last executing test programs: 5.927751615s ago: executing program 0 (id=1): r0 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c24"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_NMI(r4, 0xae9a) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x200804, 0x0) syz_usb_connect(0x0, 0x12e, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x76, 0xc6, 0xe, 0x8, 0x769, 0x11f3, 0x6a02, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c, 0x2, 0x8, 0x7, 0xe0, 0x8, "", [{{0x9, 0x4, 0xf9, 0xf2, 0x4, 0x14, 0x4e, 0x60, 0x66, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x2079, 0x7361, 0x8}, [@obex={0x5, 0x24, 0x15, 0xdbd}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x4}, @dmm={0x7, 0x24, 0x14, 0x9, 0x6}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x36}]}], [{{0x9, 0x5, 0x16, 0x0, 0x20, 0x6, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3e}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x6, 0x68, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xbe, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xba, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x78, 0x5, 0xe}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x8, 0x8, 0x1}}]}}, {{0x9, 0x4, 0x7c, 0x9, 0x3, 0x2e, 0x82, 0x9e, 0x9, [], [{{0x9, 0x5, 0x80, 0x10, 0x5ff, 0x4, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x10}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x10, 0x8, 0x3}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0xf, 0x4, 0x0, [@generic={0x77, 0x4, "b38baf30acea5b68ee653c2e56623eee99c9fbb47b8c21c3b858fc5633da5407daa1047bf236b4d216d5891548064e068e4ce3f65a31708b92746ccf03d4fbdc3f93e8ff75bee8d79fe6379d727e1dca2ef0ef269e788314c6936103bc5b3376e002d5c3f540e42a02edd5e54f910040258d2544a8"}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x3, 0x3, 0x3, 0x8, 0x4}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x3, [{0x71, &(0x7f0000000380)=@string={0x71, 0x3, "14cc8d502859848d490952bef60cc3b544d3511b91100781603e2ccc5d6ff67ac2256d526fb57b4f27077463c0366bb7ca86b5237413de1935f9bb0e5ea5e521cf6b75cd7ccc55e2f87fd0007f02996284a3f892d71beb33a2ce6b4049a8d0d0cb1a7869ff30fcea92e9fb5badb491"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x79}}]}) 5.871534387s ago: executing program 2 (id=3): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000180)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}, 0x4000000) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) keyctl$session_to_parent(0x12) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x104) write(r1, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)=@arm64={0xb, 0x5, 0x1, '\x00', 0x2}) 5.824031697s ago: executing program 3 (id=5): mmap$IORING_OFF_SQ_RING(0x0, 0x22c0d9cb, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) (async) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket(0x5, 0x3, 0xffff8e27) recvmmsg(r4, 0x0, 0x0, 0x2040002160, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e220005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000fffffffffffffffffcffffffffffffff00000000000000000900000000000000000a000000000000000000000080400000000000000000080000000000000000000100000000000044000500fc020000000000000000000000000000000004d36c00000002000000ff010000000000000000000000000001073500000103"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc00000021000100fffffffffefffffffe8000000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000100050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001ac1414aa0000000000000000000000006c01"], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001c40)={0x1c, r7, 0x301, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x20040000) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) syz_ublk_setup_queues(r2, r0, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x6, 0x10e1, 0x0, r2}, 0x0, 0x1, 0x0, 0x0) (async) syz_ublk_process_io(0x0, 0x0, 0x1, 0x0, 0x0) 5.820811637s ago: executing program 2 (id=6): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030000100"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xfee00000) 5.820481597s ago: executing program 3 (id=7): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x880) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001440), 0x400, 0x0) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x4871, 0x10000, 0x3, 0x11d}, 0x0, 0x4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000270001"], 0x14}], 0x1, 0x0, 0x0, 0x4048044}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r8, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='\a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c00)="f69b20a3ba24bb315845da543a79f646fd8b8d808e30f8eb84b21b5624586fa4479c011b38c5ec1763292dd6f4ef83193e1c619d5dc6bdffa8863cfc3a0e5fb5f5343697a045037183a7a456c256528a961c79eeeb2339543cfd97c02e3fd7f83cff950e1b14860bb5d7446744445a7a3d8d959f77042a8a4c911b63903d14595bb9af5c2989cb5675358e0f6e24b47635ac66cab06afc94c546d5d2ed06bee5d90ebee6ac91266e3b7b5c6721bd0205cf854d1692ecc90e768acfed251d43d11ca26b5b6b73b5cf20b2a398153fbb892f1ccb6b75f6546cf896fc65ef692096171c92266b12ad6f027df68332a3b32cfb23af44a45134b7135725c99e1a4441b53bc6af616ccace666d6ceb27e93d6e859dec250f865c32fa52f3fe147549eb0620d8fe71acc91ba85821fb0333b5b5667d4311bde3a191f663d2ee7505f3b29f0dcb11618deb15ef7ef7176831b6653a419631e08833efacb649c0b58a753c70feb02cf0ca4277e7f565583ec7b0d5a0e5a8ad2aa668009ae199034544dac1fc963fff1d3587eecddafaa4ab85433abcdb43fa2f94515749a2f059a579576c2bef375c87e98bd3fad249ff7cd2c0b438ce676945579bc22829a7cee09f009f8d7579d445f86cd0d54f77f419438489eac40f2ec93892f43208e40b129c13086b79c909adcddac6425fe20a6b17f44953afcd02d0371c1b6677f141e7b969c0e12fb235713ae5c6f64073b3e96b28dd1a1ad3926c605e51562aecc2c48a550469acf705bd7ea5119da3eda5d1228eabc09bae6b1da2700edf46b9b7dfe9d05834a17dbfd5e3738c6b53a075f8d20c8074f8e2555c1db8e5f97c2188c48e19ac005be450559bba8c35870b8339abd072c8fd7e3f5ce8b5c72a024b8ab0ae6cf772a200e07216becc2ac8b78ef2c85d19dd5e349dc5db3430750ad735b30b3a396ef372e3403206d4feedf9b2b0f703ee88a5de2380c03ec7d09292773f53cafdb4cedd837ecc63509a6c90eb133b1a3e2c2215f1d96f83b861f0b307312d9ddf439a2139b8948f0729c0175230c71349b4d1437a74a9629f0d1731cf102afdcd5811967a93f7a55796c2df12ffeabe39462e4544213b495b50c62d98d02d3c457f86763f06222f7f04f9c202027f13852134176cfc12eb9da79a09dd0ff2b9a6c753c2197dca12728bd5c9ec5a9215cb7ce3e522100a9b86e4911d3f903c13c1bc3ba844c127ec1f526568497102fd9f4aed80f4d6b2cdb4df288620f98297d693a0fcefec26045e1f4bfe4fbd6663d275b5b4bec414a7b42ffcb62d94e67bfd27a96f952ab1f024ae6c2140666970757a0424536c7422b28b47adae3c253473ec39d1cfedc23726bc36ead13fef296be35c7b072ae6cdfd323470d630edfc17d46c213226605e51935c945e8d75685aba869550ce09ebd8aa1a1abdcc88333e39ec2ecb63ff7d5c715617ada1d1de369cbf7bdcd12fb9cd803d91bfb100894bafbf038a3c8d0b1eabc8ba46db54b7270a8fb43f7798166287e805d59f16877effea3ec43ad7d92efc89a474f5033b0c559555925099e578ea7c17b1a5c353f6fa2e18575cf5d092c6574407aab91a2edc8fcd14a41f7842493e282cd3c706664b41f33e727bc36b57ccce5742872d5772410c19925c34e3a4d902de388ebf9873f3758aa237a01308d071ae00a067f0f509feccb3e396e9a1d0f4e6cf801670d15e557aee2600573a96cbe7590d97fd716a782eb7a389612908c09b7fabe79b0ee43ded1ee8b2f7c5eac2629f8d07da750809e70d5b90d35b6a914769c8aed64d2d6ad683d4deeac5a3cdcab5cf76bce4170fae8ba2c74eef04cd56016ccf93047a43f9a83480533a1129a4fbcc3eb56ec4b1dcfac0466d0e5ed0ec747934fac12bc96dd407a040239e3b359cb25f3c4f4364b26e9d76e6452e58b49ef2d1941eec0fe88af6f07c3bc98f169b64fd992540733a92a6512158f3f01434e7fe9ab452ced437d39f7c3c0c412aace64d289b62aef0515e196a0561aade49fc2ef5aa345a89e3a4cfc0b86ec55c714d593b7c591586943dbd84a4250f02eb1461232b9d4ebff49f03e84e", 0x5c9}], 0x1}}], 0x3, 0x119e75c40673edef) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) 5.790882474s ago: executing program 3 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000140)={{0x60000, 0xffff1000, 0x0, 0x9, 0x7f, 0x7, 0x80, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xf000, 0xd000, 0x10, 0x3, 0x7f, 0x4, 0x6, 0x6, 0x1, 0x4, 0x6, 0x5}, {0x3ff8, 0x4000, 0xf, 0x4, 0x10, 0x85, 0x4, 0x0, 0x5, 0x4, 0x92, 0x6}, {0x2000, 0xeeef0000, 0xe, 0x7, 0xff, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xa000, 0x41000, 0xa, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x3}, {0x4000, 0x1ffe, 0xe, 0x2, 0xad, 0xff, 0x4, 0x5, 0x1, 0xe, 0x8, 0xa}, {0xffff1000, 0x60000, 0xb, 0x0, 0xcd, 0x5, 0x8, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x7f, 0x3, 0x0, 0x7f, 0x11, 0xfc, 0x8}, {0x2, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x414021, 0x2, 0x0, 0xffff1000, 0x1, [0x6, 0x7, 0x8000000000000003, 0x3]}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x5) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) pwritev(r4, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x55) syz_usb_connect$midi(0x3, 0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000020524711004000010203010902ef3e0000000201033008090504030073c91601d36c0c23aafa57020c04fd0425010009050503000402010204250100"], 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000000000000a0002000440fffffff9691873de00"], 0x28}, 0x1, 0x0, 0x0, 0x31}, 0x4000844) 5.663614481s ago: executing program 2 (id=9): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="2800ea001e00210000000000000000000a00000005000000000000000a000a00"], 0x28}}, 0x0) 5.608008353s ago: executing program 2 (id=10): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) chdir(&(0x7f0000000000)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_genetlink_get_family_id$mptcp(0x0, r1) setresuid(r2, r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400050020a10700", 0x44) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x101, 0x98e, 0x5, 0x5}]}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r10 = syz_pidfd_open(r5, 0x0) setns(r10, 0x24020000) syz_clone(0xb3a62100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.603318794s ago: executing program 2 (id=11): r0 = inotify_init1(0x800) readv(r0, &(0x7f0000001140)=[{}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000080)=""/155, 0x9b}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x4) r1 = creat(&(0x7f0000001180)='./file0\x00', 0x80) close(r1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001200), 0x400402, 0x0) mkdirat(r4, &(0x7f0000001240)='./file0\x00', 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000001280), r1) ptrace$setregs(0xd, 0x0, 0x8e7, &(0x7f00000012c0)="9353503c231596138bdd52b9e57b2cc83e3732f35c0a96efdb78e4dc3654d3e88d175b1b578229c8d6") ptrace$cont(0x7, 0x0, 0x2, 0xfffffffffffffff3) r5 = epoll_create1(0x0) r6 = fsmount(r1, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001740)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001700)={&(0x7f0000001340)={0x39c, 0x26, 0x10, 0x70bd2c, 0x25dfdbfd, {0x10}, [@typed={0x8, 0x86, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x3d, 0x0, 0x0, @u32=0xfffffff9}, @typed={0x100, 0xe3, 0x0, 0x0, @binary="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"}, @nested={0x166, 0xbb, 0x0, 0x1, [@typed={0x9, 0x114, 0x0, 0x0, @str='TIPC\x00'}, @typed={0x8, 0x5b, 0x0, 0x0, @u32=0x9cb}, @generic="197684bc09c1d202e62b74cc4a84e0ba2c3b32fc3cf1188b49b2633e4ceee00ced8e51accddf8e07488785199b8ee137da4cea66ad94d5748ef49ab3f20593e328397fa7f998e0b07d595b986090416ac614b9e6af20888cbf7807b9eb054148497bd5a1d3e96dff822cadc8f850f8a948e49e01c4fd173ddcefd98a542e74bd361bdcb821dc65f35c37f0cef58acd9bb19ea57d67888842ae08f3fde8", @generic="07a3d632203783fe69e50f614923a4e19ce0424b21ead3b4be8f9906b1aceab1e093b170c5f1e27f6c382e846852477121ba154b0a94e3f70b831b017d5153cc5c1b7de9cd84ecadf95e1f93dd376c8df830228fbcca0e5f99891ef274b981c9de259ea3632e22a22c6eb2ed334009f0563614f67f50b6ef552ba5768e3e7a80d843d6158f70b9182d103e07de1da45d5c6b3479edca424210", @typed={0x8, 0x4c, 0x0, 0x0, @fd=r4}, @typed={0x4, 0xea}, @typed={0xc, 0xdf, 0x0, 0x0, @u64=0x1000}]}, @nested={0x10, 0xd9, 0x0, 0x1, [@typed={0x8, 0xdb, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0xff}]}, @typed={0x8, 0xa3, 0x0, 0x0, @fd=r2}, @typed={0x8, 0xa2, 0x0, 0x0, @u32=0x400}, @typed={0x9, 0xa3, 0x0, 0x0, @str='TIPC\x00'}, @nested={0xe3, 0xd9, 0x0, 0x1, [@generic="8fbbc51fff09a3bbf17808c4e53c22a68304b5b9150e04d2277d7fbeb2056099e460ba613e51bf0df5fdb865b06df209b6369be2a80f92b8cb91a4b8593b0736b888dfb8841b4851e07663c0b67e6bc3a2bceb8ffefaa448a449", @generic="688c1975dceb090699e7aee3c242e6a8daa1f2ae20577ed896b8678a9821f4470008655b26583f4f680006182ddca09c36f6e769238352ef5eee8c9cb317ce43f46508b5b5b3741b0f10b7dd0ad5b1dce3dfa7f415db056fa1304d4e80cb759ea239b64517c265b01db49b643b48d42e5ba9aa1c63dc682bd0", @typed={0x4, 0x54}, @typed={0x8, 0x66, 0x0, 0x0, @fd=r6}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x4000880}, 0x8000) setsockopt$inet6_tcp_int(r4, 0x6, 0x2c, &(0x7f0000001780)=0x8000, 0x4) ioctl$XFS_IOC_INUMBERS(r5, 0x80405880, &(0x7f00000017c0)={{0x3, 0x0, 0xfffffb78, 0x3, 0x5f}, [{0x8f, 0x7, 0x0, 0x4}]}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x400200, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000001880)=0x0) ptrace$cont(0x20, r8, 0x8, 0x2) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000018c0)) ioctl$XFS_IOC_FSGROWFSRT(r7, 0x40105870, &(0x7f0000001900)={0x7, 0x3}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x480080, 0x0) write$tun(r9, &(0x7f0000001980)={@val={0x0, 0x884c}, @val={0x3, 0x1, 0x6, 0x3, 0x2, 0x4}, @mpls={[{0x1, 0x0, 0x1}, {0x800, 0x0, 0x1}], @ipv4=@icmp={{0x1e, 0x4, 0x0, 0x29, 0x178, 0x68, 0x0, 0x0, 0x1, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x12}, {[@cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x2, 0xd, "7f9441a8deb53a76f12491"}, {0x7, 0x2}, {0x0, 0xe, "a80c035c53de7dafd29f731c"}, {0x0, 0x7, "c184149ae8"}, {0x2, 0x6, "fb414ea2"}, {0x7, 0x4, "038c"}, {0x5, 0xa, "67b6d7e23b8e7cb7"}]}, @ra={0x94, 0x4}, @end, @end, @rr={0x7, 0x1f, 0x85, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @private=0xa010101]}, @noop]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x3d, 0x4, 0x3, 0x0, 0x40, 0x68, 0x2, 0xe, 0x32, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x36, 0x2, [{0x7, 0x12, "84867b8199c91bafb2d1d976a0377e21"}, {0x7, 0x11, "76451076e4ae96eeebd7649317ed31"}, {0x0, 0xd, "cbbaf6c6a830f1856b58ad"}]}, @timestamp_addr={0x44, 0x14, 0x83, 0x1, 0x1, [{@broadcast, 0xa846}, {@local, 0x2}]}, @generic={0x94, 0x4, "d6d2"}, @timestamp_prespec={0x44, 0x4c, 0xc, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x9}, {@multicast1, 0x8}, {@remote, 0x8}, {@multicast1, 0x1ff}, {@private=0xa010100, 0x7}, {@multicast2, 0x1}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010101, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}]}, @ssrr={0x89, 0x2b, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x14}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xee, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x42c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7fff}]}]}}, "37c68a27"}}}}, 0x18e) ptrace$cont(0x20, r8, 0x3, 0x3) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) close(r7) setsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f0000001b40)=0x3, 0x1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000001d00)={&(0x7f0000001b80), 0xc, &(0x7f0000001cc0)={&(0x7f0000001c00)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x24000004) 3.876911739s ago: executing program 1 (id=15): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000008c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7}) syz_io_uring_setup(0x400048be, &(0x7f0000000340)={0x0, 0xfffffffb, 0x20, 0xfffffff7, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000470000/0x4000)=nil, 0x4000}}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 3.854738814s ago: executing program 1 (id=16): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x160e) close_range(r0, 0xffffffffffffffff, 0x200000000000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000007ac0)={&(0x7f0000007900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000060c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x24, 0x4}, {0x8000000000000001, 0x6}, {0x2494}, {0x1000, 0x9}, {0x5ee5, 0xff}, {0xf, 0x2}, {0x1, 0x400003}, {0x40, 0xf2}, {0x96ef, 0x5}, {0xb9, 0x7}, {0x4, 0x63c2}, {0x5, 0x5}, {0x21084409, 0x5}, {0x4, 0x6}, {0x3ff, 0x5}, {0x9, 0x2}, {0x23c2, 0x9}, {0xffffffff, 0x7f}, {0x7fff, 0x3}, {0x73eb, 0xcca}, {0x8, 0x7c}, {0x3, 0xfffffffffffff000}, {0x8, 0xbc}, {0x3, 0x5}, {0x8000, 0x7fffffff}, {0x10000, 0x4}, {0x0, 0x3}, {0x41f, 0x4}, {0x7, 0x400}, {0xffffffff, 0x80000001}, {0x2, 0x4}, {0x3ff, 0x9}, {0xe000000000000000, 0x101}, {0x2, 0x2}, {0x81}, {0x3, 0x5}, {0x6, 0x5}, {0x689, 0xe0e}, {0x1462ca32, 0x8000000000000001}, {0xfffffffffffffffd, 0x44}, {0x8000, 0x80000001}, {0x9, 0x6}, {0x3, 0x3}, {0x3, 0x1}, {0x3, 0x1}, {0xb972, 0x5d9f58b1}, {0x401, 0x445f}, {0x31f4, 0x4}, {0x4, 0x8000000000000001}, {0x4, 0xc}, {0x5, 0x4}, {0x3, 0x7}, {0x10, 0x7}, {0x100000000, 0x1}, {0xbc86a48, 0x1}, {0x40, 0xf}, {0x7fa, 0x9}, {0x3, 0xe2c1}, {0x151e, 0xffffffff}, {0xa84}, {0x5, 0x9}, {0x6d9b, 0x618}, {0x3, 0x8}, {0x1, 0x1}, {0x9, 0x2}, {0x40, 0x1}, {0xcd08, 0x9}, {0x1, 0x6}, {0x401, 0x80000001}, {0x3, 0x8000000000000000}, {0x7846, 0x1}, {0xb5b, 0x3}, {0x8000, 0x10}, {0x0, 0x5}, {0x5, 0xcf66}, {0x6, 0xa78}, {0xe, 0x1}, {0xffffffffffff8000, 0x70}, {0x2, 0x9}, {0x0, 0x4}, {0x5, 0x109}, {0xb96, 0xc}, {0x4dd9, 0x3}, {0xffffffff, 0x7}, {0x5, 0x10}, {0x100000001, 0x4}, {0x2, 0x3}, {}, {0x2, 0x4}, {0x9}, {0x4, 0x2260}, {0x4e, 0x64}, {0x25ad, 0x1}, {0x0, 0x7ff}, {0xfff, 0x1b0}, {0xdd4, 0x10}, {0x3, 0x1ff}, {0x7fffffffffffffff, 0x8}, {0xff, 0x3a83}, {0x6, 0x2}, {0x9, 0xc917}, {0x3}, {0x8}, {0x5, 0xfd3}, {0x5, 0x8}, {0x0, 0x7fffffffffffffff}, {0x7, 0x4}, {0x7, 0x18}, {0x10000005, 0x7f}, {0x5, 0x1800000}, {0x1000000000, 0x3d}, {0x0, 0x200}, {0x5, 0x9}, {0x1, 0x1bbe}, {0x4, 0xc7d}, {0xfffffffffffffff8, 0x1d23}, {0x100000001000, 0x7fff}, {0x7, 0x9}, {0x6}, {0x7, 0x6}, {0x8, 0x1ff}, {0x401, 0x5}, {0x6, 0xc}, {0xc8, 0xb9c}, {0x4, 0x4}, {0xb23, 0x4}, {0x10000}, {0xfffffffffffffff8, 0x6}, {0x3, 0xb}, {0x7, 0x800}, {0x6, 0x3}, {0x5, 0x9}, {0x9, 0x6}, {0xffffffffffff8001, 0x4}, {0x2, 0xa70}, {0x1000, 0x3}, {0x101, 0x8000000000000000}, {0xc, 0x47d}, {0x0, 0x3}, {0x7, 0x176}, {0x6, 0x5}, {0xfffffffffffffff7, 0xbb}, {0x47, 0x200}, {0xc, 0xb2d3}, {0xfffffffffffffff8, 0xa}, {0x9, 0xffffffff00000001}, {0xffffffffffffff6a, 0x1}, {0xc3e, 0xffffffffffffffff}, {0x9a, 0x80000001}, {0xfff, 0xb2}, {0x9, 0x6}, {0x1000, 0x4}, {0x8, 0x1}, {0x6, 0x4}, {0x400, 0x7}, {0x3df, 0x696}, {0x2, 0x2}, {0x3, 0xa}, {0xfffffffffffffff9, 0x1}, {0xfffffffffffffffd, 0xc32}, {0x1, 0x8000}, {0x8, 0x6}, {}, {0x7, 0x5}, {0xffffffffffff68b1, 0x3}, {0xc9b, 0xaad3}, {0x7fffffff, 0x9}, {0x9, 0x3}, {0x2, 0x8001}, {0x8000}, {}, {0x421, 0xfffffffffffffffb}, {0x6, 0xb}, {0x3, 0xfffffffffffffffb}, {0x8, 0x5}, {0xa12, 0x9}, {0x400, 0x4}, {0x0, 0x1}, {0x1, 0x20000000}, {0x2, 0xaf}, {0x9}, {0x7, 0x13b0}, {0x4, 0x6}, {0x2, 0x4}, {0x3, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0xe, 0xff}, {0x6, 0x6}, {0x800, 0x10}, {0x15da4000000, 0x4}, {0x2dfb, 0xff}, {0x2, 0x8000000000000001}, {0xa, 0x9}, {0x2, 0x1ff}, {0x8, 0x80}, {0x4, 0x5}, {0x1, 0x5}, {0xffff, 0x9}, {0xffff, 0x3}, {0x1, 0x55c}, {0xb507, 0x7}, {0x66bb, 0xffffffff80000001}, {0x2, 0xffffffffffffffff}, {0x9, 0x7}, {0xb8b, 0x7}, {0xbbe5, 0x2}, {0x0, 0x2}, {0x1, 0xd}, {0x9, 0x7}, {0x6, 0x6f}, {0xf, 0xff}, {0x0, 0x5}, {0x3, 0x7f}, {0x3, 0x3}, {0x4, 0x2}, {0x6, 0x3}, {0x2, 0x8}, {0x3, 0x654}, {0x6, 0x3}, {0x4, 0xfffffffffffffff8}, {0x400}, {0x3, 0x3}, {0xd, 0x8}, {0x8, 0x7}, {0x1e2d, 0x105}, {0x81, 0x3}, {0x8, 0xbd0c}, {0x8, 0xc2a}, {0x7313, 0xfffffffffffffffe}, {0x1, 0x2}, {0x9cd, 0x7fffffffffffffff}, {0x2, 0xda6}, {0x8001, 0x80000001}, {0x5, 0x9}, {0x3, 0x6}, {0x8, 0x7}, {0x33a, 0x3}, {0x6, 0x8}, {0x40, 0x9}, {0x9, 0x8001}, {0x1, 0x7f}, {0x6a9, 0x1}, {0x8, 0x2}, {0xffff, 0x290ca271}, {0x40, 0x3}, {0x8000000000000000, 0x10000}, {0x10001, 0x5}, {0x4bf2f6ad, 0x55}, {0xfff, 0x1aed}, {0x5, 0xfffffffffffffffd}, {0x5, 0x80db}, {0xfa1, 0x7}, {0x8, 0x1}, {0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000e69000/0x4000)=nil) ioctl$TIOCSWINSZ(r4, 0x5414, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r11) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) 3.564149495s ago: executing program 1 (id=17): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34101ff", 0x9, 0x20000000, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r1, 0x80000001, 0x4) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x28c0093, &(0x7f0000000180)={[{@verity_require}, {@default_permissions}, {@redirect_dir_nofollow}], [{@permit_directio}]}) r2 = dup(r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) 3.406096699s ago: executing program 1 (id=18): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r1, 0x29, 0x4, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x880b8, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x81\xe4s\xd0E\v\xfe\x9by\x11s+\x89\xb0g\xd4\xba%W,\xa4\x1d!\xc9b\x01\x00\x8598?X\xfajn\x02\x06\n\xc6\f\'\xd9A\x15R\xaa\x9f\xc6nRf\xb5\rDFY\xfb\xea\xbf\x84!\xb4\xa5o\xf0\"q\x12c\xcb\xd2\x9e\xd5\x02\x86\xf4\xc9\ak\'\xa0!)\x127>\x14\xbe\xc5\xd3\xa2\x15g\t-\xf0\xacH\x0e\x90Q\xef\xa7l\xe5\xcfJ\xa6\x9e\\\xae+\xfeX\x86H\x9bo\x9ayE\x0f0\x98Y9*\xe2\xe7\xfc\xb2\x1c\x817/\x1b\xa6z\x88\x90\xfaM\x85\x86\xf8\x12.U\xb47C\x83\xab\x8c\\\xad\xa4_8\xcek\x97\x8f\xbb\fI7\x120\xbb6j\x15M\xe7\x19P\x81\xba\xf6\x1d\x9f\"\xbd\xed\x15\x94qj\x90p\xd6\xc0\xa2Z\xce\xc8h\x9f\xe2\xaa\xc0\xfb\x82\xf1\xb9\fH\xd1\xe5j\xb9\x13\xa3 \xe6\a\x90\xdf\xca\x81\x11Q\xcc\x95\xb4~JJ\x81\x91(L\xff\x89`\xcc\x97\x16&\xba\x1c\xe7\xc4_\xcbUbq\x8d\x12\x86R\"\xe5\xd1i\x06\xd6\xf8\x8b\x9cw\xff\xe1\xe2\xeb\x1e\xfa\xc7\xdd\x84\xe0\x0ed_\x9c\x95\xc3\xa1\xa5,\xe4j\x98\xf7<>\xbd%\xeaOG\xde\x9aOa\x9a\x9c\xbf\xec\x8d\x86\xc6\ne\x9b\x97P-*\x87\xd5\xe3o\xdc4\xa1Z\x9ax\xe8\xd5bY\xa6hi\x89\xd3^jk\x95F\xd0o\xfa\xb3\xda\x12Tw$\xe5\x1c\r\xc9.T\xeb\xe7\xef\x91k\xf4\xbb\xbeLE\xf1\xf9\xcdT\xfdL\xbfw\xf0Z\xf7\x1c\x85\xce\xc6\xb2\xa8{\x01-e\xe1\x00L\x9c\xd3\xd3\xf5u\x977\xb6W(\xc9\x8b\x86I\x13\xa0\xc5\xa3\xf1\x95:~\xb3\xd3\x86\x95\xd8\x8b\xf6\xa4\xb4#7\xf0\x00\xfb-\xb0*%\xf7T\xf2\xf1\xc6rXR\xb9\xe7\x01\x0fT\x94\x17\x06&u\xdd\x99\x1b\xa5\xbe\x1a\x7fY\xe1w.\xd8\xf0\x87\xc4\xb2\b\xa4\t\x99\xcd\x9c\x1c\f\xd0\xbe\xa9?'}}], 0x2f}) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a000003c0179a2870000004"], 0x1c}}, 0x0) read$FUSE(r2, &(0x7f00000027c0)={0x2020}, 0x2038) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000240)={0x0, r1, 0x2, 0xfffffffffffffffd, 0x3, 0x8}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r7 = inotify_init() syz_ublk_setup_io_uring(0x2e12, &(0x7f0000000280)={0x0, 0x280e, 0x8000, 0x22, 0x186}, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000000)={0x3, 0x2}, 0x8) close(r8) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x7f, 0x6}) 3.058912462s ago: executing program 1 (id=19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000100)) syz_usb_connect(0x5, 0xb3, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0xb0, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0x5, 0x4}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x6, 0x1, 0x1, 0x20, 0xc}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x3, [{0x6, &(0x7f00000000c0)=@string={0x6, 0x3, "b6256a36"}}, {0x73, &(0x7f0000000100)=@string={0x73, 0x3, "fe3fce191eccbae95345e14a08793e45cd9760fc3bfd59fc61f823fdd439ff429ac37b3f54c7f891d65808b99d4f6a8a9fa56d4cfbe8a220efaafae269478fde9f3c0cd9251d91f5e108df4216f405635aa41722600240301a4d2538c0b3fc9fd798f64b4d61f9d2e8060983c1e9edafd9"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41f}}]}) 2.846430888s ago: executing program 0 (id=20): r0 = socket$netlink(0x10, 0x3, 0x6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x10000000003) ioctl$XFS_IOC_SCRUBV_METADATA(r8, 0xc0285840, &(0x7f00000022c0)={0x4, 0x175971e8, 0x3fdd, 0x0, 0x8001, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0xd) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x7, 0x0, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0xab9f, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0xcc78, 0x200001, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="66ba4000edb952030000b800000000ba000000000f30b966030000b805000000ba000000000f3066b87f008ec0c744240071aa0000c744240275000000c7442406000000000f0114249a0f00000053000f01c4f364de7c19da0fa5480d0f01b4c4f1a2627a", 0x65}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r10 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000000140)) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="28005ba5df00"/17], 0x28}, {&(0x7f0000000280)={0x59c, 0x3b, 0x400, 0x70bd28, 0x25dfdbfd, "", [@nested={0x51c, 0xe4, 0x0, 0x1, [@nested={0x518, 0x107, 0x0, 0x1, [@generic="9e80", @nested={0x24, 0x16b, 0x0, 0x1, [@typed={0x14, 0xa2, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xd}}, @nested={0x4, 0x10}, @nested={0x4, 0x106}, @typed={0x4, 0xe7}]}, @generic="c177893ea647baed34efb1325b61c401373e7f06f330acbfc412200ef788b6a3c13445ac42b09fe303f8767ccce6be9c46339a7e27270e05414e0842e36ac1aad9dee1c447c6cac03e50418c6140a7ea075356ef391689867f808d9bf2c927e464855f04bae05510d68f96de0176e4b973b8c9920c2330923366674f0394286be55673a8c0af3769ff36505cf575191ead16cd4ee26ee09ca70ef334f23355d3314fcae5d2ab40e350d55d0d14eb798ec7a6357e8abbce96ed0147b1f53de59bf7613551143f65b9096d892e9b0b864a95f48ae86e0f52153911e35ea58340683d954e93fd54d46bef42d308749d10c4ac46f85c20623b68", @nested={0x11d, 0xa7, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @fd=r2}, @typed={0x4, 0x12a}, @generic="6dd1e51f76148bc318b54fb63ce8ea881500e4cb1194fd701ab9815b34cedf386e4192524338c60fac51d908fa6a3190dc718b4970b19a79d7fd7d13cf3bd2a695e0bf81baa957f63ce18955850b602fff85dbfef4385fefcc8f33efd2360d17f47d1908297a7c6a50242bae8bdeb3b63c4149d21e7d8806e0bd37db203781b2be084cd59d72353ef437", @nested={0x4, 0x118}, @typed={0x8, 0xe3, 0x0, 0x0, @pid=r10}, @generic="7a928b5f80bd30f1e7118ecb594e0a393e89d971903b5d2258bcada955f08f588946446e07f1cb287eb904d18c06d308ae6d4112cc391820f3198fd8fc28687b2673d4472b8b3caf6641d3d2823255c0197449f6b8e8a097866c672a8c42e9a3069d877bd009d6944ba66f50e885592297032f80bb0dc6"]}, @nested={0x1e1, 0x26, 0x0, 0x1, [@generic="114682334d31ac37e33db0cce715f07a14de961c780afbfe5cff62357fe865ed31b17df45c3aa50cab353e5fa6341b0794b444bae2c27a2b38c34c45426c6926d166535e84", @typed={0x8, 0x45, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x8b, 0x0, 0x0, @u32=0xe06d}, @generic="50d000f7ce8ee6783139d70e6df89c4e32cc5daf880f5a111d918fee32fc78a46480ee02c4023dfafa952d6efbe1ca9d00e3ebf8c04383c987773fabad42b90984f01433883a7ccdf7bd5b5c6e8b3bdfa3fa5021b697bc8f37893c4ba1a56d8bb265aac4f99251d0316cfae742610a5434f05d0cef12bb2cf6ddd7e52a077864d4f6a05196a402633f14d7cf8a2553f35e0060fc5bccd371701a898d8cf3973108887c5d473e557bd7ca7187b7ecf4215c54a2078eaecb3b3e69fc346132a1a5bd11c78ca43b06c2f3b5b1b7c6ba0431975537262e6c03fcdcf90b2d68c4e4544c8b5e036fec72295d6fbffa", @typed={0x96, 0x99, 0x0, 0x0, @binary="05c137d0e1144cab51ffb3941665a7f2fd95d4bd5f05339f9ab0c2e227f3e246bc47a57f92f0146ad9c883cc1d1f22fac1feb025fe5752799d2a90e1924f3f40ce505875a36a6b15a4361c653eded950f5b5d82075547aaf0a750a96f3918502fb9beb83cf1e2add8598fbc0301d4301a4a1cd4cb33f591478120829e03c4f59130e0023530b750dbb585f6e2fe7e660a2f7"}, @nested={0x4, 0x136}]}, @generic="90d45cb259c666aece3d6e990c89900da21d64f0c09983afef318f69e1b88630b25b8a6f26761c6e17508567b4dbd5ef689c8bbfe48f60186514200c10988700572716a2898bbaed3a55af2810c24e56c34b67ba469326e76742c9328370e0a20c2cce868cd32df88cd9a50c1aa0ceec591f48a9adff16ca954e0cdf2e4751b1bc40d9ab46e50142cd27fe4d51fbea3a75b3", @generic="8cd011608b8b2092650383832dfd5a35f8", @typed={0x8, 0x133, 0x0, 0x0, @u32=0x4}, @generic="cd6b6aff9c0a29a6319b5a450a8ec2206b7b2cd5c3913d17c72bb7655970b82c9d12c1335d3be63cd1b8dd92f72ca43e8c530da32e914eec3fabbb3c4a67ef2b692a296fc9c4e3"]}]}, @generic="4816a6ca0b1f6f0d179756930c7ce5e26c7f573801391cbc0372b9a5f0ffac5b741f30ca2765a180ee55ab7a7c1a6c7b0bd14d86d5c3132d67bbfbc0c9356a0bf58d09e0d3e82c2c116aa4192d096a32d04f28b02e8e7e014bc0e17a734b4654740877ca3e301cda5a1f87ac77"]}, 0x59c}], 0x2}, 0x30008090) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) 2.576413735s ago: executing program 3 (id=21): ioprio_set$uid(0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xfff, 0x100000001, 0x7, 0xdffffffc, 0x2}, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0xa44, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', r4, &(0x7f00000004c0)='./file0\x00', 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @multicast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) dup3(r7, r5, 0x0) 2.568507626s ago: executing program 0 (id=22): r0 = socket(0x10, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)={0x3c, 0x0, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4044094) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0xe, 0x2, 0x3, 0x7f, 0x6, 0x6, 0x39cc191a, 0x2, 0x7, 0x5, 0x2, 0xffffffff, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0xfffffffb, 0x4, 0x5, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0x4, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x3, 0x2, 0x3, 0x9, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x1fe, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff2, 0x7, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x6, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xb4f4, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb20, 0x1, 0x200, 0xffff3440, 0xfff]}, 0x45c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000300)=ANY=[], 0xff2e) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4e21, 0xfd95, 0x4e22, 0x394, 0x2, 0xa0, 0x20, 0x4}, {0x4, 0x200, 0xffff, 0xb9b9, 0x1, 0xc5c0, 0x8, 0xfffffffffffffffe}, {0x3, 0x9, 0x100, 0x400}, 0xfffffffa, 0x6e6bb1, 0x2, 0x1, 0x3}, {{@in=@remote, 0x4d2, 0x2b}, 0xa, @in=@multicast1, 0x3504, 0x2, 0x2, 0x90, 0x382daa26}}, 0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x10, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r5, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}}) 2.530640204s ago: executing program 3 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0xfffffffffffffd4d, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket(0x2, 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x3, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x0, 0x5, 0xffffffffffff258f, 0x7, 0xe0a}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 2.395943763s ago: executing program 3 (id=24): r0 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d37"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_NMI(r4, 0xae9a) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x200804, 0x0) syz_usb_connect(0x0, 0x12e, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x76, 0xc6, 0xe, 0x8, 0x769, 0x11f3, 0x6a02, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c, 0x2, 0x8, 0x7, 0xe0, 0x8, "", [{{0x9, 0x4, 0xf9, 0xf2, 0x4, 0x14, 0x4e, 0x60, 0x66, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x2079, 0x7361, 0x8}, [@obex={0x5, 0x24, 0x15, 0xdbd}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x4}, @dmm={0x7, 0x24, 0x14, 0x9, 0x6}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x36}]}], [{{0x9, 0x5, 0x16, 0x0, 0x20, 0x6, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3e}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x6, 0x68, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xbe, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xba, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x78, 0x5, 0xe}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x8, 0x8, 0x1}}]}}, {{0x9, 0x4, 0x7c, 0x9, 0x3, 0x2e, 0x82, 0x9e, 0x9, [], [{{0x9, 0x5, 0x80, 0x10, 0x5ff, 0x4, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x10}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x10, 0x8, 0x3}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0xf, 0x4, 0x0, [@generic={0x77, 0x4, "b38baf30acea5b68ee653c2e56623eee99c9fbb47b8c21c3b858fc5633da5407daa1047bf236b4d216d5891548064e068e4ce3f65a31708b92746ccf03d4fbdc3f93e8ff75bee8d79fe6379d727e1dca2ef0ef269e788314c6936103bc5b3376e002d5c3f540e42a02edd5e54f910040258d2544a8"}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x3, 0x3, 0x3, 0x8, 0x4}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x3, [{0x71, &(0x7f0000000380)=@string={0x71, 0x3, "14cc8d502859848d490952bef60cc3b544d3511b91100781603e2ccc5d6ff67ac2256d526fb57b4f27077463c0366bb7ca86b5237413de1935f9bb0e5ea5e521cf6b75cd7ccc55e2f87fd0007f02996284a3f892d71beb33a2ce6b4049a8d0d0cb1a7869ff30fcea92e9fb5badb491"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x79}}]}) 1.709407088s ago: executing program 0 (id=25): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000080)="f6c9e32ae40f4dc0815fd0d897079a161cfb7702311e629acda76933ddd0c24165eb4d4d28d99f73071535534b2ce744440aa8cdc5aab34c689a95423df70dd6d743273b8f4edfe04c818640a2009a7501acdffa95b58c89e4ff78d363773d65dcd089b0a2faec1608bcb51f78a088acfb5776c00b86c304bb3a298fe0386425971a0e3014c853966b4a5f22b59736eabc5e77d720840b916215f16789e493bc97796e68318f84983461913d8f41e1622569e39875bb2f3f58c5e42d5a4604588509954415a7665a8ea11fe3666500ff2a5a562a153bed774fddb9d54f0e411917b3e95c48c4234bd21a02058d", 0xed}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000780)={0x0, 0x0}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000800)=0x0) syz_clone3(&(0x7f0000000880)={0x40120100, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x7}, &(0x7f0000000640)=""/229, 0xe5, &(0x7f0000000740)=""/53, &(0x7f0000000840)=[r4, r5], 0x2, {r2}}, 0x58) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000200)=@get={0x1, &(0x7f0000000180)=""/81, 0x7}) 1.650398091s ago: executing program 0 (id=26): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) 196.643819ms ago: executing program 0 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32, @ANYBLOB="65d40080000000916e8afe31026666cbec93a54c9a99cdf6bb47120ee72511224391b8101955e1a6ec35b9808e4421f47368387261f588ddc185ee3359e82162496e4ec62d039343eff09906ab07318553075b280514b010a23dfde4c5ee42458af7710f197e45ff259c17583e07335c69497f68a41ac6db5c5eea0f2656908ae47554e6569861753bfc021cefe937e3093aa293bd83582de4d021eb"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0x44, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x70, 0x51, {0x8, 0xb, 0x0, 0x2, 0x1, 0x7, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x2, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x2, 0x8, {0x8, 0x25, 0x1, 0x0, 0x3, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x7, 0x2, {0x8, 0x25, 0x1, 0x2, 0xf, 0x6}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100f}}, {0x7d, &(0x7f0000000380)=@string={0x7d, 0x3, "487db552ed6731f118416d49726d35d54928f435d9dcb50bbc97d89e7b6f5c2e2ea37a048f28dc894d1048feefd8e3c6a85f85e064a2467aab22bfa5db0c7ed781fc094db750cc0c86d47791a4b8058d86aefd602d36249cc91a9d5b606bd3cdb12acdd31f09e892214c8e641f1262dc904d982b9f16bfece0f68e"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x843}}, {0x0, 0x0}, {0x0, 0x0}]}) 0s ago: executing program 1 (id=28): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001440), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x54, 0x1, 0x400, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x175) rmdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda1\x00', &(0x7f0000000440)={0x420280, 0x8c, 0x3}, 0x18) readlinkat(r2, &(0x7f0000000580)='./config\x00', &(0x7f00000005c0)=""/132, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x4091) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) r5 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/206, 0xce}], 0x1, &(0x7f0000000380)=""/9, 0x9}, 0x2001) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x1) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x80000, 0x100000000, 0xca8}, {0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4c805}, 0x80) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. [ 20.965657][ T36] audit: type=1400 audit(1790853701.579:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.967163][ T287] cgroup: Unknown subsys name 'net' [ 20.988328][ T36] audit: type=1400 audit(1790853701.579:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.015615][ T36] audit: type=1400 audit(1790853701.609:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.015766][ T287] cgroup: Unknown subsys name 'devices' [ 21.139646][ T287] cgroup: Unknown subsys name 'hugetlb' [ 21.145269][ T287] cgroup: Unknown subsys name 'rlimit' [ 21.238252][ T36] audit: type=1400 audit(1790853701.859:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.261423][ T36] audit: type=1400 audit(1790853701.859:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.286278][ T36] audit: type=1400 audit(1790853701.859:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.291982][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.318219][ T36] audit: type=1400 audit(1790853701.939:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.332018][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.343603][ T36] audit: type=1400 audit(1790853701.939:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.377917][ T36] audit: type=1400 audit(1790853701.949:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.403447][ T36] audit: type=1400 audit(1790853701.949:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.654891][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.662109][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.669373][ T295] bridge_slave_0: entered allmulticast mode [ 22.675575][ T295] bridge_slave_0: entered promiscuous mode [ 22.682326][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.689407][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.696478][ T295] bridge_slave_1: entered allmulticast mode [ 22.702827][ T295] bridge_slave_1: entered promiscuous mode [ 22.724585][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.731696][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.738869][ T296] bridge_slave_0: entered allmulticast mode [ 22.745059][ T296] bridge_slave_0: entered promiscuous mode [ 22.754317][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.761473][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.768589][ T296] bridge_slave_1: entered allmulticast mode [ 22.774743][ T296] bridge_slave_1: entered promiscuous mode [ 22.798896][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.805937][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.813235][ T297] bridge_slave_0: entered allmulticast mode [ 22.819482][ T297] bridge_slave_0: entered promiscuous mode [ 22.825799][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.833031][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.840096][ T297] bridge_slave_1: entered allmulticast mode [ 22.846226][ T297] bridge_slave_1: entered promiscuous mode [ 22.923638][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.930727][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.937860][ T294] bridge_slave_0: entered allmulticast mode [ 22.943992][ T294] bridge_slave_0: entered promiscuous mode [ 22.953069][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.960261][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.967297][ T294] bridge_slave_1: entered allmulticast mode [ 22.973533][ T294] bridge_slave_1: entered promiscuous mode [ 23.053764][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.060829][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.068118][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.075148][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.092161][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.099217][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.106483][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.113522][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.148432][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.155486][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.162765][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.169798][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.208872][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.216296][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.223594][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.232038][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.239587][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.250448][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.257477][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.265296][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.272357][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.289041][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.296063][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.309901][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.316935][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.338839][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.345886][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.363452][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.370506][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.390019][ T297] veth0_vlan: entered promiscuous mode [ 23.403860][ T297] veth1_macvtap: entered promiscuous mode [ 23.413119][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.420170][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.452495][ T296] veth0_vlan: entered promiscuous mode [ 23.458427][ T295] veth0_vlan: entered promiscuous mode [ 23.475530][ T296] veth1_macvtap: entered promiscuous mode [ 23.499653][ T295] veth1_macvtap: entered promiscuous mode [ 23.509159][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.519362][ T294] veth0_vlan: entered promiscuous mode [ 23.555028][ T294] veth1_macvtap: entered promiscuous mode [ 23.604956][ T325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5'. [ 23.619401][ T331] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.817839][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.818092][ T313] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.917812][ T320] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.988782][ T313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.998170][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.000306][ T313] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 24.013847][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 24.027091][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.038930][ T66] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 24.048222][ T313] usb 2-1: Product: syz [ 24.054226][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.058119][ T320] usb 4-1: device descriptor read/64, error -71 [ 24.071364][ T313] usb 2-1: Manufacturer: syz [ 24.075416][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.075960][ T313] usb 2-1: SerialNumber: syz [ 24.089269][ T66] usb 1-1: Product: syz [ 24.094155][ T66] usb 1-1: Manufacturer: syz [ 24.103227][ T66] usb 1-1: SerialNumber: syz [ 24.110178][ T66] cdc_mbim 1-1:1.0: skipping garbage [ 24.115507][ T66] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 24.124428][ T66] cdc_mbim 1-1:1.0: bind() failure [ 24.347822][ T320] usb 4-1: device descriptor read/64, error -71 [ 24.608163][ T320] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.691321][ T345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.700011][ T345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.747897][ T320] usb 4-1: device descriptor read/64, error -71 [ 24.944167][ T66] usb 2-1: USB disconnect, device number 2 [ 24.989899][ T320] usb 4-1: device descriptor read/64, error -71 [ 25.107886][ T320] usb usb4-port1: attempt power cycle [ 25.467798][ T320] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 25.499589][ T320] usb 4-1: device descriptor read/8, error -71 [ 25.628769][ T320] usb 4-1: device descriptor read/8, error -71 [ 25.667860][ T356] kvm_intel: kvm [355]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 25.877810][ T320] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 25.908791][ T320] usb 4-1: device descriptor read/8, error -71 [ 25.980515][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 25.980532][ T36] audit: type=1400 audit(1790853706.599:144): avc: denied { ioctl } for pid=358 comm="syz.1.17" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 26.053590][ T320] usb 4-1: device descriptor read/8, error -71 [ 26.107348][ T36] audit: type=1400 audit(1790853706.709:145): avc: denied { read write } for pid=362 comm="syz.1.18" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.131525][ T363] ======================================================= [ 26.131525][ T363] WARNING: The mand mount option has been deprecated and [ 26.131525][ T363] and is ignored by this kernel. Remove the mand [ 26.131525][ T363] option from the mount to silence this warning. [ 26.131525][ T363] ======================================================= [ 26.166748][ T36] audit: type=1400 audit(1790853706.749:146): avc: denied { open } for pid=362 comm="syz.1.18" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.168248][ T320] usb usb4-port1: unable to enumerate USB device [ 26.194399][ T36] audit: type=1400 audit(1790853706.819:147): avc: denied { remount } for pid=362 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.216763][ T36] audit: type=1400 audit(1790853706.819:148): avc: denied { read write } for pid=362 comm="syz.1.18" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.239645][ T36] audit: type=1400 audit(1790853706.819:149): avc: denied { open } for pid=362 comm="syz.1.18" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.269272][ T363] rust_binder: Error in use_page_slow: ESRCH [ 26.269310][ T363] rust_binder: use_range failure ESRCH [ 26.277869][ T363] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 26.279799][ T36] audit: type=1400 audit(1790853706.819:150): avc: denied { ioctl } for pid=362 comm="syz.1.18" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.293570][ T363] rust_binder: Failure in copy_transaction_data: ESRCH [ 26.316510][ T36] audit: type=1400 audit(1790853706.819:151): avc: denied { set_context_mgr } for pid=362 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 26.334807][ T363] rust_binder: 362:363 transaction call to 362:0 failed ESRCH, code 0 size 0-0 [ 26.343539][ T36] audit: type=1400 audit(1790853706.819:152): avc: denied { map } for pid=362 comm="syz.1.18" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.377894][ T36] audit: type=1400 audit(1790853706.819:153): avc: denied { read } for pid=362 comm="syz.1.18" dev="nsfs" ino=4026532549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.382416][ T320] rust_binder: 362: undelivered TRANSACTION_ERROR: 29201 [ 26.609086][ T66] usb 1-1: USB disconnect, device number 2 [ 26.649545][ T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.787982][ T310] usb 2-1: device descriptor read/64, error -71 [ 26.883547][ T373] batadv_slave_1: entered promiscuous mode [ 26.899267][ T373] batadv_slave_1: left promiscuous mode [ 27.027789][ T310] usb 2-1: device descriptor read/64, error -71 [ 27.287815][ T320] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 27.289256][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.427807][ T310] usb 2-1: device descriptor read/64, error -71 [ 27.448781][ T320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.458920][ T320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 27.467845][ T320] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.483388][ T320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.492656][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.500727][ T320] usb 4-1: Product: syz [ 27.504928][ T320] usb 4-1: Manufacturer: syz [ 27.509597][ T320] usb 4-1: SerialNumber: syz [ 27.520630][ T320] cdc_mbim 4-1:1.0: skipping garbage [ 27.525998][ T320] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 27.532944][ T320] cdc_mbim 4-1:1.0: bind() failure [ 27.679924][ T310] usb 2-1: device descriptor read/64, error -71 [ 27.792890][ T310] usb usb2-port1: attempt power cycle [ 28.067845][ T66] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.076500][ T385] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 28.087591][ T385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.096962][ T385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.151464][ T310] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 28.178866][ T310] usb 2-1: device descriptor read/8, error -71 [ 28.227851][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 28.234168][ T66] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 28.242681][ T66] usb 1-1: config 0 has no interface number 0 [ 28.250413][ T66] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 28.260663][ T66] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 28.270838][ T66] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 28.281018][ T66] usb 1-1: config 0 interface 196 has no altsetting 0 [ 28.289749][ T66] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 28.300507][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.308698][ T66] usb 1-1: Product: syz [ 28.313021][ T66] usb 1-1: Manufacturer: syz [ 28.318075][ T66] usb 1-1: SerialNumber: syz [ 28.323070][ T310] usb 2-1: device descriptor read/8, error -71 [ 28.330572][ T66] usb 1-1: config 0 descriptor?? [ 28.335894][ T384] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 28.568587][ T310] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.588857][ T310] usb 2-1: device descriptor read/8, error -71 [ 28.720433][ T310] usb 2-1: device descriptor read/8, error -71 [ 28.748360][ T66] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 28.757379][ T66] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 28.769325][ T66] usb 1-1: USB disconnect, device number 3 [ 28.827912][ T310] usb usb2-port1: unable to enumerate USB device [ 29.275539][ T387] netlink: 'syz.0.27': attribute type 6 has an invalid length. [ 29.435536][ T390] BUG: scheduling while atomic: syz.1.28/390/0x00000002 [ 29.442574][ T390] Modules linked in: [ 29.446544][ T390] CPU: 1 UID: 0 PID: 390 Comm: syz.1.28 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 29.446576][ T390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.446594][ T390] Call Trace: [ 29.446601][ T390] [ 29.446609][ T390] __dump_stack+0x21/0x30 [ 29.446652][ T390] dump_stack_lvl+0x140/0x1c0 [ 29.446679][ T390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.446708][ T390] dump_stack+0x19/0x20 [ 29.446733][ T390] __schedule_bug+0x12b/0x200 [ 29.446755][ T390] ? find_proxy_task+0x2460/0x2460 [ 29.446776][ T390] ? kernel_text_address+0xa9/0xe0 [ 29.446802][ T390] ? __kernel_text_address+0x11/0x40 [ 29.446827][ T390] ? unwind_get_return_address+0x51/0x90 [ 29.446852][ T390] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 29.446876][ T390] __schedule+0xb85/0x20b0 [ 29.446900][ T390] ? stack_trace_save+0xaa/0x100 [ 29.446922][ T390] ? __sched_text_start+0x10/0x10 [ 29.446952][ T390] ? __kasan_check_read+0x15/0x20 [ 29.446975][ T390] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 29.446994][ T390] ? __kasan_check_write+0x18/0x20 [ 29.447014][ T390] ? _raw_spin_lock_irq+0x93/0x120 [ 29.447036][ T390] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.447058][ T390] schedule+0xc5/0x240 [ 29.447079][ T390] schedule_preempt_disabled+0x14/0x30 [ 29.447102][ T390] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 29.447131][ T390] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 29.447158][ T390] ? try_to_wake_up+0x111a/0x1fd0 [ 29.447181][ T390] ? __kasan_check_write+0x18/0x20 [ 29.447200][ T390] ? wake_q_add_safe+0x29/0x100 [ 29.447218][ T390] ? __cfi_try_to_wake_up+0x10/0x10 [ 29.447240][ T390] ? rwsem_mark_wake+0x507/0x770 [ 29.447268][ T390] ? rwsem_read_trylock+0x275/0x5a0 [ 29.447296][ T390] ? wake_up_q+0x10a/0x1c0 [ 29.447313][ T390] ? downgrade_write+0x470/0x470 [ 29.447341][ T390] down_write+0x163/0x2b0 [ 29.447366][ T390] ? __cfi_down_write+0x10/0x10 [ 29.447391][ T390] ? down_read+0x7f/0xe0 [ 29.447416][ T390] ? __cfi_down_read+0x10/0x10 [ 29.447441][ T390] kernfs_remove_by_name_ns+0x8c/0x180 [ 29.447469][ T390] sysfs_unmerge_group+0xd7/0x130 [ 29.447492][ T390] dpm_sysfs_remove+0x8a/0xd0 [ 29.447519][ T390] device_del+0x241/0xcf0 [ 29.447537][ T390] ? __cfi_class_find_device+0x10/0x10 [ 29.447559][ T390] ? __cfi_device_del+0x10/0x10 [ 29.447577][ T390] ? __kasan_check_write+0x18/0x20 [ 29.447597][ T390] ? kobject_put+0x1cc/0x2a0 [ 29.447616][ T390] device_destroy+0xb0/0x100 [ 29.447636][ T390] ? __cfi_device_destroy+0x10/0x10 [ 29.447655][ T390] ? __kasan_check_write+0x18/0x20 [ 29.447676][ T390] android_device_destroy+0x118/0x180 [ 29.447705][ T390] gadgets_drop+0x1d/0x30 [ 29.447725][ T390] ? __cfi_gadgets_drop+0x10/0x10 [ 29.447748][ T390] configfs_rmdir+0x8ba/0x9b0 [ 29.447774][ T390] vfs_rmdir+0x3de/0x560 [ 29.447799][ T390] do_rmdir+0x29a/0x590 [ 29.447825][ T390] ? __cfi_do_rmdir+0x10/0x10 [ 29.447851][ T390] ? __kasan_check_write+0x18/0x20 [ 29.447872][ T390] __x64_sys_rmdir+0x4b/0x60 [ 29.447899][ T390] x64_sys_call+0xaf7/0x2ee0 [ 29.447918][ T390] do_syscall_64+0x57/0xf0 [ 29.447937][ T390] ? clear_bhb_loop+0x50/0xa0 [ 29.447992][ T390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.448017][ T390] RIP: 0033:0x7f8fb159e159 [ 29.448044][ T390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.448062][ T390] RSP: 002b:00007f8fb23c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 29.448084][ T390] RAX: ffffffffffffffda RBX: 00007f8fb1825fa0 RCX: 00007f8fb159e159 [ 29.448100][ T390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 29.448113][ T390] RBP: 00007f8fb163506b R08: 0000000000000000 R09: 0000000000000000 [ 29.448126][ T390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.448138][ T390] R13: 00007f8fb1826038 R14: 00007f8fb1825fa0 R15: 00007ffce6394238 [ 29.448155][ T390] [ 29.858152][ T390] ------------[ cut here ]------------ [ 29.865106][ T390] WARNING: CPU: 0 PID: 390 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 29.875041][ T390] Modules linked in: [ 29.879062][ T390] CPU: 0 UID: 0 PID: 390 Comm: syz.1.28 Tainted: G W syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 29.891978][ T390] Tainted: [W]=WARN [ 29.895850][ T390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.906153][ T390] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 29.912414][ T390] Code: 48 83 3d 74 f7 db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 4c 2a 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 29.932102][ T390] RSP: 0018:ffffc9000d147980 EFLAGS: 00010206 [ 29.938206][ T390] RAX: 000000007fffffff RBX: ffff8881f52edc60 RCX: 00000000000edc60 [ 29.946192][ T390] RDX: ffff8881f52edc60 RSI: 0000000000000001 RDI: 0000000005fd414d [ 29.954267][ T390] RBP: ffffc9000d1479e0 R08: 000000005531bfa7 R09: 00000000aaae02dc [ 29.962293][ T390] R10: 000000000000000d R11: ffffffff8175a6a0 R12: 000000009fb0edc6 [ 29.970309][ T390] R13: 0000000000000000 R14: ffffc9000d1479f0 R15: 000000000000000d [ 29.978346][ T390] FS: 00007f8fb23c76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.987291][ T390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.993919][ T390] CR2: 0000001b2f21aff8 CR3: 0000000115920000 CR4: 00000000003526b0 [ 30.001931][ T390] Call Trace: [ 30.005214][ T390] [ 30.008186][ T390] ? do_syscall_64+0x57/0xf0 [ 30.012793][ T390] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.017808][ T310] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 30.018900][ T390] kasan_save_track+0x4f/0x80 [ 30.031352][ T390] ? kasan_save_track+0x3e/0x80 [ 30.036225][ T390] ? kasan_save_free_info+0x44/0x50 [ 30.041492][ T390] ? __kasan_slab_free+0x5f/0x80 [ 30.046458][ T390] ? kfree+0x158/0x440 [ 30.050579][ T390] ? gadget_info_attr_release+0xcb/0x130 [ 30.056223][ T390] ? config_item_put+0x175/0x240 [ 30.061197][ T390] ? configfs_rmdir+0x8e8/0x9b0 [ 30.066067][ T390] ? vfs_rmdir+0x3de/0x560 [ 30.070549][ T390] ? do_rmdir+0x29a/0x590 [ 30.074894][ T390] ? __x64_sys_rmdir+0x4b/0x60 [ 30.079703][ T390] ? x64_sys_call+0xaf7/0x2ee0 [ 30.084475][ T390] ? do_syscall_64+0x57/0xf0 [ 30.089101][ T390] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.095194][ T390] kasan_save_free_info+0x44/0x50 [ 30.100259][ T390] __kasan_slab_free+0x5f/0x80 [ 30.105046][ T390] kfree+0x158/0x440 [ 30.108974][ T390] ? gadget_info_attr_release+0xcb/0x130 [ 30.114623][ T390] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 30.120730][ T390] gadget_info_attr_release+0xcb/0x130 [ 30.126202][ T390] config_item_put+0x175/0x240 [ 30.131030][ T390] ? __cfi_gadgets_drop+0x10/0x10 [ 30.136066][ T390] configfs_rmdir+0x8e8/0x9b0 [ 30.140790][ T390] vfs_rmdir+0x3de/0x560 [ 30.145042][ T390] do_rmdir+0x29a/0x590 [ 30.149236][ T390] ? __cfi_do_rmdir+0x10/0x10 [ 30.153932][ T390] ? __kasan_check_write+0x18/0x20 [ 30.159093][ T390] __x64_sys_rmdir+0x4b/0x60 [ 30.163702][ T390] x64_sys_call+0xaf7/0x2ee0 [ 30.168314][ T390] do_syscall_64+0x57/0xf0 [ 30.172743][ T390] ? clear_bhb_loop+0x50/0xa0 [ 30.177433][ T390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.183382][ T390] RIP: 0033:0x7f8fb159e159 [ 30.187850][ T390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.207500][ T390] RSP: 002b:00007f8fb23c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 30.215965][ T390] RAX: ffffffffffffffda RBX: 00007f8fb1825fa0 RCX: 00007f8fb159e159 [ 30.223993][ T390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 30.232006][ T390] RBP: 00007f8fb163506b R08: 0000000000000000 R09: 0000000000000000 [ 30.240017][ T390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.248035][ T390] R13: 00007f8fb1826038 R14: 00007f8fb1825fa0 R15: 00007ffce6394238 [ 30.256028][ T390] [ 30.259074][ T390] ---[ end trace 0000000000000000 ]--- [ 30.285885][ T320] usb 4-1: USB disconnect, device number 6 [ 30.299652][ T390] BUG: scheduling while atomic: syz.1.28/390/0x00000000 [ 30.325933][ T390] Modules linked in: [ 30.331218][ [ 30.331218][ T390] CPU: 0 UID: 0 PID: 390 Comm: syz.1.28 Tainted: G W syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 30.331254][ T390] Tainted: [W]=WARN [ 30.331260][ T390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.331272][ T390] Call Trace: [ 30.331279][ T390] [ 30.331287][ T390] __dump_stack+0x21/0x30 [ 30.331318][ T390] dump_stack_lvl+0x140/0x1c0 [ 30.331344][ T390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.331369][ T390] ? kernel_text_address+0xa9/0xe0 [ 30.331404][ T390] dump_stack+0x19/0x20 [ 30.331428][ T390] __schedule_bug+0x12b/0x200 [ 30.331450][ T390] ? find_proxy_task+0x2460/0x2460 [ 30.331471][ T390] ? is_bpf_text_address+0x17b/0x1a0 [ 30.331500][ T390] __schedule+0xb85/0x20b0 [ 30.331522][ T390] ? __kernel_text_address+0x11/0x40 [ 30.331547][ T390] ? plist_check_list+0x2a1/0x2c0 [ 30.331569][ T390] ? __sched_text_start+0x10/0x10 [ 30.331589][ T390] ? plist_add+0x4d4/0x570 [ 30.331609][ T390] ? __futex_queue+0x19f/0x350 [ 30.331634][ T390] ? __cfi___futex_queue+0x10/0x10 [ 30.331658][ T390] schedule+0xc5/0x240 [ 30.331678][ T390] futex_wait_queue+0xfc/0x240 [ 30.331697][ T390] __futex_wait+0x15b/0x3d0 [ 30.331715][ T390] ? __cfi___futex_wait+0x10/0x10 [ 30.331734][ T390] ? __cfi_futex_wake_mark+0x10/0x10 [ 30.331753][ T390] ? __kasan_check_read+0x15/0x20 [ 30.331773][ T390] ? futex_wake+0x627/0x950 [ 30.331791][ T390] futex_wait+0x128/0x7c0 [ 30.331809][ T390] ? __cfi_futex_wait+0x10/0x10 [ 30.331830][ T390] do_futex+0x32a/0x510 [ 30.331854][ T390] ? __cfi_do_futex+0x10/0x10 [ 30.331878][ T390] ? __kasan_slab_free+0x6a/0x80 [ 30.331900][ T390] ? kmem_cache_free+0x1bd/0x4f0 [ 30.331922][ T390] __se_sys_futex+0x13c/0x320 [ 30.331946][ T390] ? putname+0x113/0x150 [ 30.331967][ T390] ? __x64_sys_futex+0x110/0x110 [ 30.331993][ T390] __x64_sys_futex+0xe9/0x110 [ 30.332017][ T390] x64_sys_call+0x227f/0x2ee0 [ 30.332035][ T390] do_syscall_64+0x57/0xf0 [ 30.332054][ T390] ? clear_bhb_loop+0x50/0xa0 [ 30.332079][ T390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.332103][ T390] RIP: 0033:0x7f8fb159e159 [ 30.332120][ T390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.332136][ T390] RSP: 002b:00007f8fb23c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 30.332157][ T390] RAX: ffffffffffffffda RBX: 00007f8fb1825fa8 RCX: 00007f8fb159e159 [ 30.332174][ T390] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8fb1825fa8 [ 30.332187][ T390] RBP: 00007f8fb1825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 30.332200][ T390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.332212][ T390] R13: 00007f8fb1826038 R14: 00007ffce6394150 R15: 00007ffce6394238 [ 30.332228][ T390] [ 30.332309][ T390] psi: inconsistent task state! task=389:syz.1.28 cpu=1 psi_flags=14 clear=0 set=10 [ 30.332330][ T389] ================================================================== [ 30.332404][ T389] Oops: general protection fault, probably for non-canonical address 0x3fffea30405020c3: 0000 [#1] PREEMPT SMP KASAN PTI [ 30.332435][ T389] CPU: 0 UID: 0 PID: 389 Comm: syz.1.28 Tainted: G W syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 30.332464][ T389] Tainted: [W]=WARN [ 30.332470][ T389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.332481][ T389] RIP: 0010:__schedule+0xfffffffffb9 [ 30.332532][ T389] Oops: general protection fault, maybe for address 0xffffffff88bbb46f: 0000 [#2] PREEMPT SMP KASAN PTI [ 30.332552][ T389] CPU: 1 UID: 0 PID: 389 Comm: syz.1.28 Tainted: G D W syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 30.332575][ T389] Tainted: [D]=DIE, [W]=WARN [ 30.332580][ T389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.332588][ T389] RIP: 0010:pointer+0xccf/0xe10 [ 30.332603][ T389] Code: 43 c7 44 26 08 00 00 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 75 2f 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc cc 44 89 e9 80 e1 07 38 c1 0f 8c bd f3 ff ff 4c 89 [ 30.332616][ T389] RSP: 0000:ffffc9000b8bec48 EFLAGS: 00010046 [ 30.332629][ T389] RAX: ffffffff88bbb46f RBX: 0000000000000000 RCX: 1c4ba7686c591000 [ 30.332640][ T389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: fffff52001717d5c [ 30.332650][ T389] RBP: ffffc9000b8bf0be R08: 0000000000000004 R09: 0000000000000004 [ 30.332660][ T389] R10: fffff52001717cf4 R11: fffff52001717c83 R12: ffffc9000b8bece0 [ 30.332671][ T389] R13: ffffc9000b8bec50 R14: ffffffff81e063d9 R15: 00000000ffff1020 [ 30.332682][ T389] FS: 000055556337a500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.332696][ T389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.332707][ T389] CR2: 000000110c3432dd CR3: 0000000115920000 CR4: 00000000003526b0 [ 30.332720][ T389] Call Trace: [ 30.332725][ T389] [ 30.332731][ T389] ? number+0xc9d/0xf00 [ 30.332746][ T389] ? pointer+0xe10/0xe10 [ 30.332759][ T389] ? format_decode+0x1093/0x1610 [ 30.332774][ T389] ? vsnprintf+0x19ef/0x1ad0 [ 30.332788][ T389] ? sprintf+0xe8/0x140 [ 30.332802][ T389] ? __cfi_sprintf+0x10/0x10 [ 30.332815][ T389] ? __schedule+0x211/0x20b0 [ 30.332831][ T389] ? kallsyms_lookup_buildid+0x628/0x7a0 [ 30.332850][ T389] ? __schedule+0x211/0x20b0 [ 30.332865][ T389] ? __sprint_symbol+0x20c/0x300 [ 30.332882][ T389] ? kallsyms_lookup_buildid+0x628/0x7a0 [ 30.332907][ T389] ? sprint_symbol+0x50/0x50 [ 30.332924][ T389] ? __sprint_symbol+0x20c/0x300 [ 30.332940][ T389] ? asm_exc_general_protection+0x2b/0x30 [ 30.332960][ T389] ? widen_string+0x41/0x2e0 [ 30.332974][ T389] ? __asan_set_shadow_00+0x12/0x20 [ 30.332995][ T389] ? symbol_string+0x359/0x3f0 [ 30.333010][ T389] ? move_right+0xb0/0xb0 [ 30.333031][ T389] ? __kasan_check_write+0x18/0x20 [ 30.333045][ T389] ? data_alloc+0x490/0x790 [ 30.333062][ T389] ? __asan_memset+0x39/0x50 [ 30.333077][ T389] ? pointer+0x7c2/0xe10 [ 30.333090][ T389] ? __schedule+0x211/0x20b0 [ 30.333105][ T389] ? string+0x2b0/0x2b0 [ 30.333118][ T389] ? __kasan_check_write+0x18/0x20 [ 30.333133][ T389] ? _prb_commit+0x206/0x2b0 [ 30.333148][ T389] ? prb_reserve+0x1190/0x1190 [ 30.333164][ T389] ? vsnprintf+0x1a15/0x1ad0 [ 30.333178][ T389] ? __kasan_check_read+0x15/0x20 [ 30.333193][ T389] ? prb_commit+0xfa/0x2a0 [ 30.333208][ T389] ? __cfi_prb_commit+0x10/0x10 [ 30.333223][ T389] ? vscnprintf+0x7f/0x90 [ 30.333236][ T389] ? printk_sprint+0x2a5/0x3e0 [ 30.333255][ T389] ? vprintk_store+0xa3e/0x10c0 [ 30.333273][ T389] ? __kasan_check_read+0x15/0x20 [ 30.333288][ T389] ? vprintk_emit+0x3ea/0x650 [ 30.333306][ T389] ? __cfi_vprintk_emit+0x10/0x10 [ 30.333325][ T389] ? __kasan_check_read+0x15/0x20 [ 30.333340][ T389] ? vprintk_emit+0x3ea/0x650 [ 30.333357][ T389] ? __cfi_vprintk_emit+0x10/0x10 [ 30.333376][ T389] ? __kasan_check_read+0x15/0x20 [ 30.333390][ T389] ? vprintk_emit+0x3ea/0x650 [ 30.333409][ T389] ? __cfi_vprintk_emit+0x10/0x10 [ 30.333427][ T389] ? _printk+0xde/0x140 [ 30.333446][ T389] ? vprintk_default+0x2a/0x40 [ 30.333463][ T389] ? vprintk+0x93/0xa0 [ 30.333476][ T389] ? _printk+0xde/0x140 [ 30.333493][ T389] ? panic_smp_self_stop+0xd/0x50 [ 30.333514][ T389] ? panic+0x6ec/0x710 [ 30.333530][ T389] ? __cfi_panic+0x10/0x10 [ 30.333547][ T389] ? oops_end+0xd5/0xf0 [ 30.333561][ T389] ? die_addr+0x65/0x90 [ 30.333576][ T389] ? exc_general_protection+0x13e/0x1e0 [ 30.333595][ T389] ? asm_exc_general_protection+0x2b/0x30 [ 30.333614][ T389] ? __schedule+0x211/0x20b0 [ 30.333629][ T389] ? lock_vma_under_rcu+0x4cf/0x590 [ 30.333649][ T389] ? __sched_text_start+0x10/0x10 [ 30.333666][ T389] ? __kasan_check_write+0x18/0x20 [ 30.333681][ T389] ? do_user_addr_fault+0xbf5/0x1230 [ 30.333695][ T389] ? schedule+0xc5/0x240 [ 30.333711][ T389] ? irqentry_exit_to_user_mode+0x6a/0xb0 [ 30.333731][ T389] ? irqentry_exit+0x16/0x60 [ 30.333750][ T389] ? sysvec_reschedule_ipi+0x72/0x80 [ 30.333768][ T389] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 30.333786][ T389] ? serial8250_console_write+0x1504/0x2150 [ 30.333805][ T389] ? serial8250_console_write+0x1504/0x2150 [ 30.333824][ T389] ? serial8250_console_write+0x1504/0x2150 [ 30.333842][ T389] ? serial8250_console_write+0x1504/0x2150 [ 30.333860][ T389] [ 30.333865][ T389] Modules linked in: [ 30.333872][ T389] ---[ end trace 0000000000000000 ]--- [ 30.333879][ T389] RIP: 0010:__schedule+0x211/0x20b0 [ 30.333900][ T389] Code: fb 65 ff 05 59 d9 5e 7a 4c 8b 7c 24 10 4c 89 ff e8 34 79 01 00 65 ff 0d 45 d9 5e 7a 4d 8d b7 38 0c 00 00 4c 89 f3 48 c1 eb 03 <42> 0f b6 04 2b 84 c0 0f 85 7d 14 00 00 41 d1 a7 38 0c 00 00 4c 89 [ 30.333912][ T389] RSP: 0018:ffffc9000b8bfce0 EFLAGS: 00010806 [ 30.333924][ T389] RAX: ffff888120720000 RBX: 1ffff1103edea10f RCX: ffff88811cfe9300 [ 30.333935][ T389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.333944][ T389] RBP: ffffc9000b8bfeb8 R08: ffff88811cfe9307 R09: 1ffff110239fd260 [ 30.333956][ T389] R10: dffffc0000000000 R11: ffffed10239fd261 R12: ffffc9000b8b8000 [ 30.333967][ T389] R13: 1ffff92001717fb4 R14: ffff8881f6f50878 R15: ffff8881f6f4fc40 [ 30.333978][ T389] FS: 000055556337a500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.333991][ T389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.334002][ T389] CR2: 000000110c3432dd CR3: 0000000115920000 CR4: 00000000003526b0 [ 30.334016][ T389] Kernel panic - not syncing: Fatal exception [ 31.398140][ T389] Shutting down cpus with NMI [ 31.398389][ T389] Kernel Offset: disabled