last executing test programs: 38.736740591s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfd000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f00005a3000/0x400000)=nil) syz_kvm_add_vcpu$x86(r8, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r10, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r9) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x48) splice(r0, 0x0, r9, 0x0, 0x3000, 0x100000000000000d) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r11, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e22, @loopback}}) 38.359522212s ago: executing program 2 (id=9): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7ffffffffffffffd]}, 0x8, 0x80000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000440)="ee26f5239a9499d5aced6e21b05d9a64e8f7ad774e26246ed81f3bbbfe7a11262df2888c8783b4d0a2d084ad856a1c6150a8bffd3ca362306d88e7793e6c89edd2cb599724752c0c04c8a55b4d2d040b1cde159f92d3f388ea223357c951b6bfbc8fdbeeb8f116a7a3b79b2efc0430c93738064cf32a94991df4b69686fd74c97c12c20cdbd919b83828703ff0f5ed05080c63c8b5345c03b4f0e6fbd5483e4e0ce5554a5b972500ae2bd34d2b57ab7837c703556f1e09f1e60032581cc0f59ab3b64e8e7dfb6793878cfe4038318241a7ea5e598d44aa1371b49a916b72916b2b49", 0xe2, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r3, 0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r4, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7ffffffffffffffd]}, 0x8, 0x80000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000440)="ee26f5239a9499d5aced6e21b05d9a64e8f7ad774e26246ed81f3bbbfe7a11262df2888c8783b4d0a2d084ad856a1c6150a8bffd3ca362306d88e7793e6c89edd2cb599724752c0c04c8a55b4d2d040b1cde159f92d3f388ea223357c951b6bfbc8fdbeeb8f116a7a3b79b2efc0430c93738064cf32a94991df4b69686fd74c97c12c20cdbd919b83828703ff0f5ed05080c63c8b5345c03b4f0e6fbd5483e4e0ce5554a5b972500ae2bd34d2b57ab7837c703556f1e09f1e60032581cc0f59ab3b64e8e7dfb6793878cfe4038318241a7ea5e598d44aa1371b49a916b72916b2b49", 0xe2, 0xfffffffffffffffc) (async) keyctl$set_timeout(0xf, r3, 0x7) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 31.112706998s ago: executing program 1 (id=44): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/gre0/threaded\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'tunl0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000440)={'gre0\x00', 0x1}) socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x2f) sendto$inet(r3, &(0x7f0000000540)="000008004500001400004000400000007f0000017f000001", 0x18, 0x0, &(0x7f0000000600)={0x2, 0x0, @loopback}, 0x10) 31.112191128s ago: executing program 1 (id=45): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) (async) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01", 0x1) close(r2) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4001010) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x11) (async) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000040)={0x3000, 0xffffffff, 0x6, 0x0, 0x80, "7f58d6b86847e78c7608d7f99f75deba4353ad", 0x5, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r7, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}]}, 0x34}}, 0x404c890) (async) r8 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r8, 0x0, 0x0) (async) write$selinux_context(r8, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 31.068210719s ago: executing program 1 (id=46): mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x112041, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x80106725, &(0x7f00000000c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@private1, 0xffff8000, 0x0, 0x2, 0x8, 0x8, 0x1}, 0x20) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) 31.049285929s ago: executing program 1 (id=47): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f0000000280)='fuse\x00', 0x0) (async) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x80) (async) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000600)="9745010000004000012c8cc5", 0xc}, {&(0x7f0000000000)="82f750e625d3c8", 0x7}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0xc8d0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x109440, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4112, 0x1010}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/75, 0x4b}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) (async) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001480), 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_vlan\x00'}) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='f2fs\x00', 0x500020, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[]) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0x7f, 0x3, 0x27, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1d, 0x8, 0x6f0, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836"}]}, 0x138}, 0x1, 0x7}, 0x4000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') write(r2, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000180)={0x1f, @none}, 0x8) 30.973574591s ago: executing program 1 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfd000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f00005a3000/0x400000)=nil) syz_kvm_add_vcpu$x86(r8, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r10, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r9) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x48) splice(r0, 0x0, r9, 0x0, 0x3000, 0x100000000000000d) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r11, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e22, @loopback}}) 30.632441492s ago: executing program 1 (id=49): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x9, 0x4, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x66, 0x0, 0x2, 0x2f, 0x0, @broadcast, @private=0xa010100}}}}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="18", 0x48, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r2, 0x1, 0xfd, 0x6, @multicast}, 0x14) r3 = socket(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x2000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') fstat(r5, &(0x7f0000000780)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='/dev/uinput\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='/dev/uinput\x00') ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) setsockopt$sock_int(r4, 0x1, 0x4a, &(0x7f0000001600)=0xfffffffe, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000400000014000100ff01000000000000000000000000000115000680bf74a7dffd"], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f147f000800000904000a000000000009000000000000004c780001a198", 0x24) 23.292950989s ago: executing program 32 (id=9): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7ffffffffffffffd]}, 0x8, 0x80000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000440)="ee26f5239a9499d5aced6e21b05d9a64e8f7ad774e26246ed81f3bbbfe7a11262df2888c8783b4d0a2d084ad856a1c6150a8bffd3ca362306d88e7793e6c89edd2cb599724752c0c04c8a55b4d2d040b1cde159f92d3f388ea223357c951b6bfbc8fdbeeb8f116a7a3b79b2efc0430c93738064cf32a94991df4b69686fd74c97c12c20cdbd919b83828703ff0f5ed05080c63c8b5345c03b4f0e6fbd5483e4e0ce5554a5b972500ae2bd34d2b57ab7837c703556f1e09f1e60032581cc0f59ab3b64e8e7dfb6793878cfe4038318241a7ea5e598d44aa1371b49a916b72916b2b49", 0xe2, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r3, 0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r4, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7ffffffffffffffd]}, 0x8, 0x80000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000440)="ee26f5239a9499d5aced6e21b05d9a64e8f7ad774e26246ed81f3bbbfe7a11262df2888c8783b4d0a2d084ad856a1c6150a8bffd3ca362306d88e7793e6c89edd2cb599724752c0c04c8a55b4d2d040b1cde159f92d3f388ea223357c951b6bfbc8fdbeeb8f116a7a3b79b2efc0430c93738064cf32a94991df4b69686fd74c97c12c20cdbd919b83828703ff0f5ed05080c63c8b5345c03b4f0e6fbd5483e4e0ce5554a5b972500ae2bd34d2b57ab7837c703556f1e09f1e60032581cc0f59ab3b64e8e7dfb6793878cfe4038318241a7ea5e598d44aa1371b49a916b72916b2b49", 0xe2, 0xfffffffffffffffc) (async) keyctl$set_timeout(0xf, r3, 0x7) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 15.51153562s ago: executing program 33 (id=49): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x9, 0x4, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x66, 0x0, 0x2, 0x2f, 0x0, @broadcast, @private=0xa010100}}}}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="18", 0x48, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r2, 0x1, 0xfd, 0x6, @multicast}, 0x14) r3 = socket(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x2000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') fstat(r5, &(0x7f0000000780)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='/dev/uinput\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='/dev/uinput\x00') ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) setsockopt$sock_int(r4, 0x1, 0x4a, &(0x7f0000001600)=0xfffffffe, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000400000014000100ff01000000000000000000000000000115000680bf74a7dffd"], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f147f000800000904000a000000000009000000000000004c780001a198", 0x24) 7.046657272s ago: executing program 5 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/gre0/threaded\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'tunl0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000440)={'gre0\x00', 0x1}) socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x2f) sendto$inet(r3, &(0x7f0000000540)="000008004500001400004000400000007f0000017f000001", 0x18, 0x0, &(0x7f0000000600)={0x2, 0x0, @loopback}, 0x10) 6.989188873s ago: executing program 5 (id=198): r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x2, 0x0, 0x1, 0x0, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0x15, 0x4, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.835918867s ago: executing program 5 (id=199): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40041, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b80500000036f2ab0f01d9660f78c4020ab9800000c00f3235000400000f30b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x5b}], 0x1, 0x3, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x80000008, 0x100, 0x0, 0x4, 0x7, 0x1, 0xffffffff}]}) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_script(r4, &(0x7f0000000040), 0x4) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)=ANY=[@ANYBLOB="201800001000010003000000fedbdf250c000000100000000000000004001180ff170e80f914d5"], 0x1820}], 0x1}, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000146000/0x2000)=nil, 0x2000, 0xb, 0x28011, r4, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) lseek(r4, 0x0, 0x4) 6.734854931s ago: executing program 5 (id=200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000b00)) ioctl$KVM_CAP_HYPERV_SEND_IPI(r1, 0x4068aea3, &(0x7f0000000180)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x80000001}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000200)={'veth0_macvtap\x00', 0x800}) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000001440), 0x0, 0x0, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.645433063s ago: executing program 5 (id=201): landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x4b2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x158}}}, &(0x7f0000000480)=0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12ff5002000000ff6a1ffaeee5c9e8a11d010902240001010080000904fe0c010301030809210a001101222d0509058103400001030f"], &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x6, 0x4, 0x29, 0xff, 0x9}, 0xc5, &(0x7f0000000500)={0x5, 0xf, 0xc5, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x4, 0x3, 0x1, 0x81}, @generic={0x6, 0x10, 0x4, "32a2ab"}, @ss_container_id={0x14, 0x10, 0x4, 0xf2, "33c5648d963cfd191df93cbbfb0f682e"}, @generic={0x7d, 0x10, 0x2, "2e91d92149e2dae845dc140ac5f90002d77adfff49ddd2af960c1248ed02d0bb715fc189ac314ffa36336467edb77256611c81de9a4ef7e4dc7ecf3c0122ec72278e017b24290b7ff83746db5c612cbcd9f37ba80f5dcdfa5924c5e600fd0d0be35675e1a2339c832d6d5223b9be04ac32606fbc2fdd4871a2fd"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x0, 0x8, 0x44a}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "78aba0ae85645cc0c40095555b84c7f8"}]}, 0x2, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x80a}}, {0xb6, &(0x7f0000000640)=@string={0xb6, 0x3, "fe65662b3f8cf2887325d5c12a97880b1a3e125785b0f5fc0513ff16b00beb9517f650aaa897d6d927672ba49ede21a4598fc336a86877709a8a98fbd2d981ed67e39fc5c2493ff32fb37b332a6e3a94d1d4c05446337d11bf7aaba20a0965010b27d94302e01937bf86358027b951b5d6cb89a5e5813fc7c3f81323f01514e87c70388d0f04ab28862db0a0a4df2d01d77731bfd44cf61344a408412aa7ae3fbb1af7c06dca6629fb565a7a1cc533492587b4ba"}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000140)={0x0, 0x8346, 0x3000, 0x3, 0x252, 0x0, r4}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r1, '\x00', {0xfff5, 0x448, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 3.667113161s ago: executing program 5 (id=228): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f000033a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000009c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "ce86261b", {0x3, 0x1, 0x0, 0x96, 0x8343, 0xaa, 0x5}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x20, 0x13, 0x6, "aec05baeb463"}, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000e00)={0x2c, &(0x7f0000000c80)={0x0, 0x3, 0x3, "149c33"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYRES64=r1], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0xa, 0xe7, {0xe7, 0xb, "a0b7aafbd2a955d35ca1bdd0e20ab38cd243a2f85ec9d58f61081371c15174cda76fd37a2e0209a1280a34c8c1a12baf722e7bc66383a35cf866f5856eee97de7189ee6a058e992f90ce574002146c62c8ab52305d8104a51a8b1b142b343116534076ab5079e0cd76c369f29caf769407dd1bffbe33af8df092994701b0e5ead50f5f106941433b9869a11b27dade9f4b99ed2c6bce29b5ec278fb28534b54cf700723eb9148302e2d78ee30b3b95f6f914995b7c5e9d1a02bb583baea2b2ac50515c267a9447103c23ed780d7a11035626e03795f3bebe0132164d20247d2def4aee4664"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, &(0x7f0000000b40)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x13, 0x9, 0x9, 0x5}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x8000, 0xf000, 0xfffe, [0x0, 0xff00cf, 0x3e8f, 0xf]}, @ssp_cap={0x1c, 0x10, 0xa, 0x5d, 0x4, 0x3, 0xf, 0x0, [0xc000, 0xff0000, 0x0, 0xff0000]}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x3, 0x6, 0x2, "2bb6675f", "8c882288"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x2, 0x9, 0x6, 0x3c, 0xd, 0x9}}}, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x20, 0x6, 0x78, "2ad97bbd4996aa749e2b8a7ba74916b8b9a31cd20d631fabbdb75054f4540e06cf261acdfdab8328eee7c935ae79026d94fc95df3ba7e6a0faf810db96223c8e13d1a952351144a7783d6a3cb8cb0f1de041fb335075c71f09dd5c7b4f8cc2d1994c25834b6821939a30831ab73ddf40fb4a542412895ac9"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1000, 0x8}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0xfe00}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0xb, 0x2, "f0a5"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x13, 0x6}, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "f6d0"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x10}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.434479418s ago: executing program 0 (id=244): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffff"], 0x62) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r6, 0x1f5}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) 1.411232988s ago: executing program 0 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)='tracefs\x00', 0x1, &(0x7f0000000380)='gid=1\x00nk]e') (async) read$FUSE(r1, &(0x7f00000061c0)={0x2020}, 0x2020) 1.34937097s ago: executing program 0 (id=246): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000001100)=""/4099, &(0x7f00000010c0)=0x1003) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x8000000000000000, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x3, 0x4, 0x100000004, 0xcc78, 0x200001, 0x8000000000005, 0x1000], 0x8080000, 0x42590}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x0, 0x320}, 0x0, 0x0, 0x0) futex(&(0x7f00000000c0), 0x0, 0x1, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)=0x2, 0x2) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8971, &(0x7f0000000040)={'sit0\x00', 0x0}) 1.316873962s ago: executing program 3 (id=249): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendto(0xffffffffffffffff, &(0x7f0000000100)="ddf971f582", 0x5, 0x4000085, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb76000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb76000) 1.127260447s ago: executing program 3 (id=250): r0 = userfaultfd(0x1) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000240)={r4, 0xa, 0x2, r4}) (async) close_range(r1, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async, rerun: 32) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 951.728922ms ago: executing program 3 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/gre0/threaded\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'tunl0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000440)={'gre0\x00', 0x1}) socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x2f) sendto$inet(r3, &(0x7f0000000540)="000008004500001400004000400000007f0000017f000001", 0x18, 0x0, &(0x7f0000000600)={0x2, 0x0, @loopback}, 0x10) 936.437853ms ago: executing program 3 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x2342461, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x803, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x200000000622c, 0x0) getdents64(r0, &(0x7f0000000580)=""/1022, 0x3fe) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000005c0)={0x80, 0x6, 0x303, 0x8, 0x0, 0x951, 0x0}) openat(r0, &(0x7f0000000143), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x2342461, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) (async) pipe(&(0x7f0000000440)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r3) (async) socket(0x10, 0x803, 0x0) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) (async) splice(r1, 0x0, r3, 0x0, 0x200000000622c, 0x0) (async) getdents64(r0, &(0x7f0000000580)=""/1022, 0x3fe) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000005c0)={0x80, 0x6, 0x303, 0x8, 0x0, 0x951, 0x0}) (async) openat(r0, &(0x7f0000000143), 0x0, 0x0) (async) 881.546904ms ago: executing program 4 (id=254): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x10000000007) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="46f1400fc75d08b9800000c00f3235000800000f30c442f5984af3b9800000c00f3235004000000f30f2dd08440f01cab93d0b0000b8fffd0000ba000000000f30f3cd0864470f07", 0x48}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000940)={"879862f1b64358ed0c655d724876d98e58758000f3b9ae36e400c5bda6c5399c9cc9e753c7c59a0b8ef38561aed8817b8b6a7ce37f99c54b27164492e5d599b7020327998f1d0e9ab9ca7d40f154ecde247b2568ea6e458f53faec416d2169d22d3daa0f9bf6f90b8e374bec396dc2b60c596312dbeede336bebc9b4fa21f2a042dc47e39a820ad492b2352c14de39f685405ed0ca712ba9253ec6bddd2900459455ac9da0fe5c7285010880ccda54c864ab3d914cfc6267da52a833b59b809c25639a34d25221ee980c3357225e02281ff1f2088c0d4a1f07a65484cc26eded503c52c3f07eb18c954107ba97793fb5b0b4a43cde44be334996b59234fcf7663c0a59d0af1484efdb8e364abfb1ee277771c198777e1fffb8bb0ad5e6146bd8fe200f0dd271602c49dd517e5225e413e2908534edd88a557a4303ade836a09940d312ef694f173fb21f7e307ffbfa0000000000000064abf270c97901b86c17635fd7afee11a76453f9e8c873eac8e4fef5f3b494c4fb6bd391fabb0748a1021fd57a12c2dc8f7e633aa7eae4bdb56e0a699ae13cd03ac272b6af2f60fced115f4709202046ea7f60f9b1b37660c4049ddda94302509e777a3d53b7cafd1f5476e0aa21e54cf38a84254f7feeb1c1ab22c83e7532d9601f5819d8511cd36bf0716430583f608a9998172d1881dcead5f0f48b8cd5b7fb312f2ded010a2439ebd846f1d4b03b7c7b39b0e683479d568a69db86f44f55fbea9fc74f488c2d3991ad37738560a60f2918dc2feb1d9aec4b9c6a617059e4ad93915fadd6f6b384a8b914be9af113a121f2784ad5ad35a52832a2c4c832c23d23a41091c6a65889547e3c9b6aab293648abb72d703e3a5408e04ab39f75891c2425fde67ea31bd4544f7ad8734e590f22811823df2db6ff4d53476e092fd0764849e07b983fd09bdae92fd1855082608dbc5ff71d51cace1a4e0957a516195178b6ace5eb203816d15d00f08431e0840a6243f24ee87a9d6230bec445a4ef20853db951630a8e8ffba1a8099c45fc4a9bc9fd6c3506b9ddf5df5ee60c1d1935984db73e9e549f435769b4b36850819634bfc0ba87fda98b09828d9e6ad2bc19da6afc58b3894d78fddb624609a76ea3cc5953267ffe73c5485125c0b6ad1e37a5b5142c014d1e06ad37296cc6dbf663692bb0b70ff51e186aa1282511ce0680206ce79450a9148661aa405d225dcb9b9b8c6df52d7d5caa787e9b9775f4947fef9160391cc3db38d46262a6799f41ea2b8cd73e7ee4775ed889074b0c74ef3e15ce5040216536d75946102967c71069123bd9567560224c85b42d52fd86d8f9d5bde1327926b945b6ac4bc9e786777f44e91d15c751b584482d4b579b5c9b01000000bd37abd08621336e83c0e4a43621c0fc9a00"}) fchdir(r1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='6']) chroot(&(0x7f00000002c0)='./file0\x00') read$FUSE(r8, &(0x7f0000003ec0)={0x2020}, 0x2020) 825.979336ms ago: executing program 4 (id=255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x0, 0x6, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x80000008, 0x0, 0x50b587c594754759, 0x2, 0x20007ffd, 0xff7ffffd, 0x80000000}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="6ad1ba6c4ce428c1b1a9daf2c6a5521a0a31d130115055df0156d1a864e71d946b2b3324c6fb24be7e699d8e13ee0da534bbc977fe3e0a1d8e312aaabc8abb42cc3a72ded6c396b1802cd0313801492010c65037a72585a577ea4ee80025bb9a86e758ba9a54620317483781f9a0592153293688145fd9fcbfd373440f14cba4efabc53c9813152bbc55ae31c40b5f3924aef49814caf3fb317d3b23e52e192ff2548a449e43cda033c27c660bc27bcf1352c909d15bd9bc9af511721dc143956827b232dfe8d4aabc8996d02119ab2874ce1c0314dca7a0ef74f3d57c87e962b33fed34", 0xe4, 0x40800, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10) 716.980969ms ago: executing program 4 (id=256): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'bond_slave_0\x00', {0xffffa0a9}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e) getsockopt(r0, 0x111, 0x4, 0x0, &(0x7f0000000040)) 629.570292ms ago: executing program 4 (id=257): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x5, 0x2}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x4000811) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0xa, 0x0, 0x3, 0xa], 0x41000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 583.807663ms ago: executing program 4 (id=258): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) pipe2(&(0x7f0000000000), 0x800) 567.378073ms ago: executing program 4 (id=259): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000007000/0x3000)=nil, 0x3000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)='\x00') (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='sys/bus/pci/drivers/dwc3-pci/new_id\x00', 0x1, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x0}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000540)) (async) syz_usb_ep_write(r2, 0x81, 0x49, &(0x7f0000000080)="b9425b4465000000119f00000055f36489a04f075a00000000f40000000000000000000039a0cfe6f3fdf05ecc6e4b33a8838009d4c2bfaea8caa22aece3ef0c0a45ef2b7dd0b201d8") (async) write(r1, &(0x7f00000001c0)='1234 5678\n\x00', 0xa) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x4000}, {0xffffffffffffffff, 0x9124}, {r1, 0x1000}], 0x3, &(0x7f0000000240)={r3, r4+60000000}, &(0x7f0000000280)={[0x6]}, 0x8) (async) close(r1) (async) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000002, 0x2172, 0xffffffffffffffff, 0x0) 436.808768ms ago: executing program 0 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) lsetxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000180)=@known='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) finit_module(r4, &(0x7f00000000c0)='trusted.overlay.nlink\x00', 0x3) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="f00000002800d5e49501000000000000001000e0000002000000000000000000000000fce42854fc45e5a90000000000000000000000000000010000000000000000190020002f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000ffffffff000000000000000000000000000000001000000000000000000000000008000000000000000000000000000000000000010000000900000000000000000000000a0000040000000000000000"], 0xf0}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000009b80), 0x149202, 0x0) ioctl$FICLONE(r0, 0x80811501, 0xffffffffffffffff) 436.428977ms ago: executing program 0 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'tunl0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000440)={'gre0\x00', 0x1}) socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x2f) sendto$inet(r3, &(0x7f0000000540)="000008004500001400004000400000007f0000017f000001", 0x18, 0x0, &(0x7f0000000600)={0x2, 0x0, @loopback}, 0x10) 373.252379ms ago: executing program 0 (id=262): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_ep_write(r0, 0x7f, 0xb, &(0x7f0000002380)="ee5571b372b7cfa241b1ce") socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8003200070100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00690b0000000b241b3f"], 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a95000/0x1000)=nil, 0x1000, 0x80000000e) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7, 0x2, 0x208, 0x3ff, 0x6, 0x3, 0x11, 0x4, 0x8000000000000000, 0x3ff, 0x0, 0x8, 0x2, 0x3, 0xffffffffffffffff], 0x0, 0x194d40}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001ff, 0x101000) ioctl$USBDEVFS_RESETEP(r7, 0x80045503, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="00edc6"], 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000002300)={0x3, 0x0, {[0x800000ffff, 0x5, 0x3, 0x1b8, 0x2, 0x2aa5, 0x8000000000000004, 0xa]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='d\x00+\x88\xfe\xf7\x01') mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) read$FUSE(r8, &(0x7f00000002c0)={0x2020}, 0x2020) 302.581092ms ago: executing program 34 (id=262): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_ep_write(r0, 0x7f, 0xb, &(0x7f0000002380)="ee5571b372b7cfa241b1ce") socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8003200070100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00690b0000000b241b3f"], 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a95000/0x1000)=nil, 0x1000, 0x80000000e) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7, 0x2, 0x208, 0x3ff, 0x6, 0x3, 0x11, 0x4, 0x8000000000000000, 0x3ff, 0x0, 0x8, 0x2, 0x3, 0xffffffffffffffff], 0x0, 0x194d40}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001ff, 0x101000) ioctl$USBDEVFS_RESETEP(r7, 0x80045503, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="00edc6"], 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000002300)={0x3, 0x0, {[0x800000ffff, 0x5, 0x3, 0x1b8, 0x2, 0x2aa5, 0x8000000000000004, 0xa]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='d\x00+\x88\xfe\xf7\x01') mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) read$FUSE(r8, &(0x7f00000002c0)={0x2020}, 0x2020) 86.856638ms ago: executing program 3 (id=264): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x1) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) (rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x3, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x4000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x233, 0x0, r3}}], 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000d50000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x24, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setuid(0xee00) (async) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/65) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x4000000) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async, rerun: 32) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x100000}, 0x1c) (rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r10 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r10, 0x13) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 28.824546][ T36] audit: type=1400 audit(1789034379.960:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.828325][ T286] cgroup: Unknown subsys name 'net' [ 28.847345][ T36] audit: type=1400 audit(1789034379.960:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.874699][ T36] audit: type=1400 audit(1789034379.990:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.875187][ T286] cgroup: Unknown subsys name 'devices' [ 29.000091][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.005737][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.102832][ T36] audit: type=1400 audit(1789034380.240:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.126081][ T36] audit: type=1400 audit(1789034380.240:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.150941][ T36] audit: type=1400 audit(1789034380.240:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.186371][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.195308][ T36] audit: type=1400 audit(1789034380.330:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.219514][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.220853][ T36] audit: type=1400 audit(1789034380.330:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.255236][ T36] audit: type=1400 audit(1789034380.350:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.280821][ T36] audit: type=1400 audit(1789034380.350:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.050317][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.064696][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.072049][ T293] bridge_slave_0: entered allmulticast mode [ 30.079549][ T293] bridge_slave_0: entered promiscuous mode [ 30.086254][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.093476][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.100762][ T293] bridge_slave_1: entered allmulticast mode [ 30.107185][ T293] bridge_slave_1: entered promiscuous mode [ 30.242603][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.249712][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.256777][ T297] bridge_slave_0: entered allmulticast mode [ 30.263317][ T297] bridge_slave_0: entered promiscuous mode [ 30.271320][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.278428][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.285690][ T297] bridge_slave_1: entered allmulticast mode [ 30.292048][ T297] bridge_slave_1: entered promiscuous mode [ 30.311421][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.318540][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.325623][ T298] bridge_slave_0: entered allmulticast mode [ 30.332014][ T298] bridge_slave_0: entered promiscuous mode [ 30.338635][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.345723][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.352882][ T298] bridge_slave_1: entered allmulticast mode [ 30.359225][ T298] bridge_slave_1: entered promiscuous mode [ 30.401187][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.408462][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.415662][ T299] bridge_slave_0: entered allmulticast mode [ 30.422125][ T299] bridge_slave_0: entered promiscuous mode [ 30.431734][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.438884][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.446013][ T299] bridge_slave_1: entered allmulticast mode [ 30.452402][ T299] bridge_slave_1: entered promiscuous mode [ 30.502395][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.509588][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.516939][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.524005][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.617544][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.624651][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.632005][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.639088][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.651867][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.658981][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.666310][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.673430][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.690962][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.698072][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.705371][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.712474][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.729543][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.736926][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.744413][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.752463][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.759794][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.767077][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.774587][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.781983][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.800281][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.807463][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.820386][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.827485][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.850810][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.857940][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.889350][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.896426][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.910395][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.917543][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.936120][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.943221][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.954430][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.961557][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.972804][ T293] veth0_vlan: entered promiscuous mode [ 30.979965][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.987044][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.007761][ T293] veth1_macvtap: entered promiscuous mode [ 31.023871][ T299] veth0_vlan: entered promiscuous mode [ 31.046815][ T297] veth0_vlan: entered promiscuous mode [ 31.057310][ T299] veth1_macvtap: entered promiscuous mode [ 31.081914][ T297] veth1_macvtap: entered promiscuous mode [ 31.098275][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.115392][ T298] veth0_vlan: entered promiscuous mode [ 31.155379][ T298] veth1_macvtap: entered promiscuous mode [ 31.203492][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.276676][ T330] tipc: Failed to remove unknown binding: 66,0,0/0:869190241/869190243 [ 31.285432][ T330] tipc: Failed to remove unknown binding: 66,0,0/0:869190241/869190242 [ 31.294351][ T330] tipc: Failed to remove unknown binding: 66,0,0/0:869190241/869190243 [ 31.303217][ T330] tipc: Failed to remove unknown binding: 66,0,0/0:869190241/869190242 [ 31.527607][ T313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.597662][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.687770][ T313] usb 4-1: Using ep0 maxpacket: 8 [ 31.694404][ T313] usb 4-1: config 1 interface 0 altsetting 254 bulk endpoint 0x1 has invalid maxpacket 16 [ 31.705028][ T313] usb 4-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 32 [ 31.715667][ T313] usb 4-1: config 1 interface 0 has no altsetting 0 [ 31.724278][ T313] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 31.735269][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.743740][ T313] usb 4-1: Product: syz [ 31.748335][ T313] usb 4-1: Manufacturer: syz [ 31.749075][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 31.753100][ T313] usb 4-1: SerialNumber: syz [ 31.764323][ T46] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 31.774153][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.776166][ T324] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 31.785224][ T46] usb 1-1: config 0 descriptor?? [ 31.794646][ T324] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 32.004103][ T337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.013941][ T337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.022999][ T313] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 254 proto 1 vid 0x04B8 pid 0x0202 [ 32.050151][ T313] usb 4-1: USB disconnect, device number 2 [ 32.060373][ T313] usblp0: removed [ 32.225228][ T46] acrux 0003:1A34:F705.0001: unknown main item tag 0x3 [ 32.252985][ T46] acrux 0003:1A34:F705.0001: No inputs registered, leaving [ 32.268361][ T46] acrux 0003:1A34:F705.0001: hidraw0: USB HID v0.00 Joystick [HID 1a34:f705] on usb-dummy_hcd.0-1/input0 [ 32.285104][ T46] acrux 0003:1A34:F705.0001: no inputs found [ 32.291499][ T46] acrux 0003:1A34:F705.0001: Failed to enable force feedback support, error: -19 [ 33.337560][ T313] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.489025][ T313] usb 2-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 33.498268][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.512030][ T313] ums-sddr55 2-1:1.0: USB Mass Storage device detected [ 33.528472][ T313] ums-sddr55 2-1:1.0: This device (55aa,a103,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 33.528472][ T313] Please send a copy of this message to and [ 33.554262][ T313] scsi host1: usb-storage 2-1:1.0 [ 33.712063][ T362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.721856][ T362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.366171][ T46] usb 1-1: USB disconnect, device number 2 [ 34.400792][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 34.400812][ T36] audit: type=1400 audit(1789034385.540:122): avc: denied { mmap_zero } for pid=367 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 34.608213][ T13] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR55 0000 PQ: 0 ANSI: 0 [ 34.822331][ T46] usb 2-1: USB disconnect, device number 2 [ 34.822839][ T309] sd 1:0:0:0: [sdb] Unit Not Ready [ 34.837256][ T309] sd 1:0:0:0: [sdb] Sense Key : 0x4 [current] [ 34.843621][ T309] sd 1:0:0:0: [sdb] ASC=0x0 ASCQ=0x0 [ 34.849677][ T309] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=DRIVER_OK [ 34.859700][ T309] sd 1:0:0:0: [sdb] Sense not available. [ 34.865514][ T309] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 34.876093][ T309] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 34.882118][ T309] sd 1:0:0:0: [sdb] Write Protect is off [ 34.888027][ T309] sd 1:0:0:0: [sdb] Asking for cache data failed [ 34.894468][ T309] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 34.906995][ T309] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 34.938746][ T328] udevd[328]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 34.973590][ T328] udevd[328]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 35.467147][ T36] audit: type=1400 audit(1789034386.600:123): avc: denied { create } for pid=383 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.517581][ T36] audit: type=1400 audit(1789034386.620:124): avc: denied { create } for pid=383 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.545561][ T36] audit: type=1400 audit(1789034386.620:125): avc: denied { bind } for pid=383 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.573638][ T36] audit: type=1400 audit(1789034386.630:126): avc: denied { ioctl } for pid=383 comm="syz.1.17" path="socket:[4407]" dev="sockfs" ino=4407 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.615159][ T393] random: crng reseeded on system resumption [ 35.622387][ T36] audit: type=1400 audit(1789034386.630:127): avc: denied { create } for pid=383 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.643564][ T36] audit: type=1400 audit(1789034386.630:128): avc: denied { create } for pid=383 comm="syz.1.17" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.664857][ T36] audit: type=1400 audit(1789034386.630:129): avc: denied { map } for pid=383 comm="syz.1.17" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.733737][ T395] capability: warning: `syz.0.19' uses 32-bit capabilities (legacy support in use) [ 35.744140][ T36] audit: type=1400 audit(1789034386.630:130): avc: denied { read write } for pid=383 comm="syz.1.17" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.807972][ T36] audit: type=1400 audit(1789034386.750:131): avc: denied { ioctl } for pid=390 comm="syz.3.20" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4435 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.888189][ T405] FAULT_INJECTION: forcing a failure. [ 35.888189][ T405] name failslab, interval 1, probability 0, space 0, times 1 [ 35.933061][ T405] CPU: 1 UID: 0 PID: 405 Comm: syz.0.22 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 35.933104][ T405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.933130][ T405] Call Trace: [ 35.933138][ T405] [ 35.933147][ T405] __dump_stack+0x21/0x30 [ 35.933195][ T405] dump_stack_lvl+0x140/0x1c0 [ 35.933230][ T405] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.933265][ T405] ? __cfi___futex_wait+0x10/0x10 [ 35.933290][ T405] dump_stack+0x19/0x20 [ 35.933333][ T405] should_fail_ex+0x3c2/0x510 [ 35.933365][ T405] ? kernfs_fop_write_iter+0x15e/0x510 [ 35.933404][ T405] should_failslab+0xac/0x100 [ 35.933435][ T405] __kmalloc_noprof+0x69/0x510 [ 35.933461][ T405] ? futex_wait+0x2b8/0x7c0 [ 35.933482][ T405] ? kernfs_fop_write_iter+0x15e/0x510 [ 35.933520][ T405] kernfs_fop_write_iter+0x15e/0x510 [ 35.933558][ T405] vfs_write+0x762/0xfd0 [ 35.933584][ T405] ? __cfi_vfs_write+0x10/0x10 [ 35.933610][ T405] ? __cfi_mutex_lock+0x10/0x10 [ 35.933642][ T405] ksys_write+0x145/0x260 [ 35.933667][ T405] ? xfd_validate_state+0x68/0x140 [ 35.933702][ T405] ? __cfi_ksys_write+0x10/0x10 [ 35.933728][ T405] ? __kasan_check_write+0x18/0x20 [ 35.933753][ T405] ? fpregs_restore_userregs+0x11c/0x260 [ 35.933785][ T405] __x64_sys_write+0x7f/0x90 [ 35.933811][ T405] x64_sys_call+0x271c/0x2ee0 [ 35.933834][ T405] do_syscall_64+0x57/0xf0 [ 35.933855][ T405] ? clear_bhb_loop+0x50/0xa0 [ 35.933886][ T405] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.933914][ T405] RIP: 0033:0x7f946079e159 [ 35.933941][ T405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.933961][ T405] RSP: 002b:00007f9461689028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 35.933996][ T405] RAX: ffffffffffffffda RBX: 00007f9460a25fa0 RCX: 00007f946079e159 [ 35.934015][ T405] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 35.934031][ T405] RBP: 00007f946083503b R08: 0000000000000000 R09: 0000000000000000 [ 35.934047][ T405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.934062][ T405] R13: 00007f9460a26038 R14: 00007f9460a25fa0 R15: 00007ffdd3a255c8 [ 35.934088][ T405] [ 36.632240][ T417] input: syz0 as /devices/virtual/input/input5 [ 36.777565][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.850303][ T427] : renamed from xfrm0 (while UP) [ 36.928027][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 36.938611][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.957588][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.975586][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 36.995168][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.005583][ T9] usb 1-1: config 0 descriptor?? [ 37.158166][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.172344][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.727599][ T445] ======================================================= [ 37.727599][ T445] WARNING: The mand mount option has been deprecated and [ 37.727599][ T445] and is ignored by this kernel. Remove the mand [ 37.727599][ T445] option from the mount to silence this warning. [ 37.727599][ T445] ======================================================= [ 37.770736][ T444] Zero length message leads to an empty skb [ 38.420280][ T463] netlink: 'syz.3.40': attribute type 2 has an invalid length. [ 38.815831][ T475] process 'syz.1.45' launched './file1' with NULL argv: empty string added [ 38.828752][ T476] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 39.557576][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 39.567595][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 39.588706][ T9] usb 1-1: USB disconnect, device number 3 [ 39.597314][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 39.597330][ T36] audit: type=1400 audit(1789034390.730:191): avc: denied { create } for pid=496 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.643194][ T36] audit: type=1400 audit(1789034390.770:192): avc: denied { connect } for pid=496 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.680902][ T36] audit: type=1400 audit(1789034390.780:193): avc: denied { write } for pid=496 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.784206][ T36] audit: type=1400 audit(1789034390.920:194): avc: denied { set_context_mgr } for pid=501 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 39.843327][ T36] audit: type=1400 audit(1789034390.940:195): avc: denied { map } for pid=501 comm="syz.0.53" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 39.892832][ T36] audit: type=1400 audit(1789034390.950:196): avc: denied { nlmsg_write } for pid=501 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.941078][ T36] audit: type=1400 audit(1789034390.950:197): avc: denied { call } for pid=501 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 39.978691][ T36] audit: type=1400 audit(1789034390.950:198): avc: denied { transfer } for pid=501 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 40.017301][ T36] audit: type=1400 audit(1789034391.080:199): avc: denied { lock } for pid=505 comm="syz.0.55" path="socket:[4886]" dev="sockfs" ino=4886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 40.357566][ T313] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 40.401284][ T512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 40.410126][ T36] audit: type=1400 audit(1789034391.540:200): avc: denied { setopt } for pid=511 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.453292][ T518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 40.528747][ T313] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 40.543675][ T313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 40.562068][ T313] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 40.587550][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.607680][ T313] usb 1-1: config 0 descriptor?? [ 40.627684][ T527] rust_binder: 524:527 no such ref 0 [ 40.648150][ T525] rust_binder: 524:525 got transaction to invalid handle 1 [ 40.655497][ T525] rust_binder: 524:525 transaction call to 0:0 failed ENOENT, code 0 size 72-24 [ 40.708405][ T46] rust_binder: 524: undelivered TRANSACTION_ERROR: 29201 [ 41.016845][ T313] kone 0003:1E7D:2CED.0003: invalid report_size 40643 [ 41.033889][ T313] kone 0003:1E7D:2CED.0003: item 0 2 1 7 parsing failed [ 41.047719][ T313] kone 0003:1E7D:2CED.0003: parse failed [ 41.063608][ T313] kone 0003:1E7D:2CED.0003: probe with driver kone failed with error -22 [ 42.087560][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 42.258624][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 42.277561][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.500666][ T46] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 42.752903][ T46] usb 4-1: USB disconnect, device number 3 [ 42.760065][ T538] cdc_acm 4-1:1.1: acm_start_wb - usb_submit_urb(write bulk) failed: -19 [ 42.999697][ T46] usb 1-1: USB disconnect, device number 4 [ 44.163605][ T568] rust_binder: Write failure EINVAL in pid:57 [ 44.163808][ T369] rust_binder: 567: undelivered TRANSACTION_COMPLETE [ 44.507587][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 44.637704][ T577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=577 comm=syz.3.74 [ 44.691923][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.717545][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.737583][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 44.746697][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.785497][ T9] usb 1-1: config 0 descriptor?? [ 45.392943][ T572] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 45.402364][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 45.402381][ T36] audit: type=1400 audit(1789034396.530:207): avc: denied { mounton } for pid=571 comm="syz.0.73" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 45.461173][ T9] usb 1-1: string descriptor 0 read error: -71 [ 45.480954][ T9] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 45.501104][ T9] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 45.521278][ T9] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 45.537601][ T9] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 45.555340][ T9] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 45.576988][ T9] usb 1-1: USB disconnect, device number 5 [ 46.768737][ T36] audit: type=1400 audit(1789034397.910:208): avc: denied { mounton } for pid=589 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.833618][ T45] bridge_slave_1: left allmulticast mode [ 46.839444][ T45] bridge_slave_1: left promiscuous mode [ 46.845123][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.857583][ T369] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 46.878096][ T45] bridge_slave_0: left allmulticast mode [ 46.883821][ T45] bridge_slave_0: left promiscuous mode [ 46.897623][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.030908][ T369] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 47.039211][ T369] usb 1-1: config 0 has no interface number 0 [ 47.055690][ T369] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 47.064880][ T369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.079867][ T369] usb 1-1: Product: syz [ 47.084214][ T45] veth1_macvtap: left promiscuous mode [ 47.087667][ T369] usb 1-1: Manufacturer: syz [ 47.093002][ T45] veth0_vlan: left promiscuous mode [ 47.094334][ T369] usb 1-1: SerialNumber: syz [ 47.107760][ T369] usb 1-1: config 0 descriptor?? [ 47.176306][ T589] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.191849][ T589] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.212968][ T589] bridge_slave_0: entered allmulticast mode [ 47.226510][ T589] bridge_slave_0: entered promiscuous mode [ 47.240638][ T589] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.257609][ T589] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.270178][ T589] bridge_slave_1: entered allmulticast mode [ 47.283735][ T589] bridge_slave_1: entered promiscuous mode [ 47.318054][ T369] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 47.337781][ T369] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 47.354501][ T369] asix 1-1:0.251: probe with driver asix failed with error -5 [ 47.428108][ T589] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.435342][ T589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.442662][ T589] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.449727][ T589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.520399][ T36] audit: type=1400 audit(1789034398.650:209): avc: denied { mount } for pid=586 comm="syz.0.76" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 47.544120][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.558683][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.568298][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.575407][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.577689][ T36] audit: type=1400 audit(1789034398.660:210): avc: denied { search } for pid=586 comm="syz.0.76" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.631141][ T600] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 47.649799][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.656950][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.677691][ T36] audit: type=1400 audit(1789034398.660:211): avc: denied { read } for pid=586 comm="syz.0.76" name="trace_pipe" dev="tracefs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 47.679909][ T600] EXT4-fs warning (device sda1): ext4_resize_fs:2019: can't read last block, resize aborted [ 47.712767][ T36] audit: type=1400 audit(1789034398.660:212): avc: denied { open } for pid=586 comm="syz.0.76" path="/22/mnt/trace_pipe" dev="tracefs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 47.736767][ T36] audit: type=1400 audit(1789034398.770:213): avc: denied { create } for pid=599 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.758118][ T36] audit: type=1400 audit(1789034398.770:214): avc: denied { connect } for pid=599 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.778195][ T36] audit: type=1400 audit(1789034398.770:215): avc: denied { mount } for pid=599 comm="syz.3.78" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.783210][ T589] veth0_vlan: entered promiscuous mode [ 47.813731][ T589] veth1_macvtap: entered promiscuous mode [ 47.838878][ T36] audit: type=1400 audit(1789034398.980:216): avc: denied { unmount } for pid=589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.891196][ T608] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.909348][ T608] FAULT_INJECTION: forcing a failure. [ 47.909348][ T608] name failslab, interval 1, probability 0, space 0, times 0 [ 47.922708][ T608] CPU: 0 UID: 0 PID: 608 Comm: syz.4.77 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 47.922747][ T608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.922762][ T608] Call Trace: [ 47.922770][ T608] [ 47.922779][ T608] __dump_stack+0x21/0x30 [ 47.922819][ T608] dump_stack_lvl+0x140/0x1c0 [ 47.922853][ T608] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.922887][ T608] ? number+0xc9d/0xf00 [ 47.922922][ T608] dump_stack+0x19/0x20 [ 47.922953][ T608] should_fail_ex+0x3c2/0x510 [ 47.922983][ T608] should_failslab+0xac/0x100 [ 47.923014][ T608] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 47.923040][ T608] ? vsnprintf+0x19ef/0x1ad0 [ 47.923072][ T608] ? __d_alloc+0x42/0x8c0 [ 47.923095][ T608] __d_alloc+0x42/0x8c0 [ 47.923117][ T608] d_alloc_parallel+0xe4/0x1370 [ 47.923142][ T608] ? __cfi_sprintf+0x10/0x10 [ 47.923177][ T608] ? __kmalloc_cache_noprof+0x23c/0x470 [ 47.923205][ T608] ? avc_has_perm_noaudit+0x26b/0x360 [ 47.923237][ T608] ? __asan_memcpy+0x5a/0x80 [ 47.923261][ T608] ? __cfi_d_alloc_parallel+0x10/0x10 [ 47.923288][ T608] ? __kasan_check_write+0x18/0x20 [ 47.923313][ T608] ? rwsem_read_trylock+0x275/0x5a0 [ 47.923351][ T608] ? downgrade_write+0x470/0x470 [ 47.923389][ T608] __lookup_slow+0x150/0x420 [ 47.923421][ T608] ? lookup_one_len+0x300/0x300 [ 47.923452][ T608] ? down_read+0x7f/0xe0 [ 47.923483][ T608] ? __cfi_proc_pid_permission+0x10/0x10 [ 47.923528][ T608] lookup_slow+0x57/0x80 [ 47.923556][ T608] link_path_walk+0x991/0xeb0 [ 47.923583][ T608] path_openat+0x298/0x35a0 [ 47.923618][ T608] ? kasan_save_alloc_info+0x3a/0x50 [ 47.923639][ T608] ? __kasan_slab_alloc+0x73/0x90 [ 47.923668][ T608] ? getname+0x1b/0x30 [ 47.923691][ T608] ? x64_sys_call+0xe69/0x2ee0 [ 47.923712][ T608] ? do_syscall_64+0x57/0xf0 [ 47.923735][ T608] ? do_filp_open+0x440/0x440 [ 47.923768][ T608] do_filp_open+0x1f2/0x440 [ 47.923796][ T608] ? __cfi_do_filp_open+0x10/0x10 [ 47.923826][ T608] ? __cfi_kfree_link+0x10/0x10 [ 47.923856][ T608] ? alloc_fd+0x4c1/0x570 [ 47.923879][ T608] do_sys_openat2+0x134/0x1d0 [ 47.923907][ T608] ? fput+0x1a4/0x230 [ 47.923933][ T608] ? do_sys_open+0x100/0x100 [ 47.923963][ T608] __x64_sys_openat+0x13a/0x170 [ 47.923994][ T608] x64_sys_call+0xe69/0x2ee0 [ 47.924011][ T608] do_syscall_64+0x57/0xf0 [ 47.924028][ T608] ? clear_bhb_loop+0x50/0xa0 [ 47.924052][ T608] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.924074][ T608] RIP: 0033:0x7f5fe135e98e [ 47.924091][ T608] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 47.924107][ T608] RSP: 002b:00007f5fe21d4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 47.924129][ T608] RAX: ffffffffffffffda RBX: 00007f5fe21d56c0 RCX: 00007f5fe135e98e [ 47.924144][ T608] RDX: 0000000000000002 RSI: 00007f5fe21d4f90 RDI: ffffffffffffff9c [ 47.924157][ T608] RBP: 00007f5fe143503b R08: 0000000000000000 R09: 0000000000000000 [ 47.924170][ T608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.924181][ T608] R13: 00007f5fe1626038 R14: 00007f5fe1625fa0 R15: 00007ffdfddf10a8 [ 47.924198][ T608] [ 48.485516][ T617] FAULT_INJECTION: forcing a failure. [ 48.485516][ T617] name failslab, interval 1, probability 0, space 0, times 0 [ 48.511969][ T617] CPU: 1 UID: 0 PID: 617 Comm: syz.4.81 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 48.512019][ T617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.512040][ T617] Call Trace: [ 48.512051][ T617] [ 48.512062][ T617] __dump_stack+0x21/0x30 [ 48.512110][ T617] dump_stack_lvl+0x140/0x1c0 [ 48.512156][ T617] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.512205][ T617] dump_stack+0x19/0x20 [ 48.512248][ T617] should_fail_ex+0x3c2/0x510 [ 48.512290][ T617] should_failslab+0xac/0x100 [ 48.512330][ T617] kmem_cache_alloc_noprof+0x42/0x410 [ 48.512365][ T617] ? __kernfs_new_node+0xf1/0x740 [ 48.512409][ T617] __kernfs_new_node+0xf1/0x740 [ 48.512449][ T617] ? kernfs_new_node+0x280/0x280 [ 48.512490][ T617] ? kvasprintf+0x126/0x260 [ 48.512519][ T617] ? __cfi_down_write+0x10/0x10 [ 48.512561][ T617] ? __cfi_kvasprintf+0x10/0x10 [ 48.512592][ T617] ? __kasan_check_write+0x18/0x20 [ 48.512624][ T617] ? up_write+0x66/0x280 [ 48.512669][ T617] kernfs_new_node+0x154/0x280 [ 48.512708][ T617] kernfs_create_link+0xa8/0x200 [ 48.512742][ T617] sysfs_do_create_link_sd+0x8a/0x120 [ 48.512776][ T617] sysfs_create_link+0x6c/0x90 [ 48.512813][ T617] module_add_driver+0x285/0x340 [ 48.512861][ T617] bus_add_driver+0x3ea/0x730 [ 48.512902][ T617] driver_register+0x2b7/0x3c0 [ 48.512938][ T617] usb_gadget_register_driver_owner+0xfc/0x270 [ 48.512983][ T617] raw_ioctl+0x144c/0x37a0 [ 48.513015][ T617] ? __cfi_raw_ioctl+0x10/0x10 [ 48.513043][ T617] ? selinux_file_ioctl+0x732/0x1480 [ 48.513079][ T617] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 48.513120][ T617] ? __fget_files+0x2bc/0x330 [ 48.513155][ T617] ? bpf_lsm_file_ioctl+0xd/0x20 [ 48.513197][ T617] ? security_file_ioctl+0x3e/0x110 [ 48.513226][ T617] ? __cfi_raw_ioctl+0x10/0x10 [ 48.513256][ T617] __se_sys_ioctl+0x126/0x1b0 [ 48.513291][ T617] __x64_sys_ioctl+0x7f/0xa0 [ 48.513330][ T617] x64_sys_call+0x1878/0x2ee0 [ 48.513358][ T617] do_syscall_64+0x57/0xf0 [ 48.513388][ T617] ? clear_bhb_loop+0x50/0xa0 [ 48.513422][ T617] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.513458][ T617] RIP: 0033:0x7f5fe139ddeb [ 48.513483][ T617] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 48.513509][ T617] RSP: 002b:00007f5fe21d2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.513541][ T617] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f5fe139ddeb [ 48.513562][ T617] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 48.513586][ T617] RBP: 00007f5fe21d3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 48.513607][ T617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.513625][ T617] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000868 [ 48.513653][ T617] [ 48.515949][ T617] bus_add_driver: failed to create module links for raw-gadget.2 [ 48.810371][ T617] UDC core: USB Raw Gadget: driver registration failed: -12 [ 48.819564][ T617] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 48.937577][ T369] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.642757][ T313] usb 1-1: USB disconnect, device number 6 [ 49.917589][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 50.088634][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.109042][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 50.119340][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.137662][ T9] usb 4-1: Product: syz [ 50.145276][ T9] usb 4-1: Manufacturer: syz [ 50.154393][ T9] usb 4-1: SerialNumber: syz [ 50.170548][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 50.183131][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 50.372533][ T314] usb 4-1: USB disconnect, device number 4 [ 50.846174][ T654] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 50.854664][ T654] overlayfs: missing 'lowerdir' [ 51.259240][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 51.259261][ T36] audit: type=1400 audit(1789034402.400:227): avc: denied { create } for pid=662 comm="syz.0.92" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.291417][ T663] fuse: Bad value for 'rootmode' [ 51.296776][ T36] audit: type=1400 audit(1789034402.430:228): avc: denied { mounton } for pid=662 comm="syz.0.92" path="/28/file2" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.326145][ T36] audit: type=1400 audit(1789034402.460:229): avc: denied { write } for pid=662 comm="syz.0.92" name="file2" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.348735][ T36] audit: type=1400 audit(1789034402.460:230): avc: denied { open } for pid=662 comm="syz.0.92" path="/28/file2" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.371623][ T36] audit: type=1400 audit(1789034402.460:231): avc: denied { cmd } for pid=662 comm="syz.0.92" path="/28/file2" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 51.478335][ T36] audit: type=1400 audit(1789034402.620:232): avc: denied { read append } for pid=672 comm="syz.4.93" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.505910][ T36] audit: type=1400 audit(1789034402.620:233): avc: denied { open } for pid=672 comm="syz.4.93" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.544270][ T36] audit: type=1400 audit(1789034402.640:234): avc: denied { ioctl } for pid=672 comm="syz.4.93" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.568940][ T313] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 51.627532][ T36] audit: type=1400 audit(1789034402.760:235): avc: denied { append } for pid=680 comm="syz.4.95" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.645772][ T682] rust_binder: Read failure Err(EAGAIN) in pid:16 [ 51.723538][ T36] audit: type=1400 audit(1789034402.860:236): avc: denied { create } for pid=688 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.750951][ T313] usb 1-1: Using ep0 maxpacket: 8 [ 51.766310][ T313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 51.783630][ T313] usb 1-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 51.792924][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.800998][ T313] usb 1-1: Product: syz [ 51.817584][ T313] usb 1-1: Manufacturer: syz [ 51.822267][ T313] usb 1-1: SerialNumber: syz [ 51.901937][ T698] capability: warning: `syz.4.100' uses deprecated v2 capabilities in a way that may be insecure [ 51.938248][ T700] ./dev/sda1: Can't lookup blockdev [ 51.969307][ T702] rust_binder: validate_parent_fixup: new_min_offset=210, sg_entry.length=0 [ 51.969337][ T702] rust_binder: 701:702 error while translating object: EINVAL [ 51.993676][ T702] rust_binder: Failure in copy_transaction_data: EINVAL [ 51.993711][ T702] rust_binder: 701:702 transaction call to 701:0 failed EINVAL, code 0 size 104-24 [ 52.011380][ T46] rust_binder: 701: undelivered TRANSACTION_ERROR: 29201 [ 52.029943][ T663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.053390][ T663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.065915][ T313] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 52.085255][ T313] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 52.098466][ T313] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 52.110452][ T313] usb 1-1: USB disconnect, device number 7 [ 52.185613][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.413921][ T716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.107'. [ 52.594063][ T737] FAULT_INJECTION: forcing a failure. [ 52.594063][ T737] name failslab, interval 1, probability 0, space 0, times 0 [ 52.607026][ T738] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.622879][ T737] CPU: 1 UID: 0 PID: 737 Comm: syz.4.114 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 52.622921][ T737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.622937][ T737] Call Trace: [ 52.622945][ T737] [ 52.622955][ T737] __dump_stack+0x21/0x30 [ 52.623009][ T737] dump_stack_lvl+0x140/0x1c0 [ 52.623044][ T737] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.623078][ T737] ? kernfs_get_tree+0x1ff/0x9a0 [ 52.623107][ T737] ? xas_create+0xe23/0xf80 [ 52.623132][ T737] ? do_new_mount+0x251/0xb40 [ 52.623158][ T737] dump_stack+0x19/0x20 [ 52.623191][ T737] should_fail_ex+0x3c2/0x510 [ 52.623221][ T737] should_failslab+0xac/0x100 [ 52.623252][ T737] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 52.623279][ T737] ? alloc_inode+0xa9/0x270 [ 52.623308][ T737] ? xas_nomem+0x71/0x2c0 [ 52.623330][ T737] alloc_inode+0xa9/0x270 [ 52.623361][ T737] iget_locked+0x198/0x9a0 [ 52.623394][ T737] ? __cfi_iget_locked+0x10/0x10 [ 52.623427][ T737] ? __kasan_check_write+0x18/0x20 [ 52.623451][ T737] ? rwsem_read_trylock+0x275/0x5a0 [ 52.623488][ T737] ? __kasan_check_write+0x18/0x20 [ 52.623513][ T737] ? downgrade_write+0x470/0x470 [ 52.623549][ T737] ? __kasan_check_write+0x18/0x20 [ 52.623573][ T737] ? _raw_spin_lock+0x92/0x120 [ 52.623610][ T737] ? down_read+0x7f/0xe0 [ 52.623640][ T737] kernfs_get_inode+0x50/0x830 [ 52.623669][ T737] ? __cfi_kernfs_set_super+0x10/0x10 [ 52.623698][ T737] kernfs_get_tree+0x567/0x9a0 [ 52.623726][ T737] ? __cfi_kernfs_get_tree+0x10/0x10 [ 52.623754][ T737] ? selinux_capable+0x38/0x50 [ 52.623787][ T737] ? bpf_lsm_capable+0xd/0x20 [ 52.623822][ T737] ? security_capable+0x44/0x130 [ 52.623851][ T737] sysfs_get_tree+0x44/0x110 [ 52.623878][ T737] vfs_get_tree+0x9e/0x290 [ 52.623903][ T737] do_new_mount+0x251/0xb40 [ 52.623926][ T737] ? security_capable+0x44/0x130 [ 52.623953][ T737] path_mount+0x66a/0xff0 [ 52.623985][ T737] ? putname+0x113/0x150 [ 52.624013][ T737] __se_sys_mount+0x2bf/0x480 [ 52.624037][ T737] ? __x64_sys_mount+0xf0/0xf0 [ 52.624061][ T737] ? __kasan_check_write+0x18/0x20 [ 52.624083][ T737] ? fpregs_restore_userregs+0x11c/0x260 [ 52.624113][ T737] __x64_sys_mount+0xc3/0xf0 [ 52.624138][ T737] x64_sys_call+0x2021/0x2ee0 [ 52.624161][ T737] do_syscall_64+0x57/0xf0 [ 52.624182][ T737] ? clear_bhb_loop+0x50/0xa0 [ 52.624212][ T737] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.624240][ T737] RIP: 0033:0x7f5fe139e159 [ 52.624262][ T737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.624283][ T737] RSP: 002b:00007f5fe21d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 52.624309][ T737] RAX: ffffffffffffffda RBX: 00007f5fe1625fa0 RCX: 00007f5fe139e159 [ 52.624327][ T737] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 52.624345][ T737] RBP: 00007f5fe143503b R08: 0000000000000000 R09: 0000000000000000 [ 52.624362][ T737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.624377][ T737] R13: 00007f5fe1626038 R14: 00007f5fe1625fa0 R15: 00007ffdfddf10a8 [ 52.624399][ T737] [ 52.953627][ T740] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.955126][ T740] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.972794][ T740] rust_binder: 739:740 got transaction to invalid handle 1 [ 52.993460][ T740] rust_binder: 739:740 transaction call to 0:0 failed ENOENT, code 0 size 72-24 [ 53.041757][ T740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.054050][ T369] rust_binder: 739: undelivered TRANSACTION_ERROR: 29201 [ 53.172697][ T746] Invalid ELF header len 7 [ 53.536249][ T766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 54.402410][ T314] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 54.547546][ T314] usb 1-1: device descriptor read/64, error -71 [ 54.610712][ T645] bridge_slave_1: left allmulticast mode [ 54.621762][ T645] bridge_slave_1: left promiscuous mode [ 54.632699][ T645] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.640685][ T645] bridge_slave_0: left allmulticast mode [ 54.646454][ T645] bridge_slave_0: left promiscuous mode [ 54.652493][ T645] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.807584][ T314] usb 1-1: device descriptor read/64, error -71 [ 54.811189][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.821203][ T785] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.829176][ T785] bridge_slave_0: entered allmulticast mode [ 54.835629][ T785] bridge_slave_0: entered promiscuous mode [ 54.844101][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.851278][ T785] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.852931][ T596] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.859490][ T785] bridge_slave_1: entered allmulticast mode [ 54.871481][ T785] bridge_slave_1: entered promiscuous mode [ 54.878540][ T645] veth1_macvtap: left promiscuous mode [ 54.884115][ T645] veth0_vlan: left promiscuous mode [ 54.975341][ T802] veth1_macvtap: left promiscuous mode [ 54.985072][ T802] veth1_macvtap: entered promiscuous mode [ 55.040764][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.047889][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.057686][ T314] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 55.059482][ T596] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.072276][ T596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.099503][ T785] veth0_vlan: entered promiscuous mode [ 55.111212][ T785] veth1_macvtap: entered promiscuous mode [ 55.187728][ T314] usb 1-1: device descriptor read/64, error -71 [ 55.247585][ T313] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 55.377588][ T313] usb 4-1: device descriptor read/64, error -71 [ 55.407615][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 55.427639][ T314] usb 1-1: device descriptor read/64, error -71 [ 55.537717][ T314] usb usb1-port1: attempt power cycle [ 55.558684][ T9] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 55.567099][ T9] usb 6-1: config 127 has no interface number 0 [ 55.573531][ T9] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 55.586398][ T9] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 55.595675][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.603849][ T9] usb 6-1: Product: syz [ 55.608125][ T9] usb 6-1: Manufacturer: syz [ 55.612756][ T9] usb 6-1: SerialNumber: syz [ 55.618623][ T812] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 55.627945][ T313] usb 4-1: device descriptor read/64, error -71 [ 55.877580][ T314] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 55.877585][ T313] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 55.885806][ T9] asix 6-1:127.57: probe with driver asix failed with error -71 [ 55.902859][ T9] usb 6-1: USB disconnect, device number 2 [ 55.918621][ T314] usb 1-1: device descriptor read/8, error -71 [ 56.007596][ T313] usb 4-1: device descriptor read/64, error -71 [ 56.048927][ T314] usb 1-1: device descriptor read/8, error -71 [ 56.247652][ T313] usb 4-1: device descriptor read/64, error -71 [ 56.287890][ T314] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 56.308777][ T314] usb 1-1: device descriptor read/8, error -71 [ 56.357759][ T313] usb usb4-port1: attempt power cycle [ 56.438733][ T314] usb 1-1: device descriptor read/8, error -71 [ 56.478663][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 56.478683][ T36] audit: type=1400 audit(1789034407.620:268): avc: denied { write } for pid=824 comm="syz.5.137" name="igmp6" dev="proc" ino=4026532613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 56.548012][ T314] usb usb1-port1: unable to enumerate USB device [ 56.697599][ T313] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 56.718800][ T313] usb 4-1: device descriptor read/8, error -71 [ 56.747596][ T369] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.848707][ T313] usb 4-1: device descriptor read/8, error -71 [ 56.899552][ T369] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 56.910370][ T369] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 56.921143][ T369] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 56.927723][ T799] Bluetooth: hci0: command 0x1003 tx timeout [ 56.935342][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.946145][ T369] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 56.955788][ T369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.963994][ T369] usb 6-1: Product: 駆ꑠ箜꜃勜㵞䊠枵랣頖跩矨᳍溬汸͙бເ嫛瞦醎嚕֧빃ஔ⒑໧꓍숎뤮 [ 56.981721][ T369] usb 6-1: Manufacturer: 䌽Ǭ [ 56.986593][ T369] usb 6-1: SerialNumber: у [ 57.069788][ T36] audit: type=1400 audit(1789034408.210:269): avc: denied { write } for pid=834 comm="syz.4.141" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.093777][ T313] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 57.118847][ T313] usb 4-1: device descriptor read/8, error -71 [ 57.249102][ T313] usb 4-1: device descriptor read/8, error -71 [ 57.357989][ T313] usb usb4-port1: unable to enumerate USB device [ 57.382424][ T36] audit: type=1400 audit(1789034408.520:270): avc: denied { mounton } for pid=845 comm="syz.0.145" path="/37/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 57.385372][ T846] incfs: Can't find or create .index dir in ./file0 [ 57.411270][ T846] incfs: mount failed -30 [ 57.470798][ T36] audit: type=1400 audit(1789034408.610:271): avc: denied { getopt } for pid=845 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.611996][ T828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.621047][ T828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.629757][ T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.638482][ T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.760814][ T854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 57.857062][ T369] usb 6-1: USB disconnect, device number 3 [ 57.899483][ T36] audit: type=1400 audit(1789034409.040:272): avc: denied { search } for pid=859 comm="syz.0.149" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 58.071777][ T36] audit: type=1400 audit(1789034409.210:273): avc: denied { create } for pid=865 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 58.096721][ T856] syz.4.148 (856): drop_caches: 3 [ 58.099516][ T36] audit: type=1400 audit(1789034409.210:274): avc: denied { setopt } for pid=865 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 58.128438][ T36] audit: type=1400 audit(1789034409.210:275): avc: denied { connect } for pid=865 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 58.162811][ T36] audit: type=1400 audit(1789034409.210:276): avc: denied { name_connect } for pid=865 comm="syz.3.151" dest=20004 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 58.188117][ T36] audit: type=1400 audit(1789034409.230:277): avc: denied { create } for pid=865 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 58.433888][ T897] SELinux: Context ϧ is not valid (left unmapped). [ 58.442935][ T897] netlink: 84 bytes leftover after parsing attributes in process `syz.3.159'. [ 58.478245][ T900] overlay: Unknown parameter 'mask' [ 58.507553][ T369] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.667570][ T369] usb 5-1: Using ep0 maxpacket: 16 [ 58.674168][ T369] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.684591][ T369] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.695546][ T369] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.704983][ T369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.713219][ T369] usb 5-1: Product: syz [ 58.717993][ T369] usb 5-1: Manufacturer: syz [ 58.722730][ T369] usb 5-1: SerialNumber: syz [ 58.760530][ T907] fuse: Bad value for 'group_id' [ 58.765565][ T907] fuse: Bad value for 'group_id' [ 58.772496][ T909] 9pnet: Could not find request transport: f [ 58.778845][ T314] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 58.927602][ T314] usb 4-1: Using ep0 maxpacket: 32 [ 58.938501][ T314] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 58.946765][ T314] usb 4-1: config 0 has no interface number 0 [ 58.967590][ T314] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 58.977694][ T314] usb 4-1: config 0 interface 196 has no altsetting 0 [ 58.986258][ T314] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 58.995518][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.003689][ T314] usb 4-1: Product: syz [ 59.008237][ T314] usb 4-1: Manufacturer: syz [ 59.013149][ T314] usb 4-1: SerialNumber: syz [ 59.027857][ T314] usb 4-1: config 0 descriptor?? [ 59.033237][ T904] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 59.047554][ T805] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 59.108319][ T369] usb 5-1: 0:2 : does not exist [ 59.129673][ T369] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 59.155034][ T369] usb 5-1: USB disconnect, device number 3 [ 59.211761][ T805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 59.223921][ T805] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 59.238645][ T805] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 59.249971][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 59.256894][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.258053][ T805] usb 1-1: Product: syz [ 59.288350][ T805] usb 1-1: Manufacturer: syz [ 59.311023][ T805] usb 1-1: Found UVC 1.00 device syz (8086:0ad2) [ 59.317612][ T805] usb 1-1: No streaming interface found for terminal 2. [ 59.332098][ T918] rust_binder: 903:918 no such ref 0 [ 59.518388][ T911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.527242][ T911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.552023][ T805] usb 1-1: USB disconnect, device number 12 [ 59.713719][ T934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.722413][ T934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.807989][ T369] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 59.947582][ T46] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.957702][ T369] usb 6-1: Using ep0 maxpacket: 8 [ 59.964293][ T369] usb 6-1: unable to get BOS descriptor or descriptor too short [ 59.972815][ T369] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.982990][ T369] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 59.992032][ T369] usb 6-1: config 1 interface 1 has no altsetting 1 [ 60.000231][ T369] usb 6-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 60.009371][ T369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.017397][ T369] usb 6-1: Product: syz [ 60.021703][ T369] usb 6-1: Manufacturer: syz [ 60.026346][ T369] usb 6-1: SerialNumber: syz [ 60.071337][ T936] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 60.108715][ T46] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 60.119840][ T46] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.131229][ T46] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 60.142580][ T46] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 60.155859][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 60.162648][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 60.172373][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.182769][ T46] usb 5-1: config 0 descriptor?? [ 60.227293][ T938] Built 1 zonelists, mobility grouping on. Total pages: 1727883 [ 60.244774][ T369] usb 6-1: 0:2 : does not exist [ 60.252546][ T369] usb 6-1: USB disconnect, device number 4 [ 60.265853][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.998453][ T945] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 61.147583][ T945] usb 6-1: Using ep0 maxpacket: 32 [ 61.153975][ T945] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 61.168183][ T945] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 61.177388][ T945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.185600][ T945] usb 6-1: Product: syz [ 61.189896][ T945] usb 6-1: Manufacturer: syz [ 61.194541][ T945] usb 6-1: SerialNumber: syz [ 61.406722][ T945] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 61.413778][ T945] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 61.420790][ T945] usb 6-1: 0:3 : does not exist [ 61.425710][ T945] usb 6-1: 0:4 : does not exist [ 61.430742][ T945] usb 6-1: unit 7 not found! [ 61.440138][ T945] usb 6-1: USB disconnect, device number 5 [ 61.456045][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.561914][ T314] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 61.574487][ T314] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 61.594936][ T314] usb 4-1: USB disconnect, device number 9 [ 61.735247][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 61.735299][ T36] audit: type=1400 audit(1789034412.870:294): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.762525][ T972] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 61.770882][ T973] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 61.795767][ T36] audit: type=1400 audit(1789034412.930:295): avc: denied { create } for pid=974 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 61.875020][ T36] audit: type=1400 audit(1789034413.010:296): avc: denied { remount } for pid=982 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.906921][ T36] audit: type=1400 audit(1789034413.040:297): avc: denied { bind } for pid=982 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.944521][ T36] audit: type=1400 audit(1789034413.040:298): avc: denied { name_bind } for pid=982 comm="syz.3.182" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 61.965277][ T36] audit: type=1400 audit(1789034413.040:299): avc: denied { node_bind } for pid=982 comm="syz.3.182" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 62.108598][ T36] audit: type=1400 audit(1789034413.250:300): avc: denied { write } for pid=999 comm="syz.0.187" name="dynamic_events" dev="tracefs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.159845][ T36] audit: type=1400 audit(1789034413.280:301): avc: denied { bind } for pid=990 comm="syz.5.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.185947][ T805] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 62.216230][ T1006] SELinux: policydb magic number 0x1802 does not match expected magic number 0xf97cff8c [ 62.216298][ T36] audit: type=1400 audit(1789034413.350:302): avc: denied { load_policy } for pid=1005 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.246994][ T1006] SELinux: failed to load policy [ 62.306422][ T36] audit: type=1400 audit(1789034413.440:303): avc: denied { nlmsg_read } for pid=1009 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.327666][ T805] usb 4-1: device descriptor read/64, error -71 [ 62.327818][ T1010] Invalid argument reading file caps for ./file0 [ 62.575725][ T805] usb 4-1: device descriptor read/64, error -71 [ 62.716042][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 62.733743][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 62.759203][ T46] usb 5-1: USB disconnect, device number 4 [ 62.807590][ T313] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 62.822096][ T805] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 62.916503][ T1030] kvm: kvm [1029]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 62.957749][ T805] usb 4-1: device descriptor read/64, error -71 [ 62.977563][ T313] usb 1-1: Using ep0 maxpacket: 32 [ 62.984082][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.995796][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.006903][ T313] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 63.017519][ T313] usb 1-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 63.025769][ T313] usb 1-1: Manufacturer: syz [ 63.031940][ T313] usb 1-1: config 0 descriptor?? [ 63.147618][ T46] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 63.207605][ T805] usb 4-1: device descriptor read/64, error -71 [ 63.239934][ T1018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.248593][ T1018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.317679][ T805] usb usb4-port1: attempt power cycle [ 63.353662][ T46] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 63.362609][ T46] usb 5-1: can't read configurations, error -71 [ 63.461147][ T313] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0005/input/input7 [ 63.473811][ T313] input: syz Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0005/input/input8 [ 63.484930][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 63.494218][ T313] uclogic 0003:5543:0042.0005: input,hidraw0: USB HID v7f.fd Mouse [syz] on usb-dummy_hcd.0-1/input0 [ 63.627613][ T9] usb 6-1: device descriptor read/64, error -71 [ 63.657719][ T805] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 63.665084][ T1018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.674066][ T1018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.683068][ T805] usb 4-1: device descriptor read/8, error -71 [ 63.683103][ T314] usb 1-1: USB disconnect, device number 13 [ 63.801176][ T1043] fido_id[1043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 63.829291][ T805] usb 4-1: device descriptor read/8, error -71 [ 63.867622][ T9] usb 6-1: device descriptor read/64, error -71 [ 64.067579][ T805] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 64.088659][ T805] usb 4-1: device descriptor read/8, error -71 [ 64.107625][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 64.218607][ T805] usb 4-1: device descriptor read/8, error -71 [ 64.237624][ T9] usb 6-1: device descriptor read/64, error -71 [ 64.327729][ T805] usb usb4-port1: unable to enumerate USB device [ 64.407592][ T46] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 64.447802][ T314] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 64.477571][ T9] usb 6-1: device descriptor read/64, error -71 [ 64.557619][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 64.564007][ T46] usb 5-1: config index 0 descriptor too short (expected 169, got 146) [ 64.572393][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.582649][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.592392][ T46] usb 5-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.05 [ 64.597951][ T9] usb usb6-port1: attempt power cycle [ 64.601667][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.615066][ T314] usb 1-1: Using ep0 maxpacket: 32 [ 64.620272][ T46] usb 5-1: SerialNumber: syz [ 64.625832][ T314] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 64.634980][ T314] usb 1-1: config 0 has no interface number 0 [ 64.641547][ T314] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 64.653265][ T314] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 64.662407][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.670467][ T314] usb 1-1: Product: syz [ 64.674667][ T314] usb 1-1: Manufacturer: syz [ 64.679363][ T314] usb 1-1: SerialNumber: syz [ 64.684767][ T314] usb 1-1: config 0 descriptor?? [ 64.690166][ T1050] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 64.898777][ T1050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.908745][ T1050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.920262][ T1050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.921650][ T46] usb 5-1: USB disconnect, device number 6 [ 64.930772][ T1050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.944067][ T1050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.945517][ T1054] netlink: 'syz.3.205': attribute type 6 has an invalid length. [ 64.955879][ T1050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.960508][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 64.972663][ T1050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.984249][ T1050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.996704][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.998585][ T9] usb 6-1: device descriptor read/8, error -71 [ 65.020027][ T1050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.029736][ T1050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.048232][ T1050] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 65.132458][ T1069] netlink: 'syz.3.210': attribute type 4 has an invalid length. [ 65.169058][ T9] usb 6-1: device descriptor read/8, error -71 [ 65.408584][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 65.428717][ T9] usb 6-1: device descriptor read/8, error -71 [ 65.462584][ T314] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 107 [ 65.526703][ T1082] netlink: 'syz.4.214': attribute type 46 has an invalid length. [ 65.558742][ T9] usb 6-1: device descriptor read/8, error -71 [ 65.667750][ T9] usb usb6-port1: unable to enumerate USB device [ 66.003772][ T1115] overlayfs: workdir and upperdir must be separate subtrees [ 66.141520][ T314] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 66.183092][ T1135] mmap: syz.4.227 (1135) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.298772][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.309859][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.322005][ T314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.335934][ T314] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.345112][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.354842][ T314] usb 4-1: config 0 descriptor?? [ 66.637773][ T805] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 66.761698][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 66.761718][ T36] audit: type=1400 audit(1789034417.900:318): avc: denied { bind } for pid=1109 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.787620][ T805] usb 6-1: Using ep0 maxpacket: 32 [ 66.787937][ T36] audit: type=1400 audit(1789034417.900:319): avc: denied { map } for pid=1109 comm="syz.3.219" path="socket:[11922]" dev="sockfs" ino=11922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.816190][ T36] audit: type=1400 audit(1789034417.900:320): avc: denied { read } for pid=1109 comm="syz.3.219" path="socket:[11922]" dev="sockfs" ino=11922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.839789][ T805] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 66.848485][ T805] usb 6-1: config 0 has no interface number 0 [ 66.854754][ T805] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 66.866765][ T805] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 66.876046][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.884272][ T805] usb 6-1: Product: syz [ 66.889273][ T805] usb 6-1: Manufacturer: syz [ 66.893992][ T805] usb 6-1: SerialNumber: syz [ 66.899901][ T805] usb 6-1: config 0 descriptor?? [ 66.905565][ T1139] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 66.959099][ T314] usbhid 4-1:0.0: can't add hid device: -71 [ 66.965284][ T314] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 66.974299][ T314] usb 4-1: USB disconnect, device number 14 [ 67.116793][ T1139] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 67.221939][ T350] usb 1-1: USB disconnect, device number 14 [ 67.497611][ T313] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 67.506166][ T36] audit: type=1400 audit(1789034418.640:321): avc: denied { bind } for pid=1166 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.509128][ T1167] rust_binder: 1166:1167 got transaction with invalid offset [ 67.527469][ T36] audit: type=1400 audit(1789034418.640:322): avc: denied { setopt } for pid=1166 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.535693][ T1167] rust_binder: Failure in copy_transaction_data: EINVAL [ 67.554214][ T1167] rust_binder: 1166:1167 transaction call to 1166:0 failed EINVAL, code 0 size 0-24 [ 67.570849][ T1167] rust_binder: 1166:1167 netlink report failed: ESRCH [ 67.667571][ T313] usb 5-1: Using ep0 maxpacket: 32 [ 67.673987][ T313] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.680694][ T313] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 67.689840][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.698667][ T313] usb 5-1: config 0 descriptor?? [ 68.137826][ T313] hid (null): unknown global tag 0xc [ 68.145222][ T313] uclogic 0003:145F:0212.0006: interface is invalid, ignoring [ 68.336476][ T46] rust_binder: 1166: undelivered TRANSACTION_ERROR: 29201 [ 68.379814][ T313] usb 5-1: USB disconnect, device number 7 [ 69.012151][ T1225] kvm: user requested TSC rate below hardware speed [ 69.103558][ T1233] kvm: kvm [1232]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 69.112247][ T1233] kvm: kvm [1232]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 69.158690][ T1139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.167443][ T1139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.176329][ T1139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.185014][ T1139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.202241][ T36] audit: type=1400 audit(1789034420.340:323): avc: denied { ioctl } for pid=1235 comm="syz.4.256" path="socket:[13365]" dev="sockfs" ino=13365 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.227190][ T36] audit: type=1400 audit(1789034420.340:324): avc: denied { connect } for pid=1235 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.246794][ T36] audit: type=1400 audit(1789034420.340:325): avc: denied { getopt } for pid=1235 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.437760][ T1247] netlink: 220 bytes leftover after parsing attributes in process `syz.0.260'. [ 69.454444][ T36] audit: type=1400 audit(1789034420.590:326): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.530315][ T597] bridge_slave_1: left allmulticast mode [ 69.536118][ T597] bridge_slave_1: left promiscuous mode [ 69.542084][ T597] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.550011][ T597] bridge_slave_0: left allmulticast mode [ 69.555792][ T597] bridge_slave_0: left promiscuous mode [ 69.561859][ T597] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.597559][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 69.690798][ T597] veth1_macvtap: left promiscuous mode [ 69.696417][ T597] veth0_vlan: left promiscuous mode [ 69.767997][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.779058][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 69.789781][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.802201][ T9] usb 5-1: config 0 descriptor?? [ 69.856487][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.863673][ T1249] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.870847][ T1249] bridge_slave_0: entered allmulticast mode [ 69.877389][ T1249] bridge_slave_0: entered promiscuous mode [ 69.884360][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.891517][ T1249] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.898856][ T1249] bridge_slave_1: entered allmulticast mode [ 69.905398][ T1249] bridge_slave_1: entered promiscuous mode [ 69.964710][ T597] ------------[ cut here ]------------ [ 69.970323][ T597] WARNING: CPU: 1 PID: 597 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 69.980426][ T597] Modules linked in: [ 69.984387][ T597] CPU: 1 UID: 0 PID: 597 Comm: kworker/u8:10 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 69.996172][ T597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.006289][ T597] Workqueue: netns cleanup_net [ 70.009054][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.011135][ T597] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 70.018201][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.018494][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.024217][ T597] Code: e8 c1 d1 d5 fc 4b 83 3c 3e 00 75 19 e8 45 f7 7c fc 49 81 ff f8 07 00 00 74 1b e8 37 f7 7c fc 49 83 c7 08 eb c9 e8 2c f7 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 70.031474][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.038534][ T597] RSP: 0018:ffffc9000fccfb90 EFLAGS: 00010293 [ 70.071605][ T597] RAX: ffffffff850a8034 RBX: ffff88810470d8c0 RCX: ffff88811ded2600 [ 70.079651][ T597] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888101f9c7f0 [ 70.088299][ T597] RBP: ffffc9000fccfbb0 R08: ffffffff87d43ac7 R09: 1ffffffff0fa8758 [ 70.092138][ T805] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 70.096397][ T597] R10: dffffc0000000000 R11: fffffbfff0fa8759 R12: dffffc0000000000 [ 70.096421][ T597] R13: dffffc0000000000 R14: ffff888101f9c000 R15: 00000000000007f0 [ 70.120787][ T805] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 70.122795][ T597] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 70.142822][ T597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.149488][ T597] CR2: 000020000057f000 CR3: 000000012621e000 CR4: 00000000003526b0 [ 70.157543][ T597] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 70.165562][ T597] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 70.167104][ T805] asix 6-1:0.188: probe with driver asix failed with error -71 [ 70.173593][ T597] Call Trace: [ 70.173604][ T597] [ 70.173615][ T597] cleanup_net+0x6ba/0xc90 [ 70.192132][ T597] ? __cfi_cleanup_net+0x10/0x10 [ 70.197135][ T597] ? kick_pool+0xb9/0x540 [ 70.201566][ T597] process_scheduled_works+0x7f4/0x1060 [ 70.207168][ T597] worker_thread+0xc99/0x13f0 [ 70.211969][ T597] kthread+0x2c4/0x360 [ 70.216092][ T597] ? __cfi_worker_thread+0x10/0x10 [ 70.221290][ T597] ? __cfi_kthread+0x10/0x10 [ 70.226016][ T597] ret_from_fork+0x64/0xa0 [ 70.228699][ T805] usb 6-1: USB disconnect, device number 10 [ 70.230519][ T597] ? __cfi_kthread+0x10/0x10 [ 70.241084][ T597] ret_from_fork_asm+0x1a/0x30 [ 70.245907][ T597] [ 70.248995][ T597] ---[ end trace 0000000000000000 ]--- [ 70.260778][ T646] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.268304][ T597] ------------[ cut here ]------------ [ 70.273844][ T597] WARNING: CPU: 1 PID: 597 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 70.284015][ T597] Modules linked in: [ 70.288025][ T597] CPU: 1 UID: 0 PID: 597 Comm: kworker/u8:10 Tainted: G W syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 70.301458][ T597] Tainted: [W]=WARN [ 70.305322][ T597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.315468][ T597] Workqueue: netns cleanup_net [ 70.320356][ T597] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 70.326491][ T597] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 f6 7c fc 49 81 ff f8 07 00 00 74 1b e8 e2 f6 7c fc 49 83 c7 08 eb c5 e8 d7 f6 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 f6 7c fc 5b 41 5c 41 5e 41 [ 70.346217][ T597] RSP: 0018:ffffc9000fccfb90 EFLAGS: 00010293 [ 70.352371][ T597] RAX: ffffffff850a8089 RBX: ffff888101f9c800 RCX: ffff88811ded2600 [ 70.360428][ T597] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888101f9c808 [ 70.368513][ T597] RBP: ffffc9000fccfbb0 R08: ffffffff87d43ac7 R09: 1ffffffff0fa8758 [ 70.376541][ T597] R10: dffffc0000000000 R11: fffffbfff0fa8759 R12: dffffc0000000000 [ 70.384608][ T597] R13: dffffc0000000000 R14: ffff888101f9c000 R15: 0000000000000008 [ 70.392682][ T597] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 70.401719][ T597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.408380][ T597] CR2: 00007f5fdfdf6ff8 CR3: 000000011c546000 CR4: 00000000003526b0 [ 70.416404][ T597] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 70.424459][ T597] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 70.432502][ T597] Call Trace: [ 70.435818][ T597] [ 70.438818][ T597] cleanup_net+0x6ba/0xc90 [ 70.443289][ T597] ? __cfi_cleanup_net+0x10/0x10 [ 70.448314][ T597] ? kick_pool+0xb9/0x540 [ 70.452869][ T597] process_scheduled_works+0x7f4/0x1060 [ 70.458551][ T597] worker_thread+0xc99/0x13f0 [ 70.463304][ T597] kthread+0x2c4/0x360 [ 70.467418][ T597] ? __cfi_worker_thread+0x10/0x10 [ 70.472612][ T597] ? __cfi_kthread+0x10/0x10 [ 70.477258][ T597] ret_from_fork+0x64/0xa0 [ 70.481766][ T597] ? __cfi_kthread+0x10/0x10 [ 70.486407][ T597] ret_from_fork_asm+0x1a/0x30 [ 70.491261][ T597] [ 70.494345][ T597] ---[ end trace 0000000000000000 ]--- [ 70.501793][ T646] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.520601][ T646] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.527771][ T646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.536804][ T646] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.543936][ T646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.567852][ T597] ------------[ cut here ]------------ [ 70.573391][ T597] WARNING: CPU: 1 PID: 597 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 70.582950][ T597] Modules linked in: [ 70.586886][ T597] CPU: 1 UID: 0 PID: 597 Comm: kworker/u8:10 Tainted: G W syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 70.600192][ T597] Tainted: [W]=WARN [ 70.604043][ T597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.614178][ T597] Workqueue: netns cleanup_net [ 70.619029][ T597] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 70.624638][ T597] Code: 3c 20 00 74 08 48 89 df e8 df 8f f0 fc 48 8b 3b e8 f7 80 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 8f b7 00 cc e8 52 b5 97 fc <0f> 0b e9 b0 fd ff ff e8 46 b5 97 fc 0f 0b e9 18 fe ff ff e8 3a b5 [ 70.644455][ T597] RSP: 0018:ffffc9000fccfb70 EFLAGS: 00010293 [ 70.650601][ T597] RAX: ffffffff84efc20e RBX: ffff88810470d8c0 RCX: ffff88811ded2600 [ 70.658646][ T597] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88811ded2600 [ 70.666667][ T597] RBP: ffffc9000fccfb98 R08: ffffffff87d43ac7 R09: 1ffffffff0fa8758 [ 70.674775][ T597] R10: dffffc0000000000 R11: fffffbfff0fa8759 R12: 1ffffffff0fa84ac [ 70.682844][ T597] R13: dffffc0000000000 R14: ffff88810470e4c0 R15: dffffc0000000000 [ 70.691021][ T597] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 70.695622][ T1249] veth0_vlan: entered promiscuous mode [ 70.700280][ T597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.712374][ T597] CR2: 000020000011f540 CR3: 000000010f342000 CR4: 00000000003526b0 [ 70.720551][ T597] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 70.728621][ T597] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 70.736648][ T597] Call Trace: [ 70.739991][ T597] [ 70.742962][ T597] xfrm_net_exit+0x31/0x80 [ 70.747433][ T597] cleanup_net+0x6ba/0xc90 [ 70.751933][ T597] ? __cfi_cleanup_net+0x10/0x10 [ 70.756958][ T597] ? kick_pool+0xb9/0x540 [ 70.761380][ T597] process_scheduled_works+0x7f4/0x1060 [ 70.766988][ T597] worker_thread+0xc99/0x13f0 [ 70.767280][ T1249] veth1_macvtap: entered promiscuous mode [ 70.771729][ T597] kthread+0x2c4/0x360 [ 70.781581][ T597] ? __cfi_worker_thread+0x10/0x10 [ 70.786775][ T597] ? __cfi_kthread+0x10/0x10 [ 70.791437][ T597] ret_from_fork+0x64/0xa0 [ 70.795909][ T597] ? __cfi_kthread+0x10/0x10 [ 70.800582][ T597] ret_from_fork_asm+0x1a/0x30 [ 70.805397][ T597] [ 70.808508][ T597] ---[ end trace 0000000000000000 ]--- [ 70.826923][ T36] audit: type=1400 audit(1789034421.960:327): avc: denied { mount } for pid=1249 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.357397][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 72.363548][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 72.373586][ T9] usb 5-1: USB disconnect, device number 8