Extracting prog: 17m25.127064785s
Minimizing prog: 20m17.705294181s
Simplifying prog options: 4m32.366007379s
Extracting C: 1m48.542473132s
Simplifying C: 0s


extracting reproducer from 31 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-pipe2-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program did not crash
single: failed to extract reproducer
bisect: bisecting 31 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 8, 3, 6, 5, 3, 5, 5, 12, 3, 1, 1, 4, 3, 3, 4, 11, 8, 1, 2, 3, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 1:
iopl(0x28)
executing program 1:
r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
fcntl$setlease(r1, 0x400, 0x1)
open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc)
executing program 3:
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x6)
fcntl$setlease(r0, 0x400, 0x1)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
listen(r0, 0x5)
accept$inet(r0, 0x0, 0x0)
executing program 1:
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x101, 0x1e, 0x0, 0x2f, 0x6e})
executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, [0x0, 0x3]}})
executing program 3:
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ef)
executing program 3:
eventfd(0xfffffdfe)
close(0x3)
executing program 3:
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program crashed: WARNING: kobject bug in __scsi_remove_device
bisect: bisecting 31 programs
bisect: split chunks (needed=false): <30>
bisect: split chunk #0 of len 30 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 12, 3, 1, 1, 4, 3, 3, 4, 11, 8, 1, 2, 3, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 1:
iopl(0x28)
executing program 1:
r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
fcntl$setlease(r1, 0x400, 0x1)
open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc)
executing program 3:
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x6)
fcntl$setlease(r0, 0x400, 0x1)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
listen(r0, 0x5)
accept$inet(r0, 0x0, 0x0)
executing program 1:
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x101, 0x1e, 0x0, 0x2f, 0x6e})
executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, [0x0, 0x3]}})
executing program 3:
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ef)
executing program 3:
eventfd(0xfffffdfe)
close(0x3)
executing program 3:
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 8, 3, 6, 5, 3, 11, 8, 1, 2, 3, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "b735e718895c1b33659bc4404802c2c0dff31a502604a7905c3343c9c070c77410852e3f2c68432d89cd79a89d04dcc168cf9857478cd757ad8699927ae583a20b0891d91d277c3a64cab9d90182e8b764038196927b737fb849f170530d8568703810274ee88cc6a3021dd1aca32219ccbd06be0d6d99dfcb0bcf97454abc112f8e4056996c0328f140154adadad243ebaeacc7d238612a7d9ee99fe694e152cdd03d82956c5660c77d6033d9c00d1af6c26b8cf085344a7471f3a9786b8afe7234d526b8fa002e22ed81b0bf60d46e2afbc6f1c8544712415eb5fc5b849cb83da41820dabab2c7f3cfdef39ed28c1f88bd34946cb3f8fe5fcad0af06d85835789bf91810fe0223b2b02cacd1b67c5cc3a8a49ec55e01a68bc4fd805aa9d5b5781fbe89baa50993f0c6e15e83330e8cb5bd3a630141398267f631c8d8039bae0abb5eceab81adcc3873e6c0a5e9f4d78ef52633b3373cbe620d34f631ce1e355be833dcbbb29f3b0d6887f9c6b9e3f44ce9266495b24a7a5d67cfe4811f87c1dee65aadbf12251105f5d45751be86558d896daddf2367812e89f346e8143f9e7a1ba822c09ff6aa0f8ef2bd1dcdebcd9efa1250cc5c1223474126012585ac457c02309e9a11fae23f0cbb1965f94ef303726e28a04163acd23d27df1471d6794c2f0a0e3d83411ce6b18d1a4981be4db7557a32298ec49f42ed1dac000c3cb84110dddcdc752248cd7f7c223f4b31bd28741384ef0e221aa307b72e8611696fd12a09d17909cdcc7fbfb09650e876d83d1d5a84e5b6bd2e5cb2b2864395d428cc562f3f77e4df78d5a17dca215fe853345029270ff156e2d020f072b38357ac0c750eb08fce6ba25a264d7cf8f48ffd2875385ae06242fb6e513247698e2df4797b2952cdd8dfd447d70f6de85de0ef91773ea23a9769d3979f884f3cd461925d1f628bd55c5dcb4be763f4c8d1cca4a1fbb13b9e341faff300fe46caa2355b06af2261395822b6266413d2a4489f780383c03e0c34f1c5ee0fa40163210b7d8143c80794a36a54ede78701b9e7b4c128f9f6dd469eadbebbcf5074af2ad48c1ef4d70f9e80ee8b1ca220f66d0e26337aac9dce6210c096bac129f58eca49a3f2fd9acc7ef03c450824b7768f5b80946b971cd226c11c0f2a34bc0b1aeca0b47c553e353f987eb0fd3ba65058d0b45ce501eb9bf270e23e42a55184a3799461ee2e69392611150993fcccc12930df1a55b013d30e9174f66657a7a726cea9071de7fff2ffe9f533c250b0b57b781ae3b2b4df2a93075b47ca79a0e771830beaabef46ea23e764a1477d602d3831abef87845215c2111bbfd980de94c3e607278cd5d86cee3d6f2d187afac4ffae9782452c14b81383d3801df54994f22c0a7d5f5d3180503245f7bbc266f5bfea769907eff1a82afc2498dee02e7015f9852fddd11bb77d3d49bd4cad8d6d419af772863045a46cb1a336cc42a4467c1953a335ab4b38e05df3ffa275da8eefdcbd4c1561263a0de29d0f822f03cce865d5ccc376a65a5567dd02c0b84e058dd93a5809f78868c30337c09e1be8a65d9589f56dc3ddc71114b9b0bebfc891cfd537bdd501b35848492cb8104b2a53d3929fb0455e828ddddc5df4b616edf78f9da6e625786be5a9bc1752e674d7f44a50a0e639e1f3570e737f30e94844c1465ad7403bd41755db7ac934c137f013b08fddb8649634e2e42eb375e526fcd68852e3309dc530b8cf3139dd7e4ac263522da310fe6f7fe191f3581b572c6332f2d21b9bf59dff6b18b905dc964311a3c9207cd4b8697bc60487c8708042d5f641e29d272b8e0cb9eb9cec3cbe4bf4571077f6fe21a9927efd8e67c99be015498f1b925626f6e9576cd123e10f46763eaffb5a3f90de68bbde78378af60a30bdb39c27fdc5ba53edf8032698d2102cfe2f6165594de10726e8b28f5463be1155b583c903a20a9140d8d1ab7372e7b5565b197929bb6fce3149848e34ddc8c2baae53260b486231a84efaeb8828732208e43051233c64adab7d276d158e8cc530c4ffac86e7257de6c7f1b1c2d63acde83adbbbc56fa50e3e67f0835d308df9194490aa3269786a437359251acc8cce22a5325a01179cb72fa2c565fb2e2eff3edc6d1055c5de9913e8ec3b2394f814d5b6fdbdc78b3b8723527c5a4d5af67149d4751004580a7f3ed72047a1f05ed698dc480a29fd03fbfaf75ac904b7b810f306a7fa3c2b3561a502d00e84bfe47408759999f1b457773a89b1c8dea3753c36282594612e818793b70210166b247a46b638cc04cee171d02a42c073465f7e6e9927d3ec89928573d78ce95b9707058d6e0927feaeed42719dcbd14de94d75a43218668f8ae1aadc13e6931163e195aa1f8320ea82eebc86102cfcab407778afe11e885b1ac4cc70aeb5e80b31763322c54df51a49c5ed8ffb80a170819ecc9cbd719891c722fe568793a994a95be1cdace341f091ec06471fd14edb30ba845ebf4b197f79838161ecba174b7005224a8e7c534a37b935a886681d256bd9b95b2f8d3ef99ba390639d1cb01b854a0a22d9b12d759a8dec646c8b952dc7ec355febc079a7ee2dbccb2c3138474e7a1b6321a9b7f9abaa17f3995aec66b1231766da91348e8eb4c28ff38f8d5f21b4180557a5fa4ccbaa478b1b7f739058411bbb28535ff792db9b5c6d167e7ebf3ab78ee68f26f5951b1183013f55843bad5194a900604df59844af42c0ace094608b249f8d57f76df39c89544b718a1b939e48474681e6a4d5dbb58936c5cfbc6d75a8104677d53c22eab5233e094bca42cbe8a68e519724da05c561a6f3145736f527b6369b5401955447db15c7865d6c158f20d3ef8952c29455410b59764e53c2688e116e55e4262efe885ad0a6d83535e74a3b033b6fb59ffc99382af46038c1f436eb52ad9eaae1f854217ae1a97e644eb283e496ee04d160be91a562ba950fda9245c19043a65c5e90912c66764eb8f8d031ff7dd745beffdfd57e815ec5f8cd649858c0ca16d7150b4edce75593feed7b68a953574ae81fac622063ef2edaf804327d5cfa8ed692b7361b3636cf2ebe36e1cb512bf7c1145310c31569b0b5c62d42f214a56cd2ce600b9e5056d096b44a33ee8679f487548b6461ddaf95d95481144a50c816a605f74aaa0b2f3bdb0ed0e4320167c295c2410c99a053d0d03af1ce8d0085674ba39133f4dc61ccdb283f1cc52635ac71682e6e262b67f217351341bd71780f48a5823eb79aeec703a487166c8919b097ddb37066011c0c58fb353f554c015c449a7d3ba8ab932cd57e66cf7c1ad09c01688bfdb5233d8a4c1032f3747582f54cf1320c6dd61d3ef4cf26abc53b13c5074919a8dd9c6b99994674247b36360ded4567fdfae95a1720275aa292f4635b797431bc6a613260b5d79ea8dd44e144ae54aa418fe850248ec5b87eda6b8ab65902c4ef7e69b052334f67eeda76fb42ea5b6e407675388016905862d081c868fbc65eee6ac0056fd6ee5a4580b930c180a2d3fff5b91eca5102a8e00bdd2c6373131c76c86946e7cac29ef6dac81d794597029690d54ea464793b511b8398c9168e633e13883decf17bb59714331ad235c5b39ff941be063a5f7b9428624753c5d2dc470e7407637014eafeeba8ab0465ba1bbdbc3144e8f5ff8a86d679270722a641714f00e288538cb501237daf24e4dc7d5383138f531a6ce3217dc737174a8efc8b82bc29e0a682e09500a96142c490a4ea4eb5d2a180e3817760ebecd60a877e92f25b221b0c5612ac50309e4453cd95ab9e14e096af685b823fcc49b2a46ce64fa4497e60fe200b7a0e1e12e715e994f055f4b8684a0381676bb2bbba42ca31ecc1d43a314d7b28b0239b979f7d07153ad6c054035c51560398d80418e02c05f463e4e8f8c25535253d056c02f62a4a37acff3874a500a36a4705bfdf8d99a7c6acfa86036b92bb2d66c1ef6b98779a028e6a59d3a13baea41d8d28a126c02a147ca8d7985bbb73c6e5f078ed59bc1c86523eafe37240f81d00536b41c7a6c6b55e0f011523e6cd18865be173aab3d9354db1ccbdb093a87b285829218c124aa47eeb05a6882daea193f5d680bdcccdb32670832d842d984c1e1a59f81f78000aeb6bc12a9cb622d6c46148317187c3273d8587f89a72258fc621cd9faddfcb4bcedb9f2ca7e15ccff7c2c196a3d7785326c188722f24cbd0b622e319302f92718dc18e51afbf28fd9ea1bfa9ffaac82bd61bec5b59a71ebba486f61114aec47f9c082109dbfbfa3448791cb36d8b6e95dcb40976be7bd30f91c7bcc605ba19c8a15c526bc40dee7de04348aa3afcd91d3be57a9d93c3f48caf2f29eb32f66505c393da2fc2fb802f5e4e4ea944f9c01fcd9a73289a039c7ea41154ec017533e5ef98257aa51137d3e51dcdb1d8c93d568bacb4658f5f38e89b1f25f7010ef1edbd8a9dbd38662abcaf422b5ee63fb143e63cf2400604c2d703da499b529913db272dd4f3416e2c84f5ca1fbfb23a35bd3b3053b629263cf850eb686ad7b2f813271f0eda845074490c7645b27b2a324f5e5e2fb9998a03d9962fda0c249f62fb1050a12ef410b9cc791864a8a9d419e0275f620e34303788e88a77ca307d3cba86f937f8b16c546eeb43cb4adfaa5962947d9fd071367d3900922bc11f54db12df5b140797c9f6e22da3aed2af99ab6fbd59c59d6f45745a309cfd8b746be99bf27516c818bc73182846cea6f347313bc51797368118ff190762662ed64aee2304b693367ed029da8411144a164caddfe5280dcb7b497b7ed9a5fc5a4a808fe95111af20f74b8d9faa8a8bbe6e9c117f57175e3ff9e70a484ad8e3511f11542eecbdd54dfc79cba8c77cc8a2586f206619d71147343a8c2cd8600be66679f094cd3c45779df63fc354315f131db0e746c4f4ddbf6e2dcb9ca13697d2c4c6cfb03b6405b8e7482b96ce6daf97d9f153896c937d255c8d5cd8e6d3108320aadf054be88affc55607fbe931bbe851f4a57a3f0ef1d16ad7fb1b8fb9e37829aaf6283e33a946b1cd0675fcc228cf9898a801d467cd442c6399ad0411bddf01410b38314baa745c974313fbf046fd353c97bfb7ded06f703677189e1e58e355b7c7cd44e72172327b4d48922415d4ba45dfcad70d2d51b252dfbba140d71a042f144e3c3794d1d86ac75bc1214f3756249dcacfcbae43e3ecd73cced376"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, [0x0, 0x3]}})
executing program 3:
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ef)
executing program 3:
eventfd(0xfffffdfe)
close(0x3)
executing program 3:
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 8, 3, 6, 5, 3, 5, 5, 12, 3, 1, 1, 4, 3, 3, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 1:
iopl(0x28)
executing program 1:
r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
fcntl$setlease(r1, 0x400, 0x1)
open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc)
executing program 3:
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x6)
fcntl$setlease(r0, 0x400, 0x1)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
listen(r0, 0x5)
accept$inet(r0, 0x0, 0x0)
executing program 1:
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x101, 0x1e, 0x0, 0x2f, 0x6e})

program did not crash
bisect: split chunks (needed=true): <10>, <10>, <10>
bisect: split chunk #0 of len 10 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 3, 6, 5, 3, 5, 5, 12, 3, 1, 1, 4, 3, 3, 4, 11, 8, 1, 2, 3, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 1:
iopl(0x28)
executing program 1:
r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
fcntl$setlease(r1, 0x400, 0x1)
open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc)
executing program 3:
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x6)
fcntl$setlease(r0, 0x400, 0x1)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
listen(r0, 0x5)
accept$inet(r0, 0x0, 0x0)
executing program 1:
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x101, 0x1e, 0x0, 0x2f, 0x6e})
executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, [0x0, 0x3]}})
executing program 3:
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ef)
executing program 3:
eventfd(0xfffffdfe)
close(0x3)
executing program 3:
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 5, 5, 12, 3, 1, 1, 4, 3, 3, 4, 11, 8, 1, 2, 3, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 1:
iopl(0x28)
executing program 1:
r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
fcntl$setlease(r1, 0x400, 0x1)
open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc)
executing program 3:
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x6)
fcntl$setlease(r0, 0x400, 0x1)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
listen(r0, 0x5)
accept$inet(r0, 0x0, 0x0)
executing program 1:
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x101, 0x1e, 0x0, 0x2f, 0x6e})
executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, [0x0, 0x3]}})
executing program 3:
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ef)
executing program 3:
eventfd(0xfffffdfe)
close(0x3)
executing program 3:
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program did not crash
bisect: split chunk #1 of len 10 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 8, 3, 6, 5, 3, 1, 4, 3, 3, 4, 11, 8, 1, 2, 3, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 1:
iopl(0x28)
executing program 1:
r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
fcntl$setlease(r1, 0x400, 0x1)
open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc)
executing program 3:
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x6)
fcntl$setlease(r0, 0x400, 0x1)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
listen(r0, 0x5)
accept$inet(r0, 0x0, 0x0)
executing program 1:
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x101, 0x1e, 0x0, 0x2f, 0x6e})
executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, [0x0, 0x3]}})
executing program 3:
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ef)
executing program 3:
eventfd(0xfffffdfe)
close(0x3)
executing program 3:
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 8, 3, 6, 5, 3, 5, 5, 12, 3, 1, 11, 8, 1, 2, 3, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, [0x0, 0x3]}})
executing program 3:
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ef)
executing program 3:
eventfd(0xfffffdfe)
close(0x3)
executing program 3:
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program crashed: WARNING: kobject bug in __scsi_remove_device
bisect: the chunk can be dropped
bisect: split chunk #2 of len 10 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 8, 3, 6, 5, 3, 5, 5, 12, 3, 1, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program crashed: WARNING: kobject bug in __scsi_remove_device
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <5>, <5>, <5>, <5>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 2, 5, 8, 3, 6, 5, 3, 5, 5, 12, 3, 1, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 5, 8, 3, 6, 5, 3, 5, 5, 12, 3, 1, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program did not crash
bisect: split chunk #1 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 5, 3, 5, 5, 12, 3, 1, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 8, 3, 6, 5, 5, 12, 3, 1, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "b735e718895c1b33659bc4404802c2c0dff31a502604a7905c3343c9c070c77410852e3f2c68432d89cd79a89d04dcc168cf9857478cd757ad8699927ae583a20b0891d91d277c3a64cab9d90182e8b764038196927b737fb849f170530d8568703810274ee88cc6a3021dd1aca32219ccbd06be0d6d99dfcb0bcf97454abc112f8e4056996c0328f140154adadad243ebaeacc7d238612a7d9ee99fe694e152cdd03d82956c5660c77d6033d9c00d1af6c26b8cf085344a7471f3a9786b8afe7234d526b8fa002e22ed81b0bf60d46e2afbc6f1c8544712415eb5fc5b849cb83da41820dabab2c7f3cfdef39ed28c1f88bd34946cb3f8fe5fcad0af06d85835789bf91810fe0223b2b02cacd1b67c5cc3a8a49ec55e01a68bc4fd805aa9d5b5781fbe89baa50993f0c6e15e83330e8cb5bd3a630141398267f631c8d8039bae0abb5eceab81adcc3873e6c0a5e9f4d78ef52633b3373cbe620d34f631ce1e355be833dcbbb29f3b0d6887f9c6b9e3f44ce9266495b24a7a5d67cfe4811f87c1dee65aadbf12251105f5d45751be86558d896daddf2367812e89f346e8143f9e7a1ba822c09ff6aa0f8ef2bd1dcdebcd9efa1250cc5c1223474126012585ac457c02309e9a11fae23f0cbb1965f94ef303726e28a04163acd23d27df1471d6794c2f0a0e3d83411ce6b18d1a4981be4db7557a32298ec49f42ed1dac000c3cb84110dddcdc752248cd7f7c223f4b31bd28741384ef0e221aa307b72e8611696fd12a09d17909cdcc7fbfb09650e876d83d1d5a84e5b6bd2e5cb2b2864395d428cc562f3f77e4df78d5a17dca215fe853345029270ff156e2d020f072b38357ac0c750eb08fce6ba25a264d7cf8f48ffd2875385ae06242fb6e513247698e2df4797b2952cdd8dfd447d70f6de85de0ef91773ea23a9769d3979f884f3cd461925d1f628bd55c5dcb4be763f4c8d1cca4a1fbb13b9e341faff300fe46caa2355b06af2261395822b6266413d2a4489f780383c03e0c34f1c5ee0fa40163210b7d8143c80794a36a54ede78701b9e7b4c128f9f6dd469eadbebbcf5074af2ad48c1ef4d70f9e80ee8b1ca220f66d0e26337aac9dce6210c096bac129f58eca49a3f2fd9acc7ef03c450824b7768f5b80946b971cd226c11c0f2a34bc0b1aeca0b47c553e353f987eb0fd3ba65058d0b45ce501eb9bf270e23e42a55184a3799461ee2e69392611150993fcccc12930df1a55b013d30e9174f66657a7a726cea9071de7fff2ffe9f533c250b0b57b781ae3b2b4df2a93075b47ca79a0e771830beaabef46ea23e764a1477d602d3831abef87845215c2111bbfd980de94c3e607278cd5d86cee3d6f2d187afac4ffae9782452c14b81383d3801df54994f22c0a7d5f5d3180503245f7bbc266f5bfea769907eff1a82afc2498dee02e7015f9852fddd11bb77d3d49bd4cad8d6d419af772863045a46cb1a336cc42a4467c1953a335ab4b38e05df3ffa275da8eefdcbd4c1561263a0de29d0f822f03cce865d5ccc376a65a5567dd02c0b84e058dd93a5809f78868c30337c09e1be8a65d9589f56dc3ddc71114b9b0bebfc891cfd537bdd501b35848492cb8104b2a53d3929fb0455e828ddddc5df4b616edf78f9da6e625786be5a9bc1752e674d7f44a50a0e639e1f3570e737f30e94844c1465ad7403bd41755db7ac934c137f013b08fddb8649634e2e42eb375e526fcd68852e3309dc530b8cf3139dd7e4ac263522da310fe6f7fe191f3581b572c6332f2d21b9bf59dff6b18b905dc964311a3c9207cd4b8697bc60487c8708042d5f641e29d272b8e0cb9eb9cec3cbe4bf4571077f6fe21a9927efd8e67c99be015498f1b925626f6e9576cd123e10f46763eaffb5a3f90de68bbde78378af60a30bdb39c27fdc5ba53edf8032698d2102cfe2f6165594de10726e8b28f5463be1155b583c903a20a9140d8d1ab7372e7b5565b197929bb6fce3149848e34ddc8c2baae53260b486231a84efaeb8828732208e43051233c64adab7d276d158e8cc530c4ffac86e7257de6c7f1b1c2d63acde83adbbbc56fa50e3e67f0835d308df9194490aa3269786a437359251acc8cce22a5325a01179cb72fa2c565fb2e2eff3edc6d1055c5de9913e8ec3b2394f814d5b6fdbdc78b3b8723527c5a4d5af67149d4751004580a7f3ed72047a1f05ed698dc480a29fd03fbfaf75ac904b7b810f306a7fa3c2b3561a502d00e84bfe47408759999f1b457773a89b1c8dea3753c36282594612e818793b70210166b247a46b638cc04cee171d02a42c073465f7e6e9927d3ec89928573d78ce95b9707058d6e0927feaeed42719dcbd14de94d75a43218668f8ae1aadc13e6931163e195aa1f8320ea82eebc86102cfcab407778afe11e885b1ac4cc70aeb5e80b31763322c54df51a49c5ed8ffb80a170819ecc9cbd719891c722fe568793a994a95be1cdace341f091ec06471fd14edb30ba845ebf4b197f79838161ecba174b7005224a8e7c534a37b935a886681d256bd9b95b2f8d3ef99ba390639d1cb01b854a0a22d9b12d759a8dec646c8b952dc7ec355febc079a7ee2dbccb2c3138474e7a1b6321a9b7f9abaa17f3995aec66b1231766da91348e8eb4c28ff38f8d5f21b4180557a5fa4ccbaa478b1b7f739058411bbb28535ff792db9b5c6d167e7ebf3ab78ee68f26f5951b1183013f55843bad5194a900604df59844af42c0ace094608b249f8d57f76df39c89544b718a1b939e48474681e6a4d5dbb58936c5cfbc6d75a8104677d53c22eab5233e094bca42cbe8a68e519724da05c561a6f3145736f527b6369b5401955447db15c7865d6c158f20d3ef8952c29455410b59764e53c2688e116e55e4262efe885ad0a6d83535e74a3b033b6fb59ffc99382af46038c1f436eb52ad9eaae1f854217ae1a97e644eb283e496ee04d160be91a562ba950fda9245c19043a65c5e90912c66764eb8f8d031ff7dd745beffdfd57e815ec5f8cd649858c0ca16d7150b4edce75593feed7b68a953574ae81fac622063ef2edaf804327d5cfa8ed692b7361b3636cf2ebe36e1cb512bf7c1145310c31569b0b5c62d42f214a56cd2ce600b9e5056d096b44a33ee8679f487548b6461ddaf95d95481144a50c816a605f74aaa0b2f3bdb0ed0e4320167c295c2410c99a053d0d03af1ce8d0085674ba39133f4dc61ccdb283f1cc52635ac71682e6e262b67f217351341bd71780f48a5823eb79aeec703a487166c8919b097ddb37066011c0c58fb353f554c015c449a7d3ba8ab932cd57e66cf7c1ad09c01688bfdb5233d8a4c1032f3747582f54cf1320c6dd61d3ef4cf26abc53b13c5074919a8dd9c6b99994674247b36360ded4567fdfae95a1720275aa292f4635b797431bc6a613260b5d79ea8dd44e144ae54aa418fe850248ec5b87eda6b8ab65902c4ef7e69b052334f67eeda76fb42ea5b6e407675388016905862d081c868fbc65eee6ac0056fd6ee5a4580b930c180a2d3fff5b91eca5102a8e00bdd2c6373131c76c86946e7cac29ef6dac81d794597029690d54ea464793b511b8398c9168e633e13883decf17bb59714331ad235c5b39ff941be063a5f7b9428624753c5d2dc470e7407637014eafeeba8ab0465ba1bbdbc3144e8f5ff8a86d679270722a641714f00e288538cb501237daf24e4dc7d5383138f531a6ce3217dc737174a8efc8b82bc29e0a682e09500a96142c490a4ea4eb5d2a180e3817760ebecd60a877e92f25b221b0c5612ac50309e4453cd95ab9e14e096af685b823fcc49b2a46ce64fa4497e60fe200b7a0e1e12e715e994f055f4b8684a0381676bb2bbba42ca31ecc1d43a314d7b28b0239b979f7d07153ad6c054035c51560398d80418e02c05f463e4e8f8c25535253d056c02f62a4a37acff3874a500a36a4705bfdf8d99a7c6acfa86036b92bb2d66c1ef6b98779a028e6a59d3a13baea41d8d28a126c02a147ca8d7985bbb73c6e5f078ed59bc1c86523eafe37240f81d00536b41c7a6c6b55e0f011523e6cd18865be173aab3d9354db1ccbdb093a87b285829218c124aa47eeb05a6882daea193f5d680bdcccdb32670832d842d984c1e1a59f81f78000aeb6bc12a9cb622d6c46148317187c3273d8587f89a72258fc621cd9faddfcb4bcedb9f2ca7e15ccff7c2c196a3d7785326c188722f24cbd0b622e319302f92718dc18e51afbf28fd9ea1bfa9ffaac82bd61bec5b59a71ebba486f61114aec47f9c082109dbfbfa3448791cb36d8b6e95dcb40976be7bd30f91c7bcc605ba19c8a15c526bc40dee7de04348aa3afcd91d3be57a9d93c3f48caf2f29eb32f66505c393da2fc2fb802f5e4e4ea944f9c01fcd9a73289a039c7ea41154ec017533e5ef98257aa51137d3e51dcdb1d8c93d568bacb4658f5f38e89b1f25f7010ef1edbd8a9dbd38662abcaf422b5ee63fb143e63cf2400604c2d703da499b529913db272dd4f3416e2c84f5ca1fbfb23a35bd3b3053b629263cf850eb686ad7b2f813271f0eda845074490c7645b27b2a324f5e5e2fb9998a03d9962fda0c249f62fb1050a12ef410b9cc791864a8a9d419e0275f620e34303788e88a77ca307d3cba86f937f8b16c546eeb43cb4adfaa5962947d9fd071367d3900922bc11f54db12df5b140797c9f6e22da3aed2af99ab6fbd59c59d6f45745a309cfd8b746be99bf27516c818bc73182846cea6f347313bc51797368118ff190762662ed64aee2304b693367ed029da8411144a164caddfe5280dcb7b497b7ed9a5fc5a4a808fe95111af20f74b8d9faa8a8bbe6e9c117f57175e3ff9e70a484ad8e3511f11542eecbdd54dfc79cba8c77cc8a2586f206619d71147343a8c2cd8600be66679f094cd3c45779df63fc354315f131db0e746c4f4ddbf6e2dcb9ca13697d2c4c6cfb03b6405b8e7482b96ce6daf97d9f153896c937d255c8d5cd8e6d3108320aadf054be88affc55607fbe931bbe851f4a57a3f0ef1d16ad7fb1b8fb9e37829aaf6283e33a946b1cd0675fcc228cf9898a801d467cd442c6399ad0411bddf01410b38314baa745c974313fbf046fd353c97bfb7ded06f703677189e1e58e355b7c7cd44e72172327b4d48922415d4ba45dfcad70d2d51b252dfbba140d71a042f144e3c3794d1d86ac75bc1214f3756249dcacfcbae43e3ecd73cced376"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program did not crash
bisect: split chunk #2 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 8, 3, 6, 5, 3, 3, 1, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 8, 3, 6, 5, 3, 5, 5, 12, 10, 1, 4, 5, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program did not crash
bisect: split chunk #3 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 8, 3, 6, 5, 3, 5, 5, 12, 3, 1, 5, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
executing program 4:
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3, 3, 2, 5, 8, 3, 6, 5, 3, 5, 5, 12, 3, 1, 10, 1, 4]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010})
epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034})
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
executing program 0:
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)
executing program 2:
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce)
executing program 2:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2})
executing program 2:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)
executing program 2:
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
executing program 2:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800)
executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1)
executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
executing program 4:
setns(0xc9, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080)

program did not crash
bisect: too many guilty chunks, aborting
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-pipe2-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program crashed: WARNING: kobject bug in __scsi_remove_device
single: successfully extracted reproducer
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=1m43.706886715s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-pipe2-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)

program did not crash
testing program (duration=1m43.706886715s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-pipe2-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
pipe2(0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000001400)='- - -', 0x5)

program did not crash
testing program (duration=1m43.706886715s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program crashed: WARNING: kobject bug in __scsi_remove_device
testing program (duration=1m43.706886715s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program did not crash
testing program (duration=1m43.706886715s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program did not crash
testing program (duration=1m43.706886715s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program did not crash
testing program (duration=1m43.706886715s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program did not crash
testing program (duration=1m43.706886715s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program did not crash
testing program (duration=1m43.706886715s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
testing program (duration=1m43.706886715s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m43.706886715s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m43.706886715s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program did not crash
simplifying guilty program options
testing program (duration=1m43.706886715s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program crashed: WARNING: kobject bug in __scsi_remove_device
extracting C reproducer
testing compiled C program (duration=1m43.706886715s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program did not crash
testing program (duration=1m43.706886715s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program did not crash
testing program (duration=1m43.706886715s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program did not crash
validation run: crashed=false
testing program (duration=1m43.706886715s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program crashed: WARNING: kobject bug in __scsi_remove_device
validation run: crashed=true
testing program (duration=1m43.706886715s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program crashed: WARNING: kobject bug in __scsi_remove_device
validation run: crashed=true
testing program (duration=1m43.706886715s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000001400)='- - -', 0x5)

program crashed: WARNING: kobject bug in __scsi_remove_device
validation run: crashed=true
reproducing took 50m28.5863955s
repro crashed as (corrupted=false):
------------[ cut here ]------------
kobject: '(null)' (ffff888116bae548): is not initialized, yet kobject_put() is being called.
WARNING: CPU: 1 PID: 406 at lib/kobject.c:736 kobject_put+0x8e/0x2a0 lib/kobject.c:734
Modules linked in:
CPU: 1 UID: 0 PID: 406 Comm: syz.0.21 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:kobject_put+0x8e/0x2a0 lib/kobject.c:734
Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 44 e1 44 fc 48 8b 33 48 c7 c7 a0 07 9b 86 48 89 da e8 22 dd 68 fb <0f> 0b eb 0f e8 e9 04 ec fb e9 9c 01 00 00 e8 df 04 ec fb 4c 8d 7b
RSP: 0018:ffffc90003acf1f8 EFLAGS: 00010246
RAX: 7f9cb788c9c2ff00 RBX: ffff888116bae548 RCX: ffff8881151acc00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: ffffc90003acf220 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0e9f34c R12: 00000000fffffff4
R13: ffff888116bae584 R14: 1ffff11022d75cb0 R15: 0000000000000000
FS:  0000555563b15500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffeb9e53ed4 CR3: 0000000114098000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 put_device+0x23/0x40 drivers/base/core.c:3800
 __scsi_remove_device+0xc4/0x3c0 drivers/scsi/scsi_sysfs.c:1501
 scsi_alloc_sdev+0x970/0xcc0 drivers/scsi/scsi_scan.c:379
 scsi_probe_and_add_lun+0x1e9/0x3e60 drivers/scsi/scsi_scan.c:1207
 __scsi_scan_target+0x1f1/0xc20 drivers/scsi/scsi_scan.c:1754
 scsi_scan_channel drivers/scsi/scsi_scan.c:1842 [inline]
 scsi_scan_host_selected+0x352/0x610 drivers/scsi/scsi_scan.c:1871
 scsi_scan drivers/scsi/scsi_sysfs.c:151 [inline]
 store_scan+0x4ba/0x550 drivers/scsi/scsi_sysfs.c:191
 dev_attr_store+0x76/0xa0 drivers/base/core.c:2440
 sysfs_kf_write+0x13e/0x160 fs/sysfs/file.c:136
 kernfs_fop_write_iter+0x316/0x510 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x75f/0xfd0 fs/read_write.c:684
 ksys_write+0x145/0x260 fs/read_write.c:737
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x7f/0x90 fs/read_write.c:746
 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fe9f579e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdfc610a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fe9f5a25fa0 RCX: 00007fe9f579e0d9
RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003
RBP: 00007fe9f5835024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe9f5a25fac R14: 00007fe9f5a25fa0 R15: 00007fe9f5a25fa0
 </TASK>
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
refcount_t: underflow; use-after-free.
WARNING: CPU: 1 PID: 406 at lib/refcount.c:28 refcount_warn_saturate+0x119/0x1c0 lib/refcount.c:28
Modules linked in:
CPU: 1 UID: 0 PID: 406 Comm: syz.0.21 Tainted: G        W          syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:refcount_warn_saturate+0x119/0x1c0 lib/refcount.c:28
Code: 05 01 48 c7 c7 c0 f0 51 86 e8 23 44 55 fe 0f 0b eb da e8 ea 6b d8 fe c6 05 68 49 36 05 01 48 c7 c7 20 f1 51 86 e8 07 44 55 fe <0f> 0b eb be e8 ce 6b d8 fe c6 05 49 49 36 05 01 48 c7 c7 60 f0 51
RSP: 0018:ffffc90003acf1d8 EFLAGS: 00010246
RAX: 7f9cb788c9c2ff00 RBX: 0000000000000003 RCX: ffff8881151acc00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: ffffc90003acf1e8 R08: ffffc90003aceec7 R09: 1ffff92000759dd8
R10: dffffc0000000000 R11: fffff52000759dd9 R12: 0000000000000000
R13: ffff888116bae584 R14: ffff888116bae580 R15: ffff888116bae580
FS:  0000555563b15500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffeb9e53ed4 CR3: 0000000114098000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 __refcount_sub_and_test include/linux/refcount.h:400 [inline]
 __refcount_dec_and_test include/linux/refcount.h:432 [inline]
 refcount_dec_and_test include/linux/refcount.h:450 [inline]
 kref_put include/linux/kref.h:64 [inline]
 kobject_put+0x25a/0x2a0 lib/kobject.c:737
 put_device+0x23/0x40 drivers/base/core.c:3800
 __scsi_remove_device+0xc4/0x3c0 drivers/scsi/scsi_sysfs.c:1501
 scsi_alloc_sdev+0x970/0xcc0 drivers/scsi/scsi_scan.c:379
 scsi_probe_and_add_lun+0x1e9/0x3e60 drivers/scsi/scsi_scan.c:1207
 __scsi_scan_target+0x1f1/0xc20 drivers/scsi/scsi_scan.c:1754
 scsi_scan_channel drivers/scsi/scsi_scan.c:1842 [inline]
 scsi_scan_host_selected+0x352/0x610 drivers/scsi/scsi_scan.c:1871
 scsi_scan drivers/scsi/scsi_sysfs.c:151 [inline]
 store_scan+0x4ba/0x550 drivers/scsi/scsi_sysfs.c:191
 dev_attr_store+0x76/0xa0 drivers/base/core.c:2440
 sysfs_kf_write+0x13e/0x160 fs/sysfs/file.c:136
 kernfs_fop_write_iter+0x316/0x510 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x75f/0xfd0 fs/read_write.c:684
 ksys_write+0x145/0x260 fs/read_write.c:737
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x7f/0x90 fs/read_write.c:746
 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fe9f579e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdfc610a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fe9f5a25fa0 RCX: 00007fe9f579e0d9
RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003
RBP: 00007fe9f5835024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe9f5a25fac R14: 00007fe9f5a25fa0 R15: 00007fe9f5a25fa0
 </TASK>
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
kobject: '(null)' (ffff888116bae1d0): is not initialized, yet kobject_put() is being called.
WARNING: CPU: 1 PID: 406 at lib/kobject.c:736 kobject_put+0x8e/0x2a0 lib/kobject.c:734
Modules linked in:
CPU: 1 UID: 0 PID: 406 Comm: syz.0.21 Tainted: G        W          syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:kobject_put+0x8e/0x2a0 lib/kobject.c:734
Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 44 e1 44 fc 48 8b 33 48 c7 c7 a0 07 9b 86 48 89 da e8 22 dd 68 fb <0f> 0b eb 0f e8 e9 04 ec fb e9 9c 01 00 00 e8 df 04 ec fb 4c 8d 7b
RSP: 0018:ffffc90003acf1f8 EFLAGS: 00010246
RAX: 7f9cb788c9c2ff00 RBX: ffff888116bae1d0 RCX: ffff8881151acc00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: ffffc90003acf220 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0e9f34c R12: ffffffff86630e90
R13: ffff888116bae20c R14: 1ffff11022d75c41 R15: 0000000000000000
FS:  0000555563b15500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffeb9e53ed4 CR3: 0000000114098000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 put_device+0x23/0x40 drivers/base/core.c:3800
 __scsi_remove_device+0x32d/0x3c0 drivers/scsi/scsi_sysfs.c:1527
 scsi_alloc_sdev+0x970/0xcc0 drivers/scsi/scsi_scan.c:379
 scsi_probe_and_add_lun+0x1e9/0x3e60 drivers/scsi/scsi_scan.c:1207
 __scsi_scan_target+0x1f1/0xc20 drivers/scsi/scsi_scan.c:1754
 scsi_scan_channel drivers/scsi/scsi_scan.c:1842 [inline]
 scsi_scan_host_selected+0x352/0x610 drivers/scsi/scsi_scan.c:1871
 scsi_scan drivers/scsi/scsi_sysfs.c:151 [inline]
 store_scan+0x4ba/0x550 drivers/scsi/scsi_sysfs.c:191
 dev_attr_store+0x76/0xa0 drivers/base/core.c:2440
 sysfs_kf_write+0x13e/0x160 fs/sysfs/file.c:136
 kernfs_fop_write_iter+0x316/0x510 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x75f/0xfd0 fs/read_write.c:684
 ksys_write+0x145/0x260 fs/read_write.c:737
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x7f/0x90 fs/read_write.c:746
 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fe9f579e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdfc610a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fe9f5a25fa0 RCX: 00007fe9f579e0d9
RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003
RBP: 00007fe9f5835024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe9f5a25fac R14: 00007fe9f5a25fa0 R15: 00007fe9f5a25fa0
 </TASK>
---[ end trace 0000000000000000 ]---
scsi_alloc_sdev: Allocation failure during SCSI scanning, some SCSI devices might not be configured
------------[ cut here ]------------
kernel BUG at drivers/scsi/scsi_scan.c:594!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 0 UID: 0 PID: 406 Comm: syz.0.21 Tainted: G        W          syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:scsi_target_reap+0x172/0x180 drivers/scsi/scsi_scan.c:594
Code: 81 fe e9 ef fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 46 ff ff ff 4c 89 ef e8 18 9b 81 fe e9 39 ff ff ff e8 fe be 28 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a8 40 3a b2 90 90 90
RSP: 0018:ffffc90003acf7a8 EFLAGS: 00010293
RAX: ffffffff835eb2c2 RBX: ffff888126b72800 RCX: ffff8881151acc00
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
RBP: ffffc90003acf7d0 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000759ee0 R12: ffff888126b72800
R13: ffff888126b72bc4 R14: 1ffff11024d6e578 R15: 0000000000000005
FS:  0000555563b15500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fda39470000 CR3: 0000000114098000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 __scsi_scan_target+0x62c/0xc20 drivers/scsi/scsi_scan.c:1771
 scsi_scan_channel drivers/scsi/scsi_scan.c:1842 [inline]
 scsi_scan_host_selected+0x352/0x610 drivers/scsi/scsi_scan.c:1871
 scsi_scan drivers/scsi/scsi_sysfs.c:151 [inline]
 store_scan+0x4ba/0x550 drivers/scsi/scsi_sysfs.c:191
 dev_attr_store+0x76/0xa0 drivers/base/core.c:2440
 sysfs_kf_write+0x13e/0x160 fs/sysfs/file.c:136
 kernfs_fop_write_iter+0x316/0x510 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x75f/0xfd0 fs/read_write.c:684
 ksys_write+0x145/0x260 fs/read_write.c:737
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x7f/0x90 fs/read_write.c:746
 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fe9f579e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdfc610a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fe9f5a25fa0 RCX: 00007fe9f579e0d9
RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003
RBP: 00007fe9f5835024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe9f5a25fac R14: 00007fe9f5a25fa0 R15: 00007fe9f5a25fa0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:scsi_target_reap+0x172/0x180 drivers/scsi/scsi_scan.c:594
Code: 81 fe e9 ef fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 46 ff ff ff 4c 89 ef e8 18 9b 81 fe e9 39 ff ff ff e8 fe be 28 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a8 40 3a b2 90 90 90
RSP: 0018:ffffc90003acf7a8 EFLAGS: 00010293
RAX: ffffffff835eb2c2 RBX: ffff888126b72800 RCX: ffff8881151acc00
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
RBP: ffffc90003acf7d0 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000759ee0 R12: ffff888126b72800
R13: ffff888126b72bc4 R14: 1ffff11024d6e578 R15: 0000000000000005
FS:  0000555563b15500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fcb1b270000 CR3: 0000000114098000 CR4: 00000000003526b0

final repro crashed as (corrupted=false):
------------[ cut here ]------------
kobject: '(null)' (ffff888116bae548): is not initialized, yet kobject_put() is being called.
WARNING: CPU: 1 PID: 406 at lib/kobject.c:736 kobject_put+0x8e/0x2a0 lib/kobject.c:734
Modules linked in:
CPU: 1 UID: 0 PID: 406 Comm: syz.0.21 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:kobject_put+0x8e/0x2a0 lib/kobject.c:734
Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 44 e1 44 fc 48 8b 33 48 c7 c7 a0 07 9b 86 48 89 da e8 22 dd 68 fb <0f> 0b eb 0f e8 e9 04 ec fb e9 9c 01 00 00 e8 df 04 ec fb 4c 8d 7b
RSP: 0018:ffffc90003acf1f8 EFLAGS: 00010246
RAX: 7f9cb788c9c2ff00 RBX: ffff888116bae548 RCX: ffff8881151acc00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: ffffc90003acf220 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0e9f34c R12: 00000000fffffff4
R13: ffff888116bae584 R14: 1ffff11022d75cb0 R15: 0000000000000000
FS:  0000555563b15500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffeb9e53ed4 CR3: 0000000114098000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 put_device+0x23/0x40 drivers/base/core.c:3800
 __scsi_remove_device+0xc4/0x3c0 drivers/scsi/scsi_sysfs.c:1501
 scsi_alloc_sdev+0x970/0xcc0 drivers/scsi/scsi_scan.c:379
 scsi_probe_and_add_lun+0x1e9/0x3e60 drivers/scsi/scsi_scan.c:1207
 __scsi_scan_target+0x1f1/0xc20 drivers/scsi/scsi_scan.c:1754
 scsi_scan_channel drivers/scsi/scsi_scan.c:1842 [inline]
 scsi_scan_host_selected+0x352/0x610 drivers/scsi/scsi_scan.c:1871
 scsi_scan drivers/scsi/scsi_sysfs.c:151 [inline]
 store_scan+0x4ba/0x550 drivers/scsi/scsi_sysfs.c:191
 dev_attr_store+0x76/0xa0 drivers/base/core.c:2440
 sysfs_kf_write+0x13e/0x160 fs/sysfs/file.c:136
 kernfs_fop_write_iter+0x316/0x510 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x75f/0xfd0 fs/read_write.c:684
 ksys_write+0x145/0x260 fs/read_write.c:737
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x7f/0x90 fs/read_write.c:746
 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fe9f579e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdfc610a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fe9f5a25fa0 RCX: 00007fe9f579e0d9
RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003
RBP: 00007fe9f5835024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe9f5a25fac R14: 00007fe9f5a25fa0 R15: 00007fe9f5a25fa0
 </TASK>
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
refcount_t: underflow; use-after-free.
WARNING: CPU: 1 PID: 406 at lib/refcount.c:28 refcount_warn_saturate+0x119/0x1c0 lib/refcount.c:28
Modules linked in:
CPU: 1 UID: 0 PID: 406 Comm: syz.0.21 Tainted: G        W          syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:refcount_warn_saturate+0x119/0x1c0 lib/refcount.c:28
Code: 05 01 48 c7 c7 c0 f0 51 86 e8 23 44 55 fe 0f 0b eb da e8 ea 6b d8 fe c6 05 68 49 36 05 01 48 c7 c7 20 f1 51 86 e8 07 44 55 fe <0f> 0b eb be e8 ce 6b d8 fe c6 05 49 49 36 05 01 48 c7 c7 60 f0 51
RSP: 0018:ffffc90003acf1d8 EFLAGS: 00010246
RAX: 7f9cb788c9c2ff00 RBX: 0000000000000003 RCX: ffff8881151acc00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: ffffc90003acf1e8 R08: ffffc90003aceec7 R09: 1ffff92000759dd8
R10: dffffc0000000000 R11: fffff52000759dd9 R12: 0000000000000000
R13: ffff888116bae584 R14: ffff888116bae580 R15: ffff888116bae580
FS:  0000555563b15500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffeb9e53ed4 CR3: 0000000114098000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 __refcount_sub_and_test include/linux/refcount.h:400 [inline]
 __refcount_dec_and_test include/linux/refcount.h:432 [inline]
 refcount_dec_and_test include/linux/refcount.h:450 [inline]
 kref_put include/linux/kref.h:64 [inline]
 kobject_put+0x25a/0x2a0 lib/kobject.c:737
 put_device+0x23/0x40 drivers/base/core.c:3800
 __scsi_remove_device+0xc4/0x3c0 drivers/scsi/scsi_sysfs.c:1501
 scsi_alloc_sdev+0x970/0xcc0 drivers/scsi/scsi_scan.c:379
 scsi_probe_and_add_lun+0x1e9/0x3e60 drivers/scsi/scsi_scan.c:1207
 __scsi_scan_target+0x1f1/0xc20 drivers/scsi/scsi_scan.c:1754
 scsi_scan_channel drivers/scsi/scsi_scan.c:1842 [inline]
 scsi_scan_host_selected+0x352/0x610 drivers/scsi/scsi_scan.c:1871
 scsi_scan drivers/scsi/scsi_sysfs.c:151 [inline]
 store_scan+0x4ba/0x550 drivers/scsi/scsi_sysfs.c:191
 dev_attr_store+0x76/0xa0 drivers/base/core.c:2440
 sysfs_kf_write+0x13e/0x160 fs/sysfs/file.c:136
 kernfs_fop_write_iter+0x316/0x510 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x75f/0xfd0 fs/read_write.c:684
 ksys_write+0x145/0x260 fs/read_write.c:737
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x7f/0x90 fs/read_write.c:746
 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fe9f579e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdfc610a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fe9f5a25fa0 RCX: 00007fe9f579e0d9
RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003
RBP: 00007fe9f5835024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe9f5a25fac R14: 00007fe9f5a25fa0 R15: 00007fe9f5a25fa0
 </TASK>
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
kobject: '(null)' (ffff888116bae1d0): is not initialized, yet kobject_put() is being called.
WARNING: CPU: 1 PID: 406 at lib/kobject.c:736 kobject_put+0x8e/0x2a0 lib/kobject.c:734
Modules linked in:
CPU: 1 UID: 0 PID: 406 Comm: syz.0.21 Tainted: G        W          syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:kobject_put+0x8e/0x2a0 lib/kobject.c:734
Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 44 e1 44 fc 48 8b 33 48 c7 c7 a0 07 9b 86 48 89 da e8 22 dd 68 fb <0f> 0b eb 0f e8 e9 04 ec fb e9 9c 01 00 00 e8 df 04 ec fb 4c 8d 7b
RSP: 0018:ffffc90003acf1f8 EFLAGS: 00010246
RAX: 7f9cb788c9c2ff00 RBX: ffff888116bae1d0 RCX: ffff8881151acc00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: ffffc90003acf220 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0e9f34c R12: ffffffff86630e90
R13: ffff888116bae20c R14: 1ffff11022d75c41 R15: 0000000000000000
FS:  0000555563b15500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffeb9e53ed4 CR3: 0000000114098000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 put_device+0x23/0x40 drivers/base/core.c:3800
 __scsi_remove_device+0x32d/0x3c0 drivers/scsi/scsi_sysfs.c:1527
 scsi_alloc_sdev+0x970/0xcc0 drivers/scsi/scsi_scan.c:379
 scsi_probe_and_add_lun+0x1e9/0x3e60 drivers/scsi/scsi_scan.c:1207
 __scsi_scan_target+0x1f1/0xc20 drivers/scsi/scsi_scan.c:1754
 scsi_scan_channel drivers/scsi/scsi_scan.c:1842 [inline]
 scsi_scan_host_selected+0x352/0x610 drivers/scsi/scsi_scan.c:1871
 scsi_scan drivers/scsi/scsi_sysfs.c:151 [inline]
 store_scan+0x4ba/0x550 drivers/scsi/scsi_sysfs.c:191
 dev_attr_store+0x76/0xa0 drivers/base/core.c:2440
 sysfs_kf_write+0x13e/0x160 fs/sysfs/file.c:136
 kernfs_fop_write_iter+0x316/0x510 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x75f/0xfd0 fs/read_write.c:684
 ksys_write+0x145/0x260 fs/read_write.c:737
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x7f/0x90 fs/read_write.c:746
 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fe9f579e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdfc610a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fe9f5a25fa0 RCX: 00007fe9f579e0d9
RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003
RBP: 00007fe9f5835024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe9f5a25fac R14: 00007fe9f5a25fa0 R15: 00007fe9f5a25fa0
 </TASK>
---[ end trace 0000000000000000 ]---
scsi_alloc_sdev: Allocation failure during SCSI scanning, some SCSI devices might not be configured
------------[ cut here ]------------
kernel BUG at drivers/scsi/scsi_scan.c:594!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 0 UID: 0 PID: 406 Comm: syz.0.21 Tainted: G        W          syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:scsi_target_reap+0x172/0x180 drivers/scsi/scsi_scan.c:594
Code: 81 fe e9 ef fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 46 ff ff ff 4c 89 ef e8 18 9b 81 fe e9 39 ff ff ff e8 fe be 28 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a8 40 3a b2 90 90 90
RSP: 0018:ffffc90003acf7a8 EFLAGS: 00010293
RAX: ffffffff835eb2c2 RBX: ffff888126b72800 RCX: ffff8881151acc00
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
RBP: ffffc90003acf7d0 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000759ee0 R12: ffff888126b72800
R13: ffff888126b72bc4 R14: 1ffff11024d6e578 R15: 0000000000000005
FS:  0000555563b15500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fda39470000 CR3: 0000000114098000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 __scsi_scan_target+0x62c/0xc20 drivers/scsi/scsi_scan.c:1771
 scsi_scan_channel drivers/scsi/scsi_scan.c:1842 [inline]
 scsi_scan_host_selected+0x352/0x610 drivers/scsi/scsi_scan.c:1871
 scsi_scan drivers/scsi/scsi_sysfs.c:151 [inline]
 store_scan+0x4ba/0x550 drivers/scsi/scsi_sysfs.c:191
 dev_attr_store+0x76/0xa0 drivers/base/core.c:2440
 sysfs_kf_write+0x13e/0x160 fs/sysfs/file.c:136
 kernfs_fop_write_iter+0x316/0x510 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x75f/0xfd0 fs/read_write.c:684
 ksys_write+0x145/0x260 fs/read_write.c:737
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x7f/0x90 fs/read_write.c:746
 x64_sys_call+0x271c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fe9f579e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdfc610a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fe9f5a25fa0 RCX: 00007fe9f579e0d9
RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003
RBP: 00007fe9f5835024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe9f5a25fac R14: 00007fe9f5a25fa0 R15: 00007fe9f5a25fa0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:scsi_target_reap+0x172/0x180 drivers/scsi/scsi_scan.c:594
Code: 81 fe e9 ef fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 46 ff ff ff 4c 89 ef e8 18 9b 81 fe e9 39 ff ff ff e8 fe be 28 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a8 40 3a b2 90 90 90
RSP: 0018:ffffc90003acf7a8 EFLAGS: 00010293
RAX: ffffffff835eb2c2 RBX: ffff888126b72800 RCX: ffff8881151acc00
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
RBP: ffffc90003acf7d0 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000759ee0 R12: ffff888126b72800
R13: ffff888126b72bc4 R14: 1ffff11024d6e578 R15: 0000000000000005
FS:  0000555563b15500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fcb1b270000 CR3: 0000000114098000 CR4: 00000000003526b0