 00007ffd7aadf5d8 [ 54.950125][ T668] [ 55.185996][ T671] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=671 comm=syz.6.136 [ 55.295371][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 55.295389][ T36] audit: type=1400 audit(1789677571.660:211): avc: denied { name_bind } for pid=681 comm="syz.0.142" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.323287][ T36] audit: type=1400 audit(1789677571.660:212): avc: denied { node_bind } for pid=681 comm="syz.0.142" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 55.451454][ T45] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.499164][ T36] audit: type=1400 audit(1789677571.860:213): avc: denied { write } for pid=701 comm="syz.4.150" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.523565][ T702] rust_binder: Write failure EINVAL in pid:103 [ 55.523773][ T575] rust_binder: 701: undelivered freeze notification, 0000000000000000 [ 55.581472][ T45] usb 7-1: device descriptor read/64, error -71 [ 55.597331][ T711] FAULT_INJECTION: forcing a failure. [ 55.597331][ T711] name failslab, interval 1, probability 0, space 0, times 0 [ 55.610153][ T711] CPU: 0 UID: 0 PID: 711 Comm: syz.4.154 Not tainted syzkaller #0 59fd58dbf897e2c8ba33f91efbb53ce34092dff9 [ 55.610176][ T711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.610187][ T711] Call Trace: [ 55.610192][ T711] [ 55.610198][ T711] __dump_stack+0x21/0x30 [ 55.610226][ T711] dump_stack_lvl+0x140/0x1c0 [ 55.610249][ T711] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.610275][ T711] dump_stack+0x19/0x20 [ 55.610297][ T711] should_fail_ex+0x3c2/0x510 [ 55.610318][ T711] should_failslab+0xac/0x100 [ 55.610342][ T711] kmem_cache_alloc_noprof+0x42/0x410 [ 55.610360][ T711] ? key_alloc+0x2ee/0x1060 [ 55.610384][ T711] ? key_user_lookup+0x263/0x4f0 [ 55.610411][ T711] key_alloc+0x2ee/0x1060 [ 55.610436][ T711] keyring_alloc+0x4b/0xc0 [ 55.610452][ T711] install_process_keyring_to_cred+0xa0/0x130 [ 55.610476][ T711] __se_sys_keyctl+0xb80/0xe40 [ 55.610497][ T711] ? __x64_sys_keyctl+0xf0/0xf0 [ 55.610518][ T711] ? __cfi_do_futex+0x10/0x10 [ 55.610540][ T711] ? mutex_unlock+0x90/0x240 [ 55.610561][ T711] ? __se_sys_futex+0x13c/0x320 [ 55.610583][ T711] ? __x64_sys_futex+0x110/0x110 [ 55.610607][ T711] ? __kasan_check_write+0x18/0x20 [ 55.610623][ T711] ? fpregs_restore_userregs+0x11c/0x260 [ 55.610644][ T711] __x64_sys_keyctl+0xc3/0xf0 [ 55.610664][ T711] x64_sys_call+0x996/0x2ee0 [ 55.610679][ T711] do_syscall_64+0x57/0xf0 [ 55.610694][ T711] ? clear_bhb_loop+0x50/0xa0 [ 55.610714][ T711] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.610734][ T711] RIP: 0033:0x7f909bf9e159 [ 55.610747][ T711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.610760][ T711] RSP: 002b:00007f909cdb3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 55.610777][ T711] RAX: ffffffffffffffda RBX: 00007f909c225fa0 RCX: 00007f909bf9e159 [ 55.610790][ T711] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 55.610799][ T711] RBP: 00007f909c03506b R08: 0000000000000000 R09: 0000000000000000 [ 55.610809][ T711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.610819][ T711] R13: 00007f909c226038 R14: 00007f909c225fa0 R15: 00007ffc94dbbf98 [ 55.610833][ T711] [ 55.861423][ T45] usb 7-1: device descriptor read/64, error -71 [ 55.946639][ T36] audit: type=1400 audit(1789677572.310:214): avc: denied { append } for pid=716 comm="syz.4.157" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.949171][ T717] capability: warning: `syz.4.157' uses 32-bit capabilities (legacy support in use) [ 56.055899][ T368] device offline error, dev sda, sector 1114470 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 56.066563][ T368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139308) [ 56.078552][ T368] Buffer I/O error on device sda1, logical block 139270 [ 56.085621][ T368] Buffer I/O error on device sda1, logical block 139271 [ 56.092749][ T368] device offline error, dev sda, sector 1114662 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 56.103474][ T368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139332) [ 56.111479][ T45] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 56.115927][ T368] Buffer I/O error on device sda1, logical block 139294 [ 56.130292][ T368] device offline error, dev sda, sector 1114742 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 56.141450][ T368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139342) [ 56.153398][ T368] Buffer I/O error on device sda1, logical block 139304 [ 56.160463][ T368] device offline error, dev sda, sector 1116030 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 56.174209][ T368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139503) [ 56.186478][ T368] Buffer I/O error on device sda1, logical block 139465 [ 56.195639][ T368] device offline error, dev sda, sector 1116502 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 56.206423][ T368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139562) [ 56.218688][ T368] Buffer I/O error on device sda1, logical block 139524 [ 56.225922][ T368] device offline error, dev sda, sector 1130806 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 56.236604][ T368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2027 starting block 141350) [ 56.248574][ T368] Buffer I/O error on device sda1, logical block 141312 [ 56.255783][ T368] device offline error, dev sda, sector 1134902 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 56.266472][ T368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2029 starting block 141862) [ 56.278897][ T368] Buffer I/O error on device sda1, logical block 141824 [ 56.281529][ T45] usb 7-1: device descriptor read/64, error -71 [ 56.286718][ T368] device offline error, dev sda, sector 1138998 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 56.303000][ T368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2031 starting block 142374) [ 56.314762][ T368] Buffer I/O error on device sda1, logical block 142336 [ 56.321964][ T368] device offline error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 56.332644][ T368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 143398) [ 56.344519][ T368] Buffer I/O error on device sda1, logical block 143360 [ 56.351600][ T368] device offline error, dev sda, sector 1155374 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 56.362297][ T368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 144421) [ 56.375343][ T727] Buffer I/O error on dev sda1, logical block 133, lost async page write [ 56.386419][ T74] Aborting journal on device sda1-8. [ 56.391875][ T74] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 56.400694][ T727] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 56.409225][ T74] JBD2: I/O error when updating journal superblock for sda1-8. [ 56.416982][ T727] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 56.425548][ T727] Buffer I/O error on dev sda1, logical block 221, lost async page write [ 56.434188][ T727] Buffer I/O error on dev sda1, logical block 273, lost async page write [ 56.443030][ T727] Buffer I/O error on dev sda1, logical block 657, lost async page write [ 56.452207][ T727] Buffer I/O error on dev sda1, logical block 4241, lost async page write [ 56.460848][ T727] Buffer I/O error on dev sda1, logical block 4247, lost async page write [ 56.469667][ T727] Buffer I/O error on dev sda1, logical block 33795, lost async page write [ 56.481292][ T726] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.4.162: Detected aborted journal [ 56.492655][ T726] EXT4-fs (sda1): I/O error while writing superblock [ 56.499369][ T726] EXT4-fs (sda1): Remounting filesystem read-only [ 56.551431][ T45] usb 7-1: device descriptor read/64, error -71 [ 56.558947][ T727] sd 0:0:1:0: [sda] Synchronizing SCSI cache SYZFAIL: SIGBUS pc-offset:0xfffffffffffe334d pc:0x7f73672701e3 addr:0x7f73621ffffc code=2 (errno 11: Resource temporarily unavailable) [ 56.661584][ T45] usb usb7-port1: attempt power cycle [ 56.731384][ T36] audit: type=1400 audit(1789677573.080:215): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1653]" dev="pipefs" ino=1653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 56.931478][ T368] bridge_slave_1: left allmulticast mode [ 56.937203][ T368] bridge_slave_1: left promiscuous mode [ 56.950703][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.958552][ T368] bridge_slave_0: left allmulticast mode [ 56.971501][ T368] bridge_slave_0: left promiscuous mode [ 56.977225][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.987438][ T31] usb 6-1: USB disconnect, device number 3 [ 57.103926][ T368] veth1_macvtap: left promiscuous mode [ 57.109474][ T368] veth0_vlan: left promiscuous mode [ 57.272937][ T368] ------------[ cut here ]------------ [ 57.278454][ T368] WARNING: CPU: 0 PID: 368 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 57.288516][ T368] Modules linked in: [ 57.292511][ T368] CPU: 0 UID: 0 PID: 368 Comm: kworker/u8:16 Not tainted syzkaller #0 59fd58dbf897e2c8ba33f91efbb53ce34092dff9 [ 57.304278][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.314387][ T368] Workqueue: netns cleanup_net [ 57.319176][ T368] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 57.325255][ T368] Code: e8 71 88 d5 fc 4b 83 3c 3e 00 75 19 e8 e5 a4 7c fc 49 81 ff f8 07 00 00 74 1b e8 d7 a4 7c fc 49 83 c7 08 eb c9 e8 cc a4 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 57.345001][ T368] RSP: 0018:ffffc9000c12fb90 EFLAGS: 00010293 [ 57.351074][ T368] RAX: ffffffff850ad5a4 RBX: ffff8881312511c0 RCX: ffff888117409300 [ 57.359111][ T368] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104b0c018 [ 57.367171][ T368] RBP: ffffc9000c12fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 57.375229][ T368] R10: dffffc0000000000 R11: fffff52001825f04 R12: dffffc0000000000 [ 57.383260][ T368] R13: dffffc0000000000 R14: ffff888104b0c000 R15: 0000000000000018 [ 57.391249][ T368] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 57.400257][ T368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.406902][ T368] CR2: 000055d477b73af8 CR3: 000000010cb9a000 CR4: 00000000003526b0 [ 57.414979][ T368] Call Trace: [ 57.418298][ T368] [ 57.421229][ T368] cleanup_net+0x6bd/0xc90 [ 57.425690][ T368] ? __cfi_cleanup_net+0x10/0x10 [ 57.430648][ T368] ? kick_pool+0xb9/0x540 [ 57.435045][ T368] process_scheduled_works+0x7f4/0x1060 [ 57.440621][ T368] worker_thread+0xc99/0x13f0 [ 57.445363][ T368] kthread+0x2c4/0x360 [ 57.449457][ T368] ? __cfi_worker_thread+0x10/0x10 [ 57.454607][ T368] ? __cfi_kthread+0x10/0x10 [ 57.459221][ T368] ret_from_fork+0x64/0xa0 [ 57.463674][ T368] ? __cfi_kthread+0x10/0x10 [ 57.468287][ T368] ret_from_fork_asm+0x1a/0x30 [ 57.473105][ T368] [ 57.476150][ T368] ---[ end trace 0000000000000000 ]--- [ 57.482058][ T368] ------------[ cut here ]------------ [ 57.487507][ T368] WARNING: CPU: 0 PID: 368 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 57.497619][ T368] Modules linked in: [ 57.501562][ T368] CPU: 0 UID: 0 PID: 368 Comm: kworker/u8:16 Tainted: G W syzkaller #0 59fd58dbf897e2c8ba33f91efbb53ce34092dff9 [ 57.514809][ T368] Tainted: [W]=WARN [ 57.518637][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.528737][ T368] Workqueue: netns cleanup_net [ 57.533567][ T368] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 57.539650][ T368] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 90 a4 7c fc 49 81 ff f8 07 00 00 74 1b e8 82 a4 7c fc 49 83 c7 08 eb c5 e8 77 a4 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 67 a4 7c fc 5b 41 5c 41 5e 41 [ 57.559298][ T368] RSP: 0018:ffffc9000c12fb90 EFLAGS: 00010293 [ 57.565421][ T368] RAX: ffffffff850ad5f9 RBX: ffff888104b0c800 RCX: ffff888117409300 [ 57.573440][ T368] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104b0c810 [ 57.581461][ T368] RBP: ffffc9000c12fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 57.589504][ T368] R10: dffffc0000000000 R11: fffff52001825f04 R12: dffffc0000000000 [ 57.597534][ T368] R13: dffffc0000000000 R14: ffff888104b0c000 R15: 0000000000000010 [ 57.605562][ T368] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 57.614545][ T368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.621147][ T368] CR2: 000055d477b73af8 CR3: 000000010cb9a000 CR4: 00000000003526b0 [ 57.629183][ T368] Call Trace: [ 57.632491][ T368] [ 57.635426][ T368] cleanup_net+0x6bd/0xc90 [ 57.639860][ T368] ? __cfi_cleanup_net+0x10/0x10 [ 57.644836][ T368] ? kick_pool+0xb9/0x540 [ 57.649193][ T368] process_scheduled_works+0x7f4/0x1060 [ 57.654792][ T368] worker_thread+0xc99/0x13f0 [ 57.659511][ T368] kthread+0x2c4/0x360 [ 57.663640][ T368] ? __cfi_worker_thread+0x10/0x10 [ 57.668777][ T368] ? __cfi_kthread+0x10/0x10 [ 57.673419][ T368] ret_from_fork+0x64/0xa0 [ 57.677867][ T368] ? __cfi_kthread+0x10/0x10 [ 57.682510][ T368] ret_from_fork_asm+0x1a/0x30 [ 57.687317][ T368] [ 57.690337][ T368] ---[ end trace 0000000000000000 ]--- [ 57.698803][ T368] ------------[ cut here ]------------ [ 57.704283][ T368] WARNING: CPU: 0 PID: 368 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 57.713792][ T368] Modules linked in: [ 57.717709][ T368] CPU: 0 UID: 0 PID: 368 Comm: kworker/u8:16 Tainted: G W syzkaller #0 59fd58dbf897e2c8ba33f91efbb53ce34092dff9 [ 57.730947][ T368] Tainted: [W]=WARN [ 57.734785][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.744890][ T368] Workqueue: netns cleanup_net [ 57.749714][ T368] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 57.755314][ T368] Code: 3c 20 00 74 08 48 89 df e8 8f 46 f0 fc 48 8b 3b e8 d7 36 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 62 97 fc <0f> 0b e9 b0 fd ff ff e8 e6 62 97 fc 0f 0b e9 18 fe ff ff e8 da 62 [ 57.774977][ T368] RSP: 0018:ffffc9000c12fb70 EFLAGS: 00010293 [ 57.781076][ T368] RAX: ffffffff84f0177e RBX: ffff8881312511c0 RCX: ffff888117409300 [ 57.789218][ T368] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888117409300 [ 57.797236][ T368] RBP: ffffc9000c12fb98 R08: ffffffff87d43f07 R09: 1ffffffff0fa87e0 [ 57.805271][ T368] R10: dffffc0000000000 R11: fffffbfff0fa87e1 R12: 1ffffffff0fa8534 [ 57.813290][ T368] R13: dffffc0000000000 R14: ffff888131251dc0 R15: dffffc0000000000 [ 57.821264][ T368] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 57.830350][ T368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.837028][ T368] CR2: 000055d477b73af8 CR3: 000000010cb9a000 CR4: 00000000003526b0 [ 57.845077][ T368] Call Trace: [ 57.848381][ T368] [ 57.851320][ T368] xfrm_net_exit+0x31/0x80 [ 57.855810][ T368] cleanup_net+0x6bd/0xc90 [ 57.860240][ T368] ? __cfi_cleanup_net+0x10/0x10 [ 57.865232][ T368] ? kick_pool+0xb9/0x540 [ 57.869593][ T368] process_scheduled_works+0x7f4/0x1060 [ 57.875178][ T368] worker_thread+0xc99/0x13f0 [ 57.879870][ T368] kthread+0x2c4/0x360 [ 57.883990][ T368] ? __cfi_worker_thread+0x10/0x10 [ 57.889135][ T368] ? __cfi_kthread+0x10/0x10 [ 57.893763][ T368] ret_from_fork+0x64/0xa0 [ 57.898210][ T368] ? __cfi_kthread+0x10/0x10 [ 57.902858][ T368] ret_from_fork_asm+0x1a/0x30 [ 57.907642][ T368] [ 57.910662][ T368] ---[ end trace 0000000000000000 ]--- [ 57.956229][ T368] bridge_slave_1: left allmulticast mode [ 57.961926][ T368] bridge_slave_1: left promiscuous mode [ 57.967551][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.975224][ T368] bridge_slave_0: left allmulticast mode [ 57.980868][ T368] bridge_slave_0: left promiscuous mode [ 57.986658][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.994364][ T368] bridge_slave_1: left allmulticast mode [ 58.000024][ T368] bridge_slave_1: left promiscuous mode [ 58.005715][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.013186][ T368] bridge_slave_0: left allmulticast mode [ 58.018832][ T368] bridge_slave_0: left promiscuous mode [ 58.024536][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.032261][ T368] bridge_slave_1: left allmulticast mode [ 58.037899][ T368] bridge_slave_1: left promiscuous mode [ 58.043582][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.051122][ T368] bridge_slave_0: left allmulticast mode [ 58.056874][ T368] bridge_slave_0: left promiscuous mode [ 58.062540][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.306486][ T368] veth1_macvtap: left promiscuous mode [ 58.312032][ T368] veth0_vlan: left promiscuous mode [ 58.317570][ T368] veth1_macvtap: left promiscuous mode [ 58.323213][ T368] veth0_vlan: left promiscuous mode [ 58.328763][ T368] veth1_macvtap: left promiscuous mode [ 58.334311][ T368] veth0_vlan: left promiscuous mode