last executing test programs: 7.042095943s ago: executing program 1 (id=2): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x1000a) r1 = getpgid(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x200) capset(&(0x7f00000005c0)={0x20071026, r1}, &(0x7f0000000600)={0x7af, 0x200000}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) uname(&(0x7f0000000180)=""/121) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000674000/0x4000)=nil, 0x4000}, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000004c0), 0x82084, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000500)={0x0, 0x4, 0x4, 0x8007, 0x7, "ff0700000000000002000000000000000600", 0x4000000, 0x8000400}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000540)=0x7) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mkdirat$cgroup(r0, &(0x7f0000000580)='syz1\x00', 0x1ff) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f00000000c0)={0x3, 0x5, 0x40}) remap_file_pages(&(0x7f0000b89000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x100000) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x28e, 0x0, 0x5}]}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 6.96918151s ago: executing program 1 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x1) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000006800)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f00000067c0)=0x1}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000079c0)={0x2, &(0x7f0000007a00)=[{0x15, 0x0, 0x4, 0x2}, {0x7, 0x0, 0xc}]}) write$FUSE_INIT(r2, &(0x7f0000002440)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000024c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004580)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000045c0)="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", 0x2000, &(0x7f00000065c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x78, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x0, 0x0, 0x200000, 0x8000, 0x0, r4, 0xee01, 0x0, 0x7fffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000006700)='./file0\x00', 0x101001, 0x0) write$FUSE_LSEEK(r5, &(0x7f0000006740)={0x18, 0x0, r3, {0x100000000}}, 0x18) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000006980)={r1, &(0x7f0000000040)='+\x00', 0x40, &(0x7f0000000140)={@align=0x5, {0x8000, 0x0, 0x4, 0x9}}, 0x9, &(0x7f0000006900), &(0x7f0000006940)=0x8001}) getdents64(r6, &(0x7f00000069c0)=""/4096, 0x1000) umount2(&(0x7f0000006780)='./file0\x00', 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20008010) syz_usb_connect(0x3, 0x24, &(0x7f0000006840)=ANY=[@ANYBLOB="1201100127db5b9ec249d6dabf6c1c070000008543025e200a1a0801cff201020301090212000106a420010904040300891d7e04"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000102505a1a44000010203010300000001010100070904008003020600000824060000fde20205240008000d240f01050000000200c30036083c1cfeff0b080009058202080006010709050302080074bb07"], &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x73, 0x40, 0x3, 0x8, 0xfb}, 0x5, &(0x7f0000006880)=ANY=[@ANYBLOB="00050000006f93f679b2907aa286e7786bfd1c45a66c0cedb78a9da32f91cd4a031330ebd9f9b3d17bc01a79ce858222525fb6175b67ef2c7aed0ad4b2d09f9e9a8df3066b65b4fd7c83e4c042448389ff45eab0c45c65683744d32a958970e90abc1f3fa5ad2e53f7a7956d69633a6a0aad139e7bc54b169481cc2786f4a2"], 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42b}}]}) 4.467230449s ago: executing program 3 (id=17): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'dummy0\x00', &(0x7f0000000540)=@ethtool_sset_info={0x37, 0x9, 0xfffffffffffffffa}}) (async) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = socket(0x10, 0x803, 0xc) sendto(r1, &(0x7f0000000580)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1fd) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000640)={0x400000100002f, {0x10000000, 0x0, 0xfffffffd, 0x100000, 0x0, 0x2}}) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r3, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000740)={0x1c0e00, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840), {0x18}, &(0x7f0000000880)=""/92, 0x5c, &(0x7f0000000900)=""/25, &(0x7f0000000940)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) (async) setitimer(0x1, 0x0, 0x0) (async) mkdir(&(0x7f0000000980)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) (async) chdir(&(0x7f0000001980)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) socket$netlink(0x10, 0x3, 0x0) (async) mkdirat(r3, &(0x7f0000002980)='./file2\x00', 0x11d) lsetxattr$security_selinux(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00), &(0x7f0000002a40)='system_u:object_r:modem_device_t:s0\x00', 0x24, 0x1) (async) add_key(&(0x7f0000002a80)='asymmetric\x00', 0x0, &(0x7f0000002ac0)="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", 0x1d8, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002d80)=@file={0x1, './file1\x00'}, 0x6e, 0x0}}], 0x2, 0x4000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x404c2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1d7) 4.372033308s ago: executing program 3 (id=18): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x3, 0x6, 0x1, 0xfffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/cpu/cpuidle/available_governors\x00', 0x0, 0x0) read(r2, &(0x7f0000000440)=""/100, 0x64) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001780)=""/4112, 0x1010}, {&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000002840)=""/42, 0x2a}, {&(0x7f0000002880)=""/98, 0x62}, {&(0x7f00000004c0)=""/4102, 0x1006}, {&(0x7f0000003940)=""/20, 0x14}, {&(0x7f00000001c0)=""/122, 0x7a}, {&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f0000000300)=""/15, 0xf}, {&(0x7f0000001500)=""/79, 0x4f}], 0xa}}, {{0x0, 0x0, 0x0}, 0x7ffffff}], 0x2, 0x12140, 0x0) socket(0x10, 0x803, 0x0) (async) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x3, 0x6, 0x1, 0xfffe}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/cpu/cpuidle/available_governors\x00', 0x0, 0x0) (async) read(r2, &(0x7f0000000440)=""/100, 0x64) (async) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001780)=""/4112, 0x1010}, {&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000002840)=""/42, 0x2a}, {&(0x7f0000002880)=""/98, 0x62}, {&(0x7f00000004c0)=""/4102, 0x1006}, {&(0x7f0000003940)=""/20, 0x14}, {&(0x7f00000001c0)=""/122, 0x7a}, {&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f0000000300)=""/15, 0xf}, {&(0x7f0000001500)=""/79, 0x4f}], 0xa}}, {{0x0, 0x0, 0x0}, 0x7ffffff}], 0x2, 0x12140, 0x0) (async) 4.239367952s ago: executing program 3 (id=19): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="50000000300005040000000000000000000000003c00010038000100090001006761637400000000280002801800020000000000000000000000000000000000000000000c0003000100000000000020", 0x50}], 0x1}, 0x0) mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f0000003540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000002e80)=ANY=[@ANYBLOB="2900000003"], 0x29) 4.238906842s ago: executing program 3 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000005c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = syz_io_uring_setup(0x6e00, &(0x7f0000000600)={0x0, 0x8d91, 0x4000, 0x3, 0x366}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) syz_ublk_setup_queues(r3, r1, &(0x7f0000000740)={0x0, 0x96c3, 0x10, 0x1, 0x34a, 0x0, r4}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8f6, 0x800, 0x1000002, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x4000, 0x4, 0xd4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0xfffffffa, 0x230}}], 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x100, 0x0, &(0x7f00000008c0)=@reply}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x4, 0x0, &(0x7f0000000a00)=[@register_looper], 0x100, 0x0, &(0x7f0000000a40)=@reply}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda1\x00', 0x139) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000500)=ANY=[@ANYBLOB="120150020000002082054400400001020301090269000301007051080b0002010720090904000000010120000924010800080000080904010000090000000904010101010220000905010910000002080825010003040200090402000001022000090402010101022000090582000000000702082501020f060000adf06f91e2395cb11bae2118bbefec2e275e08bb040d68e257ee2bbf79f416e7e5c11345ec452093c43aab00b19e0dd4592ceb3a"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x100f}}, {0x7d, &(0x7f0000000440)=@string={0x7d, 0x3, "487db552ed6731f118416d49726d35d54928f435d9dcb50bbc97d89e7b6f5c2e2ea37a048f28dc894d1048feefd8e3c6a85f85e064a2467aab22bfa5db0c7ed781fc094db750cc0c86d47791a4b8058d86aefd602d36249cc91a9d5b606bd3cdb12acdd31f09e892214c8e641f1262dc904d982b9f16bfece0f68e"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x843}}, {0x0, 0x0}, {0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1b7) 3.931590214s ago: executing program 1 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x98) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000280)='6', 0x1) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@new_dev={0x2, 0x92f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0xa, 0x0) connect$inet6(r5, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x7}, 0x1c) socket$netlink(0x10, 0x3, 0x2) 3.894843368s ago: executing program 1 (id=22): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000100)={0xf900000000000000, 0x0, 0x100c00000d, 0xc, 0x2}) syz_usb_connect$uac3(0x5, 0xae, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x38, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x305, 0x6, 0x2, 0x50, 0x7ff, 0x9, 0x9, 0x1ff}, @source_unit={0xc, 0x24, 0xb, 0x7, 0x1, 0xfffffffc, 0x8, 0x6}, @power_domain={0xf, 0x24, 0x10, 0x51, 0x6d5, 0x546, 0x5, "496f35b16ed9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3d, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0) 2.514126911s ago: executing program 1 (id=23): fstatfs(0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) bind$inet(r0, 0x0, 0x0) (async) bind$inet(r0, 0x0, 0x0) r1 = getpgrp(0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@nested={0x24, 0x81, 0x0, 0x1, [@nested={0x10, 0xf1, 0x0, 0x1, [@nested={0x4, 0xe6}, @typed={0x6, 0xfd, 0x0, 0x0, @str='\x1b\x00'}]}, @nested={0xd, 0xc2, 0x0, 0x1, [@generic="ad083f77eaa665fbae"]}]}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4ae"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) rt_tgsigqueueinfo(r3, r4, 0x1c, &(0x7f00000001c0)={0x2a, 0x9, 0x3}) (async) rt_tgsigqueueinfo(r3, r4, 0x1c, &(0x7f00000001c0)={0x2a, 0x9, 0x3}) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) (async) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="240000001e005f1814bffffffffffff807000000b800000000000000060005000d4530e96917", 0x26) iopl(0x3) io_setup(0x4, &(0x7f00000014c0)) (async) io_setup(0x4, &(0x7f00000014c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) fsopen(0x0, 0x2000000) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r7, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, r7, 0x0, 0x0, 0x81, 0x0, 0x3, r7}]) (async) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r7, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, r7, 0x0, 0x0, 0x81, 0x0, 0x3, r7}]) 2.412891411s ago: executing program 1 (id=24): shutdown(0xffffffffffffffff, 0x1) (async, rerun: 64) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0xc2}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef0101"], 0x0) 1.956844818s ago: executing program 2 (id=28): prlimit64(0x0, 0xf, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4690000305050000000000000003003e00f9ffffff0401000000000000400000687452d6b326e1450280000000330d0000010038000000790007000c00"], 0x40) close(r1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000440)={0x0, 0x989680}, 0x0, 0x0) 1.876675026s ago: executing program 2 (id=30): r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x404, r0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa82, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r3, 0x3f, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0xfffe, r2, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x7}]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f00000003c0)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000400)={0x20000001}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000980)=0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/swaps\x00', 0xe1442, 0x197) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000940)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) mount$9p_fd(0x0, &(0x7f00000005c0)='./proc/swaps\x00', &(0x7f0000000600), 0x1, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r9}}) io_submit(r3, 0x7, &(0x7f0000000900)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f00000001c0)="f9d725903f1743086e604a6245e015813090cb5061ede718899d83659b999877e820fbe7ec730df375ce7b7b194ac1670ec6cf1a23d9fad2399b536273c14ce1a281b9776c351c", 0x47, 0xa57a, 0x0, 0x0, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000280)="cf0ef5b59c", 0x5, 0x9, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0xb4a, r1, &(0x7f0000000300)="590d9bd5ab2a52c6f0c8043432f024ee052b71b7ab776d16f6b428bb417673514414f8f9be206e80be46b0bab0ddf84cc4e3db11e6e400b3803af3ad5e7aa2341682f98a2b56905d6d4042851fa19bd1ffa59566e10cac1b45ea94c9d9bd22c2facf0b84d25071d7ac965b4e5914a42a250767f0022b7469a63e8d951a11cd263f8fed663124e2bd978f58bf7879d5db509beae92681d3d712da489d774f4c58f2ad5b92cd385d2f56511980739ef072381a4f2289640bfed03d10", 0xbb, 0x44531c49, 0x0, 0x1, r6}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0xa, r1, &(0x7f0000000480)="ce1a64a5c62bc061a062b721e062827875e9cc510a946c64a194e1debb4b0bae682a6f526b87e35846f69f716498d90d115a76c051d67a4a3c4fd497c6db6a37b1e0a66ccb58909acd7431c36f614359ae1f022abfab1fd83b2ffa2142d3883903fecdae96e8572fcae0cd880aecd4b684ac23138c4e2c90a23c20da02b0ced6e0baad4106a665a2dc0bfdf4bc6862bdfc6c5cf9e550c753327444fe53c845a5abd826a151790f44aee9e49f0b4f2a16ed6251ec49bba27d0c97b54fd54a1f5fa8f42bb6892f750b3c8cdb3fd62d04a0d47f16149c8b33b27712d825f980ab7e916cadc0067c59c5", 0xe8, 0x184, 0x0, 0x1, r9}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0x8, r1, &(0x7f00000006c0)="ed847c26f99e61723fbdb9005711117a37d18b", 0x13, 0x971, 0x0, 0x2, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000740)="99007950eb93118481370b22d729f87428f94bdd6077a2daa6b0452c", 0x1c, 0x2, 0x0, 0x1, r1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x42, 0xffffffffffffffff, &(0x7f00000007c0)="8bf128f43683b66dc32ff52b2d2c9c429df9ed946543e4bcd53c70520d547a16cdea487488d1b2373753c157d47389a1306e22835bd7fc837a0accef9e943c0933f74cb0c2a2fa476ad48217168590ffea1d6b2139b52b3d9c3e43d12258bd882515445bc53c032529f2ac4eae313b5cbdcab8fa00529d00248ee2c1df79de5ca0f2e573320321103488a0919e46b350452955f369b11b651db64cb2865960a4a34cc27cd58fed86afd9a8bd98da6ab3be313d4ab392c763b901b8ce6e6b776b415c", 0xc2, 0x80000000, 0x0, 0x3, r1}]) 1.26220421s ago: executing program 3 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='./dev/sda1\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x149000, 0x19a) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000340)={0x8db5, {{0xa, 0x4e22, 0x9, @private2, 0x7fffffff}}}, 0x88) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x81009431, &(0x7f0000000300)={0x8, 0xffffffffffffffff, 0x3, 0x7ffb, 0xfeb, 0x2}) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000200)=@filename='./dev/sda1\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x149000, 0x19a) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000340)={0x8db5, {{0xa, 0x4e22, 0x9, @private2, 0x7fffffff}}}, 0x88) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x81009431, &(0x7f0000000300)={0x8, 0xffffffffffffffff, 0x3, 0x7ffb, 0xfeb, 0x2}) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) (async) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) 955.173861ms ago: executing program 2 (id=32): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000100)={0xf900000000000000, 0x0, 0x100c00000d, 0xc, 0x2}) 872.66552ms ago: executing program 2 (id=33): r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x208000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='27', 0x2) r2 = memfd_create(&(0x7f0000000140)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xa2) execveat(r2, &(0x7f0000000240)='\x00', 0x0, 0x0, 0x1000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000020c0)={0x2710, 0x0, 0xf0000000, 0x1000, &(0x7f0000200000/0x1000)=nil}) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000002100)={0x0, &(0x7f0000002140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "66ba3412eef4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x66}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x10b041, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = syz_create_resource$kvm_nested_state(&(0x7f0000002200)=@vmx={0x0, 0x0, 0x2080}) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r10, 0x40045567, 0x35) write$uinput_user_dev(r10, &(0x7f0000000440)={'syz1\x00', {}, 0x9, [0x38, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x80, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x100, 0x9, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x6, 0x0, 0x7fffffff, 0xc], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8a, 0x0, 0x0, 0x3, 0x3, 0x100, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x802, 0x0, 0x2, 0x0, 0xfaea, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x27, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffce2, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r10, 0x5501) ioctl$KVM_SET_NESTED_STATE_res(r6, 0x4080aebf, r9) ioctl$KVM_RUN(r6, 0xae80, 0x0) 852.714442ms ago: executing program 2 (id=34): r0 = syz_open_dev$loop(&(0x7f0000000600), 0xf, 0x4000) ioctl$BLKCLOSEZONE(r0, 0x40101287, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000080)={0x5}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x3) 840.782964ms ago: executing program 2 (id=35): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0xc02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x32cc0000) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000300)={0xf, 0x6, [{0x8, 0x0, 0x39baa21d}, {0x3988d011, 0x0, 0x530}, {0x1, 0x0, 0x80000000}, {0xffffffff}, {0x8001, 0x0, 0xffffffffffffffff}, {0x101, 0x0, 0x3}, {0xae2}, {0x9, 0x0, 0x100000000}, {0x5, 0x0, 0x1}, {0xa9, 0x0, 0x1}, {0x8, 0x0, 0x3}, {0x0, 0x0, 0x8001}, {0x1}, {0x9, 0x0, 0xfb0c}, {0xa, 0x0, 0x2}, {0xfffffffe, 0x0, 0x8}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') pread64(r1, &(0x7f0000000640)=""/102391, 0x18ff7, 0x8ca8) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="a400000056000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x6, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000200)) dup3(r4, r3, 0x0) epoll_create1(0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000019640)=ANY=[@ANYBLOB="12015002000000083512148040000102030109026900030107000e080b0102010f2008090400000001012065909b6eb89ffd510000090401000001022065efd0eb86488dee200009050109b70308060008647ca81b2501012804ff0309040200000102200009040201010102200009058209080004062501030c0a01000000"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000180)=[@reply={0x40406301, {0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f000009f000/0xc00000)=nil, 0xc00000) write(r0, &(0x7f0000000040)='4', 0x1) 264.459593ms ago: executing program 0 (id=39): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xe69]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000024) syz_pidfd_open(0xffffffffffffffff, 0x0) fallocate(r0, 0x48, 0x1, 0x10) r2 = gettid() r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) setitimer(0x1, &(0x7f0000000280)={{}, {0x0, 0x2710}}, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x700, 0x40, 0x5, 0xa, {{0x1a, 0x4, 0x2, 0x9, 0x68, 0x68, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ssrr={0x89, 0xb, 0x5b, [@local, @private=0xa010101]}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x5, 0x8, "dd16c234c421"}, {0x2, 0xd, "569967c9c24bc97193f573"}, {0x6, 0x6, "941062c7"}, {0x5, 0x10, "a1877562587d29e27fd91b604e5e"}]}, @noop, @noop, @rr={0x7, 0x13, 0xe0, [@multicast2, @multicast2, @empty, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xd}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5689044a80689bef}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xd}]}, 0x48}, 0x1, 0x0, 0x0, 0x200500a1}, 0x2000) memfd_create(&(0x7f0000000580)='\x00', 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000005c0)=0x3, 0x4) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000600)={0x0, 0x90d4, 0x20, 0x0, 0x220}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5468, 0x4, 0x2, 0x371}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x60, 0x1000, 0x1, 0x1c2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x85ea, 0x40, 0x3, 0x3e2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbe67, 0x100, 0x1, 0x3d7}}], 0x4, &(0x7f0000001900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0x606, 0x0, &(0x7f0000000900)=@buf_1k="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"}}, &(0x7f0000001980)) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x1, 0x13, r7, 0x0) r8 = syz_open_procfs$userns(r2, &(0x7f00000019c0)) r9 = ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x6c, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x814) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b80), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, r10, 0x200, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c044}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001c80)={0x2020, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000003cc0), &(0x7f0000003d00)=0x0, &(0x7f0000003d40)) getresgid(&(0x7f0000003d80)=0x0, &(0x7f0000003dc0), &(0x7f0000003e00)) statx(0xffffffffffffff9c, &(0x7f0000003e40)='./file0\x00', 0x2000, 0x800, &(0x7f0000003e80)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000003f80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000005fc0)='./file0\x00', &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000006080)=[0xee01, 0xee00, 0xee00, 0x0, 0xee01, 0xee01]) write$FUSE_DIRENTPLUS(r9, &(0x7f0000008400)={0x480, 0x0, r11, [{{0x3, 0x0, 0x8, 0xffffffffffffffff, 0x9, 0x963, {0x6, 0x2400000000000, 0x5, 0x1800, 0xb, 0xfffffffffffffffe, 0xb0, 0x200, 0x6, 0x2000, 0xffffffff, r12, r13, 0x5}}, {0x0, 0xd, 0x6, 0x7, '^*/\'.$'}}, {{0x3, 0x2, 0x86, 0x3, 0x9, 0x0, {0x4, 0x7ff, 0x401, 0x8, 0x9, 0x9, 0x7, 0x6, 0x1, 0xa000, 0x0, r14, r15, 0x4, 0x6}}, {0x2, 0x7, 0x9, 0x95, 'macvlan0\x00'}}, {{0x4, 0x2, 0x7f, 0x5, 0x9, 0x8, {0x4, 0x59b, 0x4, 0xf4c, 0x7, 0xffffffff, 0x2, 0xfffeffff, 0x132a, 0xd000, 0x8001, 0xee00, r16, 0x800f, 0xfc1b}}, {0x6, 0x0, 0x3, 0xd, '+\'}'}}, {{0x6, 0x2, 0x1ff, 0x3, 0x223, 0xfffffff9, {0x5, 0x0, 0x0, 0x7, 0x6, 0x81, 0xfffffe16, 0xfffffffc, 0x1, 0x4000, 0x7, 0xee00, r17, 0x0, 0x8}}, {0x2, 0x8, 0x9, 0xf, 'macvlan0\x00'}}, {{0x3, 0x1, 0x36, 0x0, 0x975a, 0xad, {0x5, 0x1ff, 0xfffffffffffffff7, 0x2, 0x8, 0x8000000000000000, 0x2, 0x4, 0x9, 0x2000, 0x4, 0x0, 0x0, 0x3, 0x5}}, {0x2, 0xc, 0x8, 0x8001, 'ip_vti0\x00'}}, {{0x3, 0x3, 0x7fffffff, 0x10, 0x3, 0xfff, {0x3, 0x3, 0x2, 0x2, 0x7, 0x1, 0x2, 0x4, 0x9, 0x4000, 0x3ff, 0x0, 0x0, 0xffff, 0xff}}, {0x6, 0xa, 0x5, 0x3, '-!(%]'}}, {{0x4, 0x0, 0x9, 0x5, 0x7, 0x101, {0x2, 0x0, 0x7ff, 0x5, 0x401, 0x7f, 0x8, 0x3ff, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x200, 0x3}}, {0x0, 0x8, 0x3, 0x308000, '++('}}]}, 0x480) 261.722973ms ago: executing program 0 (id=40): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x2, &(0x7f0000000700)=[{0x1003, 0x8, 0x40, 0x4}, {0x1, 0x8, 0x2}]}) r0 = socket$unix(0x1, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100008, 0x70, 0x40000, {r0}}, 0x20) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/wake_lock', 0x2202, 0x130) copy_file_range(r1, 0x0, r1, &(0x7f00000001c0)=0xf160, 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) wait4(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a3, &(0x7f00000006c0)={'bridge0\x00', @random="0b0000000010"}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000600)={0x0, 0x3f, &(0x7f0000000640)={&(0x7f0000000680)={0x20, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x5001}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', 0x1}) write$tun(r7, &(0x7f0000000500)={@void, @val={0x1, 0x3, 0x1c, 0x3, 0x14, 0x6}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x33, 0x28, 0x67, 0x0, 0xfd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "414dc1c90728557ded5995abd8c2dd746ed1b8e7"}}, 0x32) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000200)={0x1, 0x0, @pic={0xd, 0x7, 0x10, 0x3, 0x40, 0x4, 0x36, 0x9, 0x9, 0x1, 0xfe, 0x4, 0x6, 0x2, 0x16, 0x1}}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0) write$binfmt_register(r1, &(0x7f0000000000)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xfff, 0x3a, ']+]', 0x3a, '\xeb)}+[-]}$(~', 0x3a, './file0'}, 0x35) 121.852758ms ago: executing program 0 (id=41): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000100)={0xf900000000000000, 0x0, 0x100c00000d, 0xc, 0x2}) 115.960328ms ago: executing program 3 (id=42): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a000000060001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000280)=[@set_irq_handler={0xc8, 0x20, {0x35}}, @set_irq_handler={0xc8, 0x20, {0x69, 0x1}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0x33, 0x1}}, @wr_drn={0x68, 0x20, {0x3, 0x8}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x9, 0x5}}, @rdmsr={0x66, 0x18, {0xd98ca162457117ca}}, @nested_load_code={0x12e, 0x81, {0x0, "66baa10066b8000066ef66b807018ec866baf80cb8d04a1785ef66bafc0cecb8010000000f01d966baf80cb8d0e53983ef66bafc0cec65470f01d4b9800000c00f3235008000000f30366426660f3a0c64a9a608f243c7f800000100b805000000b9072000000f01c1"}}, @out_dx={0x6a, 0x28, {0x228, 0x1, 0x7fffffff}}, @nested_vmresume={0x130, 0x18}, @set_irq_handler={0xc8, 0x20, {0x9e}}], 0x1e9}) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000004c0)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000600)={'bridge0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x7ff, 0x5, 0x9, 0x57e, 0x7fffffff, 0x2, 0x28e8, 0x7, 0x5, 0xff, 0x7ffc, 0x805, 0x100, 0x3ff, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x100003, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x203, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x10000, 0x80000001, 0xfffffff8, 0x2b6395aa, 0x5510, 0x101, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x8, 0x3ff, 0x5, 0x9dc, 0xfffffffe, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x0, 0x5, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x4cd, 0x407, 0x1, 0x4, 0x7fffffff, 0x6, 0x80003, 0x0, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x5, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x4, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x0, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000880)={0x0, 0x6, 0xffff37a4}) connect$vsock_stream(r6, &(0x7f0000000500)={0x28, 0x0, 0x2710, @local}, 0x10) r8 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000540)={0x1, 0x800000}, 0x8) close(r8) r9 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x200000, 0x80}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4006, 0x200, 0x20000000007fff, 0x7}}, @nested_vmlaunch={0x12f, 0x18}], 0xb8}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 851.82µs ago: executing program 0 (id=43): r0 = syz_open_dev$loop(&(0x7f0000000600), 0xf, 0x4000) ioctl$BLKCLOSEZONE(r0, 0x40101287, 0x0) setresuid(0x0, 0xee00, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x0, 0x4, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8080, 0x0, 0x1, 0x1}}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000080)={0x5}) 604.7µs ago: executing program 0 (id=44): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_cmd={0x7, 0x5, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0x102, 0x401, 0x5, 0x5, 0x8, [0x80000005, 0x9]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="280000002100010000000000000000000a00000000000001016200000900178002c9a3"], 0x28}], 0x1}, 0x0) mprotect(0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x8}) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x7, 0x200}, {0x1, 0x100}]}, 0x14, 0x3) r2 = open(&(0x7f0000000280)='./file0\x00', 0x80140, 0x38) close_range(r2, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) write$bt_hci(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="013304060000cb500000"], 0xa) 0s ago: executing program 0 (id=45): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) unshare(0x22020600) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00') statx(r2, 0x0, 0x1000, 0x100, &(0x7f0000000580)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="56b31901000800aaaaaaaaaabbaaaaaaaaaa19aaaaaaaaaaaaaaaaaaaaaabbaaaaaaaaaaaaaaaaaaaaaaaaff08000000ff853b301f"]) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) unshare(0x60000600) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x1, 0x38, 0x4000006, 0x81, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast}}}}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000080)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001240)=""/4122, 0x101a}, {&(0x7f0000002280)=""/200, 0xc8}, {&(0x7f0000002380)=""/296, 0x128}, {&(0x7f00000024c0)=""/161, 0xa1}, {&(0x7f0000002580)=""/209, 0xd1}, {&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)=""/140, 0x8c}, {&(0x7f0000002840)=""/89, 0x59}], 0x8}, 0x1207}], 0x3, 0x0, 0x0) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x4a800, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000001100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x88001, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r6}, [@snapshot={0x0, 0x1008, 0x0, 0x58, 'snapshot-merge\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'n', 0x20, '0', ' 1 discard_zeroes_cow'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. [ 22.145753][ T36] audit: type=1400 audit(1793348641.210:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.149415][ T286] cgroup: Unknown subsys name 'net' [ 22.168663][ T36] audit: type=1400 audit(1793348641.210:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.195886][ T36] audit: type=1400 audit(1793348641.240:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.196338][ T286] cgroup: Unknown subsys name 'devices' [ 22.318941][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.324626][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.440445][ T36] audit: type=1400 audit(1793348641.510:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.463649][ T36] audit: type=1400 audit(1793348641.510:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.488555][ T36] audit: type=1400 audit(1793348641.510:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.500224][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.520544][ T36] audit: type=1400 audit(1793348641.590:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.543156][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.546345][ T36] audit: type=1400 audit(1793348641.590:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.580300][ T36] audit: type=1400 audit(1793348641.610:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.605865][ T36] audit: type=1400 audit(1793348641.610:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.947751][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.954858][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.962102][ T293] bridge_slave_0: entered allmulticast mode [ 23.968640][ T293] bridge_slave_0: entered promiscuous mode [ 23.975121][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.982322][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.989489][ T293] bridge_slave_1: entered allmulticast mode [ 23.995834][ T293] bridge_slave_1: entered promiscuous mode [ 24.104891][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.112220][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.119496][ T296] bridge_slave_0: entered allmulticast mode [ 24.125774][ T296] bridge_slave_0: entered promiscuous mode [ 24.132650][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.139734][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.146933][ T296] bridge_slave_1: entered allmulticast mode [ 24.153192][ T296] bridge_slave_1: entered promiscuous mode [ 24.198206][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.205276][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.212408][ T298] bridge_slave_0: entered allmulticast mode [ 24.218760][ T298] bridge_slave_0: entered promiscuous mode [ 24.225259][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.232584][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.239730][ T298] bridge_slave_1: entered allmulticast mode [ 24.246027][ T298] bridge_slave_1: entered promiscuous mode [ 24.288791][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.295866][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.303033][ T299] bridge_slave_0: entered allmulticast mode [ 24.309324][ T299] bridge_slave_0: entered promiscuous mode [ 24.316065][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.323193][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.330287][ T299] bridge_slave_1: entered allmulticast mode [ 24.336661][ T299] bridge_slave_1: entered promiscuous mode [ 24.402271][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.409409][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.416765][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.423823][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.479339][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.486427][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.493752][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.500839][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.525075][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.532194][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.539544][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.546589][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.557541][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.564999][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.573192][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.580456][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.587881][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.595096][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.638887][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.646033][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.654875][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.661942][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.669693][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.676839][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.684554][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.691646][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.707921][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.714986][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.735056][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.742134][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.774045][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.781127][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.793055][ T293] veth0_vlan: entered promiscuous mode [ 24.802112][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.809203][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.821715][ T298] veth0_vlan: entered promiscuous mode [ 24.840458][ T293] veth1_macvtap: entered promiscuous mode [ 24.859378][ T298] veth1_macvtap: entered promiscuous mode [ 24.874096][ T299] veth0_vlan: entered promiscuous mode [ 24.907887][ T296] veth0_vlan: entered promiscuous mode [ 24.924289][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.948661][ T299] veth1_macvtap: entered promiscuous mode [ 24.957553][ T296] veth1_macvtap: entered promiscuous mode [ 24.964878][ T313] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 24.984905][ T313] Zero length message leads to an empty skb [ 24.995211][ T313] mmap: syz.1.2 (313) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 25.058617][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.127270][ T327] kvm: user requested TSC rate below hardware speed [ 25.168445][ T333] netlink: 'syz.3.8': attribute type 7 has an invalid length. [ 25.176204][ T333] netlink: 'syz.3.8': attribute type 5 has an invalid length. [ 25.506797][ T67] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.547154][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.656692][ T67] usb 2-1: device descriptor read/64, error -71 [ 25.718065][ T311] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 61, changing to 7 [ 25.731861][ T311] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 25.745175][ T311] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 25.754745][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.763043][ T311] usb 1-1: Product: syz [ 25.767864][ T311] usb 1-1: Manufacturer: syz [ 25.772632][ T311] usb 1-1: SerialNumber: syz [ 25.896664][ T67] usb 2-1: device descriptor read/64, error -71 [ 25.994654][ T311] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 26.003915][ T311] usb 1-1: unit 2 not found! [ 26.009090][ T311] usb 1-1: unit 80 not found! [ 26.016817][ T311] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 26.032927][ T311] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 26.044055][ T311] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 26.059961][ T311] usb 1-1: USB disconnect, device number 2 [ 26.091826][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.136719][ T67] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.276848][ T67] usb 2-1: device descriptor read/64, error -71 [ 26.296792][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.356722][ T346] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.446676][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 26.453909][ T9] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.465429][ T9] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.479038][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 26.487097][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.40 [ 26.496439][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.504760][ T9] usb 4-1: Product: ࡡ [ 26.509049][ T9] usb 4-1: Manufacturer: ь [ 26.513588][ T9] usb 4-1: SerialNumber: syz [ 26.518236][ T346] usb 3-1: Using ep0 maxpacket: 32 [ 26.525617][ T346] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.534489][ T346] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 26.545666][ T67] usb 2-1: device descriptor read/64, error -71 [ 26.553784][ T346] usb 3-1: New USB device found, idVendor=0499, idProduct=1030, bcdDevice= 0.40 [ 26.563262][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.571462][ T346] usb 3-1: Product: 쯛㞜ᗫ똲ࡆ刽뺸矟◕詮˓〭⏉츃곳덝飡뮷邘ଢ଼䶵炔ௐ⒡䖹ꎆ론偬姾꽔ݑ⠿牫গ澐禨㱐牮뉂몊蛧뤍ং串훧휦㾨忂㽩└娀ᦱ⁦繐蟨畎㛋煩僠䱸ह걡㼟ల゠褺☸䒼봂뗼攼ឍ㆗⯫蠞茶慥圸푭荧䯣짏䘋ꃠ㡭轣ڼ旽Ƿ鮋졩㭱㡴贖鯪숧鰯☮㥲웹뵛姐 [ 26.605433][ T346] usb 3-1: Manufacturer: 앢ﺌꆸ한鮫빆屔Ꭸ眺민笘䱮鸽ꪊ㛇뱸ʏ櫭Ԏ떡ᝫ蒼꧵ᱪ똍ﾺ⡧讔嗒敋懼淪ꕌ᎑魈⁗销騡鑃Űꞡ𧻓售촆宆聱甀ᠮ [ 26.626750][ T346] usb 3-1: SerialNumber: Д [ 26.666833][ T67] usb usb2-port1: attempt power cycle [ 26.838629][ T346] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 26.850023][ T346] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 26.861777][ T346] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 26.872586][ T346] usb 3-1: USB disconnect, device number 2 [ 26.888199][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.926811][ T345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.944580][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 26.950853][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 26.960383][ T9] usb 4-1: USB disconnect, device number 2 [ 27.006738][ T350] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.016909][ T67] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.038514][ T67] usb 2-1: device descriptor read/8, error -71 [ 27.136683][ T350] usb 1-1: device descriptor read/64, error -71 [ 27.167979][ T67] usb 2-1: device descriptor read/8, error -71 [ 27.376694][ T350] usb 1-1: device descriptor read/64, error -71 [ 27.406886][ T67] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 27.427910][ T67] usb 2-1: device descriptor read/8, error -71 [ 27.467899][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 27.467918][ T36] audit: type=1400 audit(1793348646.540:138): avc: denied { append } for pid=359 comm="syz.3.16" name="pfkey" dev="proc" ino=4026532649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 27.497599][ T36] audit: type=1400 audit(1793348646.550:139): avc: denied { read } for pid=359 comm="syz.3.16" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 27.521375][ T36] audit: type=1400 audit(1793348646.550:140): avc: denied { open } for pid=359 comm="syz.3.16" path="/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 27.545702][ T36] audit: type=1400 audit(1793348646.600:141): avc: denied { write } for pid=361 comm="syz.3.17" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.548961][ T362] syz.3.17 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 27.570653][ T36] audit: type=1400 audit(1793348646.600:142): avc: denied { ioctl } for pid=361 comm="syz.3.17" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.592135][ T67] usb 2-1: device descriptor read/8, error -71 [ 27.615126][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.619672][ T36] audit: type=1400 audit(1793348646.680:143): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.636806][ T350] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.658655][ T36] audit: type=1400 audit(1793348646.730:144): avc: denied { mounton } for pid=368 comm="syz.3.18" path="/7/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 27.702158][ T36] audit: type=1400 audit(1793348646.770:145): avc: denied { read } for pid=375 comm="syz.3.20" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.724720][ T36] audit: type=1400 audit(1793348646.770:146): avc: denied { open } for pid=375 comm="syz.3.20" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.748072][ T67] usb usb2-port1: unable to enumerate USB device [ 27.750298][ T36] audit: type=1400 audit(1793348646.770:147): avc: denied { create } for pid=375 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.785319][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.796297][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 27.805667][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.813772][ T350] usb 1-1: device descriptor read/64, error -71 [ 27.820808][ T9] usb 3-1: config 0 descriptor?? [ 28.028621][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 28.034722][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 28.043531][ T9] usb 3-1: USB disconnect, device number 3 [ 28.056995][ T350] usb 1-1: device descriptor read/64, error -71 [ 28.146717][ T340] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 28.166824][ T350] usb usb1-port1: attempt power cycle [ 28.298177][ T340] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.306324][ T340] usb 4-1: not running at top speed; connect to a high speed hub [ 28.314985][ T340] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 28.326084][ T340] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 28.339365][ T340] usb 4-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 28.348539][ T340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.356563][ T340] usb 4-1: Product: ࡃ [ 28.360817][ T340] usb 4-1: Manufacturer: 絈劵柭䄘䥭浲픵⡉㗴வ鞼默潻⹜ꌮѺ⢏觜၍﹈웣徨ꉤ穆⊫ꖿ೛흾ﲁ䴉傷ೌ풆酷뢤贅꺆惽㘭鰤᫉宝歠췓⪱폍ट鋨䰡撎ሟ䶐⮘᚟ [ 28.383882][ T340] hub 4-1:1.1: Invalid hub with more than one config or interface [ 28.391812][ T340] hub 4-1:1.1: probe with driver hub failed with error -22 [ 28.456723][ T311] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.466731][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.506739][ T350] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 28.528344][ T350] usb 1-1: device descriptor read/8, error -71 [ 28.608097][ T311] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 61, changing to 7 [ 28.619149][ T311] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 28.628586][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.632696][ T311] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 28.641840][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 28.650777][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.660140][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.667795][ T311] usb 2-1: Product: syz [ 28.678810][ T350] usb 1-1: device descriptor read/8, error -71 [ 28.680007][ T311] usb 2-1: Manufacturer: syz [ 28.686855][ T9] usb 3-1: config 0 descriptor?? [ 28.696492][ T311] usb 2-1: SerialNumber: syz [ 28.912703][ T311] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.919824][ T311] usb 2-1: unit 2 not found! [ 28.924580][ T311] usb 2-1: unit 80 not found! [ 28.926857][ T350] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 28.930010][ T311] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 28.952426][ T311] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 28.962170][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.972481][ T350] usb 1-1: device descriptor read/8, error -71 [ 28.979621][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.995542][ T311] usb 2-1: USB disconnect, device number 6 [ 29.100357][ T356] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 29.109587][ T9] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 29.118568][ T350] usb 1-1: device descriptor read/8, error -71 [ 29.126173][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5 [ 29.201733][ T9] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 29.227230][ T350] usb usb1-port1: unable to enumerate USB device [ 29.521123][ T350] usb 3-1: USB disconnect, device number 4 [ 29.786724][ T340] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 29.948105][ T340] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.959775][ T340] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.971339][ T340] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.981637][ T340] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 29.994531][ T340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.004343][ T340] usb 2-1: config 0 descriptor?? [ 30.010867][ T340] usb 2-1: bad CDC descriptors [ 30.040701][ T400] process 'syz.2.28' launched './file0' with NULL argv: empty string added [ 30.077323][ T404] serio: Serial port ptm0 [ 30.132073][ T406] netlink: 'syz.2.30': attribute type 16 has an invalid length. [ 30.139944][ T406] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.30'. [ 30.346693][ T350] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 30.497919][ T350] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.508203][ T350] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 30.522692][ T350] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 30.532250][ T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.540308][ T350] usb 1-1: Product: syz [ 30.544607][ T350] usb 1-1: Manufacturer: syz [ 30.549295][ T350] usb 1-1: SerialNumber: syz [ 30.556303][ T350] usb-storage 1-1:1.0: USB Mass Storage device detected [ 30.564234][ T350] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 30.572586][ T350] scsi host1: usb-storage 1-1:1.0 [ 30.716547][ T350] usb 4-1: USB disconnect, device number 3 [ 30.809829][ T10] usb 1-1: USB disconnect, device number 7 [ 31.056697][ T350] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 31.098540][ T418] input: syz1 as /devices/virtual/input/input6 [ 31.209093][ T350] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 31.217418][ T350] usb 4-1: config 1 has no interface number 0 [ 31.220644][ T423] netlink: 140 bytes leftover after parsing attributes in process `syz.2.35'. [ 31.223591][ T350] usb 4-1: config 1 interface 105 has no altsetting 0 [ 31.240820][ T350] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 31.250368][ T350] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 31.258526][ T350] usb 4-1: Product: syz [ 31.262744][ T350] usb 4-1: Manufacturer: syz [ 31.267416][ T350] usb 4-1: SerialNumber: syz [ 31.466720][ T311] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 31.618193][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.626418][ T311] usb 3-1: not running at top speed; connect to a high speed hub [ 31.635119][ T311] usb 3-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 31.645492][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.657078][ T311] usb 3-1: string descriptor 0 read error: -22 [ 31.663381][ T311] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 31.672537][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.686319][ T311] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 31.709815][ T437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.726934][ T311] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 31.738292][ T437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.816980][ T350] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 31.828552][ T350] usb 4-1: USB disconnect, device number 4 [ 31.896274][ T423] rust_binder: 422:423 got reply transaction with no transaction stack [ 31.904711][ T423] rust_binder: 422:423 transaction reply to 0:0 failed EINVAL, code 1 size 0-0 line thread.rs:1560 [ 31.957007][ T311] usb 3-1: USB disconnect, device number 5 [ 31.968728][ T340] rust_binder: 422: undelivered TRANSACTION_ERROR: 29201 [ 31.995103][ T453] ================================================================== [ 32.003211][ T453] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 32.010773][ T453] Read of size 8 at addr ffff888110e8dc98 by task syz.0.45/453 [ 32.018321][ T453] [ 32.020676][ T453] CPU: 1 UID: 0 PID: 453 Comm: syz.0.45 Not tainted syzkaller #0 b5d0aad997485fc03b0f686c9bc4e10dbcf7cbf9 [ 32.020697][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.020711][ T453] Call Trace: [ 32.020717][ T453] [ 32.020724][ T453] __dump_stack+0x21/0x30 [ 32.020751][ T453] dump_stack_lvl+0x140/0x1c0 [ 32.020776][ T453] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.020800][ T453] ? __cfi__printk+0x10/0x10 [ 32.020822][ T453] print_address_description+0x71/0x210 [ 32.020847][ T453] print_report+0x4a/0x70 [ 32.020870][ T453] kasan_report+0x162/0x1a0 [ 32.020886][ T453] ? snapshot_ctr+0x586/0x1350 [ 32.020906][ T453] ? snapshot_ctr+0x586/0x1350 [ 32.020925][ T453] __asan_report_load8_noabort+0x18/0x20 [ 32.020947][ T453] snapshot_ctr+0x586/0x1350 [ 32.020967][ T453] ? dm_split_args+0xa1/0x740 [ 32.020983][ T453] ? __cfi_snapshot_ctr+0x10/0x10 [ 32.021002][ T453] ? dm_split_args+0x5d0/0x740 [ 32.021019][ T453] dm_table_add_target+0x59f/0xcb0 [ 32.021037][ T453] table_load+0x2eb/0x7d0 [ 32.021060][ T453] ? __check_object_size+0x99/0x870 [ 32.021083][ T453] ? __cfi_table_load+0x10/0x10 [ 32.021106][ T453] ? __kasan_check_write+0x18/0x20 [ 32.021127][ T453] ? __cfi_table_load+0x10/0x10 [ 32.021150][ T453] dm_ctl_ioctl+0x8f0/0xde0 [ 32.021174][ T453] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 32.021201][ T453] ? bpf_lsm_file_ioctl+0xd/0x20 [ 32.021217][ T453] ? security_file_ioctl+0x3e/0x110 [ 32.021239][ T453] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 32.021261][ T453] __se_sys_ioctl+0x123/0x1b0 [ 32.021276][ T453] __x64_sys_ioctl+0x7f/0xa0 [ 32.021291][ T453] x64_sys_call+0x1878/0x2ee0 [ 32.021307][ T453] do_syscall_64+0x57/0xf0 [ 32.021323][ T453] ? clear_bhb_loop+0x50/0xa0 [ 32.021346][ T453] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.021367][ T453] RIP: 0033:0x7fde2dd9f559 [ 32.021385][ T453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.021398][ T453] RSP: 002b:00007fde2ec79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.021418][ T453] RAX: ffffffffffffffda RBX: 00007fde2e025fa0 RCX: 00007fde2dd9f559 [ 32.021430][ T453] RDX: 00002000000003c0 RSI: 00000000c138fd09 RDI: 0000000000000008 [ 32.021442][ T453] RBP: 00007fde2de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 32.021452][ T453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.021462][ T453] R13: 00007fde2e026038 R14: 00007fde2e025fa0 R15: 00007ffe6becdec8 [ 32.021477][ T453] [ 32.021482][ T453] [ 32.277640][ T453] Allocated by task 453: [ 32.281882][ T453] kasan_save_track+0x3e/0x80 [ 32.286586][ T453] kasan_save_alloc_info+0x3a/0x50 [ 32.291792][ T453] __kasan_kmalloc+0x96/0xb0 [ 32.296428][ T453] __kmalloc_cache_node_noprof+0x225/0x430 [ 32.302261][ T453] dm_get_table_device+0x1e3/0x6c0 [ 32.307385][ T453] dm_get_device+0x32b/0x7f0 [ 32.311985][ T453] snapshot_ctr+0x292/0x1350 [ 32.316617][ T453] dm_table_add_target+0x59f/0xcb0 [ 32.321777][ T453] table_load+0x2eb/0x7d0 [ 32.326132][ T453] dm_ctl_ioctl+0x8f0/0xde0 [ 32.330681][ T453] __se_sys_ioctl+0x123/0x1b0 [ 32.335378][ T453] __x64_sys_ioctl+0x7f/0xa0 [ 32.339989][ T453] x64_sys_call+0x1878/0x2ee0 [ 32.344686][ T453] do_syscall_64+0x57/0xf0 [ 32.349144][ T453] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.355066][ T453] [ 32.357387][ T453] Freed by task 453: [ 32.361277][ T453] kasan_save_track+0x3e/0x80 [ 32.365965][ T453] kasan_save_free_info+0x44/0x50 [ 32.371002][ T453] __kasan_slab_free+0x5f/0x80 [ 32.375774][ T453] kfree+0x158/0x440 [ 32.379684][ T453] dm_put_table_device+0x298/0x2e0 [ 32.384884][ T453] dm_get_device+0x571/0x7f0 [ 32.389499][ T453] snapshot_ctr+0x435/0x1350 [ 32.394102][ T453] dm_table_add_target+0x59f/0xcb0 [ 32.399252][ T453] table_load+0x2eb/0x7d0 [ 32.403607][ T453] dm_ctl_ioctl+0x8f0/0xde0 [ 32.408146][ T453] __se_sys_ioctl+0x123/0x1b0 [ 32.412827][ T453] __x64_sys_ioctl+0x7f/0xa0 [ 32.417423][ T453] x64_sys_call+0x1878/0x2ee0 [ 32.422105][ T453] do_syscall_64+0x57/0xf0 [ 32.426537][ T453] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.432466][ T453] [ 32.434811][ T453] The buggy address belongs to the object at ffff888110e8dc80 [ 32.434811][ T453] which belongs to the cache kmalloc-96 of size 96 [ 32.448715][ T453] The buggy address is located 24 bytes inside of [ 32.448715][ T453] freed 96-byte region [ffff888110e8dc80, ffff888110e8dce0) [ 32.462366][ T453] [ 32.464721][ T453] The buggy address belongs to the physical page: [ 32.471160][ T453] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110e8d [ 32.480014][ T453] flags: 0x4000000000000000(zone=1) [ 32.485212][ T453] page_type: f5(slab) [ 32.489200][ T453] raw: 4000000000000000 ffff888100041280 ffffea000443a700 0000000000000006 [ 32.497789][ T453] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 32.506382][ T453] page dumped because: kasan: bad access detected [ 32.512837][ T453] page_owner tracks the page as allocated [ 32.518555][ T453] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 111, tgid 111 (udevadm), ts 5808807804, free_ts 5808767214 [ 32.537084][ T453] post_alloc_hook+0x37d/0x3b0 [ 32.541866][ T453] prep_new_page+0x2d/0x180 [ 32.546402][ T453] get_page_from_freelist+0x4aea/0x4ba0 [ 32.551970][ T453] __alloc_pages_noprof+0x35a/0x7e0 [ 32.557195][ T453] alloc_slab_page+0x6b/0x1e0 [ 32.561876][ T453] allocate_slab+0x69/0x430 [ 32.566403][ T453] ___slab_alloc+0x591/0x8c0 [ 32.571013][ T453] __kmalloc_cache_noprof+0x2cd/0x470 [ 32.576421][ T453] kernfs_fop_open+0x716/0xd50 [ 32.581195][ T453] do_dentry_open+0x97c/0x1510 [ 32.585971][ T453] vfs_open+0x86/0x240 [ 32.590115][ T453] path_openat+0x2c49/0x35a0 [ 32.594723][ T453] do_filp_open+0x1f2/0x440 [ 32.599255][ T453] do_sys_openat2+0x134/0x1d0 [ 32.603942][ T453] __x64_sys_openat+0x13a/0x170 [ 32.608803][ T453] x64_sys_call+0xe69/0x2ee0 [ 32.613403][ T453] page last free pid 111 tgid 111 stack trace: [ 32.619553][ T453] free_unref_page+0xb99/0xf50 [ 32.624327][ T453] __free_pages+0x6b/0x3b0 [ 32.628767][ T453] free_pages+0x86/0x90 [ 32.632931][ T453] selinux_genfs_get_sid+0x209/0x2d0 [ 32.638221][ T453] inode_doinit_with_dentry+0x8f8/0xde0 [ 32.643782][ T453] selinux_d_instantiate+0x2b/0x40 [ 32.648916][ T453] security_d_instantiate+0xb8/0xf0 [ 32.654138][ T453] d_splice_alias+0x71/0x3a0 [ 32.658740][ T453] kernfs_iop_lookup+0x2c6/0x320 [ 32.663682][ T453] path_openat+0x1127/0x35a0 [ 32.668294][ T453] do_filp_open+0x1f2/0x440 [ 32.672804][ T453] do_sys_openat2+0x134/0x1d0 [ 32.677493][ T453] __x64_sys_openat+0x13a/0x170 [ 32.682380][ T453] x64_sys_call+0xe69/0x2ee0 [ 32.686977][ T453] do_syscall_64+0x57/0xf0 [ 32.691491][ T453] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.697437][ T453] [ 32.699788][ T453] Memory state around the buggy address: [ 32.705419][ T453] ffff888110e8db80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 32.713504][ T453] ffff888110e8dc00: 00 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc [ 32.721644][ T453] >ffff888110e8dc80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 32.729707][ T453] ^ [ 32.734560][ T453] ffff888110e8dd00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 32.742646][ T453] ffff888110e8dd80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 32.750721][ T453] ================================================================== [ 32.761226][ T453] Disabling lock debugging due to kernel taint [ 32.767571][ T453] device-mapper: table: 252:0: device 1:0 not in table devices list [ 32.775635][ T453] device-mapper: table: 252:0: snapshot-merge: COW device cannot be the same as origin device (-EINVAL) [ 32.786841][ T453] device-mapper: ioctl: error adding target to table [ 32.793600][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 32.793617][ T36] audit: type=1400 audit(1793348651.860:184): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.824756][ T350] usb 2-1: USB disconnect, device number 7 [ 32.826722][ T453] device-mapper: table: 252:0: dm_table_destroy: dm_put_device call missing for 1:0 [ 32.841608][ T36] audit: type=1400 audit(1793348651.860:185): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.864180][ T36] audit: type=1400 audit(1793348651.860:186): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.885755][ T36] audit: type=1400 audit(1793348651.860:187): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.906655][ T36] audit: type=1400 audit(1793348651.860:188): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.927835][ T36] audit: type=1400 audit(1793348651.870:189): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.950988][ T36] audit: type=1400 audit(1793348651.870:190): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.974354][ T36] audit: type=1326 audit(1793348652.010:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.42" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84939f559 code=0x7fc00000 [ 32.999663][ T36] audit: type=1326 audit(1793348652.010:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.42" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe84939f559 code=0x7fc00000 [ 33.026679][ T36] audit: type=1326 audit(1793348652.010:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.42" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84939f559 code=0x7fc00000