last executing test programs: 1.846711586s ago: executing program 1 (id=2): r0 = syz_usb_connect$uac3(0x1, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0xc0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x2, {0xa, 0x25, 0x25, 0x405, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x74, 0x6, 0xc0, {0xa, 0x25, 0x25, 0x7ffffffc, 0x2, 0xbe1}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = memfd_secret(0x0) ftruncate(r1, 0x6800000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c6f636b20696f2b6d656d008dc640a89f212a373b3d604e213b166542e710366ba956be2a20fae856d8b9db43100cfe919de92a08e97a84f4c0a0af82e9682638217cbaad1ed7f384038d4938142f4c92c18af1f7d120a50461a92d5586508b85c93cf9eb746b6a42cd13c79bdf978a8ea16ceef4433aff36601ab1b980aabddcdff318005755e406a4669a30ffa60564a46eb56e112565ed7fe2eefaadb71e0ff1792aa3b68d52689311527d2fffbd7cb0d9fe6bb8d1fc871922d226c9e08aa32c8f7094954ef077"], 0xc) write$vga_arbiter(r2, &(0x7f00000000c0)=@other={'lock', ' ', 'mem'}, 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/module/kvm/parameters/nx_huge_pages_recovery_ratio\x00', 0x2, 0x0) fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$packet(0x11, 0x3, 0x300) sendto(0xffffffffffffffff, &(0x7f0000000180)="1200233b438d365ed19f004c001200e700a1000000000000000000", 0x1b, 0x20004091, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000600)="29e900001200ff0100", 0x9, 0x20008010, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0xfffffffffffffffe, 0x8000) socket$packet(0x11, 0x3, 0x300) syz_ublk_setup_queues(r9, r8, &(0x7f0000000480)={0x0, 0x18c2, 0x800, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x43}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x200019b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x4000, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r7, '\x00', {0x1, 0xd55, 0x0, 0x0}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r10, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1463, 0x0, 0x2, 0xb2, 0x0, r10}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x2, 0x31c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7684, 0x8000, 0x1, 0x39f, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x2, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a07, 0x20, 0x2, 0x40021a, 0x0, r3}}], 0x16, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r11 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000080)="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", 0x559, r11) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.833278226s ago: executing program 2 (id=3): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) clock_nanosleep(0x1, 0x0, &(0x7f0000000180), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x6, &(0x7f0000000200)=[{0x20, 0x5, 0x2, 0x30ff}, {0x6, 0xfe, 0x0, 0xa1a}, {0x3, 0x8, 0x9, 0x3}, {0x9, 0xa, 0x4, 0x3}, {0xc419, 0x2, 0x6, 0x7}, {0x0, 0x4, 0x9, 0xe}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x40000000000000, 0x4, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x10000}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) sendmsg$tipc(r6, &(0x7f0000000480)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40}, 0x3}}, 0x10, 0x0}, 0x20042010) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xfff8, 0x40, @loopback}, 0x1c) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r8 = syz_open_pts(r7, 0x200) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000140)=0x15) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) 1.826511786s ago: executing program 0 (id=1): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x5, 0xfa, 0xfc, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000002180)="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", 0x1000) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e9320574a599d763952148fb2bd655e900c850243e43246c70a3b317b0d87a001ce1972a24ba7a5e294243829ead8f34d4d740101685fc8608e", 0x1b4}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124", 0x6e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)='1', 0x1}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000140)="0d5b9143cd1889806f2b75321e4f9dd7546c6d8545f3aee078d9c2af49b796de26a4ff14712152052407f37fb5cede57abab5d1914380fcb93ee6a2c18f10ef03a468a00ec0de21dd9e5102cf1d2e4b97bae50d748d1f9360df3109cb743e87382", 0x61, 0x20000000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf", 0x369) r1 = socket(0x100000000000003e, 0x6, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x23, 0x300, 0x70bd2c, 0x25dfdbfb, {0x13}, [@nested={0x8, 0xed, 0x0, 0x1, [@nested={0x4, 0x142}]}]}, 0x1c}}, 0x40001) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = dup(r6) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e24, @rand_addr=0x640100fd}, 0x10) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x400000b7, 0x0, 0x1}, {0x353, 0x0, 0x5}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c0251}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000010007fd500fe01b2a4a280930a06000000a843089100fe801100080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0xfffffea1}], 0x1}, 0x0) 1.816322656s ago: executing program 3 (id=4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x5, @empty, 0x8}, 0x1c) r1 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000d40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x5, {0x7, 0x5, 0x0, 0x5, 0xa, 0x5, 0x9, 0x7fe, 0x1, 0x8c8, 0x2, 0x6f8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) listen(r0, 0x204) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040027bd7000fddbdf25010000000000000008410000004c00180000000162726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"/98], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x18855) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = getuid() quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000180)=@sr0, r4, &(0x7f0000000340)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='p:s/- ./file0:0', 0xf) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000002180)={0x752, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r7, 0x29, 0xca, &(0x7f00000020c0)=""/168, &(0x7f0000000000)=0xa8) writev(r6, &(0x7f00000000c0), 0x0) 1.638763541s ago: executing program 0 (id=5): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x2, 0x80000, @local}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x9, "8f"}, @main=@item_4={0x3, 0x0, 0xc, "6e1cb792"}]}}, 0x0}, 0x0) syz_usb_connect$uac3(0x5, 0x107, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x3, 0x1, 0x6c, 0x20, 0xfd, {0x8, 0xb, 0x2, 0x2, 0x1, 0x1, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x56, 0x1}, [@input_terminal={0x14, 0x24, 0x2, 0x4, 0x203, 0x6, 0xf, 0x6, 0x1, 0x3ff, 0x4ed, 0x9}, @selector_unit={0xc, 0x24, 0xc, 0x8, 0x7, "70c394acf7ea85"}, @processing_unit={0x19, 0x24, 0x9, 0x4, 0x1, [0x0, 0x2, 0x3, 0x1, 0x2]}, @output_terminal={0x13, 0x24, 0x3, 0x5, 0x101, 0x2, 0x6, 0x9, 0x9, 0xe8af, 0x5a, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xc3, 0x200, 0x200, 0x1, 0x5, 0x9, 0xfff, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0x5, 0x0, 'v\n', "11c5"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x862, 0x5, 0x1, "ab5f4897e2"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xffff, 0x2, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf, 0x5, 0x4, {0xa, 0x25, 0x25, 0x3, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x3, 0xff, {0xa, 0x25, 0x25, 0x5, 0xff, 0x9}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x8, 0x7, 0x1, 0x10, 0xf9}, 0x28, &(0x7f0000000180)={0x5, 0xf, 0x28, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x3, 0x6, 0x4bb0}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x9, 0x6, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x5, 0xc, 0x9}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x380a}}]}) syz_usb_control_io(r1, 0x0, 0x0) 898.193508ms ago: executing program 2 (id=6): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x420000, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001340), 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000013c0)={'ip6gretap0\x00'}) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)={0x3d, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x41) ioctl$RTC_PIE_OFF(r0, 0x7006) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f33b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x61}], 0x1, 0x5f, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e000100", @ANYRESHEX], 0x1c}], 0x1}, 0x4080) ioctl$KVM_RUN(r5, 0xae80, 0x0) 849.227659ms ago: executing program 2 (id=7): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7fffffff, 0x4) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x20000001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x8, 0x0, 0xb00, 0x20000025}, 0x40010) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={[0x81]}, 0x8}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) 0s ago: executing program 2 (id=8): r0 = syz_usb_connect(0x1, 0x10b, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_usb_connect$uac2(0x0, 0x8c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100120008cc17124740000102d80109027a00030180e007080b0101010a20000904000000010120000924010200031a00c505240806060c2403fd0004a80206f9ff0a090401000001022000090401010101022000090501094000050400082501810909020009040200000102200009040201010102200009058209ff030504020825018300f70200"], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'wg1\x00', {0xfffffffe}, 0x8}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x2, [0x1, 0x1]}}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r7, &(0x7f00000004c0)="a0", 0x1, 0x200080d1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40002060) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x400c4d00, &(0x7f0000000a00)) syz_usb_connect$midi(0x5, 0x91, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000200000010410e575040000102030109027f000101023004090400000401033001072401100007000724019d00070006240202020d0d2403000b03170506060903ff0905051008000708ff042501000905801020000418730c250108f9bce6079a2adb3a0905800008000903030b25010764e20905030100027806010d250109a351e094888f22761e2df8ef56afa67d9280f3643baea9da557f63dbb2da54d36be545177e906585865b6ded37bdd7051a860b2c793ad41895d519f28565d3a39593"], &(0x7f0000000900)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x5, 0x6, 0xd1, 0xff, 0x7}, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="050f2400020710020660870318100a023904004bcf570c350f000000c00000003000ff00"], 0x4, [{0xe2, &(0x7f0000000580)=@string={0xe2, 0x3, "c316a0566310f9768336191c1cb17c9bd257f01f4913ce35dfd27225eb05378ebfbf7e2c4be7fdb7850fc8c39b9f186e63abbc36b8b4fa645996cd72d6562f5277d444542441f67aa9b7296bec676d1b6328f7f82ec1c9b7e9f33c5a8244787765ba1c23d7b46cbba7eb7b21de9095cc3fd375c9728071b29a1fd6a4b02b793c8bf434f1704b20b19b0053a3ad5af41370f473bccd61d047a456809abd06766a07bd98cba40143d856a38186826c0a849bdb2f667d5a97e83c141e83e82c2d003ea72422b5e5656f410541f99b5d8f72b7da004eeef00d427db89afbd3a3499b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40b}}, {0x23, &(0x7f0000000200)=@string={0x23, 0x3, "82afe6cf387884f7786ca311d44f939165fe6101f6ef54e2c4129698837d86f8b2"}}, {0xdf, &(0x7f0000000800)=@string={0xdf, 0x3, "ce09f46c2136e808b42232636133ec5da6b0e037bdecb7569362be40fb2e25440518faf882fa7be51409fd25f7d0e21b5c61cff6a03ab510a251d9bbf0d3d059e3002b9d6726b292535ab6c549ca5aac0fceb9de17d2d58c044fc58b18a5530ffd684113fd93206c644cca013df3fdc7ffdfdc39a6f35393bcfb2b7164be4a261b62622a1c9cddb2d73653fd41b68c8a1cfdd1ab421162781996c66c2ee192bee3a448d8534b43738589e589b88e80c4b731d13f991eb8bf1d9324b8a3793b2b1025ec89baf67dec142e26262cde339a7da01429c4c1a989110597aef7"}}]}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='macvlan0\x00') r8 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESOCT], 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000487000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x20) prctl$PR_SET_KEEPCAPS(0x8, 0x3) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="0016010000808a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=9): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044810}, 0x4000894) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) (fail_nth: 1) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.766485][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 14.766502][ T36] audit: type=1400 audit(1786322271.190:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.771417][ T36] audit: type=1400 audit(1786322271.190:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.775671][ T36] audit: type=1400 audit(1786322271.200:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[1650]" dev="pipefs" ino=1650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.779398][ T36] audit: type=1400 audit(1786322271.200:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.782282][ T36] audit: type=1400 audit(1786322271.200:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 22.271332][ T36] audit: type=1400 audit(1786322278.700:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.274823][ T286] cgroup: Unknown subsys name 'net' [ 22.294133][ T36] audit: type=1400 audit(1786322278.700:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.321317][ T36] audit: type=1400 audit(1786322278.730:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.321704][ T286] cgroup: Unknown subsys name 'devices' [ 22.441112][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.446864][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.562994][ T36] audit: type=1400 audit(1786322278.990:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.586178][ T36] audit: type=1400 audit(1786322278.990:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.611072][ T36] audit: type=1400 audit(1786322278.990:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.629984][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.643004][ T36] audit: type=1400 audit(1786322279.070:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.668437][ T36] audit: type=1400 audit(1786322279.070:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.692409][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.694620][ T36] audit: type=1400 audit(1786322279.110:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.728391][ T36] audit: type=1400 audit(1786322279.110:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.632698][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.639835][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.647006][ T294] bridge_slave_0: entered allmulticast mode [ 23.653564][ T294] bridge_slave_0: entered promiscuous mode [ 23.661411][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.668472][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.675643][ T294] bridge_slave_1: entered allmulticast mode [ 23.681955][ T294] bridge_slave_1: entered promiscuous mode [ 23.742679][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.749797][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.756857][ T296] bridge_slave_0: entered allmulticast mode [ 23.763216][ T296] bridge_slave_0: entered promiscuous mode [ 23.772368][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.779474][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.786541][ T296] bridge_slave_1: entered allmulticast mode [ 23.792877][ T296] bridge_slave_1: entered promiscuous mode [ 23.804079][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.811190][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.818267][ T293] bridge_slave_0: entered allmulticast mode [ 23.824628][ T293] bridge_slave_0: entered promiscuous mode [ 23.830904][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.837992][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.845098][ T295] bridge_slave_0: entered allmulticast mode [ 23.851327][ T295] bridge_slave_0: entered promiscuous mode [ 23.860326][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.867376][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.874455][ T295] bridge_slave_1: entered allmulticast mode [ 23.880801][ T295] bridge_slave_1: entered promiscuous mode [ 23.889865][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.896924][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.904026][ T293] bridge_slave_1: entered allmulticast mode [ 23.910334][ T293] bridge_slave_1: entered promiscuous mode [ 24.064410][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.071494][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.078840][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.085904][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.098872][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.105949][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.113257][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.120327][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.129195][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.136255][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.143578][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.150634][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.158628][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.165690][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.173019][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.180077][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.237121][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.244991][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.252966][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.260724][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.267893][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.275144][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.282479][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.289794][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.301739][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.308803][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.318017][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.325083][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.346655][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.353734][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.361475][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.368527][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.376253][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.383347][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.391073][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.398127][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.405742][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.412849][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.443953][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.451009][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.482598][ T294] veth0_vlan: entered promiscuous mode [ 24.493613][ T293] veth0_vlan: entered promiscuous mode [ 24.520213][ T295] veth0_vlan: entered promiscuous mode [ 24.532358][ T294] veth1_macvtap: entered promiscuous mode [ 24.540253][ T296] veth0_vlan: entered promiscuous mode [ 24.546955][ T293] veth1_macvtap: entered promiscuous mode [ 24.561203][ T295] veth1_macvtap: entered promiscuous mode [ 24.600031][ T296] veth1_macvtap: entered promiscuous mode [ 24.613803][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.687005][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.761787][ T316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 24.919216][ T45] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 24.949222][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.069179][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 25.099112][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.103649][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.115928][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.123963][ T31] usb 4-1: Product: syz [ 25.128145][ T31] usb 4-1: Manufacturer: syz [ 25.133115][ T31] usb 4-1: SerialNumber: syz [ 25.199121][ T45] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 25.251593][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.262532][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.272325][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 25.281417][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.290304][ T10] usb 1-1: config 0 descriptor?? [ 25.349131][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 25.354885][ T45] usb usb2-port1: attempt power cycle [ 25.698021][ T10] cp2112 0003:10C4:EA90.0001: collection stack underflow [ 25.701817][ T45] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 25.705329][ T10] cp2112 0003:10C4:EA90.0001: item 0 4 0 12 parsing failed [ 25.720155][ T10] cp2112 0003:10C4:EA90.0001: parse failed [ 25.726042][ T10] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -22 [ 25.733186][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 25.869113][ T45] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 25.889477][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 25.895003][ T45] usb usb2-port1: unable to enumerate USB device [ 25.903769][ T329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.912351][ T329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.144174][ T31] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 26.150765][ T31] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 26.158208][ T31] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 26.349285][ T31] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 26.357136][ T31] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 26.370598][ T31] usb 4-1: USB disconnect, device number 2 [ 26.376801][ T31] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 26.729197][ T10] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 26.859132][ T10] usb 3-1: device descriptor read/64, error -71 [ 26.880935][ T341] ------------[ cut here ]------------ [ 26.886455][ T341] WARNING: CPU: 1 PID: 341 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 26.895904][ T341] Modules linked in: [ 26.899848][ T341] CPU: 1 UID: 0 PID: 341 Comm: syz.3.9 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 26.911311][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.921454][ T341] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 26.927491][ T341] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 14 d9 0b 06 00 0f 85 c2 00 00 00 c6 05 07 d9 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 26.947316][ T341] RSP: 0018:ffffc9000b7cf560 EFLAGS: 00010246 [ 26.953449][ T341] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 26.961480][ T341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b7cf618 [ 26.969491][ T341] RBP: ffffc9000b7cf6a0 R08: ffffc9000b7cf617 R09: 0000000000000000 [ 26.977505][ T341] R10: ffffc9000b7cf600 R11: fffff520016f9ec3 R12: ffffc9000b7cf5a0 [ 26.985551][ T341] R13: dffffc0000000000 R14: 1ffff920016f9eb0 R15: 0000000000000000 [ 26.993559][ T341] FS: 00007f0e321ca6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 27.002542][ T341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.009177][ T341] CR2: 000020000000f000 CR3: 000000010e728000 CR4: 00000000003526b0 [ 27.017188][ T341] Call Trace: [ 27.020527][ T341] [ 27.023477][ T341] ? vfs_write+0x3c1/0xfd0 [ 27.027923][ T341] ? ksys_write+0x145/0x260 [ 27.032479][ T341] ? x64_sys_call+0x271c/0x2ee0 [ 27.037359][ T341] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 27.043146][ T341] ? hashtab_init+0xd6/0x1f0 [ 27.047800][ T341] ___kmalloc_large_node+0x81/0x220 [ 27.053047][ T341] ? hashtab_init+0xd6/0x1f0 [ 27.057700][ T341] __kmalloc_large_node_noprof+0x1e/0xd0 [ 27.063403][ T341] ? hashtab_init+0xd6/0x1f0 [ 27.068039][ T341] __kmalloc_noprof+0x326/0x510 [ 27.072934][ T341] ? kasan_save_alloc_info+0x3a/0x50 [ 27.078275][ T341] hashtab_init+0xd6/0x1f0 [ 27.082790][ T341] ? common_read+0x175/0x490 [ 27.087455][ T341] symtab_init+0x44/0x70 [ 27.091783][ T341] common_read+0x1e7/0x490 [ 27.096233][ T341] ? hashtab_init+0xd6/0x1f0 [ 27.099297][ T10] usb 3-1: device descriptor read/64, error -71 [ 27.100864][ T341] ? __cfi_common_read+0x10/0x10 [ 27.112065][ T341] ? hashtab_init+0x100/0x1f0 [ 27.116762][ T341] policydb_read+0xa83/0x2860 [ 27.121515][ T341] ? __kasan_kmalloc+0x96/0xb0 [ 27.126320][ T341] ? __cfi_policydb_read+0x10/0x10 [ 27.131471][ T341] ? security_load_policy+0x130/0x12d0 [ 27.136969][ T341] security_load_policy+0x16a/0x12d0 [ 27.142353][ T341] ? irqentry_exit+0x4a/0x60 [ 27.146970][ T341] ? __kasan_check_write+0x18/0x20 [ 27.152149][ T341] ? mutex_lock+0x97/0x1d0 [ 27.156633][ T341] ? __cfi_security_load_policy+0x10/0x10 [ 27.162429][ T341] ? rep_movs_alternative+0x4a/0xa0 [ 27.167670][ T341] sel_write_load+0x258/0x600 [ 27.172392][ T341] ? __cfi_sel_write_load+0x10/0x10 [ 27.177626][ T341] ? bpf_lsm_file_permission+0xd/0x20 [ 27.183086][ T341] ? __cfi_sel_write_load+0x10/0x10 [ 27.188315][ T341] vfs_write+0x3c1/0xfd0 [ 27.192641][ T341] ? __cfi_vfs_write+0x10/0x10 [ 27.197437][ T341] ? __kasan_check_write+0x18/0x20 [ 27.202600][ T341] ? mutex_lock+0x97/0x1d0 [ 27.207071][ T341] ? __cfi_mutex_lock+0x10/0x10 [ 27.212000][ T341] ksys_write+0x145/0x260 [ 27.216359][ T341] ? __cfi_ksys_write+0x10/0x10 [ 27.221244][ T341] ? __kasan_check_read+0x15/0x20 [ 27.226333][ T341] __x64_sys_write+0x7f/0x90 [ 27.230975][ T341] x64_sys_call+0x271c/0x2ee0 [ 27.235681][ T341] do_syscall_64+0x57/0xf0 [ 27.240166][ T341] ? clear_bhb_loop+0x50/0xa0 [ 27.244886][ T341] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.250850][ T341] RIP: 0033:0x7f0e3139e0d9 [ 27.255292][ T341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.274950][ T341] RSP: 002b:00007f0e321ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 27.283405][ T341] RAX: ffffffffffffffda RBX: 00007f0e31625fa0 RCX: 00007f0e3139e0d9 [ 27.291448][ T341] RDX: 000000000000ffaf RSI: 0000200000000000 RDI: 0000000000000003 [ 27.299463][ T341] RBP: 00007f0e321ca090 R08: 0000000000000000 R09: 0000000000000000 [ 27.307443][ T341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.315470][ T341] R13: 00007f0e31626038 R14: 00007f0e31625fa0 R15: 00007ffee94c4238 [ 27.323509][ T341] [ 27.326533][ T341] ---[ end trace 0000000000000000 ]--- [ 27.332437][ T341] SELinux: failed to load policy [ 27.339263][ T10] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 27.469121][ T10] usb 3-1: device descriptor read/64, error -71 [ 27.709132][ T10] usb 3-1: device descriptor read/64, error -71 [ 27.819237][ T10] usb usb3-port1: attempt power cycle [ 27.860525][ T31] usb 1-1: USB disconnect, device number 2 [ 28.159132][ T10] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 28.180172][ T10] usb 3-1: device descriptor read/8, error -71 [ 28.310377][ T10] usb 3-1: device descriptor read/8, error -71 [ 28.549186][ T10] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 28.570258][ T10] usb 3-1: device descriptor read/8, error -71 [ 28.700432][ T10] usb 3-1: device descriptor read/8, error -71 [ 28.809234][ T10] usb usb3-port1: unable to enumerate USB device