last executing test programs: 6.759993799s ago: executing program 2 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, 0x0, 0x0, 0x7f, 0x10, 0x4, 0x60, 0x8}) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0xffffffffffffffff, 0x2b) fchmod(r2, 0x1) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r3 = syz_ublk_setup_io_uring(0xb07, &(0x7f00000002c0)={0x0, 0x24aa, 0x80000, 0x2, 0x273}, &(0x7f00000003c0), &(0x7f0000000700), &(0x7f0000000740)) syz_io_uring_setup(0x1dc7, &(0x7f0000000200)={0x0, 0x10d5a8, 0x800, 0x1, 0x382, 0x0, r3}, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000180)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000000000000000400070000000000100000000000000020"], 0x24, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r4, r9, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31b, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x10, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r8, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) 6.546087766s ago: executing program 2 (id=16): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000080)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x80000, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0xc0e}}, 0x50) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r3, 0x400, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r5, r1) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0xffffffffffffffff}) 5.695772873s ago: executing program 2 (id=21): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e26, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa0101e0}, 0xc}, 0x1c) 5.644016444s ago: executing program 2 (id=22): r0 = syz_usb_connect$uac2(0x0, 0xc9, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x8b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x1, 0x40, 0x10, {0x8, 0xb, 0x0, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x2, 0x10, 0x1}, [@multiply_unit={0x7, 0x24, 0xc, 0x1d, 0x2, 0x8, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x3, 0xfe, 0x0, "40e6b4", '2sZ'}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x8, 0x1, {0x8, 0x25, 0x1, 0x0, 0x0, 0x9, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x902, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf7, 0xff, 0x9, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x8}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x3, 0x1, 0x40, "d9f1ed00ce"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3, 0x17}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x9, 0x10, 0x82}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0xfc, 0xe, {0x8, 0x25, 0x1, 0x81, 0x30, 0x0, 0x4000}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x5, 0xeb, 0x10, 0x20, 0x9}, 0x15, &(0x7f00000002c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x2, 0xf, 0x400, [0x41ff]}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x843}}]}) syz_usb_control_io$uac2(r0, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x0, 0x9, 0x4d, {0x4d, 0x30, "60607870ef4cdec0b85e6361e0af242a016f5cbb74e9677dd7fb2704c2c4a54bc011601ec12c1c1c21d34313cbfc01a581ff1331f2a003180b0da96645014d59e6a4bff326c2ecda03356a"}}, &(0x7f0000000480)={0x0, 0x3, 0xd9, @string={0xd9, 0x3, "99a3efd6b94b65fdf2ded4d6ec9f7288071ae1bc41a9949a75fb1d594fa910d80b5d284fdd4ef753ee3582627d01097fd5cc3a79edcd4d742180e7fe71e264babdc3c548f3164083dab53df342a28b18a47f9e50115e6dcbcfa436916deef17fec846f8924c6b819ec674ee75ea4018e356d65666b7b4c086e170655a13c4d2f0b3e7fb71ac5abef31fef13e779056b41b8c34566f3d37a7adf2743d378e0dcba8c26ffcffb238250107e5a3f9d4bd38a0e8da7cbcbdab1368e90fc9fcd3a821a1339613d008ffa49384084965d37bd65fec5c6f2708cc"}}}, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x40, 0x9, 0x29, "e2cb65741f0f665eec2240da90bd56c535c82d9882220b6f5450b9fc16869d515198e9480903c933b9"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x5b}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000680)={0x20, 0x81, 0x1, '8'}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "3aba"}, &(0x7f0000000700)={0x20, 0x83, 0x3, "c9033d"}, &(0x7f0000000740)={0x20, 0x84, 0x3, "24b323"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "b42bae"}}) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x200804, 0x0) syz_usb_connect$uac2(0x0, 0xc9, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x8b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x1, 0x40, 0x10, {0x8, 0xb, 0x0, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x2, 0x10, 0x1}, [@multiply_unit={0x7, 0x24, 0xc, 0x1d, 0x2, 0x8, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x3, 0xfe, 0x0, "40e6b4", '2sZ'}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x8, 0x1, {0x8, 0x25, 0x1, 0x0, 0x0, 0x9, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x902, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf7, 0xff, 0x9, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x8}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x3, 0x1, 0x40, "d9f1ed00ce"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3, 0x17}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x9, 0x10, 0x82}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0xfc, 0xe, {0x8, 0x25, 0x1, 0x81, 0x30, 0x0, 0x4000}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x5, 0xeb, 0x10, 0x20, 0x9}, 0x15, &(0x7f00000002c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x2, 0xf, 0x400, [0x41ff]}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x843}}]}) (async) syz_usb_control_io$uac2(r0, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x0, 0x9, 0x4d, {0x4d, 0x30, "60607870ef4cdec0b85e6361e0af242a016f5cbb74e9677dd7fb2704c2c4a54bc011601ec12c1c1c21d34313cbfc01a581ff1331f2a003180b0da96645014d59e6a4bff326c2ecda03356a"}}, &(0x7f0000000480)={0x0, 0x3, 0xd9, @string={0xd9, 0x3, "99a3efd6b94b65fdf2ded4d6ec9f7288071ae1bc41a9949a75fb1d594fa910d80b5d284fdd4ef753ee3582627d01097fd5cc3a79edcd4d742180e7fe71e264babdc3c548f3164083dab53df342a28b18a47f9e50115e6dcbcfa436916deef17fec846f8924c6b819ec674ee75ea4018e356d65666b7b4c086e170655a13c4d2f0b3e7fb71ac5abef31fef13e779056b41b8c34566f3d37a7adf2743d378e0dcba8c26ffcffb238250107e5a3f9d4bd38a0e8da7cbcbdab1368e90fc9fcd3a821a1339613d008ffa49384084965d37bd65fec5c6f2708cc"}}}, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x40, 0x9, 0x29, "e2cb65741f0f665eec2240da90bd56c535c82d9882220b6f5450b9fc16869d515198e9480903c933b9"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x5b}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000680)={0x20, 0x81, 0x1, '8'}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "3aba"}, &(0x7f0000000700)={0x20, 0x83, 0x3, "c9033d"}, &(0x7f0000000740)={0x20, 0x84, 0x3, "24b323"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "b42bae"}}) (async) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x200804, 0x0) (async) 5.008581734s ago: executing program 0 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000001700)={@void, @void, @eth={@broadcast, @random="c222a5fe422d", @val={@void}, {@ipv4={0x8100, @udp={{0x5, 0x4, 0x1, 0x3, 0x78, 0x65, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}, {0x4e20, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "a2ae9a6092fa16aac8a20966ff90ac598edc5b03d7097bf849e09108ce3fc178", "65330fcc2d1ae6ed9493273be2bca8b7", {"628cc0c53b03b6209be40d78e3f5c507", "9cd52818fc0486cca7c5bbddc322b3e0"}}}}}}}}, 0x8a) 4.888127518s ago: executing program 0 (id=35): socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) accept4(r0, 0x0, 0x0, 0x80800) 4.044172364s ago: executing program 0 (id=38): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000005b582d"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 4.043977344s ago: executing program 0 (id=39): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x72293000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) eventfd2(0x10000, 0x80003) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x5, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0x2, 0x7ff, 0x5, 0x3fbe, 0x2}}, 0x0, 0x0, 0x0, 0x0}) setuid(0xee01) setgroups(0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.646217307s ago: executing program 2 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x604200, 0x301, 0x2}, 0x18) mkdirat(r1, &(0x7f0000000200)='./file1\x00', 0x1) setresuid(r0, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 2.620197318s ago: executing program 2 (id=54): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a15d2908030450f8159001020960605d120001030458010904db0400bcd37803"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc, 0x4}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8811}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="380100001800010027bd7000002b84556e880000000000000000000000000001fc010000000000000000000000000001000107144e2300050000006073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000ffffffffffff000000000000000004000000000000000600000000000000ffff0000800000001c25080000000000020000000000000009000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000ca3d0000000000002abd7000043500000a"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) r6 = socket$unix(0x1, 0x5, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x6) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x2, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) ftruncate(r6, 0x398a0bdb) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4000009d, 0x0, 0x100000007}]}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="e419007600", @ANYBLOB="3eda6b4bf1ba3538303e8da32ca72f689f44882275eedcbff82cecc898485e521d59302037c16d2c54a1768d34f5dd8e0361d242f1675c037e79bc9e58b7466abba220e55da4b8fa999d15b593ee505f0c5bb0fb5e9f4e7bf7be74ed2a49c11418c61bb352be078806a0c263eb24a4e1eec6e65197acbbc3f1828b73320701a98f5df119ec5702106d1ad6cbda9be8aac45b639c3c1f42dc", @ANYBLOB="05000000"], 0x74}}, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) ioctl$KVM_GET_MSRS_sys(r14, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x8b, 0x0, 0x385d}]}) splice(r12, 0x0, r13, 0x0, 0xf3a, 0x0) ioctl$int_in(r11, 0x5452, &(0x7f0000000080)=0x7) write(r11, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000475a02899a8ca0dcbf0f966b818b4a987bda4e3d1d79e296cd0630592df5ff4faf9ff09a71343a0cb7394a9781d2", @ANYRES16=r3, @ANYBLOB="000825bd7000f7dbdf25250000000c009900050000007a0000000a003400010101010101000023003400c7651920a2b72b7442bd26f0d4562547e27754be73b27e7f512923e44d5d18000a0006009395c483733c0000"], 0x5c}, 0x1, 0x0, 0x0, 0xc890}, 0x40840) 2.017023017s ago: executing program 0 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000300)={0x80, 0x0, 0x9}) r3 = socket$inet6(0xa, 0x1, 0x22) fcntl$dupfd(r1, 0x406, r3) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x2, 0x0, @ioapic={0x4, 0x9, 0x80, 0xc98, 0x0, [{0xc, 0xf, 0x6a, '\x00', 0xe}, {0x1, 0x2, 0x4d, '\x00', 0x9}, {0x4, 0x1, 0x3, '\x00', 0x5}, {0xf, 0x1, 0x4, '\x00', 0x1}, {0x7f, 0x1, 0x1, '\x00', 0xd}, {0x0, 0x0, 0x1, '\x00', 0x8}, {0x7, 0x3, 0x80, '\x00', 0xff}, {0x7f, 0xb9, 0xb5, '\x00', 0x5}, {0xdb, 0x10, 0x8, '\x00', 0x4b}, {0x4, 0x40, 0xa6, '\x00', 0x99}, {0x40, 0x0, 0x1, '\x00', 0x9}, {0x0, 0x0, 0xfe, '\x00', 0x9}, {0x2, 0x8, 0x0, '\x00', 0x9}, {0x6, 0x7, 0x9, '\x00', 0xd}, {0x0, 0xc, 0x84, '\x00', 0xfd}, {0x0, 0x3, 0xc, '\x00', 0x9}, {0x2, 0x5, 0xfb, '\x00', 0x9}, {0x2, 0x9, 0x8, '\x00', 0xfc}, {0x42, 0x1, 0x5, '\x00', 0x3}, {0x2, 0x7, 0x1, '\x00', 0x5}, {0xf9, 0x3, 0x7c, '\x00', 0x11}, {0x8, 0x1, 0x2}, {0xf7, 0x4, 0x75, '\x00', 0x8}, {0xb, 0x0, 0x67, '\x00', 0x3}]}}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000080)) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0100001200130700000000fcdbdf25640101010000000000000000000000000000000000ffff00004e2100020a0000001d000000d59bba8d7b6c6a221929afc72ffea0cbb220a4b4a2acc70542dd121c13", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.93492178s ago: executing program 0 (id=57): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (async) listxattr(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000660001"], 0x1c}}, 0x0) (async) syz_usb_connect$uac3(0x1, 0x85, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESOCT=r1, @ANYRES8, @ANYBLOB="ae72d273f6ea4fae70e42683daf3a09d1eaf63b7bc4f001958114eb5e5e3f79b2220788e26097a8ba5a8150313085400000000ab4cf39c974db6182189bfb61351168d65ec11cbb67e23959a7371010346776234120e841891e5b70b414304e3922aecf8bb94da4ed31d4f7e6b75f556c0d68810b69e1212de2c1304143d7fa019f8f4a33a65b08aaa4dc0d7e2c11dadcb52ae1120e61ece0962e6c1998181f466ab0221f1c203ff6129220ba2e2a30a0376e3e09366faa685001891274751b25e64c5a0351c96aa615079e1e1d7e432bcb69d67fac3ad533419bcc1a76d93679a02ea9077080483f8a7", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES8=r2], 0x0) 1.017767438s ago: executing program 1 (id=59): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x7e08, 0x4, 0x44, 0x7fff0000}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r2 = getpid() r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) ptrace(0x420e, r3) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x2, 0x5001) sendmsg$nl_generic(r1, &(0x7f0000000800)={&(0x7f00000000c0), 0xc, &(0x7f00000007c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x828}, 0x1, 0x0, 0x0, 0x80c5}, 0x2204008c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) r7 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r7, &(0x7f0000000200)='./file1\x00', 0x4, 0x0) r8 = open(&(0x7f0000000140)='./file0\x00', 0x20800, 0x718bb647156ec3b7) statx(r8, &(0x7f00000003c0)='./file1\x00', 0x400, 0x10, &(0x7f00000002c0)) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_PIT(r9, 0xc048ae65, 0x0) ioctl$KVM_TDX_GET_CPUID(r1, 0xc008aeba, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)={0x1, 0x0, [{0x2, 0x1ff, 0x5, 0x0, 0x0, 0x498a, 0x3e5e}]}}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000080)={0x24000, 0x4, 0x3ff, 0xffff1402, 0x7, "dce935f217c1fe21bc57cfc149905545703c4c"}) dup(r0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00008000effffd000000ffff000000007200"}) r11 = syz_open_pts(r10, 0x0) poll(&(0x7f0000000000)=[{r11, 0xa}], 0x1, 0xa1) 1.002241049s ago: executing program 1 (id=60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) copy_file_range(r4, 0x0, r4, 0x0, 0x22b1, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x102100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000040)={0x1000000000000058, 0x0, [{0x400000f5, 0x0, 0x3}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000024c0)={0x1, 0x0, [{0x826}]}) 844.125414ms ago: executing program 1 (id=61): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000480)={0x4, 0xffffffffffffffff}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000180)={0x6, "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"}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) socket$netlink(0x10, 0x3, 0x10) 834.803574ms ago: executing program 1 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x8, 0x20, 0xfffffffd, 0x8, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x68, 0x0, 0xf, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xa6, [@multicast2, @rand_addr=0x64010100, @rand_addr=0x64010102, @local]}, @rr={0x7, 0x7, 0x19, [@local]}, @generic={0x7, 0x4, ' R'}, @end, @noop]}}}}}) r3 = socket$packet(0x11, 0x3, 0x300) clock_adjtime(0x0, &(0x7f0000000100)={0x540, 0x7, 0xd26, 0xfffffffffffffff6, 0x4, 0x8, 0x8000, 0x0, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7f, 0x8000000000000000, 0x2, 0xfffffffd, 0x2, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x715, 0x1ff, 0xff, 0x5f1, 0x6}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x34, r6, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c00)={0x54, r1, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048841}, 0x0) 823.577225ms ago: executing program 1 (id=63): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xffffffff, 0x158}, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_clone3(&(0x7f0000000b00)={0x801400, &(0x7f0000000200), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x80402, 0x12) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) socket$packet(0x11, 0x3, 0x300) socket$tipc(0x1e, 0x2, 0x0) syz_ublk_setup_queues(r4, r9, &(0x7f0000000400)={0x0, 0x7058, 0x80, 0x3, 0x80343}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x21, 0x1, 0x31b, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x800, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r8, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) 696.171868ms ago: executing program 1 (id=64): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000200)=0x73d, 0x4) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r2, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000001400)=""/79, 0x4f}, {&(0x7f00000003c0)=""/4109, 0x100d}], 0x4}, 0x9a}], 0x1, 0x2, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x18) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x3, &(0x7f00000000c0)=0x2) connect$bt_sco(r0, &(0x7f0000000080), 0x8) 185.172865ms ago: executing program 3 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) copy_file_range(r4, 0x0, r4, 0x0, 0x22b1, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x102100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000040)={0x1000000000000058, 0x0, [{0x400000f5, 0x0, 0x3}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000024c0)={0x1, 0x0, [{0x826}]}) 52.244909ms ago: executing program 3 (id=70): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x4001c00) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000040)) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 52.145079ms ago: executing program 3 (id=71): capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = timerfd_create(0x0, 0x800) read(r1, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 51.865239ms ago: executing program 3 (id=72): r0 = userfaultfd(0x801) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/138, 0x8a}, {&(0x7f00000011c0)=""/128, 0x80}, {&(0x7f0000001240)=""/203, 0xcb}, {&(0x7f0000001340)=""/114, 0x72}], 0x5) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 11.92062ms ago: executing program 3 (id=73): creat(&(0x7f0000000040)='./file0\x00', 0x140) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0) chdir(&(0x7f0000000000)='./bus\x00') chmod(&(0x7f0000000280)='./file0\x00', 0x2c) 0s ago: executing program 3 (id=74): syz_io_uring_setup(0x12f8, &(0x7f0000000080)={0x0, 0x0, 0x20000, 0x2}, 0x0, 0x0, &(0x7f0000003100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x50007a2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x2010, 0xffffffffffffffff, 0x33b41000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) getresuid(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000200)=0x7fff, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000100), &(0x7f0000000140)=0x4) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4080, 0xff0, 0x7f) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0x1, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x45c, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x800008, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x100000, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0xc, 0x80000000, 0xffff, 0x9, 0x2, 0x4, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0x2, 0x1ef, 0xfffffffd, 0xeb6, 0x0, 0xab5, 0x10000, 0x1, 0x9, 0x0, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0xb4, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0xfffffffe, 0x18000, 0x10, 0x1000, 0x6, 0x2002, 0x80, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x7, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x4, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x2, 0x8, 0x8000, 0x10004, 0x9, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0xfffffffe, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x10007fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x80001, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x8d0f, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x4, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x3, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x5, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0xffff0001, 0x23, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x2006, 0x6, 0xfffffff6, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xfffffffc, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0x400000b, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0x40, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x0, 0x5, 0xffff351b, 0x7, 0xa00000, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x3c, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x20c47, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0xfffffdab, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x5, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xa, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8001, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x8, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0xff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r4 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0xa) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000002100)=""/4096) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000000)=@req={0x28, &(0x7f0000000040)={'wg2\x00', @ifru_addrs=@phonet={0x23, 0x26, 0x1e, 0x3}}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003140)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48000) recvmmsg(r1, &(0x7f0000000040), 0x0, 0x40002102, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 22.045424][ T36] audit: type=1400 audit(1781860154.739:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.046515][ T286] cgroup: Unknown subsys name 'net' [ 22.068044][ T36] audit: type=1400 audit(1781860154.739:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.095345][ T36] audit: type=1400 audit(1781860154.769:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.095510][ T286] cgroup: Unknown subsys name 'devices' [ 22.203013][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.208613][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.301271][ T36] audit: type=1400 audit(1781860154.999:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.324428][ T36] audit: type=1400 audit(1781860154.999:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.349188][ T36] audit: type=1400 audit(1781860154.999:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.357576][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.381015][ T36] audit: type=1400 audit(1781860155.069:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.406432][ T36] audit: type=1400 audit(1781860155.069:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.432858][ T36] audit: type=1400 audit(1781860155.129:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.458396][ T36] audit: type=1400 audit(1781860155.129:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.458659][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.281800][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.288858][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.295961][ T296] bridge_slave_0: entered allmulticast mode [ 23.302133][ T296] bridge_slave_0: entered promiscuous mode [ 23.310073][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.317150][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.324222][ T296] bridge_slave_1: entered allmulticast mode [ 23.330343][ T296] bridge_slave_1: entered promiscuous mode [ 23.344003][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.351034][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.358117][ T295] bridge_slave_0: entered allmulticast mode [ 23.364281][ T295] bridge_slave_0: entered promiscuous mode [ 23.382289][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.389333][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.396406][ T295] bridge_slave_1: entered allmulticast mode [ 23.402560][ T295] bridge_slave_1: entered promiscuous mode [ 23.410245][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.417290][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.424360][ T294] bridge_slave_0: entered allmulticast mode [ 23.430475][ T294] bridge_slave_0: entered promiscuous mode [ 23.436884][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.443951][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.450986][ T294] bridge_slave_1: entered allmulticast mode [ 23.457215][ T294] bridge_slave_1: entered promiscuous mode [ 23.537304][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.544395][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.551491][ T293] bridge_slave_0: entered allmulticast mode [ 23.557663][ T293] bridge_slave_0: entered promiscuous mode [ 23.564287][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.571371][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.578402][ T293] bridge_slave_1: entered allmulticast mode [ 23.584684][ T293] bridge_slave_1: entered promiscuous mode [ 23.655771][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.662846][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.670121][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.677156][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.702204][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.709248][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.716529][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.723562][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.755417][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.762480][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.769729][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.776763][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.797321][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.804380][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.811645][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.818656][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.840877][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.848393][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.855701][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.863298][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.870467][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.877704][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.885756][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.893019][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.904781][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.911826][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.921352][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.928363][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.964696][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.971759][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.979259][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.986283][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.995257][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.002278][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.009788][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.016817][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.029199][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.036251][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.044956][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.051997][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.099190][ T296] veth0_vlan: entered promiscuous mode [ 24.107388][ T295] veth0_vlan: entered promiscuous mode [ 24.113468][ T294] veth0_vlan: entered promiscuous mode [ 24.134798][ T295] veth1_macvtap: entered promiscuous mode [ 24.145226][ T293] veth0_vlan: entered promiscuous mode [ 24.150902][ T294] veth1_macvtap: entered promiscuous mode [ 24.164067][ T296] veth1_macvtap: entered promiscuous mode [ 24.188643][ T293] veth1_macvtap: entered promiscuous mode [ 24.214326][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.281229][ T319] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped). [ 24.310465][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.355686][ T325] raw_sendmsg: syz.2.6 forgot to set AF_INET. Fix it! [ 24.513701][ T343] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 24.631195][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.663542][ T345] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 24.710223][ T345] veth1_macvtap: left promiscuous mode [ 24.720614][ T345] macsec0: entered promiscuous mode [ 24.781203][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 24.801199][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.813180][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.823510][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 24.830096][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 24.841151][ T45] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.841359][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.858005][ T9] usb 2-1: config 0 descriptor?? [ 24.994751][ T334] syzkaller1: entered promiscuous mode [ 25.000279][ T334] syzkaller1: entered allmulticast mode [ 25.045141][ T45] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 25.052777][ T45] usb 1-1: can't read configurations, error -71 [ 25.211149][ T311] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 25.265730][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 25.272013][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 25.281017][ T9] usb 2-1: USB disconnect, device number 2 [ 25.362190][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.375320][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.384890][ T311] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 25.393972][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 25.402012][ T311] usb 4-1: SerialNumber: syz [ 25.408632][ T311] usb 4-1: 0:2 : does not exist [ 25.604323][ T432] capability: warning: `syz.0.23' uses deprecated v2 capabilities in a way that may be insecure [ 25.615627][ T423] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.632446][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.642903][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.703364][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.711933][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.831302][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.922675][ T311] usb 4-1: USB disconnect, device number 2 [ 25.989279][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.000481][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=008b, bcdDevice= 0.40 [ 26.012881][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.022630][ T9] usb 3-1: Product: ࡃ [ 26.030211][ T454] netlink: 55 bytes leftover after parsing attributes in process `syz.0.32'. [ 26.032622][ T9] usb 3-1: Manufacturer: ӿ [ 26.045159][ T9] usb 3-1: SerialNumber: syz [ 26.151311][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.252675][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 26.322134][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.333108][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 26.342479][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.350946][ T31] usb 2-1: config 0 descriptor?? [ 26.434217][ T464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 26.452879][ T430] syz.2.22: attempt to access beyond end of device [ 26.452879][ T430] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 26.467635][ T430] exFAT-fs (loop2): unable to read boot sector [ 26.474358][ T430] exFAT-fs (loop2): failed to read boot sector [ 26.480585][ T430] exFAT-fs (loop2): failed to recognize exfat type [ 26.489134][ T430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.490848][ T468] syz.2.22: attempt to access beyond end of device [ 26.490848][ T468] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 26.498513][ T430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.511794][ T468] exFAT-fs (loop2): unable to read boot sector [ 26.523957][ T468] exFAT-fs (loop2): failed to read boot sector [ 26.530195][ T468] exFAT-fs (loop2): failed to recognize exfat type [ 26.762639][ T31] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 26.772461][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input4 [ 26.845344][ T31] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 27.321830][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 27.321845][ T36] audit: type=1400 audit(1781860160.019:164): avc: denied { append } for pid=477 comm="syz.3.40" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.350743][ T478] rust_binder: 27: no such ref 0 [ 27.356125][ T36] audit: type=1400 audit(1781860160.049:165): avc: denied { ioctl } for pid=477 comm="syz.3.40" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.391676][ T36] audit: type=1400 audit(1781860160.059:166): avc: denied { map } for pid=477 comm="syz.3.40" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.417745][ T36] audit: type=1400 audit(1781860160.079:167): avc: denied { set_context_mgr } for pid=477 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.438727][ T36] audit: type=1400 audit(1781860160.119:168): avc: denied { read } for pid=480 comm="syz.3.41" dev="nsfs" ino=4026532344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.459667][ T36] audit: type=1400 audit(1781860160.119:169): avc: denied { open } for pid=480 comm="syz.3.41" path="net:[4026532344]" dev="nsfs" ino=4026532344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.491250][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.579945][ T36] audit: type=1400 audit(1781860160.269:170): avc: denied { create } for pid=484 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.599174][ T36] audit: type=1400 audit(1781860160.269:171): avc: denied { setopt } for pid=484 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.642188][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.653953][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 27.682484][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.692976][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.701364][ T9] usb 1-1: Product: syz [ 27.711333][ T9] usb 1-1: Manufacturer: syz [ 27.716121][ T9] usb 1-1: SerialNumber: syz [ 27.723765][ T9] cdc_mbim 1-1:1.0: skipping garbage [ 27.767730][ T498] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.768287][ T498] rust_binder: 497:498 transaction to 0 failed: ENOENT [ 27.822590][ T36] audit: type=1400 audit(1781860160.519:172): avc: denied { ioctl } for pid=502 comm="syz.1.50" path="socket:[5641]" dev="sockfs" ino=5641 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.858492][ T503] fuse: Unknown parameter 'syzkaller1' [ 27.923810][ T476] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 27.971190][ T424] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.101142][ T424] usb 4-1: device descriptor read/64, error -71 [ 28.341177][ T424] usb 4-1: device descriptor read/64, error -71 [ 28.535311][ T476] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 28.542739][ T9] cdc_mbim 1-1:1.0: setting tx_max = 32 [ 28.549241][ T9] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 28.556329][ T9] wwan wwan0: port wwan0mbim0 attached [ 28.563660][ T9] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 2a:ec:43:0b:ee:a8 [ 28.586790][ T36] audit: type=1400 audit(1781860161.279:173): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.587289][ T424] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.621187][ T9] usb 3-1: USB disconnect, device number 2 [ 28.729054][ T149] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 28.745364][ T31] usb 1-1: USB disconnect, device number 4 [ 28.751497][ T31] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 28.791172][ T424] usb 4-1: device descriptor read/64, error -71 [ 28.808992][ T31] wwan wwan0: port wwan0mbim0 disconnected [ 28.971363][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.036074][ T424] usb 4-1: device descriptor read/64, error -71 [ 29.121146][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 29.126592][ T9] usb 3-1: too many configurations: 96, using maximum allowed: 8 [ 29.135541][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 29.143130][ T9] usb 3-1: can't read configurations, error -61 [ 29.151224][ T424] usb usb4-port1: attempt power cycle [ 29.271176][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.281414][ T561] netlink: 348 bytes leftover after parsing attributes in process `syz.0.56'. [ 29.421141][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 29.426682][ T9] usb 3-1: too many configurations: 96, using maximum allowed: 8 [ 29.436071][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 29.443677][ T9] usb 3-1: can't read configurations, error -61 [ 29.450002][ T9] usb usb3-port1: attempt power cycle [ 29.492026][ T424] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.512250][ T424] usb 4-1: device descriptor read/8, error -71 [ 29.581146][ T31] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 29.642192][ T424] usb 4-1: device descriptor read/8, error -71 [ 29.711176][ T31] usb 1-1: device descriptor read/64, error -71 [ 29.726447][ T567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.735542][ T567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.801182][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.821490][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 29.826934][ T9] usb 3-1: too many configurations: 96, using maximum allowed: 8 [ 29.835854][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 29.843451][ T9] usb 3-1: can't read configurations, error -61 [ 29.881193][ T424] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.902184][ T424] usb 4-1: device descriptor read/8, error -71 [ 29.951145][ T31] usb 1-1: device descriptor read/64, error -71 [ 29.971317][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 29.991541][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 29.996956][ T9] usb 3-1: too many configurations: 96, using maximum allowed: 8 [ 30.005831][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 30.013499][ T9] usb 3-1: can't read configurations, error -61 [ 30.019844][ T9] usb usb3-port1: unable to enumerate USB device [ 30.032174][ T424] usb 4-1: device descriptor read/8, error -71 [ 30.141216][ T424] usb usb4-port1: unable to enumerate USB device [ 30.191159][ T31] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 30.331143][ T31] usb 1-1: device descriptor read/64, error -71 [ 30.397397][ T574] Zero length message leads to an empty skb [ 30.571161][ T31] usb 1-1: device descriptor read/64, error -71 [ 30.682051][ T31] usb usb1-port1: attempt power cycle [ 30.746347][ T584] kvm: kvm [583]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 31.041144][ T31] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 31.062134][ T31] usb 1-1: device descriptor read/8, error -71 [ 31.192370][ T31] usb 1-1: device descriptor read/8, error -71 [ 31.271812][ T296] ------------[ cut here ]------------ [ 31.277378][ T296] WARNING: CPU: 0 PID: 296 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 31.285339][ T296] Modules linked in: [ 31.289288][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 31.300931][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.311009][ T296] RIP: 0010:drop_nlink+0xce/0x110 [ 31.316059][ T296] Code: 04 00 00 be 08 00 00 00 e8 6f 06 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 4f 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 31.335775][ T296] RSP: 0018:ffffc9000b6dfc60 EFLAGS: 00010293 [ 31.341964][ T296] RAX: ffffffff81f271be RBX: ffff88811a9f7480 RCX: ffff888103fe3900 [ 31.349940][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.357935][ T296] RBP: ffffc9000b6dfc88 R08: 0000000000000003 R09: 0000000000000004 [ 31.365936][ T296] R10: dffffc0000000000 R11: fffff520016dbf7c R12: dffffc0000000000 [ 31.373948][ T296] R13: 1ffff1102353ee99 R14: ffff88811a9f74c8 R15: 0000000000000000 [ 31.382020][ T296] FS: 000055556160e500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.390993][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.397606][ T296] CR2: 0000555561631958 CR3: 0000000123856000 CR4: 00000000003526b0 [ 31.405614][ T296] Call Trace: [ 31.408894][ T296] [ 31.411863][ T296] shmem_rmdir+0x5f/0x90 [ 31.416113][ T296] vfs_rmdir+0x3e3/0x560 [ 31.420368][ T296] incfs_kill_sb+0x109/0x230 [ 31.425061][ T296] deactivate_locked_super+0xd5/0x2a0 [ 31.430445][ T296] deactivate_super+0xb8/0xe0 [ 31.435135][ T296] cleanup_mnt+0x406/0x4a0 [ 31.439553][ T296] __cleanup_mnt+0x1d/0x40 [ 31.443993][ T296] task_work_run+0x1e5/0x260 [ 31.448596][ T296] ? __cfi_task_work_run+0x10/0x10 [ 31.451177][ T31] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 31.453730][ T296] ? __x64_sys_umount+0x12e/0x180 [ 31.466127][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.471535][ T296] ? __kasan_check_read+0x15/0x20 [ 31.476654][ T296] resume_user_mode_work+0x35/0x50 [ 31.481776][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 31.487247][ T296] do_syscall_64+0x63/0xf0 [ 31.491736][ T296] ? clear_bhb_loop+0x50/0xa0 [ 31.492240][ T31] usb 1-1: device descriptor read/8, error -71 [ 31.496413][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.496445][ T296] RIP: 0033:0x7f511f59e097 [ 31.512903][ T296] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.532537][ T296] RSP: 002b:00007ffc6089cd08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.540953][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f511f59e097 [ 31.548933][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6089cdc0 [ 31.556929][ T296] RBP: 00007ffc6089cdc0 R08: 00007ffc6089ddc0 R09: 00000000ffffffff [ 31.564927][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6089de50 [ 31.572923][ T296] R13: 00007f511f6322ca R14: 0000000000007a0c R15: 00007ffc6089de90 [ 31.580904][ T296] [ 31.583949][ T296] ---[ end trace 0000000000000000 ]--- [ 31.590258][ T296] ================================================================== [ 31.598338][ T296] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 31.604586][ T296] Write of size 4 at addr 0000000000000168 by task syz-executor/296 [ 31.612543][ T296] [ 31.614862][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 31.614892][ T296] Tainted: [W]=WARN [ 31.614898][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.614909][ T296] Call Trace: [ 31.614916][ T296] [ 31.614925][ T296] __dump_stack+0x21/0x30 [ 31.614952][ T296] dump_stack_lvl+0x140/0x1c0 [ 31.614966][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.614981][ T296] print_report+0x3d/0x70 [ 31.614994][ T296] kasan_report+0x162/0x1a0 [ 31.615007][ T296] ? ihold+0x24/0x70 [ 31.615025][ T296] ? _raw_spin_unlock+0x45/0x60 [ 31.615050][ T296] ? ihold+0x24/0x70 [ 31.615071][ T296] kasan_check_range+0x25a/0x2b0 [ 31.615094][ T296] __kasan_check_write+0x18/0x20 [ 31.615104][ T296] ihold+0x24/0x70 [ 31.615115][ T296] vfs_rmdir+0x26a/0x560 [ 31.615130][ T296] incfs_kill_sb+0x109/0x230 [ 31.615140][ T296] deactivate_locked_super+0xd5/0x2a0 [ 31.615155][ T296] deactivate_super+0xb8/0xe0 [ 31.615178][ T296] cleanup_mnt+0x406/0x4a0 [ 31.615200][ T296] __cleanup_mnt+0x1d/0x40 [ 31.615220][ T296] task_work_run+0x1e5/0x260 [ 31.615242][ T296] ? __cfi_task_work_run+0x10/0x10 [ 31.615254][ T296] ? __x64_sys_umount+0x12e/0x180 [ 31.615264][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.615273][ T296] ? __kasan_check_read+0x15/0x20 [ 31.615283][ T296] resume_user_mode_work+0x35/0x50 [ 31.615293][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 31.615311][ T296] do_syscall_64+0x63/0xf0 [ 31.615335][ T296] ? clear_bhb_loop+0x50/0xa0 [ 31.615354][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.615380][ T296] RIP: 0033:0x7f511f59e097 [ 31.615391][ T296] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.615400][ T296] RSP: 002b:00007ffc6089cd08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.615412][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f511f59e097 [ 31.615419][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6089cdc0 [ 31.615426][ T296] RBP: 00007ffc6089cdc0 R08: 00007ffc6089ddc0 R09: 00000000ffffffff [ 31.615433][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6089de50 [ 31.615440][ T296] R13: 00007f511f6322ca R14: 0000000000007a0c R15: 00007ffc6089de90 [ 31.615452][ T296] [ 31.615458][ T296] ================================================================== [ 31.732271][ T31] usb 1-1: device descriptor read/8, error -71 [ 31.734936][ T296] Disabling lock debugging due to kernel taint [ 31.851286][ T31] usb usb1-port1: unable to enumerate USB device [ 31.859300][ T296] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 31.885333][ T296] #PF: supervisor write access in kernel mode [ 31.891385][ T296] #PF: error_code(0x0002) - not-present page [ 31.897350][ T296] PGD 800000010f736067 P4D 800000010f736067 PUD 0 [ 31.903842][ T296] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 31.909904][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G B W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 31.922997][ T296] Tainted: [B]=BAD_PAGE, [W]=WARN [ 31.928008][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.938055][ T296] RIP: 0010:ihold+0x2a/0x70 [ 31.942545][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 31.962144][ T296] RSP: 0018:ffffc9000b6dfca0 EFLAGS: 00010246 [ 31.968210][ T296] RAX: ffff888103fe3900 RBX: 0000000000000000 RCX: ffff888103fe3900 [ 31.976179][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.984145][ T296] RBP: ffffc9000b6dfcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 31.992114][ T296] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff88811a9f748c [ 32.000071][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 32.008039][ T296] FS: 000055556160e500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.016968][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.023537][ T296] CR2: 0000000000000168 CR3: 0000000123856000 CR4: 00000000003526b0 [ 32.031497][ T296] Call Trace: [ 32.034772][ T296] [ 32.037708][ T296] vfs_rmdir+0x26a/0x560 [ 32.041946][ T296] incfs_kill_sb+0x109/0x230 [ 32.046532][ T296] deactivate_locked_super+0xd5/0x2a0 [ 32.051912][ T296] deactivate_super+0xb8/0xe0 [ 32.056576][ T296] cleanup_mnt+0x406/0x4a0 [ 32.060997][ T296] __cleanup_mnt+0x1d/0x40 [ 32.065402][ T296] task_work_run+0x1e5/0x260 [ 32.069975][ T296] ? __cfi_task_work_run+0x10/0x10 [ 32.075069][ T296] ? __x64_sys_umount+0x12e/0x180 [ 32.080093][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.085461][ T296] ? __kasan_check_read+0x15/0x20 [ 32.090468][ T296] resume_user_mode_work+0x35/0x50 [ 32.095561][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 32.101023][ T296] do_syscall_64+0x63/0xf0 [ 32.105462][ T296] ? clear_bhb_loop+0x50/0xa0 [ 32.110121][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.116021][ T296] RIP: 0033:0x7f511f59e097 [ 32.120443][ T296] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.140044][ T296] RSP: 002b:00007ffc6089cd08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.148452][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f511f59e097 [ 32.156420][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6089cdc0 [ 32.164388][ T296] RBP: 00007ffc6089cdc0 R08: 00007ffc6089ddc0 R09: 00000000ffffffff [ 32.172346][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6089de50 [ 32.180314][ T296] R13: 00007f511f6322ca R14: 0000000000007a0c R15: 00007ffc6089de90 [ 32.188271][ T296] [ 32.191277][ T296] Modules linked in: [ 32.195174][ T296] CR2: 0000000000000168 [ 32.199308][ T296] ---[ end trace 0000000000000000 ]--- [ 32.204752][ T296] RIP: 0010:ihold+0x2a/0x70 [ 32.209245][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 32.228835][ T296] RSP: 0018:ffffc9000b6dfca0 EFLAGS: 00010246 [ 32.234885][ T296] RAX: ffff888103fe3900 RBX: 0000000000000000 RCX: ffff888103fe3900 [ 32.242849][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.250802][ T296] RBP: ffffc9000b6dfcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 32.258758][ T296] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff88811a9f748c [ 32.266714][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 32.274675][ T296] FS: 000055556160e500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.283596][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.290170][ T296] CR2: 0000000000000168 CR3: 0000000123856000 CR4: 00000000003526b0 [ 32.298130][ T296] Kernel panic - not syncing: Fatal exception [ 32.304432][ T296] Kernel Offset: disabled [ 32.308744][ T296] Rebooting in 86400 seconds..