last executing test programs: 1.39153017s ago: executing program 3 (id=4): ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) syz_usb_connect$uac1(0x3, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0x17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0xee, 0x50, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xb2, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 1.361764571s ago: executing program 0 (id=1): syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x11, 0x90, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x50, 0x2, 0xf, 0xc}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0xfe, 0x9, {0x7, 0x25, 0x1, 0xc, 0x0, 0x5a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x7, 0x2, "7fcbeab7f900"}, @as_header={0x7, 0x24, 0x1, 0xd5, 0xb, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x201, 0x8, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0xab, 0x7b}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xf, 0x3, 0xc, {0x7, 0x25, 0x1, 0x8, 0xff}}}}}}}}]}}, 0x0) 1.326252651s ago: executing program 1 (id=2): getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) fchown(r1, 0x0, 0xee01) openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 1.315969542s ago: executing program 2 (id=3): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1.300059831s ago: executing program 1 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000098}]}) 1.187969043s ago: executing program 1 (id=6): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="70010000100033062cbd70000000000000000000000000000000000000000000fe88000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414240000000000000000000000000000000032000000ac1e01010000090000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000400000002ffffffffffffffff000000000000000000000000850d00000000000000000000000000000a00040000000000000000001c00040001000000fffd00000000000000000000000000000000000048000200656362286369706865725f6e756c6c290004"], 0x170}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) 1.160872673s ago: executing program 1 (id=7): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) poll(&(0x7f0000000300)=[{r3, 0x80}], 0x1, 0x101) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000600)=@vmx={0x0, 0x0, 0x2080, {0x26000, 0x0, {}, 0x0, 0x3}}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4], 0x100, 0x42, 0x8}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x3c, @multicast1, 0x4e24, 0x12, 'sed\x00', 0x2, 0x8, 0x2e}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4e22, 0x2001, 0xa, 0x7ffffffe, 0x1000fb}}, 0x44) ioctl$KVM_RUN(r2, 0xae80, 0x0) 776.115659ms ago: executing program 1 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x6}], 0x1, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/56, 0x38}], 0x3, 0x2c2, 0xca) socket$inet6(0xa, 0x5, 0xffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x3}, 0x10) personality(0x87bf5ac905ea0f7f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='freezer.state\x00', 0x0, 0x0) bind$tipc(r4, 0x0, 0x0) 366.503064ms ago: executing program 2 (id=9): timer_create(0x8, &(0x7f00000004c0)={0x0, 0x41, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000500)=0x0) timer_settime(r0, 0x1, &(0x7f0000000300)={{}, {0x77359400}}, &(0x7f0000000340)) 281.842146ms ago: executing program 2 (id=10): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x25, 0x0, 0x6, 0xfffff038}]}, 0x10) 281.743586ms ago: executing program 2 (id=11): unshare(0x22020600) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xc1) 206.118957ms ago: executing program 2 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x1820400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) 5.802109ms ago: executing program 0 (id=13): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000100)={'\x00', 0x81, 0x3, 0x8000}) 0s ago: executing program 3 (id=14): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xb0000018}) 0s ago: executing program 0 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x200c04, &(0x7f0000000100)={[{@rlog_pages={'rlog_pages', 0x3d, 0xfffffffffffffff8}}]}) kernel console output (not intermixed with test programs): cess permissive=1 [ 14.377596][ T36] audit: type=1400 audit(1782601825.400:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 22.678990][ T36] audit: type=1400 audit(1782601833.700:64): avc: denied { mounton } for pid=285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.682626][ T285] cgroup: Unknown subsys name 'net' [ 22.701720][ T36] audit: type=1400 audit(1782601833.700:65): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.729291][ T36] audit: type=1400 audit(1782601833.740:66): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.729856][ T285] cgroup: Unknown subsys name 'devices' [ 22.853207][ T285] cgroup: Unknown subsys name 'hugetlb' [ 22.858839][ T285] cgroup: Unknown subsys name 'rlimit' [ 22.954837][ T36] audit: type=1400 audit(1782601833.980:67): avc: denied { setattr } for pid=285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.978059][ T36] audit: type=1400 audit(1782601833.980:68): avc: denied { mounton } for pid=285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.002799][ T36] audit: type=1400 audit(1782601833.980:69): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.024708][ T287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.034716][ T36] audit: type=1400 audit(1782601834.070:70): avc: denied { relabelto } for pid=287 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.060182][ T36] audit: type=1400 audit(1782601834.070:71): avc: denied { write } for pid=287 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.096149][ T36] audit: type=1400 audit(1782601834.120:72): avc: denied { read } for pid=285 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.097397][ T285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.121773][ T36] audit: type=1400 audit(1782601834.120:73): avc: denied { open } for pid=285 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.014896][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.022222][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.029387][ T294] bridge_slave_0: entered allmulticast mode [ 24.035883][ T294] bridge_slave_0: entered promiscuous mode [ 24.044383][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.051510][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.058648][ T294] bridge_slave_1: entered allmulticast mode [ 24.065055][ T294] bridge_slave_1: entered promiscuous mode [ 24.090323][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.097433][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.104604][ T292] bridge_slave_0: entered allmulticast mode [ 24.110979][ T292] bridge_slave_0: entered promiscuous mode [ 24.127864][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.135007][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.142164][ T292] bridge_slave_1: entered allmulticast mode [ 24.148465][ T292] bridge_slave_1: entered promiscuous mode [ 24.175687][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.182789][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.189871][ T293] bridge_slave_0: entered allmulticast mode [ 24.196270][ T293] bridge_slave_0: entered promiscuous mode [ 24.216919][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.224233][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.231398][ T295] bridge_slave_0: entered allmulticast mode [ 24.237675][ T295] bridge_slave_0: entered promiscuous mode [ 24.244097][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.251184][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.258280][ T293] bridge_slave_1: entered allmulticast mode [ 24.264720][ T293] bridge_slave_1: entered promiscuous mode [ 24.279578][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.286680][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.293837][ T295] bridge_slave_1: entered allmulticast mode [ 24.300127][ T295] bridge_slave_1: entered promiscuous mode [ 24.443006][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.450086][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.457442][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.464489][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.491842][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.498927][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.506239][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.513290][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.522567][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.529636][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.536970][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.544079][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.553450][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.560520][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.567844][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.574905][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.617330][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.625150][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.632401][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.639572][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.647348][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.654663][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.662070][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.669331][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.684175][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.691278][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.707751][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.714840][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.724316][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.731421][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.743402][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.750450][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.759494][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.766591][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.783202][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.790275][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.821705][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.828788][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.836919][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.843998][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.873092][ T292] veth0_vlan: entered promiscuous mode [ 24.884584][ T294] veth0_vlan: entered promiscuous mode [ 24.907335][ T294] veth1_macvtap: entered promiscuous mode [ 24.925678][ T292] veth1_macvtap: entered promiscuous mode [ 24.946252][ T295] veth0_vlan: entered promiscuous mode [ 24.956337][ T293] veth0_vlan: entered promiscuous mode [ 24.983559][ T295] veth1_macvtap: entered promiscuous mode [ 24.990744][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.991524][ T293] veth1_macvtap: entered promiscuous mode [ 25.127169][ T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.237923][ T328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 25.310969][ T315] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.332063][ T49] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.460959][ T315] usb 4-1: Using ep0 maxpacket: 32 [ 25.467779][ T315] usb 4-1: unable to get BOS descriptor or descriptor too short [ 25.476341][ T315] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 25.481145][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 25.490167][ T315] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 25.494833][ T49] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 25.506527][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.515101][ T49] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 25.521653][ T315] usb 4-1: Product: syz [ 25.529678][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.537869][ T315] usb 4-1: Manufacturer: syz [ 25.543771][ T49] usb 1-1: Product: syz [ 25.551692][ T315] usb 4-1: SerialNumber: syz [ 25.561692][ T49] usb 1-1: Manufacturer: syz [ 25.566857][ T49] usb 1-1: SerialNumber: syz [ 25.796551][ T49] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 25.839735][ T49] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 25.911492][ T49] usb 1-1: found format II with max.bitrate = 6, frame size=7 [ 25.964182][ T49] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 26.003008][ T49] usb 1-1: found format II with max.bitrate = 6, frame size=7 [ 26.064593][ T315] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 26.070209][ T49] usb 1-1: USB disconnect, device number 2 [ 26.078045][ T315] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 26.095143][ T315] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 26.120988][ T315] usb 4-1: USB disconnect, device number 2 [ 26.147286][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 26.149028][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.486121][ T363] tmpfs: Unknown parameter 'usrquota' [ 26.518043][ T365] ------------[ cut here ]------------ [ 26.523663][ T365] WARNING: CPU: 0 PID: 365 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 26.533175][ T365] Modules linked in: [ 26.537136][ T365] CPU: 0 UID: 0 PID: 365 Comm: syz.0.18 Not tainted syzkaller #0 e549a79720f8b9d2445064a5e8a439d230f1aa2c [ 26.548485][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.558620][ T365] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 26.564677][ T365] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a2 db 0b 06 00 0f 85 c2 00 00 00 c6 05 95 db 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 26.584525][ T365] RSP: 0018:ffffc9000c957880 EFLAGS: 00010246 [ 26.590812][ T365] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000000 [ 26.598862][ T365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000c957938 [ 26.606893][ T365] RBP: ffffc9000c9579a8 R08: ffffc9000c957937 R09: 0000000000000000 [ 26.614940][ T365] R10: ffffc9000c957920 R11: fffff5200192af27 R12: ffffc9000c9578c0 [ 26.623013][ T365] R13: dffffc0000000000 R14: 1ffff9200192af14 R15: 0000000000000000 [ 26.631055][ T365] FS: 00007effbf1a26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.640039][ T365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.646790][ T365] CR2: 0000200000001000 CR3: 00000001152f6000 CR4: 00000000003526b0 [ 26.654968][ T365] Call Trace: [ 26.658301][ T365] [ 26.661310][ T365] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.667421][ T365] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 26.673228][ T365] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 26.678900][ T365] ___kmalloc_large_node+0x81/0x220 [ 26.684176][ T365] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 26.689844][ T365] __kmalloc_large_node_noprof+0x1e/0xd0 [ 26.695639][ T365] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 26.701416][ T365] __kmalloc_noprof+0x326/0x510 [ 26.706280][ T365] ? __cfi_lockref_get+0x10/0x10 [ 26.711305][ T365] incfs_realloc_mount_info+0xa7/0x4c0 [ 26.716809][ T365] ? incfs_add_sysfs_node+0x118/0x230 [ 26.722282][ T365] ? __kasan_check_write+0x18/0x20 [ 26.727433][ T365] incfs_alloc_mount_info+0x478/0x5f0 [ 26.732993][ T365] incfs_mount_fs+0x3ca/0x970 [ 26.737720][ T365] ? __cfi_incfs_mount_fs+0x10/0x10 [ 26.743120][ T365] ? selinux_capable+0x38/0x50 [ 26.747943][ T365] legacy_get_tree+0x103/0x1b0 [ 26.752789][ T365] ? __cfi_incfs_mount_fs+0x10/0x10 [ 26.758042][ T365] vfs_get_tree+0x9e/0x290 [ 26.762561][ T365] do_new_mount+0x251/0xb40 [ 26.767105][ T365] ? security_capable+0x44/0x130 [ 26.772114][ T365] path_mount+0x66a/0xff0 [ 26.776474][ T365] ? putname+0x113/0x150 [ 26.780728][ T365] __se_sys_mount+0x2bf/0x480 [ 26.785459][ T365] ? __x64_sys_mount+0xf0/0xf0 [ 26.790295][ T365] ? __kasan_check_write+0x18/0x20 [ 26.795486][ T365] ? fpregs_restore_userregs+0x11c/0x260 [ 26.801220][ T365] __x64_sys_mount+0xc3/0xf0 [ 26.805865][ T365] x64_sys_call+0x2021/0x2ee0 [ 26.810567][ T365] do_syscall_64+0x57/0xf0 [ 26.815056][ T365] ? clear_bhb_loop+0x50/0xa0 [ 26.819824][ T365] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.825841][ T365] RIP: 0033:0x7effbe39ce59 [ 26.830322][ T365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.850041][ T365] RSP: 002b:00007effbf1a2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 26.858561][ T365] RAX: ffffffffffffffda RBX: 00007effbe615fa0 RCX: 00007effbe39ce59 [ 26.866618][ T365] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000200000000040 [ 26.874659][ T365] RBP: 00007effbe432e6f R08: 0000200000000100 R09: 0000000000000000 [ 26.882686][ T365] R10: 0000000000200c04 R11: 0000000000000246 R12: 0000000000000000 [ 26.890685][ T365] R13: 00007effbe616038 R14: 00007effbe615fa0 R15: 00007ffcb4b66318 [ 26.898718][ T365] [ 26.901798][ T365] ---[ end trace 0000000000000000 ]--- [ 26.907350][ T365] incfs: Error allocating mount info. -12 [ 26.919841][ T365] incfs: mount failed -12