last executing test programs: 1.832498445s ago: executing program 0 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0xde00) 1.776528847s ago: executing program 0 (id=167): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x406, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4043, 0x1fd) userfaultfd(0x80001) socket$can_raw(0x1d, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000580)='tracefs\x00', 0x0) fcntl$dupfd(r1, 0x0, r1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x22, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.776281997s ago: executing program 0 (id=168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x7101}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000200)=@ethtool_stats={0x4b}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$NS_GET_NSTYPE(r1, 0x8004b706, 0x0) getpeername$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0xffffffffffffffff, 0x2b) write$cgroup_devices(r0, 0x0, 0xffdd) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x2}) truncate(&(0x7f0000000240)='./file0\x00', 0x1) 1.674493239s ago: executing program 1 (id=170): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a1c000000000a010300000000000000000100000008000240"], 0xac}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0x9}, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c8c0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.584603321s ago: executing program 1 (id=172): socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x645bd000) 1.561583302s ago: executing program 1 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000040), 0x204080, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0]) 1.431478695s ago: executing program 1 (id=174): r0 = fsopen(&(0x7f0000000580)='tracefs\x00', 0x0) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1, 0x17e, 0x9) fcntl$dupfd(r0, 0x0, r0) io_setup(0x3, &(0x7f0000000000)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd700003dc0a0000000000180001dd7d2b8a926e042d5102488daa41f41255c00c6ce2570259e90000000000000000000000000006000000fca7cbb012c092f40f35f93a20de24f9ba2d7738c794b9d35771735904bda516cf3598a84408b0a6"], 0x2c}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="c000000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414bb0c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000004005c0006"], 0xc0}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) io_submit(r3, 0x0, 0x0) 1.383070686s ago: executing program 1 (id=176): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d10, 0x0) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x4b0242, 0x9d0edb0065e969d5) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x40) write$binfmt_elf32(r4, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x8, 0xb, 0x2, 0x100, 0x2, 0x6, 0x80000000, 0x19d, 0x38, 0x2c5, 0x400, 0x100, 0x20, 0x0, 0x3, 0xc, 0xf6d}}, 0x38) close(r4) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') exit(0x2) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) cachestat(r2, &(0x7f0000000100)={0x7, 0xfff}, &(0x7f0000000140), 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x218, 0x7, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x8a, 0x7, 0x1, 0x0, "bd5281f72f93e2d649509238035f284f327d60d8f78ecfa7bc746b89e4cd41577d099a7ae71c5a4f1c4686ba3d9641b2882e02f136476833e581af6fd3c20da1780970cadb0448e30d9a569b46f9d13fc1ddc548520027582d92dffbeb985fef6f56023a327d6a2b85080fcd3d90cbda6d0741898887edae604ad36541d8f7a42782daf9759e"}, @NFTA_RULE_USERDATA={0x103, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xf64f8b4dbdd2984f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x7c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6000}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x200}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0xb, 0x9, 0x5, 0x8}, {0x66, 0x1, 0x9, 0x2ccc}, {0x9, 0xf, 0x19, 0x1d9}, {0x6, 0x1, 0x7, 0x4}, {0x4, 0xe, 0xff, 0x3}, {0xb, 0x9, 0x6, 0x5}]}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 1.271600009s ago: executing program 0 (id=177): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000007c0)=ANY=[], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x45, 0xf, 0xea, 0x10, 0x108c, 0x169, 0xbb44, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0x0, 0x4, "", [{{0x9, 0x4, 0x30, 0x9, 0x0, 0x97, 0xd4, 0x80, 0x1}}]}}]}}, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x81400) close_range(r1, r0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') 693.044503ms ago: executing program 2 (id=181): socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x645bd000) 678.853443ms ago: executing program 2 (id=182): r0 = memfd_create(&(0x7f0000000b00)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x1aX\x87\xf5\x1aP\x06\x9a\xa9\xa0\x98 )\xe3\xa1\xa2\xb1D\xe0\x15S\x89/m\xb71%\x80\x04Q\x1dN\xb0\x19\x81\x16@\xc0\xc4\"g\xd7Z\xb3\x17\xd1\xe7\x1b\xbd\xdck\x95\x16\x17\x95\xce\xa6\x92_\xe4\x9a\xaeA-\x02\x161\x8c\xe7\xa6.)\xadpM\x19\x1c\xcd\xf6S\x9a(:\x90\xb1\x8ft\xeb#\x82\x17\x8d\x00\xcaY\xe9\xf7\xee\x91\bx\x80\xa4\xa0\x16\b\x8b,\xdb\x88\x1e\xc1m\x91\xf0S\xc4\xc9\xefEBT\x8e\xff6\xff\xbb\xd4\xbe&\xf5St\v\xe1\x98;q\\\x1c\xe9\xcc\xfeV\xc3M5\xa9\xec\xc9\x8a\xee7\xbb\xa4\x1f\xc8\xfb\xaar15\xdf\\\xf4d\xc0\xc7\xf3\x88\x13\x94^01\xfc_\x91B\xacp\x8f\xfdx\xa5\xa9_t\x86\xe3%\xf1q\x00\x89c\x05H\x92\xa6\x93je\xfa\xd148\xd0N7', 0x2) io_setup(0x82, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000005280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x7, r0, 0x0, 0x1008, 0x8000000000000000, 0x0, 0x3}]) 611.333235ms ago: executing program 2 (id=183): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x40080) 610.745885ms ago: executing program 2 (id=184): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8ad, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x2005, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xb64, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x2, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7775, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd"], 0xac}}, 0x0) r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) r7 = mmap$binder(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x9c, 0x0, &(0x7f0000000380)=[@acquire={0x40046305, 0x1}, @dead_binder_done, @enter_looper, @enter_looper, @free_buffer={0x40086303, r6}, @register_looper, @free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @fda={0x66646185, 0x8, 0x2, 0xb}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x40}, @acquire_done={0x40106309, 0x3}, @exit_looper], 0xf4, 0x0, &(0x7f0000000440)="f06b300ed866e5374070fbdec299de6b245175057ba68fa7e083a2355e2679ba8c8261c30d32d28db700badc7e51aedd99a977bf55e6b54cffbf70297bb34e489960eea1da85bc5028a4a00268cc0b120e569ddedb427405e8835ceb88fd29f803ef73a1c519d655217f72374ff8a49d7ed6d914367a9257bc2e89df3552100fa420f07c5b13ac97a03b9025e65f71ffd69cb4234311e8192f231f9190a0d79f0aed928c70174e13bbf883e2e2d356bd25f8c05c81cbad8f6d37519c5d50dc81e5b529161aa4ecc24de1c58d733be142eb88408f32844cb57ef115507a71beb39686bdb88ad9473d75f70057b123b181a14c4c49"}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 488.530788ms ago: executing program 1 (id=185): utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') (async) chmod(&(0x7f00000000c0)='./file0/file0\x00', 0x230) (async) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) (async, rerun: 32) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async, rerun: 32) syz_usb_connect(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102"], 0x0) 472.696579ms ago: executing program 2 (id=186): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x5}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x5, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x2, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x2000d, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd"], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x610000, 0x0) unshare(0x2c020400) fcntl$setsig(r4, 0x404, 0x21) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) clock_gettime(0xfffffffffffffff5, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 334.935292ms ago: executing program 3 (id=188): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x8000002, 0x0) readv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000080)=""/54, 0x36}], 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x1, 0x0, 0x8000000000000000, 0x4, 0x3, 0x7}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @private=0xa010101}, 0xfffffffffffffc75) sendmmsg(r1, &(0x7f0000000100), 0x0, 0x27bc8dc71eac0514) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x1f6, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000440)=0x40, 0x4) socket$netlink(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x34, &(0x7f0000f59ffc)=0x4, 0x4) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x6c537e1ba7be777c, 0x45833af92e4b39ff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 295.073652ms ago: executing program 2 (id=189): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) setpgid(r0, r0) r3 = dup(r2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x2, 0x746, 0x1, 0xf2, 0x66, 0xb, 0x400b}, 0xc) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x6449}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, 0x0) 244.558254ms ago: executing program 3 (id=190): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x3, 0xefff, 0xa}) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x5844, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4, 0x1000002, 0x231}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb7dc, 0xf4b0b05e36b3fa23, 0x1, 0x1f, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x203, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @loopback, 0xfffffff7}, 0x1c) 188.468575ms ago: executing program 3 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 188.333375ms ago: executing program 3 (id=192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) ioprio_get$pid(0x2, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a830008ca800000800451e003000684000070190780000001cac1414aa0b01907800370000457480000067000f02898000ac14141164010100ea1f65f7caf96bd997d44186821606a1a903bda18b504167830b"], 0x46) 154.473856ms ago: executing program 3 (id=193): personality(0x5400004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x645bd000) 137.859557ms ago: executing program 3 (id=194): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8ad, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x2005, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xb64, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x2, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7775, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd"], 0xac}}, 0x0) r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) r7 = mmap$binder(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x9c, 0x0, &(0x7f0000000380)=[@acquire={0x40046305, 0x1}, @dead_binder_done, @enter_looper, @enter_looper, @free_buffer={0x40086303, r6}, @register_looper, @free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @fda={0x66646185, 0x8, 0x2, 0xb}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x40}, @acquire_done={0x40106309, 0x3}, @exit_looper], 0xf4, 0x0, &(0x7f0000000440)="f06b300ed866e5374070fbdec299de6b245175057ba68fa7e083a2355e2679ba8c8261c30d32d28db700badc7e51aedd99a977bf55e6b54cffbf70297bb34e489960eea1da85bc5028a4a00268cc0b120e569ddedb427405e8835ceb88fd29f803ef73a1c519d655217f72374ff8a49d7ed6d914367a9257bc2e89df3552100fa420f07c5b13ac97a03b9025e65f71ffd69cb4234311e8192f231f9190a0d79f0aed928c70174e13bbf883e2e2d356bd25f8c05c81cbad8f6d37519c5d50dc81e5b529161aa4ecc24de1c58d733be142eb88408f32844cb57ef115507a71beb39686bdb88ad9473d75f70057b123b181a14c4c49"}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 329.7µs ago: executing program 0 (id=195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000180)=0x100000001, 0x3) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xfffffff9}, 0x1c) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x3, 0xfffffffffffffffd}) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r10, 0x9f, 0x1, 0x4) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={{r10}, 0x8, 0x200, 0x400}) syz_ublk_setup_queues(r9, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x259}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x800, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x34b9e53656f6cad9, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/nf_conntrack_expect\x00') read$FUSE(r12, &(0x7f0000004640)={0x2020}, 0x2020) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) fcntl$dupfd(r0, 0x0, r11) kernel console output (not intermixed with test programs): cess permissive=1 [ 15.177945][ T36] audit: type=1400 audit(1785264672.420:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 23.304335][ T36] audit: type=1400 audit(1785264680.560:64): avc: denied { mounton } for pid=285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.307761][ T285] cgroup: Unknown subsys name 'net' [ 23.327004][ T36] audit: type=1400 audit(1785264680.560:65): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.354327][ T36] audit: type=1400 audit(1785264680.590:66): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.354789][ T285] cgroup: Unknown subsys name 'devices' [ 23.475868][ T285] cgroup: Unknown subsys name 'hugetlb' [ 23.481507][ T285] cgroup: Unknown subsys name 'rlimit' [ 23.576789][ T36] audit: type=1400 audit(1785264680.830:67): avc: denied { setattr } for pid=285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.599980][ T36] audit: type=1400 audit(1785264680.830:68): avc: denied { mounton } for pid=285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.624766][ T36] audit: type=1400 audit(1785264680.830:69): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.651262][ T287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.660092][ T36] audit: type=1400 audit(1785264680.910:70): avc: denied { relabelto } for pid=287 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.685500][ T36] audit: type=1400 audit(1785264680.910:71): avc: denied { write } for pid=287 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.699621][ T285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.711613][ T36] audit: type=1400 audit(1785264680.940:72): avc: denied { read } for pid=285 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.745408][ T36] audit: type=1400 audit(1785264680.940:73): avc: denied { open } for pid=285 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.602890][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.610108][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.617281][ T292] bridge_slave_0: entered allmulticast mode [ 24.623869][ T292] bridge_slave_0: entered promiscuous mode [ 24.633245][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.640341][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.647558][ T292] bridge_slave_1: entered allmulticast mode [ 24.653897][ T292] bridge_slave_1: entered promiscuous mode [ 24.673625][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.680686][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.687914][ T295] bridge_slave_0: entered allmulticast mode [ 24.694211][ T295] bridge_slave_0: entered promiscuous mode [ 24.701731][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.708818][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.715976][ T295] bridge_slave_1: entered allmulticast mode [ 24.722304][ T295] bridge_slave_1: entered promiscuous mode [ 24.750238][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.757402][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.764549][ T293] bridge_slave_0: entered allmulticast mode [ 24.770818][ T293] bridge_slave_0: entered promiscuous mode [ 24.780065][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.787142][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.794253][ T293] bridge_slave_1: entered allmulticast mode [ 24.800566][ T293] bridge_slave_1: entered promiscuous mode [ 24.897110][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.904241][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.911304][ T294] bridge_slave_0: entered allmulticast mode [ 24.917713][ T294] bridge_slave_0: entered promiscuous mode [ 24.927029][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.934255][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.941323][ T294] bridge_slave_1: entered allmulticast mode [ 24.947698][ T294] bridge_slave_1: entered promiscuous mode [ 25.007777][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.014867][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.022166][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.029247][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.060492][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.067584][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.074890][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.081968][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.091182][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.098264][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.105572][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.112613][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.138334][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.145412][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.152699][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.159778][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.198978][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.206299][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.213608][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.220808][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.228256][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.235900][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.244600][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.255341][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.262408][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.275307][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.282373][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.300971][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.308090][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.316656][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.323735][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.331675][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.338781][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.346326][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.353352][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.367555][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.374629][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.421636][ T294] veth0_vlan: entered promiscuous mode [ 25.447687][ T293] veth0_vlan: entered promiscuous mode [ 25.461465][ T295] veth0_vlan: entered promiscuous mode [ 25.481037][ T293] veth1_macvtap: entered promiscuous mode [ 25.488791][ T292] veth0_vlan: entered promiscuous mode [ 25.498187][ T295] veth1_macvtap: entered promiscuous mode [ 25.505166][ T294] veth1_macvtap: entered promiscuous mode [ 25.537142][ T292] veth1_macvtap: entered promiscuous mode [ 25.575126][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.641057][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.672901][ T322] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 25.741119][ T329] cgroup: Invalid name [ 26.791087][ T359] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.093558][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.243976][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 27.255996][ T31] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 27.276623][ T31] usb 2-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 27.304241][ T31] usb 2-1: config 7 interface 0 has no altsetting 0 [ 27.319561][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 27.338936][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.360325][ T31] usbhid 2-1:7.0: couldn't find an input interrupt endpoint [ 27.936606][ T418] syz.0.28: attempt to access beyond end of device [ 27.936606][ T418] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 27.952179][ T418] exFAT-fs (loop0): unable to read boot sector [ 27.958462][ T418] exFAT-fs (loop0): failed to read boot sector [ 27.966957][ T418] exFAT-fs (loop0): failed to recognize exfat type [ 28.266332][ T437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.276094][ T437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.711251][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 28.711268][ T36] audit: type=1400 audit(1785264685.960:167): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 29.037810][ T448] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 29.858635][ T31] usb 2-1: USB disconnect, device number 2 [ 29.904198][ T36] audit: type=1326 audit(1785264687.160:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=475 comm="syz.1.50" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faec1d9de99 code=0x0 [ 29.933493][ T309] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.061386][ T36] audit: type=1400 audit(1785264687.310:169): avc: denied { nlmsg_read } for pid=480 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 30.091016][ T36] audit: type=1400 audit(1785264687.340:170): avc: denied { ioctl } for pid=482 comm="syz.0.53" path="socket:[5233]" dev="sockfs" ino=5233 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.123517][ T309] usb 4-1: Using ep0 maxpacket: 32 [ 30.130446][ T309] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 30.139057][ T309] usb 4-1: config 0 has no interface number 0 [ 30.145906][ T309] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 30.158400][ T309] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 30.167864][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.176114][ T309] usb 4-1: Product: syz [ 30.180448][ T309] usb 4-1: Manufacturer: syz [ 30.185384][ T309] usb 4-1: SerialNumber: syz [ 30.191393][ T309] usb 4-1: config 0 descriptor?? [ 30.198594][ T309] smsc95xx v2.0.0 [ 30.203631][ T309] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 30.207852][ T491] netlink: 'syz.0.54': attribute type 22 has an invalid length. [ 30.224420][ T309] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 30.400532][ T31] usb 4-1: USB disconnect, device number 2 [ 30.637322][ T36] audit: type=1400 audit(1785264687.890:171): avc: denied { mounton } for pid=495 comm="syz.2.56" path="/10/file0" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.679988][ T36] audit: type=1400 audit(1785264687.890:172): avc: denied { mount } for pid=495 comm="syz.2.56" name="/" dev="ramfs" ino=5255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 30.923846][ T309] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.103517][ T309] usb 3-1: Using ep0 maxpacket: 16 [ 31.114210][ T309] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 31.124462][ T309] usb 3-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 31.149481][ T309] usb 3-1: config 7 interface 0 has no altsetting 0 [ 31.162941][ T309] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 31.181295][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.194632][ T309] usbhid 3-1:7.0: couldn't find an input interrupt endpoint [ 31.275039][ T36] audit: type=1400 audit(1785264688.530:173): avc: denied { append } for pid=531 comm="syz.0.70" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.308669][ T532] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 31.335345][ T539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 31.344426][ T36] audit: type=1400 audit(1785264688.600:174): avc: denied { accept } for pid=538 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.366844][ T36] audit: type=1400 audit(1785264688.620:175): avc: denied { read write } for pid=538 comm="syz.3.73" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.391218][ T36] audit: type=1400 audit(1785264688.620:176): avc: denied { open } for pid=538 comm="syz.3.73" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.394999][ T543] futex_wake_op: syz.0.70 tries to shift op by 144; fix this program [ 32.123320][ T559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.132000][ T559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.207583][ T563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 32.271072][ T567] netlink: 'syz.0.81': attribute type 16 has an invalid length. [ 32.278913][ T567] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.81'. [ 32.401110][ T580] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 32.838311][ T610] netlink: 'syz.1.97': attribute type 4 has an invalid length. [ 32.843652][ T309] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.847066][ T610] netlink: 'syz.1.97': attribute type 5 has an invalid length. [ 32.861049][ T610] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.97'. [ 33.003497][ T309] usb 4-1: Using ep0 maxpacket: 16 [ 33.009949][ T309] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 17, changing to 7 [ 33.022738][ T309] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 33.033810][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.041841][ T309] usb 4-1: Product: syz [ 33.046374][ T309] usb 4-1: Manufacturer: syz [ 33.051039][ T309] usb 4-1: SerialNumber: syz [ 33.276607][ T309] usb 4-1: USB disconnect, device number 3 [ 33.294615][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.664370][ T625] Zero length message leads to an empty skb [ 33.697062][ T425] usb 3-1: USB disconnect, device number 2 [ 33.764343][ T635] netlink: 'syz.2.107': attribute type 28 has an invalid length. [ 33.772326][ T635] netlink: 'syz.2.107': attribute type 32 has an invalid length. [ 33.803045][ T637] capability: warning: `syz.3.108' uses deprecated v2 capabilities in a way that may be insecure [ 33.867790][ T649] SELinux: Context system_u: is not valid (left unmapped). [ 33.881838][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 33.881856][ T36] audit: type=1400 audit(1785264691.130:190): avc: denied { relabelto } for pid=648 comm="syz.3.112" name="34" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 33.915509][ T36] audit: type=1400 audit(1785264691.130:191): avc: denied { associate } for pid=648 comm="syz.3.112" name="34" dev="tmpfs" ino=187 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 33.940483][ T36] audit: type=1400 audit(1785264691.170:192): avc: denied { write } for pid=648 comm="syz.3.112" name="34" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 33.966978][ T36] audit: type=1400 audit(1785264691.170:193): avc: denied { add_name } for pid=648 comm="syz.3.112" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 33.989482][ T36] audit: type=1400 audit(1785264691.170:194): avc: denied { create } for pid=648 comm="syz.3.112" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 34.067176][ T36] audit: type=1400 audit(1785264691.170:195): avc: denied { associate } for pid=648 comm="syz.3.112" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.095016][ T36] audit: type=1400 audit(1785264691.170:196): avc: denied { read } for pid=648 comm="syz.3.112" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 34.129127][ T36] audit: type=1400 audit(1785264691.170:197): avc: denied { open } for pid=648 comm="syz.3.112" path="/34/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 34.157299][ T36] audit: type=1400 audit(1785264691.170:198): avc: denied { setattr } for pid=648 comm="syz.3.112" name="trace_pipe" dev="tracefs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 34.163667][ T661] x_tables: unsorted entry at hook 2 [ 34.180180][ T36] audit: type=1400 audit(1785264691.260:199): avc: denied { remove_name } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 34.291667][ T684] netlink: 72 bytes leftover after parsing attributes in process `syz.3.124'. [ 35.426549][ T746] netlink: 'syz.3.148': attribute type 6 has an invalid length. [ 35.475090][ T751] futex_wake_op: syz.0.149 tries to shift op by -1; fix this program [ 35.637991][ T761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=761 comm=syz.3.153 [ 36.393479][ T31] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 36.544479][ T831] tmpfs: Unknown parameter '0x0000000000000003' [ 36.550871][ T31] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 36.564393][ T31] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 36.575997][ T31] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 36.586120][ T31] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 36.595440][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.630906][ T835] netlink: 88 bytes leftover after parsing attributes in process `syz.1.174'. [ 36.717901][ T838] process 'syz.1.176' launched './file0' with NULL argv: empty string added [ 36.780445][ T836] netlink: 'syz.2.175': attribute type 4 has an invalid length. [ 36.784207][ T840] x_tables: duplicate entry at hook 2 [ 36.794130][ T839] netlink: 'syz.2.175': attribute type 4 has an invalid length. [ 37.041939][ T799] kvm: apic: phys broadcast and lowest prio [ 37.049649][ T799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.060343][ T799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.063608][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.074739][ T799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.084869][ T799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.152974][ T31] hub 4-1:32.0: USB hub found [ 37.172317][ T31] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 37.223862][ T31] usb 4-1: USB disconnect, device number 4 [ 37.243560][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 37.250167][ T9] usb 1-1: config 5 has an invalid interface number: 48 but max is 0 [ 37.259114][ T9] usb 1-1: config 5 has no interface number 0 [ 37.265312][ T9] usb 1-1: config 5 interface 48 has no altsetting 0 [ 37.284248][ T9] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=bb.44 [ 37.298146][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.312242][ T9] usb 1-1: Product: syz [ 37.316523][ T9] usb 1-1: Manufacturer: syz [ 37.321173][ T9] usb 1-1: SerialNumber: syz [ 37.486601][ T861] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 37.538684][ T9] usb 1-1: USB disconnect, device number 2 [ 37.806889][ T309] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.875603][ T886] syzkaller1: entered promiscuous mode [ 37.881090][ T886] syzkaller1: entered allmulticast mode [ 37.952550][ T890] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 37.966378][ T309] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 37.977239][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.986500][ T309] usb 2-1: Product: syz [ 37.990724][ T309] usb 2-1: Manufacturer: syz [ 37.995625][ T309] usb 2-1: SerialNumber: syz [ 38.065513][ T895] ------------[ cut here ]------------ [ 38.071064][ T895] WARNING: CPU: 0 PID: 895 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 38.080561][ T895] Modules linked in: [ 38.084556][ T895] CPU: 0 UID: 0 PID: 895 Comm: syz.0.196 Not tainted syzkaller #0 52d57b431c43020f0342b1af6a326091b8e30d09 [ 38.095976][ T895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.103529][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.106130][ T895] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 38.119650][ T895] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 54 d5 0b 06 00 0f 85 c2 00 00 00 c6 05 47 d5 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 38.139377][ T895] RSP: 0018:ffffc9000f31f520 EFLAGS: 00010246 [ 38.145534][ T895] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 38.153574][ T895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000f31f5d8 [ 38.161617][ T895] RBP: ffffc9000f31f660 R08: ffffc9000f31f5d7 R09: 0000000000000000 [ 38.169702][ T895] R10: ffffc9000f31f5c0 R11: fffff52001e63ebb R12: ffffc9000f31f560 [ 38.177737][ T895] R13: dffffc0000000000 R14: 1ffff92001e63ea8 R15: 0000000000000000 [ 38.185793][ T895] FS: 00007feec9e536c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.194819][ T895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.201452][ T895] CR2: 0000200000010000 CR3: 000000010da6c000 CR4: 00000000003526b0 [ 38.209516][ T895] Call Trace: [ 38.212845][ T895] [ 38.215847][ T895] ? vfs_write+0x3c4/0xfd0 [ 38.220316][ T895] ? ksys_write+0x145/0x260 [ 38.224914][ T895] ? x64_sys_call+0x271c/0x2ee0 [ 38.229809][ T895] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 38.235608][ T895] ? hashtab_init+0xd6/0x1f0 [ 38.240247][ T895] ___kmalloc_large_node+0x81/0x220 [ 38.245522][ T895] ? hashtab_init+0xd6/0x1f0 [ 38.250160][ T895] __kmalloc_large_node_noprof+0x1e/0xd0 [ 38.255891][ T895] ? hashtab_init+0xd6/0x1f0 [ 38.260547][ T895] __kmalloc_noprof+0x326/0x510 [ 38.265463][ T895] ? kasan_save_alloc_info+0x3a/0x50 [ 38.270831][ T895] hashtab_init+0xd6/0x1f0 [ 38.273491][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 38.275375][ T895] ? class_read+0x17f/0x8a0 [ 38.284995][ T895] symtab_init+0x44/0x70 [ 38.289296][ T895] class_read+0x208/0x8a0 [ 38.289494][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 38.293699][ T895] ? __kasan_kmalloc+0x96/0xb0 [ 38.304907][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.307562][ T895] ? hashtab_init+0xd6/0x1f0 [ 38.320214][ T895] ? __cfi_class_read+0x10/0x10 [ 38.323601][ T31] usb 3-1: Product: syz [ 38.325126][ T895] ? 0xffffffff81000000 [ 38.332223][ T31] usb 3-1: Manufacturer: syz [ 38.333463][ T895] ? hashtab_init+0x100/0x1f0 [ 38.341983][ T31] usb 3-1: SerialNumber: syz [ 38.342772][ T895] policydb_read+0xa83/0x2860 [ 38.352098][ T895] ? __kasan_kmalloc+0x96/0xb0 [ 38.356953][ T895] ? __cfi_policydb_read+0x10/0x10 [ 38.357190][ T31] r8152-cfgselector 3-1: Unknown version 0x0000 [ 38.362123][ T895] ? security_load_policy+0x130/0x12d0 [ 38.373904][ T895] security_load_policy+0x16a/0x12d0 [ 38.375779][ T31] r8152-cfgselector 3-1: config 0 descriptor?? [ 38.379225][ T895] ? irqentry_exit+0x4a/0x60 [ 38.390074][ T895] ? __kasan_check_write+0x18/0x20 [ 38.395255][ T895] ? mutex_lock+0x97/0x1d0 [ 38.399722][ T895] ? __cfi_security_load_policy+0x10/0x10 [ 38.405549][ T895] ? rep_movs_alternative+0x4a/0xa0 [ 38.410805][ T895] sel_write_load+0x258/0x600 [ 38.415545][ T895] ? __cfi_sel_write_load+0x10/0x10 [ 38.420787][ T895] ? bpf_lsm_file_permission+0xd/0x20 [ 38.426226][ T895] ? __cfi_sel_write_load+0x10/0x10 [ 38.431456][ T895] vfs_write+0x3c4/0xfd0 [ 38.435758][ T895] ? __cfi_vfs_write+0x10/0x10 [ 38.440565][ T895] ? __kasan_check_write+0x18/0x20 [ 38.445739][ T895] ? mutex_lock+0x97/0x1d0 [ 38.450202][ T895] ? __cfi_mutex_lock+0x10/0x10 [ 38.455126][ T895] ksys_write+0x145/0x260 [ 38.459498][ T895] ? __cfi_ksys_write+0x10/0x10 [ 38.464428][ T895] ? __kasan_check_write+0x18/0x20 [ 38.469576][ T895] ? fpregs_restore_userregs+0x11c/0x260 [ 38.475278][ T895] __x64_sys_write+0x7f/0x90 [ 38.479901][ T895] x64_sys_call+0x271c/0x2ee0 [ 38.484646][ T895] do_syscall_64+0x57/0xf0 [ 38.489102][ T895] ? clear_bhb_loop+0x50/0xa0 [ 38.493864][ T895] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.499804][ T895] RIP: 0033:0x7feec8f9de99 [ 38.504282][ T895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.523947][ T895] RSP: 002b:00007feec9e53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 38.532420][ T895] RAX: ffffffffffffffda RBX: 00007feec9225fa0 RCX: 00007feec8f9de99 [ 38.540451][ T895] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000006 [ 38.548492][ T895] RBP: 00007feec9033eaf R08: 0000000000000000 R09: 0000000000000000 [ 38.556514][ T895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.564523][ T895] R13: 00007feec9226038 R14: 00007feec9225fa0 R15: 00007ffe53152ff8 [ 38.572547][ T895] [ 38.575625][ T895] ---[ end trace 0000000000000000 ]--- [ 38.582009][ T895] SELinux: failed to load policy [ 38.587771][ T309] usb 2-1: Found UVC 0.00 device syz (093a:2476) [ 38.594191][ T309] usb 2-1: No valid video chain found. [ 38.600587][ T309] usb 2-1: USB disconnect, device number 3 [ 38.652777][ T31] r8152-cfgselector 3-1: Unknown version 0x0000 [ 38.660099][ T31] r8152-cfgselector 3-1: bad CDC descriptors [ 38.672105][ T31] r8152-cfgselector 3-1: USB disconnect, device number 3