last executing test programs: 4.239449291s ago: executing program 2 (id=11): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='add\x00', 0x4) lseek(r0, 0x6, 0x1) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@nullb, 0x0, &(0x7f00000001c0)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xee) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000500)=@rnullb, 0xffffffffffffffff, &(0x7f0000000540)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001040)={0x14, 0x0, &(0x7f0000001000)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x200000000000000, 0x0}) r9 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x0, 0x4158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r13 = syz_open_dev$usbfs(&(0x7f0000000600), 0xbb1, 0x14080) read$usbfs(r13, &(0x7f0000000640)=""/202, 0xca) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f0000000580)={0x0, 0x20000, 0x10, 0x1, 0x154, 0x0, r16}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1000004, 0xd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6c71, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0xffffffde}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e78, 0x8000, 0x1, 0x310}}], 0x1, &(0x7f0000000340)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x6, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) 4.181277224s ago: executing program 0 (id=13): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x110a, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x35}, @flat=@binder={0x73622a85, 0x0, 0x1}}, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 4.121326147s ago: executing program 0 (id=15): socket$packet(0x11, 0x2, 0x300) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/103) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9001) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000001c0)={0x10200, 0x0, &(0x7f0000008000/0x4000)=nil}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000380)='net/sockstat6\x00') fchdir(r2) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='selinuxfs\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x80000001, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x50) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) r6 = syz_open_procfs(r1, &(0x7f0000000100)='syscall\x00') syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa460001010203010902"], 0x0) pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) r7 = socket$tipc(0x1e, 0x5, 0x0) getpeername(r7, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_usb_connect$uac1(0x2, 0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000300000020b4041e934000010203010902ac00030106f00b0904000000010100000a240109001e00860201020924030402030201060b240703050004a268f6a7090401000001020000090401010101020000092402010c0d0c07000924020100550c0905102402010214023ff62a7562e305068e0f240202ff03010008392d24bdb4b40724010008011009050109ff03080c010725010807fcff09040200000102000009040201010102000009058209e8b63dd0dc541cc9f7f3ff030004000725010c090a"], &(0x7f0000000600)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x4, 0x4, 0x3, 0x40, 0x8}, 0x4d, &(0x7f0000000640)={0x5, 0xf, 0x4d, 0x3, [@generic={0x29, 0x10, 0x4, "24513e1c9b4dd4d1cac41bbfdcac348c8203e8263e869c4eb76251529ae15a0de60ecdf2e513"}, @generic={0x15, 0x10, 0x1, "be6bb659a8363eb2fc5dd4874bb01ee0ef37"}, @ssp_cap={0x0, 0x10, 0xa, 0xc, 0x0, 0x711b, 0x1e0f, 0x490, [0xff0000, 0x7, 0x1f80]}]}, 0x2, [{0xc0, &(0x7f0000000540)=@string={0x80, 0x3, "0537c830f8086a821d0badf1b841c086c06dbaf4708b3a2d30d5cb5b8d954035b98d7cbc5a499f9bf5d8be8507a26bc4514f1403c1a1ce50b9b2ff97518e9b8f57807dc7425ba4b8bdb0a51cd620e6cce9f45a013bd427d045e0a37d5ad972f91fa0c0f57e87910767cd14751520f7d60ddb5bc3054133915f2f63d8c237"}}, {0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0203786a5345b0bc3000010000000000000ef0c21a3d"]}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') fchdir(r8) inotify_init() 3.918922726s ago: executing program 2 (id=19): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4f2, 0x418, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x21, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3b, 0xfd, 0x12, 0xbe}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4f2, 0x418, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x21, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3b, 0xfd, 0x12, 0xbe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) gettid() (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000080)=r4, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x3, 0x7, {0x7, 0x1, "f702008103"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.077722496s ago: executing program 1 (id=23): socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x48f82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x95e43000) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000180)=0x1) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x304c0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1020, 0x1, 0x11, r1, 0x2000) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETFMT(0x0, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, r2, &(0x7f00000029c0)) pread64(0xffffffffffffffff, &(0x7f0000000500), 0x4, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYRESHEX=r6], 0x6) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffa, 0x2f8, 0x0, r6}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa30c, 0x40040, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c89, 0x20, 0x2, 0x3ba, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x47bc, 0x2, 0x13, 0x337, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4, 0x0, 0x800000}}], 0x1, 0x0, 0x0) 2.700710894s ago: executing program 1 (id=24): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x4e22, 0x9, @local, 0x6}}]}, 0x50}}, 0x0) 2.577463479s ago: executing program 1 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x2, 0x200, 0x8}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26a, 0x0, 0x3}]}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.325598631s ago: executing program 0 (id=27): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000180)=0x100000001, 0x4) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x2000, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7006) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r5 = epoll_create1(0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) ftruncate(0xffffffffffffffff, 0x3) write$binfmt_script(r6, &(0x7f00000001c0)={'#! ', '', [{}, {0x20, '.'}, {0x20, '&{V%-'}, {0x20, '@%][)*'}, {0x20, 'cpuacct.usage_sys\x00'}, {0x20, '&[-:,*!$.$$!{/(/S-'}, {}, {0x20, '/)[q,'}]}, 0x41) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x304}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r7, &(0x7f0000000100)='!:m', 0x3) sendfile(r3, r6, &(0x7f0000000100)=0x1010, 0x10001) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x6, 0x3, 0x0, 0xba, 0x4, 0xffffffffffffffff}) 2.100943771s ago: executing program 0 (id=30): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) r0 = dup(0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0xa0202, 0xc4) sendfile(r1, r1, 0x0, 0x2) execveat(r0, 0x0, 0x0, 0x0, 0x1000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @c}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xb, 0x8) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) close_range(r4, r4, 0x0) write$binfmt_register(r1, &(0x7f0000000340)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xfffffffffffffffa, 0x3a, '', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x43]}, 0x29) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) 2.024666705s ago: executing program 0 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b9500200000f01c8b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x60}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x5, 0xfd}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x1, 0xb, 0x486, 0xff, 0xb6f, 0xb, 0xf, 0xb, 0x5, 0xffffbfff, 0x44, 0x9, 0x1000a9ab, 0x20000000000fc, 0x32, 0x4000400000000], 0x8080000, 0x40005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b9500200000f01c8b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x60}], 0x1, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x5, 0xfd}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x1, 0xb, 0x486, 0xff, 0xb6f, 0xb, 0xf, 0xb, 0x5, 0xffffbfff, 0x44, 0x9, 0x1000a9ab, 0x20000000000fc, 0x32, 0x4000400000000], 0x8080000, 0x40005}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async) fallocate(r3, 0x0, 0x0, 0x1000f4) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) (async) write(r4, &(0x7f00000002c0)='0', 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) 1.799027016s ago: executing program 3 (id=32): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x9, 0x4) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x2009, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x2, 0x11004, 0x8, 0x6, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0x4, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x209, 0x4, 0x182e, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0xfffffffd, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0xcf, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x100252, 0x81, 0xb, 0x100004, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0xfffffff9, 0x4, 0x4, 0x3fd, 0x66cd, 0x8, 0x8, 0x3, 0x81fc, 0x1ff, 0xffffffff]}}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000001e00210000000000000000000a000000050000000000000008000b"], 0x24}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bridge0\x00', @random="02000136b1ff"}) 1.737582988s ago: executing program 3 (id=33): socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x48f82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x95e43000) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000180)=0x1) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x304c0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1020, 0x1, 0x11, r1, 0x2000) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETFMT(0x0, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, r2, &(0x7f00000029c0)) pread64(0xffffffffffffffff, &(0x7f0000000500), 0x4, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYRESHEX=r6], 0x6) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffa, 0x2f8, 0x0, r6}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa30c, 0x40040, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c89, 0x20, 0x2, 0x3ba, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x47bc, 0x2, 0x13, 0x337, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4, 0x0, 0x800000}}], 0x1, 0x0, 0x0) 1.538865668s ago: executing program 1 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x2, 0x200, 0x8}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26a, 0x0, 0x3}]}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.412479464s ago: executing program 1 (id=34): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r1, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x8, 0x9, 0xc9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x95, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x3, 0xa, 0x2}}}}}}}}]}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1b, &(0x7f0000000180)=0x46a0d57c, 0x4) 1.364162076s ago: executing program 3 (id=35): socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x180400, 0x0) r3 = open(&(0x7f0000000080)='./file0/../file0\x00', 0x8000, 0x100) flock(r3, 0x1) flock(r2, 0x1) flock(r1, 0x1) setns(0xffffffffffffffff, 0x20000) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x8) sendmsg$netlink(r4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) ftruncate(0xffffffffffffffff, 0x1) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0180, 0x0, 0x41, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) fsopen(&(0x7f0000000500)='pstore\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0xc}, 0x10) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) 1.093413918s ago: executing program 3 (id=36): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000005400), 0x40002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000005480)=0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x800006, &(0x7f00000001c0)={[{@name={'name', 0x3d, '#{@(-,\xbf(+%'}}]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", ""]}, 0x24}}, 0x40) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r7, 0x89e1, &(0x7f0000000140)) 820.334711ms ago: executing program 2 (id=37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x25, &(0x7f0000000180)=0x100000001, 0x4) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x402000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200), 0xffffffffffffffed) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7fffe}, 0x1c) r2 = epoll_create1(0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.sectors\x00', 0x275a, 0x13) ftruncate(0xffffffffffffffff, 0x3) (async) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './tracefs/dynamic_events', [], 0xa, "000ca3c10400"}, 0x22) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x304}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='!:m', 0x3) (async) sendfile(r0, r3, &(0x7f0000000100)=0x1010, 0x10001) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000240)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64650530303030303030303030303030303030303035303030302c757365725f69643d", @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0098a3f97e3db2d74e0fc699d87a9ef5107f92dec22537623b9d4bd5dfa7c94be9665f7a5806cc6da4bda5d597e8f0966fddc4d4c6307943f370ef9ab8fe4577d802b74e74324750f56d3590429beb74d77c87bf3c491c2baec5f1f5b59a64333087180d3c8aa7151e816f184c148b6a0344fd560ace868ce9be7870fcde9a738bfed3f9636d7c6adbf46168e3054a6dcae55f7b7db9b429cf0f"]) (async) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001dc0)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x2b, 0x3, 0x2b418842, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) 586.218422ms ago: executing program 2 (id=38): openat(0xffffffffffffff9c, 0x0, 0x142, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r3}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 436.85722ms ago: executing program 3 (id=36): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000005400), 0x40002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000005480)=0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x800006, &(0x7f00000001c0)={[{@name={'name', 0x3d, '#{@(-,\xbf(+%'}}]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", ""]}, 0x24}}, 0x40) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r7, 0x89e1, &(0x7f0000000140)) 349.203114ms ago: executing program 2 (id=39): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x4e22, 0x9, @local, 0x6}}]}, 0x50}}, 0x0) (fail_nth: 3) 340.520214ms ago: executing program 2 (id=40): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d00000a00000000000000ffdbdf25030006000000000002004e22ac1e0001000000000000000005000500008000000a004e2200000009fe8000000000000000000000000000000600000000000000"], 0x50}}, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$rtc(&(0x7f00000001c0), 0x4, 0x125000) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x500000000000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x20000011, 0x0, 0xffffffffffffff99, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) ioprio_set$pid(0x1, r4, 0x4007) ioctl$RTC_AIE_ON(r3, 0x7001) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000004d26c000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff0000000000000000000000000000000000000000000a000100000000000000000048000300"], 0x138}}, 0x80) prctl$PR_SCHED_CORE(0x23, 0x0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x40) writev(r6, &(0x7f0000000600)=[{&(0x7f00000003c0)="b464cb", 0x3}, {0x0, 0xfe}], 0x2) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @private0, 0xa8}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000140)='0', 0x1) write(r7, &(0x7f0000000180)='1', 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000000c0)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) 244.346449ms ago: executing program 3 (id=41): mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = epoll_create1(0x80000) socket(0xa, 0x80802, 0x0) (async) r2 = socket(0xa, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x80000009}) sendmsg$sock(r2, &(0x7f0000001380)={&(0x7f0000000080)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000001300)=[{&(0x7f00000001c0)="be00b018829aaffd6650456980e2d75708f26a6265d5b8d8d831e843bcf12eda8cc0bbca4be725b6ced1d632994b180dfd7e15bde18f884d1f78ab2d33908a2fe04f6ca22285c03914ca4dc7074eec328a928f8fbdf823523c6e22ed89a15704c16f1535891028eb54dbed34742c16c66fc01fb827c51422ed5f392a2f59087aeb32ac4c4cd363917f2fa5b44f961c6255830a547f5b1c403e8e0c2ca158980aa406dbc57b65395525880c2fd7835228c9b8b2fc047903d82a5e5518e2ee90b26c82a7ea3590b49b5d9e1f5131ec7ae1513086e74640ee562bc10339387adca414415be8a26930364a9b2de1a80f809a200d6d749ecbd3c8cbe7915bb341cc535700d1a42765ba5d75a36e82b055f19202bd28a6ba440c7669c7412bc1f29aaed13bb4ed773dad3fc4eb072749292c0f5ce9ed048f47964e41d65e334185c5c35299a525c233deea7b5961e077897a8cdac78697c418b0b38eb6ba3c91690c843caee4d14a94994bfc8e2c338f73c47d3c6e4bfe8f5c533588be45d7f2d44316860c95ab87acac8173c6967936f6ca21d4388c4066662025d30b1b4cdfe2a4c939ec71921db311bb7b800bd467ab44d6e8ac0e042765f074bc614b986622eccdab4969ac7aa3ce43fad6189285d51aef61a6fb96f32e157391c5c8ae562749fa936c4a1333553f04f43c228a8a89a218c191923a04db3a250fa391be76501ea6e3c8b23927b05178b5308cbe1399cfd8255cb56839a8ecf24fed4af68a22d3a4718a46e4f8ed52f10de3c12cd664f4d324ab9a7c214e309a40d6efbf7862d0d342c394f3ce9a351cb70bf4a21e3c8e45b0b7d5a2942fe9ad7128edb7e8b153398d8be0093273161603d4203b1f69c11477a6114aa6036c717ce5d2e924be4e513df73996e6b51221065ff0de220ae141959cc9763b0ffacbf91ff3c90ac125ab7041daaec6269f34f020d3239acb142e5bc97c2e8b41064e2a9d6d9476beb00545fee197145050444faa96bfc57ce95b8ecb0291718ec6bca2340048ec8d5006220ef2476a57bf94a337791844738a9e7d9dc1c96e4f967d930068c3e32393471e9c570d9f3e305fad1cd26942c879e75f96c5b6b32a887cd70a486eada44b3c5acc47eaf8ee4449906e3e7ce2040425d5f7728d25e6437eb3101dfaa6b208091580933de552857a366db898cef8fcf0e1af3732bfa16300044967a8e4eb8fe546825cfc084f8c5f50dfaa9d0dd94355f7b5319a4d3eea7fde44ffe22db91892502b9388875442305c840c1b1250ceaa3b2bfcc8de7c0353f864933264e8ce34da3ac18ba91afa76255b006a52854dff73f7d99fc676d92eebaa5d658ca74f50dd409ac7c2248c03dc56d0fd083b3bec7490fc71f46886d90395818893099370672376893e1e0f3a8338ae373eb7ae253eae4e59ad8a7c92a0bf8358fae93dc38bee30df7d800b11fe9fd5cf6e27f97cf32ca17f728fb2edc0f8b5398c2e962430c842405a826d8353f09dcd44c893ade255633a180d61d60f591d95a32bff97921f0aa5e364ea38bad59ba78349caca9ba8ba98181f77941ec82c2fe8ec9fdfb993e85ee31119183190077a41b3c3b442fbea95a5f441db4c9ad535c0e17eb5df3d9a2988a030f862a071d546228d3d3deaa7b5d7b8ee82074b43847de324106ecf1fcb631399bb5fed07b16ef22d7febb0dd55ba93c76b9e1212e81ca5beda8a53000b12dd8cdd020ce67cce4dbcc6f7ee8b41ca2f9608e8af40f5bc578c79e4ae27e227068a8c39f474a493754a290c3099b29938ea095a7702b8f964621f66195d147f4dbf6db373e21e240e18988d071dbb2083ce35af6c334b8d1f2d3e7ad4c4b5cfc3d4029757b87ab6758924ef3259b4ce213f10b75438895b94ceb6bbd59ccd92d7a2050d897161082dca7c3454e979f57ae27e3822987fca1791e967f2b559d6497e25b0f0316ff761d3fe757f499c896b8df02279ffb51e8def1d8189e5e284e93ed24a8a17b83ac40653ac51cbbf0fcb1ee309809a18884f2ba3bdd1288c075c3325f0c0e3117d7ad405c0a502de6cc6149d04c695eb9cfdd8730147ace6a447f2174b48af20c260fbb590bcee4e49fd5c6b2102ee1436e7e00df18b7713950d60f28cf5cb52458b02c7a5e176055f2a5a82f1cc26d88c61a92464cdbc42cc93ae0f645ae2553d4664d6163fb8248a597bab1711d96ec6735ff5d928cee0e0ac86ab8c7f693c86c90ba2cf7745b81e559dd79819df4c8349e6f14766bb97d2de5bc249668c76410ab90d650a2e4a580f6a42c491e26b4a45f1556b653367f9008be01d0ef107a7c4938416087128e989363f1e652abd9e8e8604c6b8bfa41ef7efe1e1c047437db23bd273e4c4fef0e6bf4d2b6720bae3395c9973b7f7ae24fa03d8b8a5271d625319c74b786a40ab7ff051ed1defccfe1d5a8d98a904e5f086df452d0c41d79e5fb21b6eebdd52dae6233fb2217e6f014015dbf22be576ee79f5bf0b93d83536c3241ef899404ecb8490683ecf7948366a9b7097c5acda19f8e6ba6ff87e95cbb9e094d4412277d593ff4c217643fefbfb21ef29174acb0117367eb7fe8ea8bc823a56e36469991076b56e5acc7526931343ef50f7596cbfa8e2d6cb0cbd72c1cd73f222e01955d0bde7b5394b1e85dba42a2027c21fad97187c1eb6a6af067a62de7e5d882054eac8363b4c51597f26d5030d59dabe41ecbd8cce96d6e0e03328b27636206c8ec55d07a6351949a3d84c69f6a710b256d592ebcdd79cc828e8adb591ed5c31ec2806783cfa5124f235f33c80b901d2408a2aa4a0421f8ce72ed21bd00ce2458e517d7701bf2dc260658e7d34a454ce613c19b86dcac9d9b8340793c22dbdeaf5420c5dfe3fa6ab60846267e1ef202548aaffaa802822e1f7c30a6f5c1699a419a12d95eb8105e41b93a42de2dc8128c7bec8ab4a95d196055ef7b0b2ab186594c95e825880a612c48f9d902ce15a77ffa670694163251fbbb195dae9d0c7fcb897192ad4a3f2e449d46bf2d7c0de23e5e87ecc4b101ca15bcc3f7a415fe0e7aa0713c394309015767ada58b7a72b6901007173c2bab68de0493277d2849f93dc96899424e87623632a1919f9ddf2b83f6c2020500cc18f8bae9259ce01d55a0a6640d5af5eb908136ed90321f621c32bedb4e7964aec59cbb6c87752882a29bbcac06ac2066cdd2a75b4d6e288cc866485405f58c107703f13a060f0186952be47fc67e4d4ea84bcf190a10679246c0eef46e516a367c30db39d29b2595961d1c79b50989e17efe0141d9808051b7e949f8073c3f7c3dd827b45bf9ccdb9d302ade1075d6b1441984573d2a3dd908e540ebe1d8eeb59db4988b3bb88c522a9438436d9a811dd6e55254d0672ae7ca215b17ed39acd2187b003b5ffc619e355f979e8cbeec2541a9c57ed2ea458aaabe8c13d927a92be38d2f8b4313b1c10c47977b6e0ce8e30dc21f38d21c8c9de0c528479606030a5e9e5319d0c3bdaf64788fc53d65a9c2b466a2fd8b280912083f223e35f8c560ebf83764c5860a91775aef323ef33e7a46c80a0bad6d12d476b1679578f0199e64c1052272b0d03f55a4bc18de694710baa498b7c970800cbbf285132c93e819d136c6aa7218e63ab1194156882e067c85af801f01ee3b32c9aebfc6b3c93b72afe1db330eea5ea4aa9cf12178233f0ba234211f97964f19c1b0f1c654fd12745cc759fd935ff61c886d0606bbd5d3497b95facef95aba8eb6a53422eb701caf3d5326094a91c0b52954443466954a0b13d1a543197dc4841aa14c1253261c05959799308a0d9bcbe3e754744951321a483c86f88e1139694106be9e0f744f4aeeb8eb6ce76f290c697a36baf4e035215efbe502375cd19fddc3007c99fe7763e8712aaa919126078ca8a06e677901c6b84395dce04ff8b1318762067e6aaea7584b5b3188c5b70c02302a00e7b7778bc4a772a6c210800bc34c76ce2def356019759dbe54b98de5bd6266927e228f789b181466dc817af27d6fe48fcffcdccc19311c17943a70ddde765ab672e4200945573d18a12767171af2f0f7170443a61f937e372e992cd435b620c834a23bcac01be0641e0af24cdd67617468161c4f8a56dfdd5a2ef0409bd32ef93c65519bad4ea50f89dae3789e635c4b70a61177d34b86014cd65961c4457f5c9839e7601f19fed66ac7d6a4b124c3364d3816cfcee0b7b2b11a7353fd894a2c3890922620310dcbc40246f33dc48223f4a1b25d9c6f27350ea8eb06ff65518d3b8613b91dbde00d84e72bc0c618cc898610a4e553d7dee8e0a2110508c902c003574dac6967842d4e156397c12a87c006eac1d61a17b1437a7fbfe4845311b433c7b1e9c6cc6318d66dcb8614ef909c8b33836b70d28cd9ece722e24d6ca22372fe672384234cb974a70ee79f361bc3b69c7294da5a89bfd97166bccbd71bcf605e250e5aa85b47a7aea5d8d6cac95d5c2cbc1cf186c6627cf445b3662ecde9a26e9291ef1a65d1cb8551b9ff4ba9e2b277e8017d7871a3e9e88f9e059f84d47eafa1b3bc046b1da78be01b12c60bd449aaae34376917923660e46f01c73b8f0c10718255c9afb10d6b992a0931ac259c454fdf79564a585d94b770577208f8c94eacd62f41a230b2c33d05b83b87b4b3578bb950a6ee7a1b10a31fb81a8d05eac82aed21dad06cfa2a1b520bc767024442a23c5554d47b8c7711dd1207e57ca03c0c20c1ff19f8904c1f9db794cfbba2ab2b9a5af16704b9fc75583ec54df8058cfa4bbf06af7d19e5a85479bf63108e11a5cf7eef54d58f3ba31117b936f38b2e18473c4d014bc0598d2a09329539aea5be3e73e866bff12584634b3d5d378fdba5473505fda2e3f7f6c3235abe8de67f3abbd2fb21fa0c3c6330304a021cc6d2712d58ba9112db40ff9a80f696abd8b255c1573a3b89b6d46025c1438e407685657e5017cd25ad38adc1d6633b93a5186ffbe9359709dffdbc350d382ae89afdd0ed1e2e55d423410d55e3a3bd799edac68021b542ff170c24f14b37981feeaab79ac35f7d5931f1c554448b50da4df187e9ddd98d81776d8e18db55e39fa2d678c27d5310a88dd36a5f91a42bda1e6299a88ff93418a18b531f0319120b31c66439484b0eebebe5cd4b70fb5ed418aa724e239dff901f3aeaa12d7c7f7677dbce0f37030ca2eaf2d3643b9f794dde5d04326efd907bcb804e017d1ae6d8f1608f850ae7014d1dccbba942dbd9e87b03471619b1dfda8a16ea342fc57e318c5da2cedf1fb4a6910b13f2764c1db8b949674b87e27a6a94420dcb719cc5f6f9fdb0b079b271d3286cbd36e09a90da7d22a266f5267a4a19e2ec13e0945cde0237ba4f164f07629f31b7ab70a71aed5072ff5e558fd23fbca2ef12e578883c29409e82848cc2fa8af72747b7570be1ca9cdeef03dae1b3ba1650d71b700a6cfabf83edb37d9a9afd1097874a877b8fe4e2a5f218b7bb7e3d4553c1c19a9ce528cb48b8fa3239e6ebde810b4a8acdd552cd7fb4e036b51a0c9ef57565fe01399c33979418f3faf9ba2a8cf678848ec3c91a0813640b7e991a0ccfe57c211c2989ea7dc63188f620c7eb1df5a64cc699742cfaea8661ebcb499324fa7e90d3ef75655f062cc92ef9c0227b53f392e5fc53221d11ae23e533d2441c3bbbbd3f98e6c180a398892e3ac4116c06fe16d6749cb83c3498d0627308bccff8743dd210b61279d76ce2c96e4200b60f6e9f22334d3ce38d4a3849139ef271e7f582c3d1bfd1905818e692bd70bc4", 0x1000}, {&(0x7f00000011c0)="c1450ee7f01f5bcb00689ceeb1cf88b35978267300b3f06d0f08eec67d8274a4713bf855abb6d135a777a98a94594bf7570068db5cfb4107e8bdebf4a9b37758f143bcfef4b6a6e3d2140f310dfcc32d2aaac701a6833045d8ff71bd1e349f0b6d84f2b242d757da68572574833684c6c24219a31ec756674b3fc7c845c618997fb3a9c13930dbf75a197bc1afa110eb848085fe85643359", 0x98}, {&(0x7f0000001280)="106de95e5cd64ec99f7b372942c693e24bad398d063096dd811314414bad6d026a5a857db34fb1de5fb03ff9128f4f9cb0222e911e4efc7d52c4d372baa1d804fb46612c44e164d240d3893893ccd43852c44d5d4dcc0ae80fffbc2acfeeeda2eb2f4e834034b7d2b271d284a835136ff7e77bf0cdf731e5eaf2", 0x7a}], 0x3, &(0x7f0000001340)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x30}, 0x10) (async) sendmsg$sock(r2, &(0x7f0000001380)={&(0x7f0000000080)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000001300)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="c1450ee7f01f5bcb00689ceeb1cf88b35978267300b3f06d0f08eec67d8274a4713bf855abb6d135a777a98a94594bf7570068db5cfb4107e8bdebf4a9b37758f143bcfef4b6a6e3d2140f310dfcc32d2aaac701a6833045d8ff71bd1e349f0b6d84f2b242d757da68572574833684c6c24219a31ec756674b3fc7c845c618997fb3a9c13930dbf75a197bc1afa110eb848085fe85643359", 0x98}, {&(0x7f0000001280)="106de95e5cd64ec99f7b372942c693e24bad398d063096dd811314414bad6d026a5a857db34fb1de5fb03ff9128f4f9cb0222e911e4efc7d52c4d372baa1d804fb46612c44e164d240d3893893ccd43852c44d5d4dcc0ae80fffbc2acfeeeda2eb2f4e834034b7d2b271d284a835136ff7e77bf0cdf731e5eaf2", 0x7a}], 0x3, &(0x7f0000001340)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x30}, 0x10) syz_usb_connect(0x0, 0x34, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e010000082402010102"], 0x0) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0x2, 0x0, 0x0) (async) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0x2, 0x0, 0x0) 999.71µs ago: executing program 1 (id=42): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x80) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) userfaultfd(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x4) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r5, &(0x7f0000000040)="703a8fd45f202e2f6679ae26c58531eb57a24f5aa26e5fae28eb", 0x1a) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xfd56) 0s ago: executing program 0 (id=43): socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x48f82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x95e43000) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000180)=0x1) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x304c0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1020, 0x1, 0x11, r1, 0x2000) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETFMT(0x0, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, r2, &(0x7f00000029c0)) pread64(0xffffffffffffffff, &(0x7f0000000500), 0x4, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYRESHEX=r6], 0x6) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffa, 0x2f8, 0x0, r6}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa30c, 0x40040, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c89, 0x20, 0x2, 0x3ba, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x47bc, 0x2, 0x13, 0x337, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4, 0x0, 0x800000}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 21.393577][ T36] audit: type=1400 audit(1789882886.070:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.394671][ T286] cgroup: Unknown subsys name 'net' [ 21.416217][ T36] audit: type=1400 audit(1789882886.070:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.443471][ T36] audit: type=1400 audit(1789882886.100:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.443646][ T286] cgroup: Unknown subsys name 'devices' [ 21.560021][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.565605][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.678876][ T36] audit: type=1400 audit(1789882886.360:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.702072][ T36] audit: type=1400 audit(1789882886.360:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.718252][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.726985][ T36] audit: type=1400 audit(1789882886.360:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.749318][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.758418][ T36] audit: type=1400 audit(1789882886.420:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.792491][ T36] audit: type=1400 audit(1789882886.420:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.818086][ T36] audit: type=1400 audit(1789882886.420:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.843551][ T36] audit: type=1400 audit(1789882886.420:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.490291][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.497360][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.504528][ T293] bridge_slave_0: entered allmulticast mode [ 22.510990][ T293] bridge_slave_0: entered promiscuous mode [ 22.519367][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.526398][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.533680][ T293] bridge_slave_1: entered allmulticast mode [ 22.539910][ T293] bridge_slave_1: entered promiscuous mode [ 22.651602][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.658679][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.665732][ T298] bridge_slave_0: entered allmulticast mode [ 22.672024][ T298] bridge_slave_0: entered promiscuous mode [ 22.678867][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.685877][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.692953][ T298] bridge_slave_1: entered allmulticast mode [ 22.699243][ T298] bridge_slave_1: entered promiscuous mode [ 22.739286][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.746329][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.753399][ T299] bridge_slave_0: entered allmulticast mode [ 22.759659][ T299] bridge_slave_0: entered promiscuous mode [ 22.766645][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.773710][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.780833][ T299] bridge_slave_1: entered allmulticast mode [ 22.786976][ T299] bridge_slave_1: entered promiscuous mode [ 22.806557][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.813633][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.820955][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.827972][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.838716][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.845777][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.852880][ T297] bridge_slave_0: entered allmulticast mode [ 22.859265][ T297] bridge_slave_0: entered promiscuous mode [ 22.865592][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.872901][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.880094][ T297] bridge_slave_1: entered allmulticast mode [ 22.886214][ T297] bridge_slave_1: entered promiscuous mode [ 22.996395][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.003465][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.010750][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.017763][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.035054][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.042122][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.049394][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.056407][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.075727][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.083018][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.090735][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.097954][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.105456][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.112857][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.144437][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.151513][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.159141][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.166167][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.178367][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.185432][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.197054][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.204119][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.225160][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.232229][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.240053][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.247073][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.265995][ T293] veth0_vlan: entered promiscuous mode [ 23.293555][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.300630][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.311345][ T293] veth1_macvtap: entered promiscuous mode [ 23.323796][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.330867][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.339119][ T298] veth0_vlan: entered promiscuous mode [ 23.367790][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.369601][ T298] veth1_macvtap: entered promiscuous mode [ 23.400443][ T297] veth0_vlan: entered promiscuous mode [ 23.428986][ T297] veth1_macvtap: entered promiscuous mode [ 23.454556][ T299] veth0_vlan: entered promiscuous mode [ 23.480690][ T299] veth1_macvtap: entered promiscuous mode [ 23.509813][ T322] ptp ptp0: new virtual clock ptp1 [ 23.517416][ T327] rust_binder: 321:327 got reply transaction with no transaction stack [ 23.529823][ T322] ptp ptp0: new virtual clock ptp2 [ 23.535057][ T322] ptp ptp0: guarantee physical clock free running [ 23.545938][ T323] overlayfs: missing 'lowerdir' [ 23.553863][ T327] rust_binder: 321:327 transaction reply to 0:0 failed EINVAL, code 0 size 88-24 [ 23.564532][ T323] rust_binder: 321:323 got reply transaction with no transaction stack [ 23.573172][ T323] rust_binder: 321:323 transaction reply to 0:0 failed EINVAL, code 0 size 80-24 [ 23.614095][ T10] rust_binder: 321: undelivered TRANSACTION_ERROR: 29201 [ 23.623577][ T10] rust_binder: 321: undelivered TRANSACTION_ERROR: 29201 [ 23.637179][ T343] netlink: 'syz.3.10': attribute type 16 has an invalid length. [ 23.653639][ T345] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.671404][ T343] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 23.679295][ T343] netlink: 64114 bytes leftover after parsing attributes in process `syz.3.10'. [ 23.695791][ T349] rust_binder: 348:349 transaction async to 0:0 failed EINVAL, code 0 size 88-0 [ 23.724359][ T10] rust_binder: 348: undelivered TRANSACTION_ERROR: 29201 [ 23.732551][ T293] cgroup: fork rejected by pids controller in /syz1 [ 23.763151][ T343] Zero length message leads to an empty skb [ 23.873612][ T352] bridge_slave_1: left allmulticast mode [ 23.884226][ T352] bridge_slave_1: left promiscuous mode [ 23.901341][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.910908][ T352] bridge_slave_0: left allmulticast mode [ 23.918846][ T352] bridge_slave_0: left promiscuous mode [ 23.925994][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.969815][ T367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.986017][ T367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.030294][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.138859][ T380] fuse: Bad value for 'fd' [ 24.154829][ T352] veth1_macvtap: left promiscuous mode [ 24.178744][ T352] veth0_vlan: left promiscuous mode [ 24.198580][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 24.205135][ T10] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 24.220320][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.246915][ T10] usb 1-1: config 0 has no interface number 0 [ 24.253143][ T64] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.271092][ T10] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 24.298554][ T10] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 24.317512][ T10] usb 1-1: config 0 interface 98 has no altsetting 0 [ 24.325627][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.326534][ T10] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 24.338750][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.341904][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.356787][ T10] usb 1-1: Product: syz [ 24.359962][ T376] bridge_slave_0: entered allmulticast mode [ 24.361178][ T10] usb 1-1: Manufacturer: syz [ 24.367240][ T376] bridge_slave_0: entered promiscuous mode [ 24.371494][ T10] usb 1-1: SerialNumber: syz [ 24.378994][ T10] usb 1-1: config 0 descriptor?? [ 24.389059][ T357] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 24.396211][ T357] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 24.402257][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.418615][ T64] usb 3-1: device descriptor read/64, error -71 [ 24.428641][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.438848][ T376] bridge_slave_1: entered allmulticast mode [ 24.445253][ T376] bridge_slave_1: entered promiscuous mode [ 24.468546][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.576963][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.584046][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.600823][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.607875][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.616942][ T357] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 24.632019][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.640263][ T357] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 24.651511][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.667523][ T376] veth0_vlan: entered promiscuous mode [ 24.672700][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.673139][ T64] usb 3-1: device descriptor read/64, error -71 [ 24.692805][ T45] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 24.705262][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.706075][ T376] veth1_macvtap: entered promiscuous mode [ 24.718700][ T45] usb 4-1: Product: syz [ 24.723803][ T45] usb 4-1: Manufacturer: syz [ 24.728409][ T45] usb 4-1: SerialNumber: syz [ 24.879829][ T357] netlink: 112 bytes leftover after parsing attributes in process `syz.0.15'. [ 24.903101][ T357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.922197][ T357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.941793][ T45] usb 4-1: selecting invalid altsetting 1 [ 24.953228][ T357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.958505][ T64] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.962130][ T45] usb 4-1: unit 3 not found! [ 24.985356][ T357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.999330][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 25.034144][ T45] usb 4-1: USB disconnect, device number 2 [ 25.047108][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.140091][ T64] usb 3-1: device descriptor read/64, error -71 [ 25.251317][ T13] bridge_slave_1: left allmulticast mode [ 25.258500][ T13] bridge_slave_1: left promiscuous mode [ 25.269371][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.292346][ T13] bridge_slave_0: left allmulticast mode [ 25.318194][ T13] bridge_slave_0: left promiscuous mode [ 25.332750][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.428577][ T64] usb 3-1: device descriptor read/64, error -71 [ 25.451380][ T13] veth1_macvtap: left promiscuous mode [ 25.456909][ T13] veth0_vlan: left promiscuous mode [ 25.538623][ T64] usb usb3-port1: attempt power cycle [ 25.659431][ T400] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 25.754274][ T401] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.778555][ T401] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.785637][ T401] bridge_slave_0: entered allmulticast mode [ 25.819301][ T401] bridge_slave_0: entered promiscuous mode [ 25.836057][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.858481][ T401] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.877721][ T401] bridge_slave_1: entered allmulticast mode [ 25.888499][ T64] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 25.907051][ T401] bridge_slave_1: entered promiscuous mode [ 25.919274][ T412] tipc: Enabling of bearer rejected, failed to enable media [ 25.959821][ T417] kvm: kvm [416]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x3efa [ 25.978288][ T64] usb 3-1: device descriptor read/8, error -71 [ 26.008110][ T417] kvm: kvm [416]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xa621 [ 26.042391][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.049462][ T401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.056754][ T401] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.063802][ T401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.079316][ T417] kvm: kvm [416]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x2196 [ 26.099235][ T423] : renamed from bridge0 (while UP) [ 26.110104][ T64] usb 3-1: device descriptor read/8, error -71 [ 26.142073][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.149683][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.173579][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.180685][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.195298][ T417] kvm: kvm [416]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9b80 [ 26.199486][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.210875][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.245409][ T401] veth0_vlan: entered promiscuous mode [ 26.267773][ T401] veth1_macvtap: entered promiscuous mode [ 26.286687][ T417] kvm: kvm [416]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x88a7 [ 26.364917][ T417] kvm: MONITOR instruction emulated as NOP! [ 26.368597][ T64] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 26.418867][ T64] usb 3-1: device descriptor read/8, error -71 [ 26.476716][ T36] kauditd_printk_skb: 99 callbacks suppressed [ 26.476733][ T36] audit: type=1400 audit(1789882891.150:173): avc: denied { read write } for pid=445 comm="syz.1.34" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 26.508657][ T10] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 26.524436][ T10] asix 1-1:0.98: probe with driver asix failed with error -71 [ 26.527632][ T297] cgroup: fork rejected by pids controller in [ 26.541097][ T10] usb 1-1: USB disconnect, device number 2 [ 26.549286][ T297] /syz3 [ 26.558593][ T36] audit: type=1400 audit(1789882891.190:174): avc: denied { open } for pid=445 comm="syz.1.34" path="/1/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 26.564674][ T297] [ 26.588711][ T64] usb 3-1: device descriptor read/8, error -71 [ 26.699348][ T64] usb usb3-port1: unable to enumerate USB device [ 26.721584][ T352] bridge_slave_1: left allmulticast mode [ 26.727307][ T352] bridge_slave_1: left promiscuous mode [ 26.737469][ T352] : port 2(bridge_slave_1) entered disabled state [ 26.750707][ T352] bridge_slave_0: left allmulticast mode [ 26.756373][ T352] bridge_slave_0: left promiscuous mode [ 26.762179][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.797515][ T352] : port 1(bridge_slave_0) entered disabled state [ 26.927708][ T352] veth1_macvtap: left promiscuous mode [ 26.928503][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 26.938384][ T352] veth0_vlan: left promiscuous mode [ 26.966794][ T9] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 26.987942][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.009215][ T9] usb 2-1: Product: syz [ 27.013417][ T9] usb 2-1: Manufacturer: syz [ 27.027907][ T36] audit: type=1400 audit(1789882891.700:175): avc: denied { mounton } for pid=451 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 27.052266][ T9] usb 2-1: SerialNumber: syz [ 27.142984][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.150193][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.157276][ T451] bridge_slave_0: entered allmulticast mode [ 27.168994][ T451] bridge_slave_0: entered promiscuous mode [ 27.179172][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.186222][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.193298][ T451] bridge_slave_1: entered allmulticast mode [ 27.200230][ T451] bridge_slave_1: entered promiscuous mode [ 27.211265][ T456] TCP: TCP_TX_DELAY enabled [ 27.218493][ T36] audit: type=1400 audit(1789882891.890:176): avc: denied { mounton } for pid=455 comm="syz.2.37" path="/4/tracefs" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 27.241389][ T456] fuse: Unknown parameter '000000000000000000000050x0000000000000005' [ 27.256927][ T36] audit: type=1400 audit(1789882891.930:177): avc: denied { bind } for pid=455 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.287703][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.294757][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.299250][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.302054][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.315618][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.323726][ T9] usb 2-1: USB disconnect, device number 2 [ 27.331547][ T36] audit: type=1400 audit(1789882891.930:178): avc: denied { listen } for pid=455 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.359705][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.400463][ T451] veth0_vlan: entered promiscuous mode [ 27.413832][ T451] veth1_macvtap: entered promiscuous mode [ 27.439541][ T464] cgroup: Invalid name [ 27.439772][ T36] audit: type=1400 audit(1789882892.120:179): avc: denied { mounton } for pid=462 comm="syz.3.36" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 27.459025][ T467] tipc: Started in network mode [ 27.467583][ T36] audit: type=1400 audit(1789882892.120:180): avc: denied { ioctl } for pid=462 comm="syz.3.36" path="socket:[3850]" dev="sockfs" ino=3850 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.472035][ T467] tipc: Node identity e6e68ba8f2ed, cluster identity 4711 [ 27.503792][ T467] tipc: Enabled bearer , priority 0 [ 27.514031][ T462] tipc: Disabling bearer [ 27.598549][ T36] audit: type=1400 audit(1789882892.270:181): avc: denied { nlmsg_write } for pid=471 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.631763][ T36] audit: type=1400 audit(1789882892.310:182): avc: denied { block_suspend } for pid=475 comm="syz.3.41" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.828705][ T479] ------------[ cut here ]------------ [ 27.834203][ T479] WARNING: CPU: 0 PID: 479 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 27.843651][ T479] Modules linked in: [ 27.847551][ T479] CPU: 0 UID: 0 PID: 479 Comm: syz.1.42 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 27.858874][ T479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.869156][ T479] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 27.875568][ T479] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e5 c8 0b 06 00 0f 85 c2 00 00 00 c6 05 d8 c8 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 27.895313][ T479] RSP: 0018:ffffc9000161f640 EFLAGS: 00010246 [ 27.898525][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.901606][ T479] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 27.916990][ T479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000161f6f8 [ 27.925020][ T479] RBP: ffffc9000161f780 R08: ffffc9000161f6f7 R09: 0000000000000000 [ 27.933401][ T479] R10: ffffc9000161f6e0 R11: fffff520002c3edf R12: ffffc9000161f680 [ 27.941416][ T479] R13: dffffc0000000000 R14: 1ffff920002c3ecc R15: 0000000000000000 [ 27.949429][ T479] FS: 00007ffb63bb26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.958370][ T479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.965043][ T479] CR2: 000020000000f000 CR3: 000000011d344000 CR4: 00000000003526b0 [ 27.973199][ T479] Call Trace: [ 27.976486][ T479] [ 27.979450][ T479] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 27.985188][ T479] ? __kasan_slab_alloc+0x73/0x90 [ 27.990244][ T479] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 27.995891][ T479] ? hashtab_init+0xd6/0x1f0 [ 28.000538][ T479] ___kmalloc_large_node+0x81/0x220 [ 28.005743][ T479] ? hashtab_init+0xd6/0x1f0 [ 28.010378][ T479] __kmalloc_large_node_noprof+0x1e/0xd0 [ 28.016021][ T479] ? hashtab_init+0xd6/0x1f0 [ 28.020688][ T479] __kmalloc_noprof+0x326/0x510 [ 28.025546][ T479] ? __cfi_ebitmap_read+0x10/0x10 [ 28.030605][ T479] hashtab_init+0xd6/0x1f0 [ 28.035034][ T479] ? policydb_read+0x865/0x2860 [ 28.039927][ T479] symtab_init+0x44/0x70 [ 28.044180][ T479] policydb_read+0x8e1/0x2860 [ 28.048513][ T45] usb 4-1: device descriptor read/64, error -71 [ 28.048885][ T479] ? __kasan_kmalloc+0x96/0xb0 [ 28.059837][ T479] ? __cfi_policydb_read+0x10/0x10 [ 28.064957][ T479] ? security_load_policy+0x130/0x12d0 [ 28.070444][ T479] security_load_policy+0x16a/0x12d0 [ 28.075744][ T479] ? irqentry_exit+0x4a/0x60 [ 28.080372][ T479] ? __kasan_check_write+0x18/0x20 [ 28.085488][ T479] ? mutex_lock+0x97/0x1d0 [ 28.089942][ T479] ? __cfi_security_load_policy+0x10/0x10 [ 28.095668][ T479] ? rep_movs_alternative+0x4a/0xa0 [ 28.100889][ T479] sel_write_load+0x258/0x600 [ 28.105567][ T479] ? __cfi_sel_write_load+0x10/0x10 [ 28.110785][ T479] ? bpf_lsm_file_permission+0xd/0x20 [ 28.116159][ T479] ? __cfi_sel_write_load+0x10/0x10 [ 28.121465][ T479] vfs_write+0x3c1/0xfd0 [ 28.125696][ T479] ? __cfi_vfs_write+0x10/0x10 [ 28.130463][ T479] ? __kasan_check_write+0x18/0x20 [ 28.135580][ T479] ? mutex_lock+0x97/0x1d0 [ 28.140006][ T479] ? __cfi_mutex_lock+0x10/0x10 [ 28.144857][ T479] ksys_write+0x145/0x260 [ 28.149195][ T479] ? __cfi_ksys_write+0x10/0x10 [ 28.154043][ T479] ? __x64_sys_recvmmsg+0x199/0x250 [ 28.159254][ T479] ? __secure_computing+0xee/0x2b0 [ 28.164374][ T479] __x64_sys_write+0x7f/0x90 [ 28.168978][ T479] x64_sys_call+0x271c/0x2ee0 [ 28.173661][ T479] do_syscall_64+0x57/0xf0 [ 28.178099][ T479] ? clear_bhb_loop+0x50/0xa0 [ 28.182801][ T479] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.188710][ T479] RIP: 0033:0x7ffb62d9e159 [ 28.193135][ T479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.212778][ T479] RSP: 002b:00007ffb63bb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 28.221207][ T479] RAX: ffffffffffffffda RBX: 00007ffb63025fa0 RCX: 00007ffb62d9e159 [ 28.229204][ T479] RDX: 000000000000fd56 RSI: 0000200000000000 RDI: 0000000000000000 [ 28.237176][ T479] RBP: 00007ffb62e3506b R08: 0000000000000000 R09: 0000000000000000 [ 28.245166][ T479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.253156][ T479] R13: 00007ffb63026038 R14: 00007ffb63025fa0 R15: 00007ffc864ca4c8 [ 28.261156][ T479] [ 28.264170][ T479] ---[ end trace 0000000000000000 ]--- [ 28.270418][ T479] SELinux: failed to load policy [ 28.411905][ T60] bridge_slave_1: left allmulticast mode [ 28.417595][ T60] bridge_slave_1: left promiscuous mode [ 28.423375][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.430924][ T60] bridge_slave_0: left allmulticast mode [ 28.436550][ T60] bridge_slave_0: left promiscuous mode [ 28.442454][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.572105][ T60] veth1_macvtap: left promiscuous mode [ 28.577630][ T60] veth0_vlan: left promiscuous mode [ 28.810608][ T60] bridge_slave_1: left allmulticast mode [ 28.816248][ T60] bridge_slave_1: left promiscuous mode [ 28.821867][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.829338][ T60] bridge_slave_0: left allmulticast mode [ 28.834959][ T60] bridge_slave_0: left promiscuous mode [ 28.840611][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.848070][ T60] bridge_slave_1: left allmulticast mode [ 28.853763][ T60] bridge_slave_1: left promiscuous mode [ 28.859371][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.866653][ T60] bridge_slave_0: left allmulticast mode [ 28.872369][ T60] bridge_slave_0: left promiscuous mode [ 28.877940][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.885608][ T60] bridge_slave_1: left allmulticast mode [ 28.891248][ T60] bridge_slave_1: left promiscuous mode [ 28.896807][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.904327][ T60] bridge_slave_0: left allmulticast mode [ 28.910070][ T60] bridge_slave_0: left promiscuous mode [ 28.915644][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.220647][ T60] tipc: Left network mode [ 29.227161][ T60] veth1_macvtap: left promiscuous mode [ 29.232693][ T60] veth0_vlan: left promiscuous mode [ 29.238127][ T60] veth1_macvtap: left promiscuous mode [ 29.243868][ T60] veth0_vlan: left promiscuous mode [ 29.249384][ T60] veth1_macvtap: left promiscuous mode [ 29.254885][ T60] veth0_vlan: left promiscuous mode