last executing test programs: 3.135919813s ago: executing program 1 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) pipe2$9p(&(0x7f0000000080), 0x800) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 3.090658714s ago: executing program 1 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x58, 0x0, 0x2, 0x401, 0xf0ffffff, 0x0, {0xa, 0x0, 0xb}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 3.022455286s ago: executing program 1 (id=32): mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'geneve0\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x1, 0x4, ')6ZS'}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000280)={0x40, 0x14, 0x3, "cc171d"}, 0x0, 0x0}) syz_usb_connect$uac2(0x3, 0xd8, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x3, 0x40, 0x1, {0x8, 0xb, 0x1, 0x1, 0x1, 0x7, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x40, 0xb, 0x16, 0x2}, [@effect_unit={0xd, 0x24, 0x7, 0x2, 0x0, 0x1, [0x2, 0x2, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x2, 0x9, "1f8cfb"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xb2c, 0x9, 0x9, 0x9}, @as_header={0x10, 0x24, 0x1, 0xf, 0x7, 0x2, 0x1, 0xa, 0x80000000, 0x1}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1000, 0x3ff, 0x4, "576256e89156"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xd, 0x9, 0x7, 0x70}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0xc, 0x2, {0x8, 0x25, 0x1, 0x2, 0x3, 0xfd, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x81, 0x6e, 0xa6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0xe, 0x7, 0x7, 0x26}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfb, 0xd, 0x9, {0x8, 0x25, 0x1, 0x0, 0x30, 0x30, 0x5}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0x1d, 0xd, 0xf, 0xff, 0x7}, 0x127, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x2, [{0x69, &(0x7f0000000680)=@string={0x69, 0x3, "277e1996e6afada5a593d120bdd9348b8a430988385102671960a51a0c9693cd2a37da83590186a85bc4a2a1e84abb27f6f8d7fa1ffdbdfa7c18b8ff0b275048c5fcf6203ff64255b21e8650859cdb57720c53a9cae809afd0615777fc67355aa9a622416e56fa"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x809}}]}) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x22, 0x9b, {0x9b, 0x4, "ec3352f57125231932ef8adca0dac15acac91554c493287d2900e3f360d3f5d97605d1a18a00e11759180259cffcd87f36bba17f938dec2ef27835105ef905deba8eaeff064cc4c981bab33d171573297efc6ce263fd88e6eb2be2b7f7d35a7e215714e8e4f77288857b9cefd36499907941d85ab9593681f7ecbcea7178276e8b445d2be69beb659e9305c604aec781d4e7bab92f9bec591f"}}, &(0x7f0000000380)={0x0, 0x3, 0xf, @string={0xf, 0x3, "da179fd25ca9113a62e249454d"}}, &(0x7f0000000400)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7, 0xf000, 0xfffe}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x40cb19734740f0e9, 0xf, 0xa0, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "68bb08016cf3f11421be7a6e2390fb8e"}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x7, 0x2, "13b26b8c", "bfd7835c"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x2, 0x9, 0x5, 0x0, 0x2}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000540)={0x20, 0xc, 0xcf, "296f91ed1069215526808aa41f4642061f33d93a8e9db14f80f009bf8b2de59295bc8c3a2ef33a90d8cafd362a534e6d528abc3206b1b26a1997c0a7e824eeeae3d069e7710aaee95c96bd606d304d7820271f874c41ca37a99a5079d12c9e03e4eef2fc1ede94676da4fc930365dbecb2f6688e9432323922b5f666512ef9b9679b656c2d05a484dcc174f3fba86ef5cde2fb617ff1dab34f971e5083b9f1815b231a85b7266110390dda5e783f36f588208be957318b83bb84da25d440116e25fea7f8e6bfc38fee7badca2b94a0"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9d}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x8a}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0xc0, 0x20}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0xfe}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "68a4"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0xecf}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000c40)={0x40, 0x19, 0x2, 'C`'}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x8}}) r2 = syz_clone(0x8040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={r2, 0x1, 0xc}) 2.511150029s ago: executing program 3 (id=39): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400, 0x2000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 2.297716794s ago: executing program 3 (id=41): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x24, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x300, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) 2.279390304s ago: executing program 3 (id=42): r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/154, 0x9a}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000340)=""/270, 0x10e}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) 1.102061833s ago: executing program 3 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x28842, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000004000)={0x2, 0x0, [{0x40000001, 0x0, 0x0, 0x31277648}, {0x1, 0x0, 0x0, 0x0, 0x6, 0x20}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000005000)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000007000)=@vmx={0x4, 0x0, 0x1078, {0x1002000, 0xffffffffffffffff}, {"d07ee51100"}}) (async) pipe(0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="22a2f99bb4ba2c473c672144124c58357301bde7f50795d73ce17e9e2369f1e3a9f7a75d61cc9134", 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x100) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/50, 0x100000, 0x1800, 0x6, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (rerun: 32) 735.472112ms ago: executing program 3 (id=47): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000440)=@routing={0xff, 0x2, 0x2, 0xfd, 0x0, [@rand_addr=' \x01\x00']}, 0x18) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRESOCT], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00032d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000240)='net/dev\x00') writev(r3, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000550001f3ff0000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfe40, 0x0) fgetxattr(r5, &(0x7f0000000000)=ANY=[], 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)=ANY=[], 0x0) 722.345002ms ago: executing program 3 (id=50): ftruncate(0xffffffffffffffff, 0xffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000800000/0x100000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000100)={0x0, 0x100000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x40000800) 656.447244ms ago: executing program 32 (id=50): ftruncate(0xffffffffffffffff, 0xffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000800000/0x100000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000100)={0x0, 0x100000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x40000800) 597.065205ms ago: executing program 0 (id=56): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fddbdf25210000000a000100777061a363fff40009001f"], 0x2c}}, 0x800) 560.406817ms ago: executing program 0 (id=58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x0, 0x0, 0xf5, 0x2, 0x7fffffffffffe, 0x5, 0x3, 0x8, 0x0, 0xc, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = getpid() r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x2b}) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000400)=""/28, 0x1c}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) read$FUSE(r4, &(0x7f0000000e00)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_pidfd_open(r3, 0x0) setns(r6, 0x24020000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x18, r8, 0x601, 0x70bd29, 0xfffffffc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14884}, 0x40000c4) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000004a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000003800)=ANY=[], 0x120c}, 0x1, 0x0, 0x0, 0x48005}, 0x0) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/\x04\x00\b\x00\x00\x00\v\x16k', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r11, 0x2285, 0x0) 515.043128ms ago: executing program 1 (id=60): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x168, 0x10, 0x1, 0x20000, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0xfffd, 0xfbfe, 0x1}, {@in6=@empty, 0x0, 0x32}, @in=@loopback, {0xfffffffffffffffe, 0x5, 0x0, 0x400000000000, 0x9, 0x0, 0x1000080000}, {0x0, 0x2000000000000000, 0x0, 0x100000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x3503, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x5a, 0x2, {{'cbc(aes)\x00'}, 0x90, "371b221b7235fb10b08b9f1c93b2673dc643"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf06}}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040) 477.181419ms ago: executing program 1 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_complete(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000002080)="460f019800a00000440f3802745a0348b800680000000000000f23c80f21f835080080000f23f8400f1f00f080055900000075470f35c421f97e4704440f20c0350c000000440f22c00f2097c4a2791e52b4", 0x52}], 0x1, 0x4c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x5f) syz_fuse_handle_req(r4, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18, 0x0, 0xde2, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 364.027091ms ago: executing program 2 (id=64): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x3f000000, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 363.762131ms ago: executing program 2 (id=65): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fddbdf25210000000a000100777061a363fff40009001f"], 0x2c}}, 0x800) 363.111202ms ago: executing program 2 (id=66): r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/154, 0x9a}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000340)=""/270, 0x10e}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) 313.679713ms ago: executing program 2 (id=67): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x0) 313.412803ms ago: executing program 1 (id=68): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1400037e) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2442, 0x40) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 313.183153ms ago: executing program 0 (id=69): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x168, 0x10, 0x1, 0x20000, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0xfffd, 0xfbfe, 0x1}, {@in6=@empty, 0x0, 0x32}, @in=@loopback, {0xfffffffffffffffe, 0x5, 0x0, 0x400000000000, 0x9, 0x0, 0x1000080000}, {0x0, 0x2000000000000000, 0x0, 0x100000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x3503, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x5a, 0x2, {{'cbc(aes)\x00'}, 0x90, "371b221b7235fb10b08b9f1c93b2673dc643"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf06}}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040) 235.196045ms ago: executing program 2 (id=70): r0 = syz_ublk_setup_io_uring(0x1b7a, &(0x7f0000000580)={0x0, 0x30b2, 0x8, 0x88000, 0x158}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) socket(0x2, 0x2, 0x0) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], 0x128}, 0x4004090) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x2080) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r7, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x800007, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) (async, rerun: 64) r11 = syz_io_uring_setup(0x5b17, &(0x7f0000000000)={0x0, 0xd, 0x4000, 0x0, 0x2de}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)) (async, rerun: 64) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) (async) r12 = userfaultfd(0x80801) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async, rerun: 64) ioctl$UFFDIO_ZEROPAGE(r12, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async, rerun: 64) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) (rerun: 64) syz_ublk_setup_queues(r10, r8, &(0x7f0000000380)={0x0, 0x2, 0x4, 0x2, 0x23c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2c5, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2, 0x0, 0x5d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x10, 0x0, 0x8000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff, 0x0, r11}}], 0x1, 0x0, 0x0) (async, rerun: 64) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) 234.968255ms ago: executing program 0 (id=71): mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/usb/devices\x00', 0x200, 0x10) lseek(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000040)={0x3, 0x0, [{0x80000000, 0x400, 0x4, 0x5, 0x1ff, 0x8, 0x23d}, {0x6, 0x9, 0x6, 0xcbe, 0xbde, 0x1000, 0xe2}, {0x6, 0xa, 0x2, 0x6, 0x7, 0xc}]}) 228.017705ms ago: executing program 2 (id=72): syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1059, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0xd0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa, 0x5, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x2, 0x2e, {0x8, 0x25, 0x1, 0x82, 0x0, 0xaa, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb0, 0x80, 0xf7, {0x8, 0x25, 0x1, 0x1, 0x3, 0x5, 0x5}}}}}}}}]}}, 0x0) 129.844637ms ago: executing program 0 (id=73): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5b17, &(0x7f0000000000)={0x0, 0xc995, 0x4000, 0x0, 0x2de}, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=74): r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/154, 0x9a}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000340)=""/270, 0x10e}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 21.779333][ T36] audit: type=1400 audit(1786019357.920:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.782972][ T286] cgroup: Unknown subsys name 'net' [ 21.802083][ T36] audit: type=1400 audit(1786019357.920:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.829397][ T36] audit: type=1400 audit(1786019357.950:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.829878][ T286] cgroup: Unknown subsys name 'devices' [ 21.951752][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.957451][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.073343][ T36] audit: type=1400 audit(1786019358.210:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.096723][ T36] audit: type=1400 audit(1786019358.210:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.121659][ T36] audit: type=1400 audit(1786019358.210:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.142181][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.153679][ T36] audit: type=1400 audit(1786019358.300:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.179167][ T36] audit: type=1400 audit(1786019358.300:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.205850][ T36] audit: type=1400 audit(1786019358.350:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.231479][ T36] audit: type=1400 audit(1786019358.350:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.232183][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.659352][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.666462][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.673724][ T293] bridge_slave_0: entered allmulticast mode [ 23.680269][ T293] bridge_slave_0: entered promiscuous mode [ 23.699301][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.706390][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.713529][ T293] bridge_slave_1: entered allmulticast mode [ 23.719831][ T293] bridge_slave_1: entered promiscuous mode [ 23.753177][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.760293][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.767370][ T296] bridge_slave_0: entered allmulticast mode [ 23.773792][ T296] bridge_slave_0: entered promiscuous mode [ 23.780357][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.787424][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.794591][ T296] bridge_slave_1: entered allmulticast mode [ 23.800938][ T296] bridge_slave_1: entered promiscuous mode [ 23.819843][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.826926][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.834087][ T294] bridge_slave_0: entered allmulticast mode [ 23.840487][ T294] bridge_slave_0: entered promiscuous mode [ 23.860691][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.867773][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.874936][ T294] bridge_slave_1: entered allmulticast mode [ 23.881266][ T294] bridge_slave_1: entered promiscuous mode [ 23.913026][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.920316][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.927421][ T295] bridge_slave_0: entered allmulticast mode [ 23.933843][ T295] bridge_slave_0: entered promiscuous mode [ 23.952360][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.959538][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.966640][ T295] bridge_slave_1: entered allmulticast mode [ 23.973107][ T295] bridge_slave_1: entered promiscuous mode [ 24.093335][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.100546][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.107919][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.114998][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.137241][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.144368][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.151690][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.158736][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.168942][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.176106][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.183438][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.190501][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.201538][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.208620][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.215956][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.223019][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.265243][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.272646][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.280626][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.288070][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.295464][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.302970][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.310347][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.317547][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.332102][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.339214][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.351593][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.358687][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.373437][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.380542][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.391855][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.398951][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.410504][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.417565][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.432898][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.440028][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.462243][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.469456][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.478404][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.485519][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.526955][ T296] veth0_vlan: entered promiscuous mode [ 24.540220][ T295] veth0_vlan: entered promiscuous mode [ 24.562725][ T294] veth0_vlan: entered promiscuous mode [ 24.574316][ T295] veth1_macvtap: entered promiscuous mode [ 24.583569][ T296] veth1_macvtap: entered promiscuous mode [ 24.594715][ T293] veth0_vlan: entered promiscuous mode [ 24.609822][ T294] veth1_macvtap: entered promiscuous mode [ 24.657834][ T293] veth1_macvtap: entered promiscuous mode [ 24.666690][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.793526][ T320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=320 comm=syz.0.1 [ 24.824163][ T324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.846329][ T326] overlay: ./file0 is not a directory [ 25.024251][ T341] process 'syz.2.11' launched './file0' with NULL argv: empty string added [ 25.035274][ T341] overlayfs: unescaped trailing colons in lowerdir mount option. [ 25.081419][ T346] FAULT_INJECTION: forcing a failure. [ 25.081419][ T346] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 25.095450][ T346] CPU: 0 UID: 0 PID: 346 Comm: syz.2.13 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 25.095498][ T346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.095522][ T346] Call Trace: [ 25.095531][ T346] [ 25.095544][ T346] __dump_stack+0x21/0x30 [ 25.095598][ T346] dump_stack_lvl+0x140/0x1c0 [ 25.095651][ T346] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.095696][ T346] ? check_stack_object+0x138/0x150 [ 25.095731][ T346] dump_stack+0x19/0x20 [ 25.095772][ T346] should_fail_ex+0x3c2/0x510 [ 25.095808][ T346] should_fail+0xf/0x20 [ 25.095840][ T346] should_fail_usercopy+0x1e/0x30 [ 25.095877][ T346] _copy_to_user+0x24/0xa0 [ 25.095919][ T346] simple_read_from_buffer+0xed/0x160 [ 25.095962][ T346] proc_fail_nth_read+0x1aa/0x220 [ 25.096008][ T346] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 25.096049][ T346] ? bpf_lsm_file_permission+0xd/0x20 [ 25.096082][ T346] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 25.096121][ T346] vfs_read+0x288/0xc70 [ 25.096154][ T346] ? __cfi_vfs_read+0x10/0x10 [ 25.096185][ T346] ? __kasan_check_write+0x18/0x20 [ 25.096216][ T346] ? mutex_lock+0x97/0x1d0 [ 25.096259][ T346] ? __cfi_mutex_lock+0x10/0x10 [ 25.096303][ T346] ksys_read+0x145/0x260 [ 25.096336][ T346] ? xfd_validate_state+0x68/0x140 [ 25.096377][ T346] ? __cfi_ksys_read+0x10/0x10 [ 25.096409][ T346] ? __kasan_check_write+0x18/0x20 [ 25.096440][ T346] ? fpregs_restore_userregs+0x11c/0x260 [ 25.096479][ T346] __x64_sys_read+0x7f/0x90 [ 25.096512][ T346] x64_sys_call+0x2638/0x2ee0 [ 25.096542][ T346] do_syscall_64+0x57/0xf0 [ 25.096576][ T346] ? clear_bhb_loop+0x50/0xa0 [ 25.096623][ T346] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.096664][ T346] RIP: 0033:0x7fd117b5e90e [ 25.096691][ T346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 25.096716][ T346] RSP: 002b:00007fd1189d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 25.096755][ T346] RAX: ffffffffffffffda RBX: 00007fd1189d96c0 RCX: 00007fd117b5e90e [ 25.096779][ T346] RDX: 000000000000000f RSI: 00007fd1189d90a0 RDI: 0000000000000003 [ 25.096801][ T346] RBP: 00007fd1189d9090 R08: 0000000000000000 R09: 0000000000000000 [ 25.096820][ T346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.096841][ T346] R13: 00007fd117e26038 R14: 00007fd117e25fa0 R15: 00007fffd6904558 [ 25.096868][ T346] [ 25.154162][ T337] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9'. [ 25.388936][ T352] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14'. [ 25.648845][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.699851][ T361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=361 comm=syz.1.16 [ 25.718035][ T363] overlay: ./file0 is not a directory [ 25.808917][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 25.815410][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 25.825217][ T31] usb 3-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 25.835951][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.848529][ T31] usb 3-1: Product: syz [ 25.852856][ T31] usb 3-1: Manufacturer: syz [ 25.857757][ T31] usb 3-1: SerialNumber: syz [ 25.990058][ T371] Zero length message leads to an empty skb [ 26.081394][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 26.107463][ T31] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 26.146367][ T31] usb 3-1: USB disconnect, device number 2 [ 26.212606][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.347424][ T396] netlink: 1 bytes leftover after parsing attributes in process `syz.3.33'. [ 26.458902][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.530297][ T403] incfs_lookup_dentry err:-13 [ 26.535038][ T403] incfs: Can't find or create .index dir in ./file0 [ 26.543462][ T403] incfs: mount failed -13 [ 26.610003][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 26.619906][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.633990][ T10] usb 2-1: config 0 descriptor?? [ 27.008864][ T410] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 27.179809][ T410] usb 3-1: config 162 has an invalid interface number: 79 but max is 1 [ 27.188153][ T410] usb 3-1: config 162 has an invalid interface number: 183 but max is 1 [ 27.196659][ T410] usb 3-1: config 162 has no interface number 0 [ 27.203054][ T410] usb 3-1: config 162 has no interface number 1 [ 27.209396][ T410] usb 3-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 27.222493][ T410] usb 3-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 27.233437][ T410] usb 3-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 27.244540][ T410] usb 3-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 27.255752][ T410] usb 3-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 27.267751][ T410] usb 3-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 27.279141][ T410] usb 3-1: config 162 interface 183 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 27.290586][ T410] usb 3-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 27.300757][ T410] usb 3-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 27.314145][ T410] usb 3-1: config 162 interface 79 has no altsetting 0 [ 27.321075][ T410] usb 3-1: config 162 interface 183 has no altsetting 0 [ 27.329641][ T410] usb 3-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 27.338734][ T410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.346805][ T410] usb 3-1: Product: syz [ 27.351018][ T410] usb 3-1: Manufacturer: syz [ 27.355631][ T410] usb 3-1: SerialNumber: syz [ 27.564099][ T410] pl2303 3-1:162.79: required endpoints missing [ 27.571723][ T410] pl2303 3-1:162.183: pl2303 converter detected [ 27.578339][ T410] pl2303 3-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 27.586813][ T410] pl2303 3-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 27.595441][ T410] pl2303 3-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 27.603951][ T410] pl2303 3-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 27.612355][ T410] pl2303 3-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 27.620780][ T410] pl2303 3-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 27.629394][ T410] pl2303 3-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 27.637758][ T410] pl2303 3-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 27.646215][ T410] pl2303 3-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 27.654820][ T410] pl2303 3-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 27.663416][ T410] pl2303 3-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 27.672907][ T410] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 27.682786][ T410] usb 3-1: USB disconnect, device number 3 [ 27.690920][ T410] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 27.699130][ T410] pl2303 3-1:162.183: device disconnected [ 27.872715][ T394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.881460][ T394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.117356][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 28.117376][ T36] audit: type=1400 audit(1786019364.250:161): avc: denied { create } for pid=427 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.140855][ T10] usb 2-1: Cannot set autoneg [ 28.148689][ T36] audit: type=1400 audit(1786019364.270:162): avc: denied { read } for pid=393 comm="syz.1.32" dev="nsfs" ino=4026532554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.153115][ T10] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 28.180461][ T36] audit: type=1400 audit(1786019364.270:163): avc: denied { open } for pid=393 comm="syz.1.32" path="net:[4026532554]" dev="nsfs" ino=4026532554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.192157][ T10] usb 2-1: USB disconnect, device number 2 [ 28.205400][ T36] audit: type=1400 audit(1786019364.290:164): avc: denied { mount } for pid=426 comm="syz.3.44" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 28.242190][ T432] netlink: 1 bytes leftover after parsing attributes in process `syz.2.43'. [ 28.268649][ T36] audit: type=1400 audit(1786019364.290:165): avc: denied { setopt } for pid=427 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.298984][ T36] audit: type=1400 audit(1786019364.310:166): avc: denied { unmount } for pid=426 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.318965][ T36] audit: type=1400 audit(1786019364.430:167): avc: denied { ioctl } for pid=426 comm="syz.3.44" path="socket:[4636]" dev="sockfs" ino=4636 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.366374][ T36] audit: type=1400 audit(1786019364.500:168): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 28.434655][ T36] audit: type=1400 audit(1786019364.570:169): avc: denied { execute_no_trans } for pid=438 comm="syz.0.48" path="/12/file0" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.508136][ T10] rust_binder: 443: undelivered TRANSACTION_ERROR: 29189 [ 28.579032][ T309] bridge_slave_1: left allmulticast mode [ 28.584765][ T309] bridge_slave_1: left promiscuous mode [ 28.603900][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.624873][ T309] bridge_slave_0: left allmulticast mode [ 28.641785][ T309] bridge_slave_0: left promiscuous mode [ 28.647491][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.745808][ T36] audit: type=1400 audit(1786019364.880:170): avc: denied { create } for pid=455 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 28.883146][ T309] veth1_macvtap: left promiscuous mode [ 28.905747][ T309] veth0_vlan: left promiscuous mode [ 29.058647][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.070038][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.089053][ T463] bridge_slave_0: entered allmulticast mode [ 29.095553][ T463] bridge_slave_0: entered promiscuous mode [ 29.102494][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.109799][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.116909][ T463] bridge_slave_1: entered allmulticast mode [ 29.124048][ T463] bridge_slave_1: entered promiscuous mode [ 29.148881][ T410] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.200483][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.207710][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.215085][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.219030][ T31] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 29.222221][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.251074][ T309] ------------[ cut here ]------------ [ 29.256620][ T309] WARNING: CPU: 0 PID: 309 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 29.266718][ T309] Modules linked in: [ 29.271087][ T309] CPU: 0 UID: 0 PID: 309 Comm: kworker/u8:3 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 29.282967][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.293130][ T309] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 29.297958][ T309] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 29.304070][ T309] Code: e8 c1 62 d6 fc 4b 83 3c 3e 00 75 19 e8 45 9e 7d fc 49 81 ff f8 07 00 00 74 1b e8 37 9e 7d fc 49 83 c7 08 eb c9 e8 2c 9e 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 29.323974][ T309] RSP: 0018:ffffc9000b6bfb90 EFLAGS: 00010293 [ 29.330254][ T309] RAX: ffffffff8509d394 RBX: ffff88812f5658c0 RCX: ffff88812468df00 [ 29.338276][ T309] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888101f907e0 [ 29.346331][ T309] RBP: ffffc9000b6bfbb0 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 29.355461][ T309] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: dffffc0000000000 [ 29.363791][ T309] R13: dffffc0000000000 R14: ffff888101f90000 R15: 00000000000007e0 [ 29.371903][ T309] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.380921][ T309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.385532][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 29.387546][ T309] CR2: 0000200000000b00 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 29.400918][ T309] Call Trace: [ 29.404238][ T309] [ 29.407215][ T309] cleanup_net+0x6ba/0xc90 [ 29.411723][ T309] ? __cfi_cleanup_net+0x10/0x10 [ 29.416710][ T309] ? kick_pool+0xb9/0x540 [ 29.421125][ T309] process_scheduled_works+0x7f7/0x1060 [ 29.426731][ T309] worker_thread+0xc99/0x13f0 [ 29.431497][ T309] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 29.437312][ T309] ? __kasan_check_read+0x15/0x20 [ 29.442438][ T309] kthread+0x2c7/0x360 [ 29.446554][ T309] ? __cfi_worker_thread+0x10/0x10 [ 29.451745][ T309] ? __cfi_kthread+0x10/0x10 [ 29.456377][ T309] ret_from_fork+0x67/0xa0 [ 29.460865][ T309] ? __cfi_kthread+0x10/0x10 [ 29.465491][ T309] ret_from_fork_asm+0x1a/0x30 [ 29.470372][ T309] [ 29.473417][ T309] ---[ end trace 0000000000000000 ]--- [ 29.479929][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.492538][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.504368][ T309] ------------[ cut here ]------------ [ 29.510164][ T309] WARNING: CPU: 1 PID: 309 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 29.520599][ T309] Modules linked in: [ 29.524537][ T309] CPU: 1 UID: 0 PID: 309 Comm: kworker/u8:3 Tainted: G W syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 29.537748][ T309] Tainted: [W]=WARN [ 29.541613][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.551763][ T309] Workqueue: netns cleanup_net [ 29.553484][ T410] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 29.556583][ T309] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 29.570717][ T309] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 9d 7d fc 49 81 ff f8 07 00 00 74 1b e8 e2 9d 7d fc 49 83 c7 08 eb c5 e8 d7 9d 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 9d 7d fc 5b 41 5c 41 5e 41 [ 29.578914][ T410] usb 2-1: config 0 has no interface number 0 [ 29.590722][ T309] RSP: 0018:ffffc9000b6bfb90 EFLAGS: 00010293 [ 29.602851][ T309] RAX: ffffffff8509d3e9 RBX: ffff888101f90800 RCX: ffff88812468df00 [ 29.608920][ T410] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.611006][ T309] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888101f90808 [ 29.629799][ T309] RBP: ffffc9000b6bfbb0 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 29.637821][ T309] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: dffffc0000000000 [ 29.645889][ T309] R13: dffffc0000000000 R14: ffff888101f90000 R15: 0000000000000008 [ 29.653943][ T309] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.658954][ T410] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.663116][ T309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.679699][ T309] CR2: 0000001b2f123ffc CR3: 000000011b4d8000 CR4: 00000000003526b0 [ 29.687717][ T309] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.695792][ T309] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 29.696517][ T410] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 29.703836][ T309] Call Trace: [ 29.703849][ T309] [ 29.703859][ T309] cleanup_net+0x6ba/0xc90 [ 29.723625][ T309] ? __cfi_cleanup_net+0x10/0x10 [ 29.728612][ T309] ? kick_pool+0xb9/0x540 [ 29.733056][ T309] process_scheduled_works+0x7f7/0x1060 [ 29.733707][ T410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.738633][ T309] worker_thread+0xc99/0x13f0 [ 29.751609][ T309] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 29.757383][ T309] ? __kasan_check_read+0x15/0x20 [ 29.762605][ T309] kthread+0x2c7/0x360 [ 29.766724][ T309] ? __cfi_worker_thread+0x10/0x10 [ 29.771938][ T309] ? __cfi_kthread+0x10/0x10 [ 29.776586][ T309] ret_from_fork+0x67/0xa0 [ 29.781083][ T309] ? __cfi_kthread+0x10/0x10 [ 29.785715][ T309] ret_from_fork_asm+0x1a/0x30 [ 29.790038][ T410] usb 2-1: config 0 descriptor?? [ 29.790655][ T309] [ 29.798500][ T309] ---[ end trace 0000000000000000 ]--- [ 29.804084][ T31] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 29.879188][ T309] ------------[ cut here ]------------ [ 29.884727][ T309] WARNING: CPU: 1 PID: 309 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 29.894397][ T309] Modules linked in: [ 29.898336][ T309] CPU: 1 UID: 0 PID: 309 Comm: kworker/u8:3 Tainted: G W syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 29.911669][ T309] Tainted: [W]=WARN [ 29.915504][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.925737][ T309] Workqueue: netns cleanup_net [ 29.930597][ T309] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 29.936215][ T309] Code: 3c 20 00 74 08 48 89 df e8 ff 20 f1 fc 48 8b 3b e8 27 13 dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 89 b7 00 cc e8 72 5c 98 fc <0f> 0b e9 b0 fd ff ff e8 66 5c 98 fc 0f 0b e9 18 fe ff ff e8 5a 5c [ 29.955913][ T309] RSP: 0018:ffffc9000b6bfb70 EFLAGS: 00010293 [ 29.962051][ T309] RAX: ffffffff84ef154e RBX: ffff88812f5658c0 RCX: ffff88812468df00 [ 29.970119][ T309] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88812468df00 [ 29.978132][ T309] RBP: ffffc9000b6bfb98 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 29.986198][ T309] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: 1ffffffff0fa8250 [ 29.994414][ T309] R13: dffffc0000000000 R14: ffff88812f5664c0 R15: dffffc0000000000 [ 30.002543][ T309] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.011680][ T309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.018309][ T309] CR2: 00007f6ddc8e836a CR3: 000000010f3a6000 CR4: 00000000003526b0 [ 30.026396][ T309] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.034450][ T309] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 30.042517][ T309] Call Trace: [ 30.045858][ T309] [ 30.048834][ T309] xfrm_net_exit+0x31/0x80 [ 30.053305][ T309] cleanup_net+0x6ba/0xc90 [ 30.057770][ T309] ? __cfi_cleanup_net+0x10/0x10 [ 30.062800][ T309] ? kick_pool+0xb9/0x540 [ 30.067172][ T309] process_scheduled_works+0x7f7/0x1060 [ 30.072997][ T309] worker_thread+0xc99/0x13f0 [ 30.077723][ T309] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 30.083644][ T309] ? __kasan_check_read+0x15/0x20 [ 30.088717][ T309] kthread+0x2c7/0x360 [ 30.092888][ T309] ? __cfi_worker_thread+0x10/0x10 [ 30.098035][ T309] ? __cfi_kthread+0x10/0x10 [ 30.102709][ T309] ret_from_fork+0x67/0xa0 [ 30.107174][ T309] ? __cfi_kthread+0x10/0x10 [ 30.111849][ T309] ret_from_fork_asm+0x1a/0x30 [ 30.116647][ T309] [ 30.119716][ T309] ---[ end trace 0000000000000000 ]--- [ 30.202942][ T410] usb 2-1: can't set config #0, error -71 [ 30.213353][ T309] bridge_slave_1: left allmulticast mode [ 30.224421][ T309] bridge_slave_1: left promiscuous mode [ 30.228311][ T410] usb 2-1: USB disconnect, device number 3 [ 30.237453][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.245624][ T309] bridge_slave_0: left allmulticast mode [ 30.251458][ T309] bridge_slave_0: left promiscuous mode [ 30.257119][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.266653][ T309] bridge_slave_1: left allmulticast mode [ 30.272432][ T309] bridge_slave_1: left promiscuous mode [ 30.278097][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.286000][ T309] bridge_slave_0: left allmulticast mode [ 30.291820][ T309] bridge_slave_0: left promiscuous mode [ 30.297467][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.513115][ T309] veth1_macvtap: left promiscuous mode [ 30.518649][ T309] veth0_vlan: left promiscuous mode [ 30.524190][ T309] veth1_macvtap: left promiscuous mode [ 30.529781][ T309] veth0_vlan: left promiscuous mode [ 30.880623][ T309] bridge_slave_1: left allmulticast mode [ 30.886319][ T309] bridge_slave_1: left promiscuous mode [ 30.892003][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.899551][ T309] bridge_slave_0: left allmulticast mode [ 30.905193][ T309] bridge_slave_0: left promiscuous mode [ 30.911164][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.918960][ T309] bridge_slave_1: left allmulticast mode [ 30.924704][ T309] bridge_slave_1: left promiscuous mode [ 30.930432][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.937849][ T309] bridge_slave_0: left allmulticast mode [ 30.943560][ T309] bridge_slave_0: left promiscuous mode [ 30.949303][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.112263][ T309] veth1_macvtap: left promiscuous mode [ 31.117811][ T309] veth0_vlan: left promiscuous mode