last executing test programs: 2.161781545s ago: executing program 2 (id=41): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x1, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f00000000c0), 0x8) sendmmsg$sock(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)="643f0e91", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x14, 0x1, 0x3d, 0x3}}], 0x14}}], 0x1, 0x40) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000140)={0x5e, @remote, 0x4e20, 0x4, 'wlc\x00', 0x8, 0x6, 0x26}, 0x2c) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendto$packet(r3, &(0x7f00000001c0)="05", 0x4b, 0x40450d1, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x85, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000000)="f1e689b8eae91c6cd5dd26fe4e39ddc425140e9783b2", 0x16, 0x10, &(0x7f0000000040)={0x11, 0xa, r5, 0x1, 0x1, 0x6, @local}, 0x14) connect$can_bcm(r0, &(0x7f00000005c0), 0x6) 2.127337686s ago: executing program 2 (id=42): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0xfff, @empty, 0x10000}}}, 0x32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(r3, 0x111, 0x4, 0x0, &(0x7f0000000540)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000080)={0x40000, 0x2000, 0xfffffff9, 0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d, 0xfffffffc}) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee01) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lstat(&(0x7f0000000180)='./file0\x00', 0x0) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x0, 0x400, 0x1, 0x257, 0x0, r12}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffff, 0x8, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x37b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x6e0, 0x5, 0xc5}}], 0x1, &(0x7f0000000340)={0x2e, 0x7, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0xb, 0x0, 0x0, 0x500, 0x0, 0x4d30356}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000003c0)={0x6, 0x0, 0x5, 0x0, 0x11}) 2.070882528s ago: executing program 2 (id=44): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) pread64(0xffffffffffffffff, 0x0, 0x0, 0xb01f000000000000) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) 2.063604948s ago: executing program 2 (id=45): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) bind$bt_hci(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) r2 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r2, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000), 0x8c03, &(0x7f0000000100)=ANY=[@ANYBLOB='hug[=ad\x00\x00se,\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) openat(r6, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000, 0x160) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x1000) fcntl$getownex(r5, 0x10, &(0x7f0000000180)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_TDX_GET_CPUID(r5, 0xc008aeba, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff1000) ioctl$KVM_RUN(r5, 0xae80, 0x0) pwrite64(r2, &(0x7f0000000040)="0ab577124d", 0x5, 0x2) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.928282321s ago: executing program 2 (id=46): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x142ba3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2b502000083215c9adcc1bad0099cebdc25f5ab60c9e698c8b534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2c1504d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xbf3) 1.870718102s ago: executing program 2 (id=48): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read(r0, &(0x7f0000000200)=""/9, 0x9) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x15, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x4}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100c}}, {0xca, &(0x7f0000000280)=@string={0xca, 0x3, "65ba4dcd5d2d682a8a0b0b7e9b338f8f1b611c3499be508b0d0384197589ba37fe51d98622c4f9bd69d03923cedd43834e13b211c2c2f2b548aef2d4953c59867af2459d72c99debd35dd78e59c133f1066469beae6626fe45361b7f5879b744566e36d5920d2c38e1cd70898d6f6823ea044204ec8bee06d7682726dd5af47e402120221417d11c97b119b8e6fcd0e4dc38f147f50116449242bab4b5ffa5c94db74ad0e9e5950c4b12984eb733fae555c786a725353ce706047e3154df09e60b84b5f615eef5dd"}}]}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0135c85ca000001000130700000000fc8daed97b539b637a0000000000000000000000ac1414bb000000000000000000000000ffff00004e2100020a000000d9a08f47483c5a6db256d20f3e8eb9df038c4a21c6256ca0687184d38629c62af585abccbaed1d4c9345", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000b00000000000000ffffff7f00000000430500000000000004000200000000000200000000000080000000000000000000000000000000000200000000000000000000002bbd7000003500000a00040050000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.835185113s ago: executing program 1 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x14, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0xa9}]}, 0x14}], 0x1, 0x0, 0x0, 0x24040015}, 0x20040010) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0x20000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @remote}, &(0x7f0000000100)=0x8) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000033865b3c887ac758edeee75001f0202002cbd7000fcdbdf25e0000002000000000000000000000000000004d60a006c00fe880000000000000000000000000001ff0000000035000015e2dd3427921de0ae4f162ec054a119920efdaa9d911f7ac04d827f13862ed47a54c0cab4bc7ff966dac4f5bf0c69"], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) 1.662908798s ago: executing program 0 (id=51): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0xfffff7fb}], 0x2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x340}}], 0x1, 0x810) socket$nl_xfrm(0x10, 0x3, 0x6) 1.418880484s ago: executing program 3 (id=54): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000480)={0x1, 0x0, [{0x80000021, 0x4, 0xc, 0xb653, 0x97d, 0x5, 0x100}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1.402665385s ago: executing program 3 (id=55): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) 1.392705914s ago: executing program 3 (id=56): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$binder(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20000, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x3000082, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dfltgid=', @ANYRESHEX]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000847000/0x400000)=nil) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 1.302589437s ago: executing program 3 (id=57): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x82100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x13a) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x140) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x80000001, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f00000007c0)={0xa, 0x0, [{0xd, 0x1, 0x4, 0x3, 0xe4a, 0x9, 0x1ff}, {0xc0000001, 0x7fffffff, 0x0, 0x9, 0x4, 0x1}, {0x6, 0x17c5, 0x0, 0x7, 0xa, 0xfffffc00, 0xffffffff}, {0x1, 0x4, 0x5, 0x1, 0x5, 0x8, 0x28a}, {0x80000000, 0x10001, 0x5, 0x76c64d7c, 0x3, 0xc2, 0xc3}, {0xd, 0x7, 0x1, 0x3764f7ae, 0xfff, 0x7, 0x7fff}, {0x40000000, 0x1000, 0x4, 0xe9b, 0x9119, 0x4, 0x8}, {0x4, 0x60000, 0x4, 0x0, 0xf6b5, 0x7, 0x5}, {0xc0000001, 0x9, 0x7, 0x2, 0xc47, 0x1, 0x1ff}, {0x40000006, 0x7, 0x4, 0xf, 0x1, 0x25e}]}) fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) close(0x3) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x40) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x20000, 0xffffff}]}) 1.298857427s ago: executing program 3 (id=58): r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002ac0)=[{{}, 0x1012}, {{0x0, 0x0, 0x0}, 0x2be5}], 0x40000000000009a, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000001c0)={0x7, 0x38d, 0xffff7fff, 0x5}, 0x10) 1.296930597s ago: executing program 0 (id=59): r0 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x60840, 0xa) getxattr(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)=@known='system.sockprotoname\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) 1.272126248s ago: executing program 0 (id=60): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trand=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.20678885s ago: executing program 3 (id=61): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xffffffff, 0x158}, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x80402, 0x12) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_ublk_setup_queues(r4, r9, &(0x7f0000000400)={0x0, 0x7058, 0x80, 0x3, 0x80343}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x800, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r8, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) 1.19899533s ago: executing program 32 (id=61): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xffffffff, 0x158}, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x80402, 0x12) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_ublk_setup_queues(r4, r9, &(0x7f0000000400)={0x0, 0x7058, 0x80, 0x3, 0x80343}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x800, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r8, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) 1.19699309s ago: executing program 0 (id=63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) (async, rerun: 64) r3 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) (rerun: 64) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) (async) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f0000000200)={{r0}, "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"}) (async, rerun: 64) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x292, 0x0, 0xfffffffffffff}, {0xbfb, 0x0, 0x80000000}]}) (rerun: 64) 906.709027ms ago: executing program 1 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc9) (fail_nth: 1) 854.801598ms ago: executing program 0 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40480, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f00000008c0)={0x2, 0x4f22, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34, 0x7}}], 0x18}, 0x240040c4) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00030500ba3fbe613fe33a7b0000800c0000000d007f0000015cd4"], 0x28}], 0x1}, 0x14008010) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x55, 0x0, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x1}], 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xb0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000180)={{0x0, 0x2, 0x3, 0x3, 0x1}}) 595.585995ms ago: executing program 1 (id=66): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = gettid() sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x7b1c052) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x8) write$binfmt_aout(r5, 0x0, 0x6a) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='`', 0x1}], 0x1, 0x1) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000400)=""/124, 0x7c}], 0x1) rt_sigqueueinfo(r3, 0x8, &(0x7f0000000000)={0x35, 0x9, 0x8}) read(r2, &(0x7f0000001740)=""/245, 0xf5) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$RNDZAPENTCNT(r6, 0x5204, &(0x7f0000000080)=0x9) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) pwrite64(r7, &(0x7f00000002c0)="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", 0x1000, 0x24) write$bt_hci(r7, 0x0, 0xe) unshare(0x22020600) write$uinput_user_dev(r2, &(0x7f00000012c0)={'syz0\x00', {0x6, 0x40, 0x9, 0x9}, 0x3b, [0x4, 0xe, 0x3, 0xfffffffb, 0x2, 0x9, 0x7, 0x3, 0x6, 0x800, 0x1, 0x400, 0x7, 0x3, 0x4, 0x9, 0x578c, 0xffff, 0x5, 0x7, 0x5, 0x1, 0x80000001, 0xc, 0x40, 0x0, 0x7, 0x8, 0x1, 0x21000, 0x8, 0xb964, 0x3, 0x1, 0xcf, 0x3, 0x5, 0x5, 0x2, 0x9, 0x3, 0x9, 0x7, 0x401, 0x1, 0xaa, 0x6, 0x3, 0xfffffff8, 0x0, 0x9, 0xe7, 0x4, 0x8, 0xe, 0x1, 0xffff, 0x7fffffff, 0x80000000, 0x9, 0x5, 0xfffffffc, 0xc99d, 0x7], [0x3fff800, 0x880000, 0x1, 0x5e4, 0x80, 0x0, 0x4, 0x7, 0x2, 0xb356, 0x400, 0xa, 0x6c6, 0x5, 0xfffffffb, 0x4, 0x731, 0x49d27805, 0x2, 0xfffffffe, 0x7, 0x1, 0x6, 0x5, 0x5, 0x2, 0x2, 0x66b, 0x5, 0x28, 0xe76b, 0x2, 0x2, 0x4, 0xe, 0xec2a, 0x401, 0x7, 0x9, 0x773, 0x3, 0x1, 0x8, 0xa2000000, 0xc, 0x4, 0x8, 0x8, 0x9, 0xffff, 0x6, 0x5, 0x9, 0x8, 0x5040f402, 0x80000001, 0x10, 0x3b1c, 0x3, 0x80000, 0xa3, 0x6, 0x0, 0x7fffffff], [0x8f0, 0x7, 0x7fffffff, 0x26a7, 0x3, 0x4, 0xffffffff, 0x2, 0x7, 0x8, 0xf1d8, 0x80000001, 0x9, 0x3, 0x0, 0x7, 0x14, 0x1, 0x7, 0x5d18, 0x400, 0x0, 0x4, 0x9, 0xb73, 0x40, 0x72ea, 0xcf, 0x400, 0x4, 0xa, 0x2, 0x1ff, 0x4, 0x5, 0x11, 0x9, 0x321, 0x1, 0x5, 0x9, 0x9, 0x8001, 0x3, 0x6, 0xf, 0x3, 0xfffffffe, 0x200, 0x8001, 0x300, 0x4b0f, 0xfff, 0x9, 0x9, 0x1, 0x7, 0x52, 0xc, 0x6, 0x2f4634e2, 0x9, 0xc19a, 0xffff], [0x7f, 0x4, 0x7, 0x4, 0xffffffff, 0xb, 0x8001, 0x7, 0x7, 0x1000, 0x4, 0xb, 0x2, 0x3, 0x80000000, 0x3, 0x2, 0x8, 0x5, 0x77, 0xc54, 0x0, 0x200, 0x1, 0x7, 0x7, 0x101, 0x7, 0x0, 0x5, 0x1, 0x10000, 0x4, 0x6, 0x8729, 0x401, 0x4, 0x3, 0x839, 0x0, 0x6, 0x8, 0x5, 0xfffffff8, 0x7c, 0x400, 0x1, 0x20000000, 0x8, 0x200, 0x3ff, 0xf, 0x7ff, 0xfffffff3, 0x7, 0x0, 0xcb1, 0x2, 0xfffffff7, 0x81, 0x5, 0xffffffff, 0xf22, 0xc4]}, 0x45c) r8 = openat$incfs(r6, &(0x7f0000000a40)='.log\x00', 0xb0d42, 0x0) ioctl$FICLONE(r8, 0x40049409, r2) read$rfkill(r6, &(0x7f0000000100), 0x8) 435.733049ms ago: executing program 0 (id=67): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000040)=0x5f5e0f6, 0x4) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0xfde7) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000000c0)=0x8, 0x4) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220100"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fffffffffffffff, 0x2020) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 429.783389ms ago: executing program 4 (id=62): unshare(0x60000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="080086dd000128f504000003a60c6ed400be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001"], 0xfdef) 274.882873ms ago: executing program 4 (id=68): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 145.959497ms ago: executing program 1 (id=69): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0) io_setup(0x2, &(0x7f0000000a00)=0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000000)={0x0, 0x0, 0x22, 0x8, 0x4, r0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, r0}]) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 13.2907ms ago: executing program 1 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') 0s ago: executing program 1 (id=71): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x9c1202) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401", @ANYBLOB="65dd4adc3a89b77dbb8bc069551fdacc5c8f4ec66dff6c01cfeae98ccf4dce86ff4c66159172a6ec0911bb84d0905e0a15806111c613862fbaa597b1744a43bfeb544719211689265758e0c4ef9d95bc1761c00e29af70b2542aabc3e2ff3fd03b7932be293710f2adb3f19ef7aec116bca8b9d6b1e45bdf2a20f1e83c48c42354a3d099938836a1f3c80ede668a4b21b85d491d7daa98aba545f4b0dff19f880340ac27379495ef3bb8b66ae92f26b5e5bcbd0e45c43814057186b8089900ad8c"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001200), 0x10) close(r3) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000080)={'c', ' *:* ', 'wm\x00'}, 0x9) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 28.575364][ T36] audit: type=1400 audit(1781861019.159:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.576386][ T286] cgroup: Unknown subsys name 'net' [ 28.598003][ T36] audit: type=1400 audit(1781861019.159:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.625371][ T36] audit: type=1400 audit(1781861019.199:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.625545][ T286] cgroup: Unknown subsys name 'devices' [ 28.750985][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.756614][ T286] cgroup: Unknown subsys name 'rlimit' [ 28.848458][ T36] audit: type=1400 audit(1781861019.429:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.871632][ T36] audit: type=1400 audit(1781861019.429:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.896385][ T36] audit: type=1400 audit(1781861019.429:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.904851][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.928238][ T36] audit: type=1400 audit(1781861019.509:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.953700][ T36] audit: type=1400 audit(1781861019.509:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.988648][ T36] audit: type=1400 audit(1781861019.569:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.014313][ T36] audit: type=1400 audit(1781861019.569:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.014514][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.718523][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.737571][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.744967][ T293] bridge_slave_0: entered allmulticast mode [ 29.751634][ T293] bridge_slave_0: entered promiscuous mode [ 29.758787][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.765900][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.772994][ T293] bridge_slave_1: entered allmulticast mode [ 29.779308][ T293] bridge_slave_1: entered promiscuous mode [ 29.880664][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.887726][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.895008][ T298] bridge_slave_0: entered allmulticast mode [ 29.901322][ T298] bridge_slave_0: entered promiscuous mode [ 29.909177][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.916209][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.923277][ T298] bridge_slave_1: entered allmulticast mode [ 29.929555][ T298] bridge_slave_1: entered promiscuous mode [ 30.003214][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.010284][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.017552][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.024581][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.038731][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.045828][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.052945][ T299] bridge_slave_0: entered allmulticast mode [ 30.059419][ T299] bridge_slave_0: entered promiscuous mode [ 30.067214][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.074395][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.081471][ T299] bridge_slave_1: entered allmulticast mode [ 30.087604][ T299] bridge_slave_1: entered promiscuous mode [ 30.093631][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.100908][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.107946][ T297] bridge_slave_0: entered allmulticast mode [ 30.114177][ T297] bridge_slave_0: entered promiscuous mode [ 30.120604][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.127632][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.134753][ T297] bridge_slave_1: entered allmulticast mode [ 30.141044][ T297] bridge_slave_1: entered promiscuous mode [ 30.204050][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.211120][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.218338][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.225365][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.269607][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.276839][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.284412][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.291584][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.311540][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.318592][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.333198][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.340265][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.378308][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.385402][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.393077][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.400131][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.430775][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.437829][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.445857][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.452902][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.460724][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.467742][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.484229][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.491298][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.505288][ T293] veth0_vlan: entered promiscuous mode [ 30.525488][ T298] veth0_vlan: entered promiscuous mode [ 30.540696][ T293] veth1_macvtap: entered promiscuous mode [ 30.559591][ T298] veth1_macvtap: entered promiscuous mode [ 30.581907][ T299] veth0_vlan: entered promiscuous mode [ 30.590693][ T297] veth0_vlan: entered promiscuous mode [ 30.614423][ T299] veth1_macvtap: entered promiscuous mode [ 30.623626][ T297] veth1_macvtap: entered promiscuous mode [ 30.631181][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.707594][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.745417][ T324] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5'. [ 30.776025][ T328] overlayfs: workdir and upperdir must be separate subtrees [ 30.807995][ T330] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.808723][ T326] netlink: 679 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.969177][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.120433][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.128922][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.139209][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.148167][ T10] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 31.159493][ T10] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 31.172960][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 31.183880][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 31.192636][ T10] usb 4-1: string descriptor 0 read error: -22 [ 31.199187][ T10] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 31.208208][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.765405][ T367] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 32.027514][ T319] Zero length message leads to an empty skb [ 32.034780][ T10] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 32.048097][ T10] usb 4-1: USB disconnect, device number 2 [ 32.432093][ T378] netlink: 316 bytes leftover after parsing attributes in process `syz.2.25'. [ 32.441382][ T378] netlink: 316 bytes leftover after parsing attributes in process `syz.2.25'. [ 32.562057][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.581630][ T385] netlink: 44 bytes leftover after parsing attributes in process `syz.3.27'. [ 32.590604][ T385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 32.599451][ T385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27'. [ 32.739084][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 32.745632][ T31] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 32.753986][ T31] usb 1-1: config 0 has no interface number 0 [ 32.760328][ T31] usb 1-1: too many endpoints for config 0 interface 52 altsetting 10: 254, using maximum allowed: 30 [ 32.771729][ T31] usb 1-1: config 0 interface 52 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.783008][ T31] usb 1-1: config 0 interface 52 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 32.796270][ T31] usb 1-1: config 0 interface 52 has no altsetting 0 [ 32.803061][ T31] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 32.812338][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.821013][ T31] usb 1-1: config 0 descriptor?? [ 33.280430][ T31] usbhid 1-1:0.52: can't add hid device: -71 [ 33.286485][ T31] usbhid 1-1:0.52: probe with driver usbhid failed with error -71 [ 33.295303][ T31] usb 1-1: USB disconnect, device number 2 [ 33.363883][ T399] overlayfs: upper fs does not support file handles, falling back to index=off. [ 33.373163][ T399] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 33.384505][ T399] fuse: Bad value for 'rootmode' [ 33.638914][ T355] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.668925][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.788886][ T355] usb 4-1: Using ep0 maxpacket: 16 [ 33.795947][ T355] usb 4-1: config 2 has an invalid interface number: 238 but max is 0 [ 33.807658][ T355] usb 4-1: config 2 has no interface number 0 [ 33.814497][ T355] usb 4-1: config 2 interface 238 has no altsetting 0 [ 33.822780][ T355] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0302, bcdDevice= d.06 [ 33.831855][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 33.837037][ T355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.847820][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7 [ 33.858948][ T355] usb 4-1: Product: syz [ 33.863103][ T355] usb 4-1: Manufacturer: syz [ 33.867683][ T355] usb 4-1: SerialNumber: syz [ 33.874124][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 33.883232][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.891236][ T10] usb 3-1: Product: syz [ 33.895397][ T10] usb 3-1: Manufacturer: syz [ 33.900029][ T10] usb 3-1: SerialNumber: syz [ 34.049253][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.075140][ T417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.083761][ T417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.092858][ T355] cdc_ether 4-1:2.238: More than one union descriptor, skipping ... [ 34.101248][ T355] usb 4-1: bad CDC descriptors [ 34.107738][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.114799][ T355] usb 4-1: USB disconnect, device number 3 [ 34.121801][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 34.132245][ T10] usb 3-1: USB disconnect, device number 2 [ 34.211100][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.228239][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.238390][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.248043][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 34.257123][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.265128][ T31] usb 1-1: SerialNumber: syz [ 34.525794][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 34.525810][ T36] audit: type=1400 audit(1781861025.109:161): avc: denied { setopt } for pid=464 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.593725][ T31] usb 1-1: 0:2 : does not exist [ 34.606162][ T31] usb 1-1: USB disconnect, device number 3 [ 34.623952][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.653239][ T36] audit: type=1400 audit(1781861025.239:162): avc: denied { ioctl } for pid=481 comm="syz.2.41" path="socket:[5127]" dev="sockfs" ino=5127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.678237][ T36] audit: type=1400 audit(1781861025.239:163): avc: denied { write } for pid=481 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.724798][ T488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.725474][ T36] audit: type=1400 audit(1781861025.239:164): avc: denied { write } for pid=481 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.756439][ T36] audit: type=1400 audit(1781861025.239:165): avc: denied { connect } for pid=481 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.776087][ T36] audit: type=1400 audit(1781861025.289:166): avc: denied { getopt } for pid=485 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.796758][ T36] audit: type=1400 audit(1781861025.309:167): avc: denied { connect } for pid=487 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.819526][ T36] audit: type=1400 audit(1781861025.309:168): avc: denied { write } for pid=487 comm="syz.3.43" path="socket:[4439]" dev="sockfs" ino=4439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.842558][ T36] audit: type=1400 audit(1781861025.309:169): avc: denied { read } for pid=487 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.847926][ T492] process 'syz.2.45' launched '/dev/fd/4' with NULL argv: empty string added [ 34.862196][ T36] audit: type=1400 audit(1781861025.329:170): avc: denied { getopt } for pid=487 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.052487][ T503] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14339 sclass=netlink_xfrm_socket pid=503 comm=syz.1.49 [ 35.107035][ T508] netlink: 104 bytes leftover after parsing attributes in process `syz.0.50'. [ 35.265591][ T516] syzkaller0: entered promiscuous mode [ 35.271123][ T516] syzkaller0: entered allmulticast mode [ 35.278284][ T516] tipc: Started in network mode [ 35.283222][ T516] tipc: Node identity d694b1252e2c, cluster identity 4711 [ 35.291477][ T516] tipc: Enabled bearer , priority 0 [ 35.298630][ T515] tipc: Resetting bearer [ 35.305289][ T515] tipc: Disabling bearer [ 35.358933][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.481125][ T524] ======================================================= [ 35.481125][ T524] WARNING: The mand mount option has been deprecated and [ 35.481125][ T524] and is ignored by this kernel. Remove the mand [ 35.481125][ T524] option from the mount to silence this warning. [ 35.481125][ T524] ======================================================= [ 35.516636][ T311] usb 3-1: device descriptor read/64, error -71 [ 35.539998][ T526] capability: warning: `syz.0.59' uses 32-bit capabilities (legacy support in use) [ 35.576989][ T431] bridge_slave_1: left allmulticast mode [ 35.583040][ T431] bridge_slave_1: left promiscuous mode [ 35.588732][ T431] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.596605][ T431] bridge_slave_0: left allmulticast mode [ 35.602569][ T431] bridge_slave_0: left promiscuous mode [ 35.608257][ T431] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.651570][ T531] loop9: detected capacity change from 0 to 7 [ 35.658622][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.667780][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.676678][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.685838][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.693843][ T376] loop9: unable to read partition table [ 35.702092][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.711274][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.719309][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.728472][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.736464][ T531] loop9: unable to read partition table [ 35.745547][ T531] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 35.753997][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.758932][ T311] usb 3-1: device descriptor read/64, error -71 [ 35.763156][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.778568][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.787729][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.797119][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.798860][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.804224][ T534] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.813261][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.814354][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.822252][ T534] bridge_slave_0: entered allmulticast mode [ 35.828501][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.837988][ T534] bridge_slave_0: entered promiscuous mode [ 35.851578][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.857880][ T534] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.866196][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.873255][ T534] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.888368][ T534] bridge_slave_1: entered allmulticast mode [ 35.895000][ T534] bridge_slave_1: entered promiscuous mode [ 35.901384][ T431] tipc: Left network mode [ 35.907867][ T431] veth1_macvtap: left promiscuous mode [ 35.913443][ T431] veth0_vlan: left promiscuous mode [ 35.945879][ T539] FAULT_INJECTION: forcing a failure. [ 35.945879][ T539] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.962627][ T539] CPU: 0 UID: 0 PID: 539 Comm: syz.1.64 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 35.962660][ T539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.962678][ T539] Call Trace: [ 35.962684][ T539] [ 35.962691][ T539] __dump_stack+0x21/0x30 [ 35.962726][ T539] dump_stack_lvl+0x140/0x1c0 [ 35.962749][ T539] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.962774][ T539] ? check_stack_object+0x12b/0x150 [ 35.962794][ T539] dump_stack+0x19/0x20 [ 35.962818][ T539] should_fail_ex+0x3d7/0x530 [ 35.962841][ T539] should_fail+0xf/0x20 [ 35.962861][ T539] should_fail_usercopy+0x1e/0x30 [ 35.962885][ T539] _copy_to_user+0x24/0xa0 [ 35.962902][ T539] simple_read_from_buffer+0xed/0x160 [ 35.962928][ T539] proc_fail_nth_read+0x1aa/0x220 [ 35.962954][ T539] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 35.962978][ T539] ? bpf_lsm_file_permission+0xd/0x20 [ 35.963001][ T539] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 35.963023][ T539] vfs_read+0x289/0xcb0 [ 35.963041][ T539] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 35.963059][ T539] ? __cfi_vfs_read+0x10/0x10 [ 35.963076][ T539] ? __kasan_check_write+0x18/0x20 [ 35.963094][ T539] ? mutex_lock+0x97/0x1d0 [ 35.963112][ T539] ? __cfi_mutex_lock+0x10/0x10 [ 35.963130][ T539] ? __fget_files+0x2c5/0x340 [ 35.963152][ T539] ksys_read+0x145/0x260 [ 35.963169][ T539] ? __cfi_ksys_read+0x10/0x10 [ 35.963186][ T539] ? __kasan_check_read+0x15/0x20 [ 35.963203][ T539] __x64_sys_read+0x7f/0x90 [ 35.963222][ T539] x64_sys_call+0x2638/0x2ee0 [ 35.963246][ T539] do_syscall_64+0x57/0xf0 [ 35.963269][ T539] ? clear_bhb_loop+0x50/0xa0 [ 35.963288][ T539] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.963314][ T539] RIP: 0033:0x7f55dc15d68e [ 35.963338][ T539] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 35.963352][ T539] RSP: 002b:00007f55dd08ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.963378][ T539] RAX: ffffffffffffffda RBX: 00007f55dd0906c0 RCX: 00007f55dc15d68e [ 35.963393][ T539] RDX: 000000000000000f RSI: 00007f55dd0900a0 RDI: 0000000000000004 [ 35.963404][ T539] RBP: 00007f55dd090090 R08: 0000000000000000 R09: 0000000000000000 [ 35.963416][ T539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.963428][ T539] R13: 00007f55dc416038 R14: 00007f55dc415fa0 R15: 00007ffcee5182d8 [ 35.963444][ T539] [ 36.222378][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.230414][ T541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 36.267625][ T534] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.274682][ T534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.281945][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.288984][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.345228][ T534] veth0_vlan: entered promiscuous mode [ 36.358445][ T534] veth1_macvtap: entered promiscuous mode [ 36.369146][ T311] usb 3-1: device descriptor read/64, error -71 [ 36.519444][ T553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.528429][ T553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.609033][ T311] usb 3-1: device descriptor read/64, error -71 [ 36.638894][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.718976][ T311] usb usb3-port1: attempt power cycle [ 36.769061][ T355] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 36.778907][ T45] usb 1-1: device descriptor read/64, error -71 [ 36.825891][ T299] ------------[ cut here ]------------ [ 36.831499][ T299] WARNING: CPU: 1 PID: 299 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 36.839439][ T299] Modules linked in: [ 36.843329][ T299] CPU: 1 UID: 0 PID: 299 Comm: syz-executor Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 36.854994][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.865073][ T299] RIP: 0010:drop_nlink+0xce/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 36.870142][ T299] Code: 04 00 00 be 08 00 00 00 e8 6f 06 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 4f 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 36.889846][ T299] RSP: 0018:ffffc9000b6afc60 EFLAGS: 00010293 [ 36.896202][ T299] RAX: ffffffff81f271be RBX: ffff88811ba04070 RCX: ffff8881258f4c00 [ 36.904224][ T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.905806][ T355] usb 5-1: device descriptor read/64, error -71 [ 36.912227][ T299] RBP: ffffc9000b6afc88 R08: 0000000000000003 R09: 0000000000000004 [ 36.912247][ T299] R10: dffffc0000000000 R11: fffff520016d5f7c R12: dffffc0000000000 [ 36.934512][ T299] R13: 1ffff11023740817 R14: ffff88811ba040b8 R15: 0000000000000000 [ 36.942540][ T299] FS: 000055555f4d8500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.951503][ T299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.958095][ T299] CR2: 000055555f4fb958 CR3: 000000012004c000 CR4: 00000000003526b0 [ 36.966110][ T299] Call Trace: [ 36.969442][ T299] [ 36.972374][ T299] shmem_rmdir+0x5f/0x90 [ 36.976630][ T299] vfs_rmdir+0x3e3/0x560 [ 36.980910][ T299] incfs_kill_sb+0x109/0x230 [ 36.985522][ T299] deactivate_locked_super+0xd5/0x2a0 [ 36.990955][ T299] deactivate_super+0xb8/0xe0 [ 36.995646][ T299] cleanup_mnt+0x406/0x4a0 [ 37.000109][ T299] __cleanup_mnt+0x1d/0x40 [ 37.004541][ T299] task_work_run+0x1e5/0x260 [ 37.009198][ T299] ? __cfi_task_work_run+0x10/0x10 [ 37.014317][ T299] ? __x64_sys_umount+0x12e/0x180 [ 37.019381][ T299] ? __cfi___x64_sys_umount+0x10/0x10 [ 37.024758][ T299] ? __kasan_check_read+0x15/0x20 [ 37.029811][ T299] resume_user_mode_work+0x35/0x50 [ 37.034923][ T299] syscall_exit_to_user_mode+0x63/0xb0 [ 37.040401][ T299] do_syscall_64+0x63/0xf0 [ 37.044821][ T299] ? clear_bhb_loop+0x50/0xa0 [ 37.049521][ T299] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.055414][ T299] RIP: 0033:0x7f55dc19e097 [ 37.059840][ T299] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 37.079471][ T299] RSP: 002b:00007ffcee517548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 37.087880][ T299] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f55dc19e097 [ 37.095891][ T299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcee517600 [ 37.103883][ T299] RBP: 00007ffcee517600 R08: 00007ffcee518600 R09: 00000000ffffffff [ 37.111892][ T299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcee518690 [ 37.119886][ T299] R13: 00007f55dc2322ca R14: 0000000000008fbf R15: 00007ffcee5186d0 [ 37.127859][ T299] [ 37.130885][ T299] ---[ end trace 0000000000000000 ]--- [ 37.149005][ T299] ================================================================== [ 37.157130][ T299] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 37.163398][ T299] Write of size 4 at addr 0000000000000168 by task syz-executor/299 [ 37.171392][ T299] [ 37.173703][ T299] CPU: 1 UID: 0 PID: 299 Comm: syz-executor Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 37.173722][ T299] Tainted: [W]=WARN [ 37.173728][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.173740][ T299] Call Trace: [ 37.173746][ T299] [ 37.173754][ T299] __dump_stack+0x21/0x30 [ 37.173782][ T299] dump_stack_lvl+0x140/0x1c0 [ 37.173805][ T299] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.173820][ T299] print_report+0x3d/0x70 [ 37.173833][ T299] kasan_report+0x162/0x1a0 [ 37.173848][ T299] ? ihold+0x24/0x70 [ 37.173860][ T299] ? _raw_spin_unlock+0x45/0x60 [ 37.173880][ T299] ? ihold+0x24/0x70 [ 37.173901][ T299] kasan_check_range+0x25a/0x2b0 [ 37.173924][ T299] __kasan_check_write+0x18/0x20 [ 37.173942][ T299] ihold+0x24/0x70 [ 37.173955][ T299] vfs_rmdir+0x26a/0x560 [ 37.173968][ T299] incfs_kill_sb+0x109/0x230 [ 37.173979][ T299] deactivate_locked_super+0xd5/0x2a0 [ 37.173994][ T299] deactivate_super+0xb8/0xe0 [ 37.174007][ T299] cleanup_mnt+0x406/0x4a0 [ 37.174029][ T299] __cleanup_mnt+0x1d/0x40 [ 37.174049][ T299] task_work_run+0x1e5/0x260 [ 37.174071][ T299] ? __cfi_task_work_run+0x10/0x10 [ 37.174091][ T299] ? __x64_sys_umount+0x12e/0x180 [ 37.174101][ T299] ? __cfi___x64_sys_umount+0x10/0x10 [ 37.174110][ T299] ? __kasan_check_read+0x15/0x20 [ 37.174120][ T299] resume_user_mode_work+0x35/0x50 [ 37.174131][ T299] syscall_exit_to_user_mode+0x63/0xb0 [ 37.174149][ T299] do_syscall_64+0x63/0xf0 [ 37.174170][ T299] ? clear_bhb_loop+0x50/0xa0 [ 37.174189][ T299] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.174216][ T299] RIP: 0033:0x7f55dc19e097 [ 37.174233][ T299] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 37.174241][ T299] RSP: 002b:00007ffcee517548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 37.174253][ T299] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f55dc19e097 [ 37.174260][ T299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcee517600 [ 37.174266][ T299] RBP: 00007ffcee517600 R08: 00007ffcee518600 R09: 00000000ffffffff [ 37.174274][ T299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcee518690 [ 37.174281][ T299] R13: 00007f55dc2322ca R14: 0000000000008fbf R15: 00007ffcee5186d0 [ 37.174289][ T299] [ 37.174293][ T299] ================================================================== [ 37.418398][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.426285][ T299] Disabling lock debugging due to kernel taint [ 37.432523][ T299] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 37.440322][ T299] #PF: supervisor write access in kernel mode [ 37.446369][ T299] #PF: error_code(0x0002) - not-present page [ 37.452331][ T299] PGD 800000010ff67067 P4D 800000010ff67067 PUD 0 [ 37.458830][ T299] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 37.464886][ T299] CPU: 1 UID: 0 PID: 299 Comm: syz-executor Tainted: G B W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 37.477984][ T299] Tainted: [B]=BAD_PAGE, [W]=WARN [ 37.482988][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.493029][ T299] RIP: 0010:ihold+0x2a/0x70 [ 37.497534][ T299] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 37.517128][ T299] RSP: 0018:ffffc9000b6afca0 EFLAGS: 00010246 [ 37.523183][ T299] RAX: ffff8881258f4c00 RBX: 0000000000000000 RCX: ffff8881258f4c00 [ 37.531139][ T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.539094][ T299] RBP: ffffc9000b6afcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 37.547060][ T299] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff88811ba0407c [ 37.555019][ T299] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 37.562974][ T299] FS: 000055555f4d8500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.571890][ T299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.578459][ T299] CR2: 0000000000000168 CR3: 000000012004c000 CR4: 00000000003526b0 [ 37.586429][ T299] Call Trace: [ 37.589713][ T299] [ 37.592640][ T299] vfs_rmdir+0x26a/0x560 [ 37.596887][ T299] incfs_kill_sb+0x109/0x230 [ 37.601474][ T299] deactivate_locked_super+0xd5/0x2a0 [ 37.606846][ T299] deactivate_super+0xb8/0xe0 [ 37.611517][ T299] cleanup_mnt+0x406/0x4a0 [ 37.615921][ T299] __cleanup_mnt+0x1d/0x40 [ 37.620336][ T299] task_work_run+0x1e5/0x260 [ 37.624938][ T299] ? __cfi_task_work_run+0x10/0x10 [ 37.630052][ T299] ? __x64_sys_umount+0x12e/0x180 [ 37.635073][ T299] ? __cfi___x64_sys_umount+0x10/0x10 [ 37.640434][ T299] ? __kasan_check_read+0x15/0x20 [ 37.645445][ T299] resume_user_mode_work+0x35/0x50 [ 37.650545][ T299] syscall_exit_to_user_mode+0x63/0xb0 [ 37.655998][ T299] do_syscall_64+0x63/0xf0 [ 37.660408][ T299] ? clear_bhb_loop+0x50/0xa0 [ 37.665073][ T299] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.670960][ T299] RIP: 0033:0x7f55dc19e097 [ 37.675364][ T299] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 37.694954][ T299] RSP: 002b:00007ffcee517548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 37.703361][ T299] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f55dc19e097 [ 37.711321][ T299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcee517600 [ 37.719279][ T299] RBP: 00007ffcee517600 R08: 00007ffcee518600 R09: 00000000ffffffff [ 37.727235][ T299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcee518690 [ 37.735192][ T299] R13: 00007f55dc2322ca R14: 0000000000008fbf R15: 00007ffcee5186d0 [ 37.743153][ T299] [ 37.746158][ T299] Modules linked in: [ 37.750057][ T299] CR2: 0000000000000168 [ 37.754192][ T299] ---[ end trace 0000000000000000 ]--- [ 37.759626][ T299] RIP: 0010:ihold+0x2a/0x70 [ 37.764127][ T299] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 37.783729][ T299] RSP: 0018:ffffc9000b6afca0 EFLAGS: 00010246 [ 37.789797][ T299] RAX: ffff8881258f4c00 RBX: 0000000000000000 RCX: ffff8881258f4c00 [ 37.797764][ T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.805727][ T299] RBP: ffffc9000b6afcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 37.813688][ T299] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff88811ba0407c [ 37.821648][ T299] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 37.829605][ T299] FS: 000055555f4d8500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.838522][ T299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.845100][ T299] CR2: 0000000000000168 CR3: 000000012004c000 CR4: 00000000003526b0 [ 37.853072][ T299] Kernel panic - not syncing: Fatal exception [ 37.859421][ T299] Kernel Offset: disabled [ 37.863736][ T299] Rebooting in 86400 seconds..