last executing test programs: 3.82860982s ago: executing program 2 (id=3): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x29fe, 0x20, 0x3, 0x122}, &(0x7f0000000080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9a9, 0x78040, 0x0, 0xf3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3da6, 0x40000, 0x3, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a6b, 0x4000, 0x3, 0x154}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1edf, 0x2, 0x2, 0x2bf}}], 0x4, &(0x7f0000001340)={0x2e, 0x7, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x2, {}, 0x0, 0x0, '\x00', {0x0, 0xb13, 0x0, &(0x7f0000000340)=@buf_1k="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"}}, &(0x7f00000013c0)) pwrite64$ublk_ch(r0, &(0x7f0000001400)=@buf_4k="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", 0x1000, 0xd) (async) socketpair(0x2, 0xa, 0x8, &(0x7f0000000300)) 3.690364473s ago: executing program 2 (id=7): r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x20000}}], 0x1, 0x1) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000140)={0x100000}) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), 0x0, 0x400) 3.536478917s ago: executing program 2 (id=12): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x258, 0x0, 0x200}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000778000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4080, 0xff0, 0x0, 0x0}, 0x0) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc0386723, &(0x7f00000000c0)) (async) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc0386723, &(0x7f00000000c0)) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r2, 0x2284, &(0x7f0000000100)=0x3) (async) ioctl$FIBMAP(r2, 0x2284, &(0x7f0000000100)=0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x17b, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) userfaultfd(0x3) (async) userfaultfd(0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) dup(r4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r5, 0x201, &(0x7f00000001c0)={0x0}) (async) ptrace$setregset(0x4205, r5, 0x201, &(0x7f00000001c0)={0x0}) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x5, 0x100000, 0x7, 0x86, 0x0, 0x7, 0x3}, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x3, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_create(0x5, &(0x7f0000000080)={0x0, 0x3, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 3.533806967s ago: executing program 1 (id=13): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000180)=0x54) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x38}], 0x1}, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r4, &(0x7f0000000340)=""/19, 0x13, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f00000002c0)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002d0001002dbd7000ffdba64c08000d00", @ANYRES32=r2, @ANYBLOB="14001a801000db800c00ac8008000100627066"], 0x2c}], 0x1, 0x0, 0x0, 0x24004808}, 0xc000) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000140)={0x5, 0x8}) write$cgroup_pid(r6, &(0x7f00000013c0), 0xfffffdef) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x1, 0x0, 0x3, 0x1, 0x1}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r10, 0x1000) r11 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) readv(r11, &(0x7f0000002a80)=[{&(0x7f0000000900)=""/231, 0xe7}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r9) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010029bd7000fedbdf2502"], 0x20}, 0x1, 0x0, 0x0, 0x8011}, 0x4000000) 3.435778579s ago: executing program 2 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc815}, 0x240800c0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) 3.229585374s ago: executing program 2 (id=15): mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000040)={[{@nr_blocks={'nr_blocks', 0x3d, [0x67]}}]}) r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x28, 0x313001) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000000c0)) 3.156792236s ago: executing program 32 (id=15): mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000040)={[{@nr_blocks={'nr_blocks', 0x3d, [0x67]}}]}) r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x28, 0x313001) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000000c0)) 3.153694926s ago: executing program 0 (id=17): r0 = fsopen(&(0x7f0000000000)='vfat\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) syz_usb_connect$midi(0x5, 0x60, &(0x7f0000000300)=ANY=[@ANYBLOB="120100020000001099044b4740000102030109024e0001010980e80904000003ffff0000072401ac00070009050c03"], 0x0) 2.078498711s ago: executing program 1 (id=21): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5001}, 0x20000000) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x8010, r1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000a40), 0x6) write$vga_arbiter(r0, &(0x7f0000000380)=@other={'decodes', ' ', 'none'}, 0xd) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000500)=[@nested_load_syzos={0x136, 0x110, {0x0, 0x2, [@nested_create_vm={0x12d, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0x0, 0x6, 0x2}}, @nested_vmresume={0x130, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x88fe, 0x5}}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0xbfb}}, @nested_amd_stgi={0x17e, 0x10}]}}], 0x110}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) syslog(0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@private=0xa010100, @local}, 0xc) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8000) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@private1, 0x56}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) syz_genetlink_get_family_id$team(&(0x7f0000000040), r8) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x2, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r10, 0x8923, &(0x7f0000000200)="943a") ioctl$KVM_CREATE_VM(r3, 0xae01, 0x40) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.035269512s ago: executing program 4 (id=22): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r3, 0x1265, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) (async, rerun: 64) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000001000/0x4000)=nil, 0x4000}) (rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255, 0x0, r8}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x124, {0x0, 0x0, 0x0, 0x4, 0x8}}) 1.944255344s ago: executing program 4 (id=23): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000002c0)={0x0, 0x2, 0x0, [0x3ff, 0x971a, 0x3, 0xfffffffffffffffa, 0x9], [0x5, 0x1de6, 0x5, 0x9, 0x8, 0xbe25, 0x6, 0xf, 0x80000001, 0x1, 0x9, 0x274e, 0x2, 0x1c2, 0x8000, 0x1, 0xc1, 0x2, 0x2dd, 0x0, 0x8001, 0x4, 0x8, 0x8000, 0x7, 0x1, 0x8, 0x1, 0x7fffffffffffffff, 0x2, 0x8001, 0x9c2, 0xc20e, 0x0, 0x0, 0x8, 0x2, 0x0, 0x9, 0xfff, 0x3, 0x74c, 0x5, 0x1, 0x8000, 0xfffffffffffff9f7, 0x7fff, 0x4, 0xffffffffffffffff, 0xcc08, 0x1, 0x5, 0x4, 0x9, 0x67, 0x1ff, 0x4, 0x8000, 0x9, 0xc3, 0xe465, 0x3, 0x6, 0x1ff, 0x80000001, 0x10, 0x4, 0x9, 0x86, 0x5, 0xb4, 0x2, 0x4, 0x80, 0x1000, 0x8, 0x8, 0x6, 0x7fffffffffffffff, 0x52c, 0x4, 0x9, 0x5, 0x2, 0x9, 0x5, 0x15be, 0x9, 0x3, 0x10, 0x9, 0x5, 0x3, 0x4ee3710a, 0x2, 0x59, 0x1, 0xa48e, 0xd, 0x800, 0x8, 0x9, 0x0, 0x0, 0x7fffffffffffffff, 0x8001, 0x9, 0xfffffffffffffffe, 0x4, 0xf, 0x4, 0xffffffff, 0x9d8, 0x1, 0x4, 0xfffffffffffffff7, 0x2, 0x7fffffff, 0x7, 0x7fff, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000700)={{r0}, r1, 0x2, @inherit={0x68, &(0x7f0000000240)={0x1, 0x4, 0x8, 0x9, {0x20, 0xffffffffffffffff, 0x1f, 0x5, 0x2f9b}, [0xb, 0x2, 0x9, 0x2]}}, @devid=r2}) ioctl$FICLONE(r0, 0x40049409, r0) pipe2$watch_queue(&(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000002600)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000025c0)={&(0x7f0000001780)={0xe0c, 0x0, 0x5, 0x0, 0x0, 0x0, {0x2, 0x0, 0x8}, [{{0x254, 0x1, {{0x2, 0x6880f050}, 0x9, 0x2, 0x17c, 0x5, 0x11, 'syz1\x00', "898fb8d739ac21da596566084500d5bb747f614d339eb8dd7bff485861273ae1", "4d8e0d271250cc914bc4c39aa2e49c3ab4813356c87529f24ae559ebbbf44e5f", [{0xb14, 0x5aa, {0x0, 0x40000000}}, {0x8, 0x4, {0x3, 0x3}}, {0x8001, 0x7fff, {0x2, 0xc14e}}, {0x6, 0xa81, {0x2, 0x7}}, {0x6b, 0xfff2, {0x1, 0x6}}, {0xf6e, 0x9e, {0x1, 0x5c}}, {0x5, 0x2, {0x2, 0x5}}, {0x2, 0x8, {0x0, 0x6c3}}, {0xb8e1, 0x9, {0x0, 0x8}}, {0x9, 0x8, {0x1, 0x8}}, {0x3, 0x9, {0x0, 0x3}}, {0x8, 0x842d, {0x1, 0xca}}, {0x10, 0xd, {0x0, 0x400}}, {0x5, 0x470, {0x3, 0x400}}, {0x0, 0x6, {0x0, 0x7065}}, {0x8, 0x969, {0x1, 0x4}}, {0xf48c, 0x1e, {0x3, 0x8}}, {0x0, 0xf92, {0x1}}, {0xfff, 0x81, {0x0, 0x6}}, {0xdd1, 0x4, {0x3, 0x7}}, {0x0, 0x5, {0x4, 0x68c}}, {0x3, 0x1000, {0x0, 0x200}}, {0x1c3f, 0x44, {0x1, 0x3a}}, {0x1, 0x1, {0x0, 0x9}}, {0x8, 0xec48, {0x0, 0x7ff}}, {0x140, 0x1, {0x0, 0x1}}, {0xfe01, 0x7f, {0x0, 0x7}}, {0x6, 0xffbf, {0x3, 0x3}}, {0xe, 0xa, {0x3, 0x100}}, {0x6, 0x1ff, {0x0, 0xfffffe00}}, {0x3c, 0x51d, {0x3, 0x17}}, {0x6, 0x8000, {0x1, 0x8}}, {0x1a, 0xf7b1, {0x1, 0x4}}, {0x9, 0x9, {0x2, 0x4}}, {0x1ff, 0x5, {0x3, 0xffff8000}}, {0x800, 0xfe00, {0x3, 0x55}}, {0x3, 0x6, {0x1, 0x73ff}}, {0xac, 0x9, {0x1, 0x40}}, {0x81, 0x7, {0x2, 0xfffffff7}}, {0x4, 0x4, {0x3, 0xe5f}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0xe, 0x6, 0x8, 0x80, 0xe, 'syz1\x00', "1380018021163625aa14d480c4cbc45d8bdb7cb7135be3062f74efa57230a215", "141b2a06e85adbdc9d20f4a7b892b3b795c9ea7a86ce52c0071541bf23e23776", [{0xad, 0xd57d, {0x0, 0xffffffff}}, {0x100, 0x200, {0x3, 0x4}}, {0xdaec, 0xffda, {0x3, 0x3}}, {0x6, 0x9, {0x1, 0x1}}, {0x5, 0xfc58, {0x1, 0x8000}}, {0x4, 0xea23, {0x0, 0xfe}}, {0x0, 0x9, {0x3, 0xa08}}, {0x5, 0xd, {0x3, 0x800}}, {0x0, 0x0, {0x3, 0xfffffffb}}, {0x2, 0x0, {0x1, 0x2}}, {0xc, 0x2, {0x2, 0x170}}, {0x9, 0x7f, {0x2, 0x9}}, {0x3, 0xf, {0x1, 0x6}}, {0x2, 0x9, {0x2, 0x1ff}}, {0x2, 0x0, {0x3, 0x7}}, {0x5, 0x0, {0x1, 0x7ff}}, {0x10, 0xe, {0x1, 0x5}}, {0x3, 0x3, {0x2}}, {0x100, 0x1ff, {0x1, 0x800}}, {0x7fff, 0x1000, {0x3, 0x3}}, {0x8000, 0x9, {0x3, 0x5}}, {0x7, 0x6, {0x0, 0x3}}, {0x9, 0x8, {0x1, 0x5}}, {0x0, 0xe3c, {0x3, 0x2}}, {0x99e1, 0x0, {0x2, 0x8}}, {0x7, 0x3}, {0xff53, 0xde8, {0x1, 0x4}}, {0x9, 0x1, {0x0, 0x8}}, {0x400, 0xf68, {0x2, 0x7}}, {0x101, 0xcd6a, {0x0, 0x4}}, {0x6, 0x0, {0x2, 0x8}}, {0x6d8, 0x7ff, {0x1, 0xf4}}, {0x1, 0x36, {0x0, 0x1}}, {0x1ff, 0x8, {0x2, 0x80000001}}, {0x4, 0x7fff, {0x1, 0x8}}, {0x380, 0x9, {0x0, 0xfffff17a}}, {0x6, 0xb, {0x2, 0x4}}, {0x8001, 0x1, {0x0, 0xff}}, {0x8, 0x6, {0x1}}, {0x7, 0x3, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x2, 0x3, 0x4, 0x9, 0x1c, 'syz1\x00', "4806c1eca911efdadda48173c14382cb2785b9d16789b19fed27f6a4a0222c64", "3e6de96d111cf7a1d0f2116e7c7ef40a1887a25be8c09b7f5d7ad61413b3fe63", [{0x6, 0x9, {0x3, 0x10000}}, {0x7, 0x7, {0x0, 0x3}}, {0x3ff, 0x4, {0x1, 0x4a1}}, {0x8, 0x7, {0x1, 0x1ff}}, {0x7, 0x6, {0x0, 0x4}}, {0x2, 0x6, {0x2}}, {0x635a, 0x2, {0x2, 0xe}}, {0x7, 0x2, {0x3, 0x1587}}, {0x9, 0x401, {0x0, 0x4}}, {0x2, 0x3, {0x3, 0x5}}, {0xf830, 0x40, {0x1, 0x2}}, {0xffff, 0x7fff, {0x2, 0x8}}, {0x8, 0x7, {0x2, 0x8}}, {0x1000, 0x9dfb, {0x8d4887af5a19eeb8, 0x6}}, {0x144a, 0x1, {0x2}}, {0x8, 0xe0f1, {0x2, 0x400}}, {0x2, 0x83, {0x3, 0x7}}, {0x8, 0xee19, {0x3, 0x6}}, {0x3, 0xea95, {0x0, 0xfffffa20}}, {0xf0, 0xfff, {0x1, 0x6}}, {0x7, 0x1000, {0x3, 0xbe7}}, {0x1, 0xc, {0x3, 0x6}}, {0xfc0, 0x9, {0x1, 0x10000}}, {0x6, 0x6, {0x2, 0x4}}, {0x1e0, 0x5d, {0x2, 0x6}}, {0x6, 0x5a27, {0x0, 0x3}}, {0x9, 0x9, {0x3, 0x50a}}, {0x8, 0x3, {0x3, 0x10}}, {0x1, 0x1c6, {0x2, 0x1}}, {0x400, 0x66e, {0x0, 0x10001}}, {0x7ff, 0x281f, {0x1, 0x10}}, {0x0, 0x712, {0x3, 0xfffffff1}}, {0x0, 0x6, {0x5, 0x4}}, {0x8, 0xfff7, {0x1, 0x1}}, {0x9, 0xfe3d, {0x2, 0x401}}, {0x9, 0x9, {0x1, 0x3}}, {0x4, 0x0, {0x1, 0x1000}}, {0x9, 0x7, {0x3, 0xfffffffa}}, {0x48c6, 0x5, {0x37e07a7511a192df, 0xf22}}, {0x10, 0x7, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x6, 0x2b, 0x2, 0xa37e, 0x23, 'syz0\x00', "780d2a60db878cb8f9d97cc5de0646b6892fef28307798c1fb1fa5813b8a7dd1", "3996d3b1bbc36a9a96341a2d07ca6ae846eb5fdf46e720fdbddb01b6681b3d79", [{0x6, 0x3, {0x1, 0x2}}, {0x2800, 0x6, {0x2, 0xa8}}, {0x81, 0x9, {0x2}}, {0x3ff, 0x2, {0x2, 0x6}}, {0xf, 0x3, {0x0, 0x5}}, {0x4, 0x3cb7, {0x3, 0x1}}, {0x6, 0x5ae8, {0x1, 0x6}}, {0x10, 0x101, {0x0, 0x5}}, {0x0, 0xd46d, {0x1, 0x7}}, {0x7, 0x2, {0x0, 0x9}}, {0x5, 0x0, {0x1}}, {0x9d, 0x2, {0x3}}, {0x7, 0x8}, {0x80, 0x3, {0x3, 0x5}}, {0x7, 0x4, {0x0, 0x1}}, {0x4, 0xac3, {0x1, 0x5}}, {0x3, 0x1, {0x3, 0x5}}, {0x0, 0x800, {0x2, 0x6}}, {0x8, 0x3, {0x2, 0xe54}}, {0x2, 0x2eb6, {0x1, 0x92}}, {0xfff4, 0x0, {0x2, 0x41}}, {0x9, 0x101, {0x3, 0x1bf}}, {0xffff, 0xa, {0x0, 0x7}}, {0x1, 0x74, {0x1, 0x1ff}}, {0x8001, 0x800, {0x0, 0x3}}, {0x8001, 0x30, {0x3}}, {0x0, 0xfa71, {0x3, 0x3}}, {0x7, 0xa, {0x1}}, {0x6, 0x0, {0x0, 0x3ff}}, {0xc, 0x6, {0x1, 0x7}}, {0x6, 0x7fff, {0x0, 0x14000000}}, {0x4, 0x5, {0x1, 0x7}}, {0x4, 0xffd7, {0x3, 0x7}}, {0x0, 0x5, {0x5, 0x69a}}, {0x8, 0xedad, {0x2, 0xb}}, {0xf, 0xd, {0x3, 0x8}}, {0xfffc, 0x5, {0x0, 0x7}}, {0xe2b8, 0xf, {0x0, 0x7}}, {0x4, 0x78fc, {0x0, 0x8}}, {0x6, 0x2}]}}}, {{0x254, 0x1, {{0x5, 0x8}, 0x9, 0xb, 0xff, 0xd92c, 0x1e, 'syz0\x00', "0f70e2df000a0749c8e2e76a35ff17b5b60e73f2a3257b2f9aa11e53d8b81bef", "6154ace6342e31c325db6117e0d3960b278c1ba4a1b3391447bfe82212ec94e4", [{0x3, 0x7ff, {0x0, 0x4}}, {0x1, 0x6, {0x1, 0x1}}, {0x1, 0x3, {0x1, 0x3}}, {0x8, 0x6, {0x0, 0x2}}, {0xfff, 0x6, {0x1, 0x2}}, {0x8072, 0x5, {0x2, 0x81}}, {0x3d60, 0x2, {0x1}}, {0xf80d, 0x0, {0x3, 0xfffffffa}}, {0xfff1, 0x81, {0x2, 0x8}}, {0x7d38, 0x5, {0x3, 0xffffffff}}, {0x8, 0x0, {0x2, 0x88}}, {0x3, 0x9, {0x1, 0x5}}, {0x5, 0x4, {0x0, 0x2}}, {0xd9, 0x400, {0x0, 0x1ff}}, {0x8, 0x9, {0x3, 0x800}}, {0x0, 0xc562, {0x1, 0x3}}, {0x2, 0x5, {0x0, 0x9}}, {0x0, 0x4, {0x2, 0x6}}, {0x1, 0x0, {0x2, 0x5}}, {0xf8fc, 0x0, {0x0, 0x6}}, {0x400, 0x7b06, {0x3, 0xbb88}}, {0x2, 0x8, {0x1, 0x5}}, {0x8000, 0x2, {0x0, 0x2}}, {0x4, 0x3, {0x3, 0x2d}}, {0x1, 0x5, {0x3, 0xab92}}, {0x5, 0x5, {0x0, 0x9}}, {0x101, 0x7, {0x1, 0xfffff800}}, {0x4, 0x6, {0x2, 0xb}}, {0x5, 0x1, {0x1, 0x3}}, {0xfffe, 0x9, {0x2, 0xff}}, {0xff81, 0x401, {0x0, 0xfff}}, {0x100, 0x1, {0x0, 0x3}}, {0xc6, 0xc, {0x2, 0x7}}, {0x9, 0x3, {0x2, 0x5}}, {0xc41, 0x7ff, {0x3, 0x7}}, {0x9, 0x6, {0x1, 0x3a36}}, {0x40, 0x4, {0x0, 0x7f}}, {0x1000, 0x2, {0x2, 0xfffffff8}}, {0x1000, 0x5, {0x2, 0x7}}, {0x800, 0x1, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0xa, 0x2, 0x9, 0x9, 0xc, 'syz1\x00', "69db8ee6384bf5f673777f5d5c52993e556599c993fbd532f0aba591ed58972e", "cdbee1dfc174e93283ea6ee7c51df23e0e280e34141073bdce778a7d935e4f5c", [{0x0, 0x8000, {0x3, 0xd}}, {0x4, 0x9, {0x0, 0xd50}}, {0x4, 0x632, {0x2, 0x2}}, {0xea50, 0x3ff, {0x0, 0x9}}, {0x3, 0x81, {0x3, 0x2}}, {0x101, 0x5f, {0x0, 0xfffffff9}}, {0x6, 0x9, {0x3, 0xab1}}, {0xfff, 0x8001, {0x2, 0x7fff}}, {0x2, 0x1b, {0x3, 0x3}}, {0x9, 0x1, {0x3}}, {0xff92, 0x8, {0x1, 0x6}}, {0x3ff, 0x3, {0x3, 0x89}}, {0x3, 0x9, {0x3, 0x5}}, {0x6, 0x40, {0x0, 0x400}}, {0x3, 0x9, {0x1, 0x80}}, {0x1, 0x2e0, {0x3, 0x400}}, {0x2, 0x7f, {0x2}}, {0x8, 0x8, {0x2, 0x6c2a}}, {0x401, 0x7, {0x3, 0x89d5}}, {0x7, 0xc0, {0x2, 0x5}}, {0x3, 0xfff2, {0x0, 0x5}}, {0xfbff, 0x401, {0x3, 0xfffffffd}}, {0x1ff, 0x3, {0x3, 0x6}}, {0x1, 0x1ff, {0x1, 0x2}}, {0xff, 0x2, {0x1}}, {0xea, 0x6, {0x2, 0x6}}, {0x8, 0x9, {0x3}}, {0x5, 0x835, {0x2, 0x2}}, {0x0, 0x9, {0x2, 0xffffffba}}, {0x75, 0x9, {0x3, 0x4}}, {0x5, 0x4, {0x2, 0x5}}, {0xb1c, 0x4, {0x1, 0xc}}, {0x25, 0x7, {0x3, 0x40}}, {0x2, 0x6259, {0x1, 0xfffffff9}}, {0x84, 0x5, {0x2, 0x8}}, {0xf, 0xff}, {0x6, 0x8, {0x1, 0x5}}, {0x7ff, 0x9, {0x2, 0x4}}, {0x9f, 0x9, {0x1, 0x3}}, {0x9, 0x2, {0x3, 0x4}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x801}, 0x4008800) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000002640)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000002680)=0x1) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000026c0)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f00000027c0)=0xe8) stat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, r5, r6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000028c0)='net/mcfilter\x00') r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002940), r4) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x2c, r9, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'rose0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002d40)={0x4c, 0x0, &(0x7f0000002c00)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002b40)={@ptr={0x70742a85, 0x0, &(0x7f0000002a40)=""/199, 0xc7, 0x0, 0x19}, @flat=@handle={0x73682a85, 0x101, 0x2}, @fda={0x66646185, 0x7, 0x1, 0x36}}, &(0x7f0000002bc0)={0x0, 0x28, 0x40}}, 0x440}], 0xa6, 0x0, &(0x7f0000002c80)="cb6353822abcd2bcccfd77ee43b3abc27fb4dabefeec661ad955885987c9dfcfff4634d4e024060b0fa765ea4a45a1e00fd9b9d0fd782e9936657b0c98fae865ec676c7e4ef19ad2fe7a2ad75dd50170480c986b191073f946e567c85451b449545bbc064313d527fd3fd3a7cd45d90bc520d5f68c69275e14c93b957dca86192b7729868bd84c427482857f70b2842673b46e1ced320174f6042a642c3f43d83d4d88b9b916"}) ioctl$XFS_IOC_FSINUMBERS(r3, 0xc0205867, &(0x7f0000003100)={&(0x7f0000002d80)=0x8000000000000000, 0x8, &(0x7f0000002dc0)=[{}, {}, {}, {}], &(0x7f00000030c0)}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000003140)={0x3, 0x100, 0x10000000, 0x4, 0xffff0001, 0xa}) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000003240)={&(0x7f0000003180), 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, r9, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4001) r10 = syz_open_pts(r4, 0x60000) ioctl$VFAT_IOCTL_READDIR_BOTH(r10, 0x82307201, &(0x7f0000003280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000034c0)={0x0, 0x0}) syz_open_procfs(r11, &(0x7f0000003540)='net/ip_tables_matches\x00') connect$vsock_stream(0xffffffffffffffff, &(0x7f0000003580)={0x28, 0x0, 0xffffb1dd, @hyper}, 0x10) r12 = ioctl$USERFAULTFD_IOC_NEW(r7, 0xaa00) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f00000035c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f0000003600)={0x3, 0xfffffffb, 0x81, 0x2, 0x5}) socket$netlink(0x10, 0x3, 0x10) 1.861851676s ago: executing program 1 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001c80)={0x1, [{0x1, 0x0, 0x80000005, 0x0}, {0x7, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x38b8, 0x8, &(0x7f0000000940)="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"}, {0x2, 0x0, 0xe, 0x0}, {0x1, 0x44, 0x3, 0x0}, {0x0, 0x4d, 0x5, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x4, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x2dd, 0x0}, {0x1, 0x0, 0x40000, 0x0}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.751574149s ago: executing program 4 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt(r2, 0x90, 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{}, 0x16, 0x0, 0xffffffff}, 0x18) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000240)='15', 0xfffffdd2}], 0x100000000000002f) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x490, 0x0, 0x4}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000580)="660f6ff1650f35f40f20c06635000000800f22c0660f3803d866b9e40200000f320f350f9ade0f01c50f7930", 0x2c}], 0x1, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="0f22430a0a35200000000e22dc0f228566b9cd0900000f320f01d1640fc73ea2770f20c06635040000000f22c0360f01c40fc38300808f073e3e0fc72d", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_XSAVE2(r10, 0x9000aecf, &(0x7f0000ff7000/0x3000)=nil) 1.631718582s ago: executing program 0 (id=27): r0 = socket$inet6(0xa, 0x5, 0xc) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000300)=ANY=[], 0x40) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000240)) 1.593731353s ago: executing program 3 (id=28): mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = memfd_create(&(0x7f0000000000)='%\x00', 0x3) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="6cc5e1a9374187675ddbb27ea364e00da3afd303a42eb086e2505cf04b5b9dab623e9ae67e8191f77726fa41eb2fecdc904a850c2dfe1b06ae90b754960c275f03d54d77fbfb4ca0f65072a3738598418c7696dac97f129acdc48715e181a30cc2a04ab9ff14a8de203962ce4b30ac95e8b876a57fd90313348e8599afc30043", 0x80}, {&(0x7f0000000100)="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", 0xbe8}], 0x2}}], 0x1, 0x80) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf, 0x1a050, r0, 0x1e290000) rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8) 1.472528005s ago: executing program 3 (id=29): setns(0xc9, 0x0) r0 = socket$inet6(0x10, 0x5, 0x5) sendto$inet6(r0, &(0x7f0000000080)='L\x00\x00', 0x3, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20601, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3af43, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0xc}, 0x0) fsopen(&(0x7f0000000280)='configfs\x00', 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0), 0xf) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00', 0x1000}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) setresuid(0xee01, 0xee01, 0x0) write$cgroup_subtree(r3, 0x0, 0x7) ioctl$TUNSETLINK(r1, 0x400454cd, 0xfffe) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x20b80, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000240)={'NETMAP\x00'}, &(0x7f0000000200)=0x1e) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000380)={0x3, 0x4, 0x4, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@xino_auto}], [{@euid_gt}, {@subj_role={'subj_role', 0x3d, '/dev/fuse\x00'}}, {@euid_gt}, {@euid_eq}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/fuse\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'configfs\x00'}}, {@obj_role={'obj_role', 0x3d, '}\n'}}, {@smackfsdef={'smackfsdef', 0x3d, ')-'}}, {@flag='mand'}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000001}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0x6f, 0x391101) mremap(&(0x7f0000e05000/0x4000)=nil, 0x4000, 0x9000, 0x0, &(0x7f0000f76000/0x9000)=nil) r7 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r7, 0x1, 0x14, 0x0, &(0x7f0000000180)) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3f, 0x2b8c46217dfebc6b}, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r6, 0x80045519, 0x0) 1.422229307s ago: executing program 0 (id=30): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_clone3(&(0x7f0000000900)={0x110862000, &(0x7f0000000040), 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r0, &(0x7f0000002840)={0x2020, 0x0, 0x0}, 0x2020) statx(r0, &(0x7f0000004880)='./file0\x00', 0x6000, 0x20, 0x0) getgroups(0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) bind$tipc(r3, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000004a00)={0xa0, 0x0, r2, {{0x3, 0x3, 0x3, 0x8001, 0x3, 0xffff, {0x6, 0x7, 0x7, 0x22, 0x5, 0x7, 0x13, 0x8e7, 0x2, 0x1000, 0x80000001, 0x0, 0x0, 0x1ff0000, 0x5}}, {0x0, 0x8}}}, 0xa0) 1.420716597s ago: executing program 3 (id=31): syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) close(0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000005c0)=0x9) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x0, 0x5, 0x80000000, 0xbf9, 0x18, "ca113b1cdc86e58ebfb00f5fa97e2e7a93df9a"}) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0x8a, 0x7, 0x3, 0xe0, 0x1b}) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) read$FUSE(r4, 0x0, 0x9) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000000140)=0x2, 0xc, 0x1, 0x0, 0x0, 0x2) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40840) 1.360745068s ago: executing program 0 (id=32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r0, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r3) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x108, r0}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x1) close(r1) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x8000) listen(r0, 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) lseek(r4, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 1.329281379s ago: executing program 0 (id=33): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) close(0x3) statx(r0, &(0x7f0000000100)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x4000, 0x80, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='my_sys\x00', &(0x7f00000000c0), 0xe0800, &(0x7f0000000440)={'trans=virtio,', {[{@noxattr}, {@dfltuid={'dfltuid', 0x3d, r1}}], [{@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, 'sysfs\x00'}}, {@obj_role={'obj_role', 0x3d, '[\\,!\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, '\'[::!'}}]}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) 1.210391282s ago: executing program 4 (id=34): madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/200, 0xc8}], 0x1, 0x3, 0x0) 1.102610164s ago: executing program 3 (id=35): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40440, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000440)={0x10a, 0x10, &(0x7f0000000040)}) 1.074948154s ago: executing program 3 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60000) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x1f, [0x1, 0x10, 0x3, 0x8, 0x9, 0x61], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/31}, &(0x7f0000000280)=0x78) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 982.487817ms ago: executing program 4 (id=37): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0xc) tkill(r3, 0x3) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) umount2(&(0x7f0000000340)='./file0\x00', 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r8, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}], 0x20}}], 0x2, 0x4000010) close_range(r4, 0xffffffffffffffff, 0x0) 981.449187ms ago: executing program 4 (id=38): r0 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x1, 0x11}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000000)=0x4800008, 0x4) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r2, &(0x7f0000000000)=""/78, 0x4e) (async) getdents(r2, &(0x7f0000000200)=""/251, 0xfb) (async, rerun: 64) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r2}, 0x6, &(0x7f0000000100)=[0xf1, 0x9, 0x4, 0x0, 0xec58, 0x8], 0x1, 0x3, 0x1}) (async, rerun: 64) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086307032040000102030109026f0003010890050904000000010100000a240108000a0002010209040100000102000009040101010102000007240102020210082402212f0300230905010910"], 0x0) 959.299257ms ago: executing program 1 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000080)={0x2f, {0x8000008, 0x127, 0x200100, 0xd, 0xffc, 0x5}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x401, 0x1400000000000000, [0x8, 0xf77, 0xffff, 0x251c000]}}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x401, 0x1400000000000000, [0x8, 0xf77, 0xffff, 0x251c000]}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000040)={0xc7, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000018000)=[@text64={0x40, &(0x7f0000019000)="0f01c1", 0x3}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000018000)=[@text64={0x40, &(0x7f0000019000)="0f01c1", 0x3}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 788.519812ms ago: executing program 1 (id=40): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0xc2, 0x4f, 0x19, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x0, 0x9}, {0x8, 0xaef2, 0x6, 0x8, 0x9, 0xff, 0x8, 0x3, 0x4, 0x13, 0x1, 0x6, 0x10005}, {0x1fb, 0x7, 0xd, 0x10, 0x23, 0xe, 0x0, 0xfb, 0x4, 0x15, 0xfe, 0x3, 0x3ffffffffffffd}], 0x9}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x0, 0x2, 0x3, 0x4002004c8, 0x1004, 0xffffffffffffffff, 0x9, 0x0, 0xdf, 0xffffffffffffffff, 0x2000000000000000, 0x0, 0x8d], 0xeeee8000, 0x40003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) r4 = eventfd(0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000240)) io_submit(r3, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r4, 0x0, 0x0, 0x39}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r4, 0x0, 0x0, 0x1, 0x0, 0x1, r4}]) 506.384938ms ago: executing program 3 (id=41): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) bind$inet(r0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="001400000000d8626d20e3afcd6c082bab039b82fd215ecc4c06d49b0900000000000000d7891d7868f7c6b43532045b3ffff5daa5a24ffff90efbc406ea4195a9777d29c069f0489a59cdeec6ba"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x40, 0x19, 0x2, "9374"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) dup(r3) syz_ublk_setup_queues(r0, r1, &(0x7f0000000180)={0x0, 0xdeeb, 0x20, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x57, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 504.937648ms ago: executing program 1 (id=42): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x1001, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000001c0), 0x10) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000240)=0x2) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1a8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0xfffffff9, @mcast1, 0x3}, 0x1c) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = gettid() r7 = getpid() rt_tgsigqueueinfo(r7, r6, 0xb, &(0x7f0000000000)={0x4, 0xfffff7fe, 0x4}) capset(0x0, &(0x7f0000000080)={0x0, 0x2}) 0s ago: executing program 0 (id=43): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000080005, 0x7c0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000005c0)="66f30fc7f966ba4000ed0fc76f9a0f1cbf0a000000640f1f5300c4e3fd08623e029a103055b31f09c4c2c1475800c744240000000080c74424024af4c910c7442406000000000f011c24c4c159e4ff", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r2, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f00000000c0)) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000500)={@desc={0x1, 0x0, @desc2}, 0x40, 0x0, '\x00', @a}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x26) sendmsg$netlink(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000120001000000000000000000100000000c0000000000000000000000a1001000"], 0xc4}], 0x1}, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000040)=0xffffff50) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_FS_INFO(r8, 0x8400941f, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. [ 28.062163][ T36] audit: type=1400 audit(1785394936.060:64): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.067403][ T288] cgroup: Unknown subsys name 'net' [ 28.092935][ T36] audit: type=1400 audit(1785394936.060:65): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.132389][ T36] audit: type=1400 audit(1785394936.090:66): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.132770][ T288] cgroup: Unknown subsys name 'devices' [ 28.273218][ T288] cgroup: Unknown subsys name 'hugetlb' [ 28.281041][ T288] cgroup: Unknown subsys name 'rlimit' [ 28.385933][ T36] audit: type=1400 audit(1785394936.380:67): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.423339][ T36] audit: type=1400 audit(1785394936.380:68): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.457010][ T36] audit: type=1400 audit(1785394936.380:69): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.490199][ T290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.503623][ T36] audit: type=1400 audit(1785394936.500:70): avc: denied { relabelto } for pid=290 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.542856][ T36] audit: type=1400 audit(1785394936.500:71): avc: denied { write } for pid=290 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.593071][ T36] audit: type=1400 audit(1785394936.590:72): avc: denied { read } for pid=288 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.629760][ T36] audit: type=1400 audit(1785394936.590:73): avc: denied { open } for pid=288 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.630596][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.682823][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.693118][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.703197][ T297] bridge_slave_0: entered allmulticast mode [ 29.710953][ T297] bridge_slave_0: entered promiscuous mode [ 29.731222][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.740210][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.750200][ T297] bridge_slave_1: entered allmulticast mode [ 29.757735][ T297] bridge_slave_1: entered promiscuous mode [ 29.783639][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.794364][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.802829][ T295] bridge_slave_0: entered allmulticast mode [ 29.811957][ T295] bridge_slave_0: entered promiscuous mode [ 29.825943][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.835051][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.845243][ T295] bridge_slave_1: entered allmulticast mode [ 29.853175][ T295] bridge_slave_1: entered promiscuous mode [ 29.904721][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.913845][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.925358][ T296] bridge_slave_0: entered allmulticast mode [ 29.933104][ T296] bridge_slave_0: entered promiscuous mode [ 29.950617][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.960521][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.970144][ T296] bridge_slave_1: entered allmulticast mode [ 29.978657][ T296] bridge_slave_1: entered promiscuous mode [ 30.014718][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.025091][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.036308][ T298] bridge_slave_0: entered allmulticast mode [ 30.043474][ T298] bridge_slave_0: entered promiscuous mode [ 30.056072][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.066129][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.075338][ T298] bridge_slave_1: entered allmulticast mode [ 30.084739][ T298] bridge_slave_1: entered promiscuous mode [ 30.294115][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.303525][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.312908][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.322449][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.349385][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.359466][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.369643][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.377860][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.393613][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.403322][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.411314][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.419828][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.453007][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.463452][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.475785][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.489753][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.548294][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.560968][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.574387][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.586590][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.602205][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.616493][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.626791][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.639255][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.669504][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.678770][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.702446][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.710564][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.720527][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.729579][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.760579][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.769359][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.792717][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.803255][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.816570][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.826825][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.841683][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.854827][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.881178][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.891308][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.945338][ T296] veth0_vlan: entered promiscuous mode [ 30.980566][ T296] veth1_macvtap: entered promiscuous mode [ 31.013447][ T297] veth0_vlan: entered promiscuous mode [ 31.032574][ T298] veth0_vlan: entered promiscuous mode [ 31.069127][ T297] veth1_macvtap: entered promiscuous mode [ 31.085031][ T295] veth0_vlan: entered promiscuous mode [ 31.111794][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.125488][ T298] veth1_macvtap: entered promiscuous mode [ 31.171021][ T295] veth1_macvtap: entered promiscuous mode [ 31.308599][ T326] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 31.367187][ T334] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.443604][ T341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=341 comm=syz.1.8 [ 31.470661][ T340] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8'. [ 31.573899][ T351] Source file dentry negative [ 31.581510][ T350] Source file dentry negative [ 31.587591][ T350] sd 0:0:1:0: device reset [ 31.597453][ T351] sd 0:0:1:0: device reset [ 31.602397][ T348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11'. [ 31.618747][ T354] capability: warning: `syz.0.11' uses 32-bit capabilities (legacy support in use) [ 31.631648][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.661481][ T348] bridge_slave_0 (unregistering): left allmulticast mode [ 31.674336][ T348] bridge_slave_0 (unregistering): left promiscuous mode [ 31.685595][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.730238][ T353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'. [ 31.831060][ T12] bridge_slave_1: left allmulticast mode [ 31.837829][ T12] bridge_slave_1: left promiscuous mode [ 31.845694][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.855412][ T12] bridge_slave_0: left allmulticast mode [ 31.865774][ T12] bridge_slave_0: left promiscuous mode [ 31.880169][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.969887][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.998675][ T45] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 32.128733][ T12] veth1_macvtap: left promiscuous mode [ 32.151161][ T12] veth0_vlan: left promiscuous mode [ 32.206815][ T367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 32.249811][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.378799][ T372] capability: warning: `syz.3.20' uses deprecated v2 capabilities in a way that may be insecure [ 32.395797][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.408069][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.417142][ T365] bridge_slave_0: entered allmulticast mode [ 32.426488][ T365] bridge_slave_0: entered promiscuous mode [ 32.434791][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 32.442541][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.455567][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.464683][ T365] bridge_slave_1: entered allmulticast mode [ 32.472676][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.481842][ T365] bridge_slave_1: entered promiscuous mode [ 32.491067][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 32.520487][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 32.534184][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 32.561002][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=474b, bcdDevice= 0.40 [ 32.579836][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.599581][ T9] usb 1-1: Product: syz [ 32.609798][ T9] usb 1-1: Manufacturer: syz [ 32.615196][ T9] usb 1-1: SerialNumber: syz [ 32.650606][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.660242][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.668644][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.677382][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.759539][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.770368][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.793694][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.804425][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.817373][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.825878][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.857769][ T9] usb 1-1: USB disconnect, device number 2 [ 32.895371][ T365] veth0_vlan: entered promiscuous mode [ 32.912929][ T365] veth1_macvtap: entered promiscuous mode [ 32.989485][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.047545][ T382] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 33.189129][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 33.189149][ T36] audit: type=1400 audit(1785394941.180:146): avc: denied { ioctl } for pid=389 comm="syz.4.23" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.233501][ T36] audit: type=1400 audit(1785394941.230:147): avc: denied { create } for pid=389 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.267088][ T36] audit: type=1400 audit(1785394941.260:148): avc: denied { write } for pid=389 comm="syz.4.23" name="ip_tables_matches" dev="proc" ino=4026532777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 33.309019][ T36] audit: type=1400 audit(1785394941.290:149): avc: denied { ioctl } for pid=389 comm="syz.4.23" path="socket:[4939]" dev="sockfs" ino=4939 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.356462][ T36] audit: type=1400 audit(1785394941.350:150): avc: denied { append } for pid=394 comm="syz.4.25" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.424407][ T36] audit: type=1400 audit(1785394941.420:151): avc: denied { create } for pid=398 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.450791][ T395] netlink: 'syz.4.25': attribute type 13 has an invalid length. [ 33.470085][ T36] audit: type=1400 audit(1785394941.470:152): avc: denied { bind } for pid=398 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.502164][ T399] tipc: Failed to remove unknown binding: 66,0,0/0:4023644986/4023644987 [ 33.515466][ T36] audit: type=1400 audit(1785394941.500:153): avc: denied { setopt } for pid=398 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.543963][ T399] tipc: Failed to remove unknown binding: 66,0,0/0:4023644986/4023644987 [ 33.561814][ T36] audit: type=1400 audit(1785394941.540:154): avc: denied { read } for pid=400 comm="syz.3.28" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.593626][ T36] audit: type=1400 audit(1785394941.540:155): avc: denied { open } for pid=400 comm="syz.3.28" path="net:[4026532548]" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.039943][ T312] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.221023][ T312] usb 1-1: Using ep0 maxpacket: 16 [ 34.228734][ T312] usb 1-1: config 1 has an invalid descriptor of length 175, skipping remainder of the config [ 34.244112][ T312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.257983][ T312] usb 1-1: config 1 interface 0 has no altsetting 0 [ 34.272200][ T312] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 34.284647][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.313468][ T312] usb 1-1: Product: syz [ 34.323216][ T312] usb 1-1: Manufacturer: syz [ 34.330739][ T312] usb 1-1: SerialNumber: syz [ 34.479897][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 34.549371][ T312] usb 1-1: 0:1 : does not exist [ 34.565531][ T312] usb 1-1: unit 6 not found! [ 34.571575][ T312] usb 1-1: unit 12 not found! [ 34.579159][ T312] usb 1-1: unit 101 not found! [ 34.588233][ T312] usb 1-1: unit 189 not found! [ 34.616753][ T312] usb 1-1: USB disconnect, device number 3 [ 34.642041][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.669849][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 34.679152][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.698480][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.730240][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 34.749477][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 34.763030][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.773980][ T9] usb 5-1: Product: syz [ 34.780426][ T9] usb 5-1: Manufacturer: syz [ 34.785960][ T9] usb 5-1: SerialNumber: syz [ 34.821014][ T74] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.869894][ T363] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.982145][ T74] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.997566][ T74] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.011763][ T363] usb 2-1: device descriptor read/64, error -71 [ 35.019560][ T74] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 35.039362][ T9] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 35.051915][ T9] usb 5-1: 1:1 : format type 33 is not supported yet [ 35.061267][ T9] usb 5-1: 0:2 : does not exist [ 35.069317][ T74] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.082131][ T9] usb 5-1: USB disconnect, device number 2 [ 35.093066][ T74] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.103517][ T74] usb 4-1: Product: syz [ 35.109929][ T74] usb 4-1: Manufacturer: syz [ 35.116156][ T74] usb 4-1: SerialNumber: syz [ 35.130429][ T74] cdc_mbim 4-1:1.0: skipping garbage [ 35.137516][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.218861][ T447] netlink: 'syz.0.43': attribute type 16 has an invalid length. [ 35.231232][ T447] ------------[ cut here ]------------ [ 35.237347][ T447] WARNING: CPU: 1 PID: 447 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 35.250601][ T447] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 35.255495][ T447] CPU: 1 UID: 0 PID: 447 Comm: syz.0.43 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 35.260394][ T363] usb 2-1: device descriptor read/64, error -71 [ 35.269538][ T447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.269593][ T447] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 35.298943][ T447] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 64 d2 0b 06 00 0f 85 c2 00 00 00 c6 05 57 d2 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 35.326614][ T447] RSP: 0018:ffffc9000ebaf560 EFLAGS: 00010246 [ 35.335991][ T447] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 35.346391][ T447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ebaf618 [ 35.357731][ T447] RBP: ffffc9000ebaf6a0 R08: ffffc9000ebaf617 R09: 0000000000000000 [ 35.368307][ T447] R10: ffffc9000ebaf600 R11: fffff52001d75ec3 R12: ffffc9000ebaf5a0 [ 35.377982][ T447] R13: dffffc0000000000 R14: 1ffff92001d75eb0 R15: 0000000000000000 [ 35.392646][ T447] FS: 00007f63f9c0a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.406316][ T447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.417698][ T447] CR2: 0000200000001000 CR3: 0000000134a62000 CR4: 00000000003526b0 [ 35.432728][ T447] Call Trace: [ 35.436786][ T447] [ 35.442852][ T447] ? vfs_write+0x3c1/0xfd0 [ 35.450234][ T447] ? ksys_write+0x145/0x260 [ 35.457827][ T447] ? x64_sys_call+0x271c/0x2ee0 [ 35.464731][ T447] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 35.475461][ T447] ? hashtab_init+0xd6/0x1f0 [ 35.483293][ T447] ___kmalloc_large_node+0x81/0x220 [ 35.490117][ T447] ? hashtab_init+0xd6/0x1f0 [ 35.495491][ T447] __kmalloc_large_node_noprof+0x1e/0xd0 [ 35.504283][ T447] ? hashtab_init+0xd6/0x1f0 [ 35.514367][ T447] __kmalloc_noprof+0x326/0x510 [ 35.522006][ T447] ? kasan_save_alloc_info+0x3a/0x50 [ 35.530267][ T363] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.532821][ T447] hashtab_init+0xd6/0x1f0 [ 35.550123][ T447] ? common_read+0x175/0x490 [ 35.557272][ T447] symtab_init+0x44/0x70 [ 35.563318][ T447] common_read+0x1e7/0x490 [ 35.568822][ T447] ? hashtab_init+0xd6/0x1f0 [ 35.578534][ T447] ? __cfi_common_read+0x10/0x10 [ 35.584762][ T447] ? hashtab_init+0x100/0x1f0 [ 35.590549][ T447] policydb_read+0xa83/0x2860 [ 35.596481][ T447] ? __kasan_kmalloc+0x96/0xb0 [ 35.604377][ T447] ? __cfi_policydb_read+0x10/0x10 [ 35.612094][ T447] ? security_load_policy+0x130/0x12d0 [ 35.618869][ T447] security_load_policy+0x16a/0x12d0 [ 35.626345][ T447] ? irqentry_exit+0x4a/0x60 [ 35.633608][ T447] ? __kasan_check_write+0x18/0x20 [ 35.644208][ T447] ? mutex_lock+0x97/0x1d0 [ 35.652968][ T447] ? __cfi_security_load_policy+0x10/0x10 [ 35.661221][ T447] ? rep_movs_alternative+0x4a/0xa0 [ 35.669666][ T447] sel_write_load+0x258/0x600 [ 35.676426][ T447] ? __cfi_sel_write_load+0x10/0x10 [ 35.682614][ T447] ? vfree+0x4e6/0x5b0 [ 35.688293][ T447] ? bpf_lsm_file_permission+0xd/0x20 [ 35.697710][ T447] ? __cfi_sel_write_load+0x10/0x10 [ 35.704220][ T447] vfs_write+0x3c1/0xfd0 [ 35.710142][ T447] ? __cfi_vfs_write+0x10/0x10 [ 35.716980][ T447] ? __kasan_check_write+0x18/0x20 [ 35.725324][ T447] ? mutex_lock+0x97/0x1d0 [ 35.731857][ T447] ? __cfi_mutex_lock+0x10/0x10 [ 35.739456][ T447] ksys_write+0x145/0x260 [ 35.746382][ T447] ? xfd_validate_state+0x68/0x140 [ 35.755221][ T447] ? __cfi_ksys_write+0x10/0x10 [ 35.761069][ T447] ? __kasan_check_write+0x18/0x20 [ 35.777572][ T447] ? fpregs_restore_userregs+0x11c/0x260 [ 35.785380][ T447] __x64_sys_write+0x7f/0x90 [ 35.791392][ T447] x64_sys_call+0x271c/0x2ee0 [ 35.797825][ T447] do_syscall_64+0x57/0xf0 [ 35.803174][ T447] ? clear_bhb_loop+0x50/0xa0 [ 35.811429][ T447] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.819303][ T447] RIP: 0033:0x7f63f8d9df99 [ 35.825493][ T447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.851590][ T447] RSP: 002b:00007f63f9c0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 35.862914][ T447] RAX: ffffffffffffffda RBX: 00007f63f9025fa0 RCX: 00007f63f8d9df99 [ 35.875254][ T447] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000004 [ 35.889430][ T447] RBP: 00007f63f8e34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 35.902484][ T447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.919215][ T447] R13: 00007f63f9026038 R14: 00007f63f9025fa0 R15: 00007ffe6ff81fa8 [ 35.931761][ T447] [ 35.935725][ T447] ---[ end trace 0000000000000000 ]--- [ 35.950402][ T447] SELinux: failed to load policy [ 36.116161][ T46] bridge_slave_1: left allmulticast mode [ 36.124549][ T46] bridge_slave_1: left promiscuous mode [ 36.136011][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.146761][ T46] bridge_slave_0: left allmulticast mode [ 36.154949][ T74] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 36.162329][ T46] bridge_slave_0: left promiscuous mode [ 36.170221][ T74] cdc_mbim 4-1:1.0: bind() failure [ 36.182675][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.195935][ T74] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 36.219830][ T74] cdc_ncm 4-1:1.1: bind() failure [ 36.263650][ T74] usb 4-1: USB disconnect, device number 2 [ 36.343847][ T46] veth1_macvtap: left promiscuous mode [ 36.353553][ T46] veth0_vlan: left promiscuous mode [ 36.654473][ T46] bridge_slave_1: left allmulticast mode [ 36.661861][ T46] bridge_slave_1: left promiscuous mode [ 36.668487][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.680054][ T46] bridge_slave_1: left allmulticast mode [ 36.688018][ T46] bridge_slave_1: left promiscuous mode [ 36.697039][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.707803][ T46] bridge_slave_0: left allmulticast mode [ 36.720790][ T46] bridge_slave_0: left promiscuous mode [ 36.730424][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.740570][ T46] bridge_slave_1: left allmulticast mode [ 36.749244][ T46] bridge_slave_1: left promiscuous mode [ 36.758797][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.774488][ T46] bridge_slave_0: left allmulticast mode [ 36.786417][ T46] bridge_slave_0: left promiscuous mode [ 36.799553][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.077647][ T46] veth1_macvtap: left promiscuous mode [ 37.093221][ T46] veth0_vlan: left promiscuous mode [ 37.101345][ T46] veth1_macvtap: left promiscuous mode [ 37.111134][ T46] veth0_vlan: left promiscuous mode [ 37.120529][ T46] veth1_macvtap: left promiscuous mode [ 37.128165][ T46] veth0_vlan: left promiscuous mode