last executing test programs: 4.193611914s ago: executing program 1 (id=5): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x142, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) chdir(&(0x7f0000000040)='./proc\x00') write(r2, &(0x7f0000000000)='7', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000000c0)={0x40002006}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x20000002}) dup3(r3, r5, 0x0) munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r6, 0xc33e, 0x2) getdents64(r6, 0xfffffffffffffffe, 0x29) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, 0x0, 0x1, 0x0, 0x0) 4.094736338s ago: executing program 1 (id=8): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x30e, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x481}, 0x8000000) syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r5) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x800) 4.021065002s ago: executing program 3 (id=11): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4009, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f00000004c0)='q', 0x5e0, 0x881, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x87, 0x6, @broadcast}, 0x14) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r3 = open$dir(&(0x7f00000001c0)='./mnt\x00', 0x80200, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000500)={{r0, &(0x7f0000000280)='!\x00', 0x2118c0, &(0x7f00000002c0)={@align=0xf, {0xfb, 0x81, 0x9, 0x5}}, 0x8, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000380)=0x1}, {[0x4, 0x400, 0x8, 0x33]}, 0x4, 0xb2, &(0x7f00000003c0)=""/178}) renameat2(r3, &(0x7f0000000240)='./dev\x00', r4, &(0x7f0000000580)='./mnt\x00', 0x2) mount(&(0x7f00000000c0)=@filename='./dev\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) rt_sigprocmask(0x0, &(0x7f0000000100)={[0x8fffffffffffe]}, 0x0, 0x8) r5 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r5}, &(0x7f0000000140)=0x0) timer_settime(r6, 0xe54aef35e9c2845d, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x40086610, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') close_range(r8, r8, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x5, 0xff, 0x0, 0x4}, {0x8, 0x0, 0x81, 0x7c}]}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 4.020101702s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x5, 0x400, 0xffffffff, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x2, 0x0, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x4000000) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x38220d2, &(0x7f0000000140)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.978272884s ago: executing program 1 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') add_key(&(0x7f0000000140)='id_legacy\x00', 0x0, &(0x7f0000000700)="308201d43082017ba00302010202142eea648d7f17e62e9e58692448c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f43657274696669636174652076636174696f6e2045434453012073656c662d74657374696e67206b65793020170d3234303431333932313632365a180f32313234103332303232313632365a303a3138303606035504030c2f43657274696669636174652076657269666963000e696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b378171039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000150b8a43f2dc0f04ec03020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d794a1c7ad75dd83bd385bca9b4b67b1f69c6aaf71452c737c8e4beccc2e06c9a13f01d3c4f8414428925f58b48f3d181fe2a184e83ca2e354a705989c056234f835aaa0d54d35c1053b0fd74e9d4e64ddf66e0ea8e431fb620e94291c8805c4dafdc8b576ad559cfda4de68fa0ace192a4355d496a58927ec8775a2a6be35a7ffb2c0591a3b105bbcb4903290213c3c704a3db9eba7772f2b5c7337b02abcb9b3c34a24a7f5b899cd74391a0e58b15d500efe42df898f3413c3504c6c05a4fe987b8e4e355c4db71d68cc306690304ae1a9672bdb7417ba2", 0x2a5, 0xffffffffffffffff) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='security.selinux\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403010002100708240201000400"], 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020021", 0x4}], 0x3) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x41d}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, 0x1000, 0x6}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) faccessat2(r2, &(0x7f0000000040)='./file0/../file0\x00', 0x8d, 0x1000) 3.935901836s ago: executing program 2 (id=15): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921080800012201000905810377fe"], 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0xc, {0x0, 0x1}, {0x74, 0x2}, @ramp={0x101, 0x8, {0xd, 0x1, 0x207, 0xcc1}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001740)={0x0, 0x0, 0x0}) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="200c590008000c8ac451"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.173073801s ago: executing program 3 (id=17): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x149a82, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x922]}, 0x8) (async) r4 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES8=r4, @ANYBLOB='\a'], 0x0) (async) munmap(&(0x7f0000c06000/0x2000)=nil, 0x2000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x2, 0x5, 0x0, 0x2, 0x1f, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4a, 0x2, 0x3, 0xb0d, 0x6, 0x10000}, @sadb_x_sec_ctx={0x17, 0x18, 0x35, 0x9, 0xa9, "8d551c47c74a07057757ec16ac6abf6dd8033e132f261d54f31f7d83f97d439ae2793de11d28be7ec9b7f48f0de86c1c1f8468d911aac4ea45ffceb0ace5107482187fb92fe6676c0f586f76219d0ed4bf108aee44b2b0a5f8a61d71bc12ff9c386f84d2b64532edf5deacedbbc303ee372412d1043c19faf9bcb38e994bb8aa8008511f65c10c859a1cee8fd6c574cd80d78fd59a433cab66c1859679ecd20147efeec142df316c34"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}]}, 0xf8}, 0x1, 0x7}, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8380, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x7a) (async) timer_settime(0x0, 0x1, 0x0, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2.787925879s ago: executing program 1 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r1, 0x1, 0x1, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9d}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x24}, 0x1, 0x0, 0x2100000000000000}, 0x0) 2.77806119s ago: executing program 1 (id=19): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f00000004c0)={0x40, 0xe, 0x101, {0x101, 0x2f, "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"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000000840)={0x34, &(0x7f0000000680)={0x40, 0xa, 0x5a, "72a3de757f7d7471e3b4c4b3264b4eb138fb270750d02ac201db0ea66ac070713c2e13dfaecab778556020e0ad6899dd4055d1a7ded4a32ee728cc8a8032a8a749c4e3c560d8daf9cd987056676c55fd12707d952b2688798356"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f00000007c0)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "60a1d70cee123ce66400d47003b4d0f7725cec63744270c07899e364ae3fbb038a3457e2db87a83d71150e80ab54c1"}}) read$FUSE(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x4, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0xe0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0xe35}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x8}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x201, 0x6, 0x0, 0x7, 0x10, 0x2}, 0xdf, &(0x7f0000000900)={0x5, 0xf, 0xdf, 0x3, [@ptm_cap={0x3}, @generic={0xd0, 0x10, 0x0, "b617880b1654bbfad25ae5ec41416f24f92638a30215f2640d3d173ed86f796bae6ebbbed0bf74f7cf7c06337449d4bf270cc2ba504dfaaf810e96408eaf5d55adac245a56905eef991a9cae942031a33de552d5d6fc1ad24018782428fdbb5bcff0e3f21f996572ac6e4163fc43dafca2df92f2a356191dbaf64edb805d43bdbe97d3251a4818e226d30b324e2424d69ede5842e39bc7208cf9ce4f876c06472c6ad423dedbb2a56029099703e5d335baf668ad09a0e25b2ce34a24cc1b571f72aee1e55146cd45fb92b63e46"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x3, 0x4}]}, 0x7, [{0x7a, &(0x7f0000000a00)=@string={0x7a, 0x3, "fe3c87224b097becc7b401aafb3d2c962ca80b2e9cec08bea82fc63d7ba38257614054311f6f23644705cc29cc4d20be56e2605091372a0b979d04ad237f8a6348c202ca6424be2aa3aa96c30fa0ea36f9aa8aad9d35ba45fc5520a2691b057204e12e76edf7493a96037ecb382b348dd6c1e6272fc7c8d8"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xc0a}}, {0xb9, &(0x7f0000000b00)=@string={0xb9, 0x3, "def502723b260000aff74f380bf74ad2d1afea1b9dc30c4b60c0b26fe386bb2025d0390ff2974ff895da52af4fb540882b94cf698fc7214f6bf66b25d8ae12329581e8d1470818f353e10fb87caecfb3537ad3b95c5fe1c797daf38c3b3f8e28d70dd8e91aeba8fb149392bc498e102957cc1891ec9014a56e2870afe1332bb292aa383e75d8ed7a90c61eb1ec2c709392f69a241c39a5a69249f1f3870f8aa0e06e483b3e18547a721a09cacc3a3029448a50c878c50a"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x827}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0xc080661a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20) setuid(0xee00) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x3, 0x0, 0x40, 0x8}, 0x20) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x40, 0x3, 0x21, {0x21, 0x30, "59d6866dff8b412779c7f25b3b43ea322284fc0b1a19816c97c3c5493148fb"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, &(0x7f0000000140)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x49c}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x20, 0x13, 0x6d, "d8f42aa57da3e24c63050b0486563d3305317a580af21f2636e1da6ce08132ad80515f85a15e24df5780806881e3349f39a2b65e017d00782f940b228c4f206080c4dc19a1d2e3834d5ac9dc9eff386777964186785622309967bedbe4db6ed9a55b6e763ed2d5515745bb5286"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x1, 0xbc, "94e7afb76c1419fa9367c5399e3b88a01eb3e2a1145be181f7bc64e94d48cd73a20f0714f98eee62224d90aa2106cff5d38c95ce15d8fa0c1ce9d6a6feada375a914131863170ae086abb95d1138d1592683c5a1f3a3c8ba04beaf5c0e91df20c555159eb5a7b2c01d401809b65b8a998fd9b4407e2bc44482298b7953e3a57518f677a164f80bb3ded978d6f2a98fd64259ba7ddf6b696b01fe2ae31b1deab476f691380e3f4f764a70a4a558c99ed6120ad43c09734f22558423ec"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x14}}) ioprio_set$uid(0x3, 0xee01, 0x2004) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000000)={0x20, 0x13, 0x6, "c96bb104b5d7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.954869298s ago: executing program 2 (id=22): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x202, 0x46) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20044004}, 0x40000) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x27, 0x0, 0x1) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x280900, 0x2, 0x37}, 0x18) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000080)=0x2) syz_open_pts(r4, 0x6042) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) copy_file_range(r0, 0x0, r5, &(0x7f0000000100)=0x20008a, 0x400000000000002, 0x0) 1.877006232s ago: executing program 2 (id=23): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1.865620463s ago: executing program 2 (id=24): mkdir(&(0x7f0000000080)='./proc\x00', 0x7f29879262c8706e) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='of', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x30) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0xffffffff, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x277fffffffc, 0x0, 0x1, r3}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000480)=[{&(0x7f0000000040)="01", 0x1}, {0x0}], 0x2, 0x8b, 0x800) 1.773083407s ago: executing program 2 (id=25): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x22020600) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x2110, 0x4) sendmmsg(r2, &(0x7f0000000000)=[{{&(0x7f0000000640)=@ieee802154={0x24, @long={0x3, 0x2, {0x300}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d4", 0x1}], 0x1}}], 0x1, 0x4000000) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) poll(&(0x7f0000000000)=[{r1, 0x5}], 0x1, 0x90) timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x80000, 0x9, 0x0, 0x5}, {0x1, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xc}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x0, 0x4, 0x0, 0x1}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1.746730938s ago: executing program 2 (id=26): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$binfmt_format(r0, &(0x7f0000000000)='-1\x00', 0x3) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb65d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x56, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x77, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0xe, 0x0, 0x1, {0x22, 0xfc3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x32, 0xe}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x4b, 0x0, 0x4, 0xff, 0x2a}, 0x3b, &(0x7f00000000c0)={0x5, 0xf, 0x3b, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "5df1b5dfe55351be587dfa9a29b51793"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "9e4039eae8c56a0104ee7f4f42cc0feb"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x5, 0x9, 0x9, 0x3}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x827}}, {0xac, &(0x7f0000000140)=@string={0xac, 0x3, "2c1fb40bbfc720db6319f2eed631783ae3816ce102f37df32a7931ac4c752bf890d5c3584e80faa1a728921401bfc6a407a9a268edd3c54abf03745e8014fba5805b1ce47744b22c180fb4d2d8e636499690353c0eba72d1a6731c29f68fb5db81f420975ac0c2d099a432dc0f05ccddc1f0aaeb1c88bf23570dbf33b8c1c8686cb0b91b58947fa621167613dddd617fcdced25142f679c734c78d1def200557311aa3a9fad696f45ba0"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2426}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3001}}, {0x62, &(0x7f00000002c0)=@string={0x62, 0x3, "d3f9069834c8ebceea18cb556abf36b74cf558b9fa841cfce57d4fb2b9264293b59e1946ac018cf8584be7d592164831ccdaeee4c6e096e4b5c2f47f7a686be5b9b66268b9f759f8fb31fbf057a1dc1619c9d880b2942e1647cefc42d824c851"}}, {0xb7, &(0x7f0000000340)=@string={0xb7, 0x3, "f7afff5bf2da318f94967227e656a77140b75ddc9fbca84f66f7dc6670b026b808de7259721e78d4e5a177d7591a9be6685f7e37c66aca8b7f8b1ac1c4d9d24ccf593d0bf3e4c14fe27374c174843fc93a1c8e6c100e1772a223b76e786b0762f339b26926db8099021ad7bdc948ba8d7a3dc1ea9d3c87e41ac6ef2e095b553dfdbaa05e9903b46fd13439ef2dc64c695b9766b8733d555d047b01dfd661b0300c0e2a55c85160e2d576e2d83129157f6287716856"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc09}}]}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000004c0)="9609326f42b89576c90814b3d8f763050e6ecdf547c6aece38afcb488f98dac6fedf34d984a1147d5913dde7e908ee13f3982e3d075b43986c73ca0f31f11fce9fb4df48f0c818d9dde4a971d28a2351189089c95c32d6989f792729379c057cdaf14b087218e19a62b8324ccc7efc7f453bf5861fc1fa52cee0b73c10d0dc141bea0699418801c09616b3760546676d7771ecca8876efde32c443c0f8deb447f0cc7d1b9373b087577ad378969e8d9895a225844cccb2962253b99b0f2f9305d3945fa35c6f287427a81e2871e6c49f59ed969468f1d4779706816cb876551c03eea73df25c", 0xe6) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e20, 0xfa3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x0, 0x0, 0x32, 0x0, "e6e323e8feece32710a2e2b7fed4f036ff150702be329599e704043508c64f27bc57982e5da09ef9fba8c6960e2c9ba4b20cdfda3e94539ce353485d267922eba88e99a52886accd9cd16323da3d6fdd"}, 0xd8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x4, 0x7, 0x8, 0x107d010f, 0x100, 0x9}, {0xfffff970, 0x4, 0x13, 0x3}], ['\x00', '\x00', '\x00', '\x00']}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000880), 0xeb00, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0xffff) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={0x0, 0x6, 0x7}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000cc0)={0x0, 0x81, 0xffffffff}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000010c0)={0x4, 0x0, {0x6, @struct={0x367c388}, r2, 0x81, 0x6, 0x30, 0x20, 0x9, 0x400, @struct={0x3, 0x1}, 0x5, 0xfffffff9, [0x1, 0x5, 0xa4d, 0x5, 0x4, 0xffffffff]}, {0x35d, @usage=0x9, r3, 0x6fb4, 0x40, 0x702dc135, 0x5e8, 0x4, 0x54ceacb49b95ce75, @usage=0x5, 0x96b3, 0x476, [0x4, 0x7, 0x0, 0x6, 0x6]}, {0xc0, @usage=0x101, 0x0, 0x4, 0x7, 0x9, 0x3, 0x5, 0x36, @usage=0x5, 0x9, 0x2abc, [0x6, 0xa15e, 0x2, 0x9, 0xdd, 0x1]}, {0x1c, 0x80000000, 0x5}}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000014c0)={0x3, 0x8}) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDADDIO(r4, 0x4b34, 0x6) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001500), &(0x7f0000001540)=0x4) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xa2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001580)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000015c0)) r5 = openat2(r0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x802, 0x100, 0x4}, 0x18) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r5, 0x3309) syz_open_dev$char_usb(0xc, 0xb4, 0x9) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac1(0x3, 0xb6, &(0x7f0000001680)={{0x12, 0x1, 0x11, 0x0, 0x0, 0x0, 0x18, 0x41e, 0x3263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x84, 0x70, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1445, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x3, 0x7, 0x0, "3e344c18b1fedd1747"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x1b2, 0x1, 0xf}, @as_header={0x7, 0x24, 0x1, 0x1a, 0xb, 0x3}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x40, 0x9c, 0x8, "06"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x2, 0x6, {0x7, 0x25, 0x1, 0x8, 0xd, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x2, "f2c00540fe176ded54"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x7f}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x40, 0x3, 0x0, {0x7, 0x25, 0x1, 0xc, 0x9, 0x7}}}}}}}}]}}, &(0x7f0000001b40)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x110, 0xff, 0x1, 0x7, 0x10, 0x4}, 0x8f, &(0x7f0000001780)={0x5, 0xf, 0x8f, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x6, 0xf000, 0xfff, [0x3f3f, 0xffcf, 0x0, 0xff00f0, 0xff3f00]}, @generic={0x6a, 0x10, 0xe, "54107d02530b522898cf7f29f3e675bbfa215e80597cc90cb362cc184d924ce2ab4233227f9b0c91169f7fb817af1be25e6f69eed05d277d4deda4d04bcbc66a68ebb5f3dfd88384aa05af41ea3a154d8b641e920f9ef0deb3a08d10c52662e2d3a6be23c6f1b0"}]}, 0x6, [{0xb5, &(0x7f0000001840)=@string={0xb5, 0x3, "9146c5280b65437e484fc1f7457ba8bded57d9542b16a5129fcf9cf1e745fe2e5dd61065131aa45ace85d50aae6d3b3bc13718ec8580a618162da4fe8d461adeced53b3e6ecf26a31bafe6e1b21dbbb536e7076eee29d9d0cd9c88afb17ed57b6444ca0189eb2fec2abd3bae55c6349e9716602e85b31a24cf50a65787bc2071f13e9cbe85f59dd4b310339071783eefec580da7f4e4587671d5995c8496cc7b943a272ebfcf563fc721ef1e27d47c6309d674"}}, {0xbf, &(0x7f0000001900)=@string={0xbf, 0x3, "3e7241e3b7551dc20d53f7abc433b02054601379b0a8fbe6a7cd30b457dd96cc71648b136c06051828dd429493114da7ff05e97f080dd650d79d2e1562d4041d713823a8ef990eaea476d48fd467999bfbbcd035d8b37688efd244dc96f8ba7d3b27a9409af1777149ff8d369e5945251c81b11f3c8af8acb28d573e0d723deaaa8c73c68ff5ecef1adb9c28d7d80d633a6625783e610c444563aece88220adfa8780ef64ee547178fa8d5e36b9ee64fabed5c90b306c35cdb0d0d9ddd"}}, {0x7e, &(0x7f00000019c0)=@string={0x7e, 0x3, "343b14a6100631ec3de74bca722893cf4b4c20598ddd5a65eb45dc02ec8256613dedc87e3f4dc06125f67b61130bf8fe6451a4c36c86511dbcb11a8fac13a38619c22d695158c032941a5128f715bb14b7a6bd3d2219068da49f30e7e9e33b9da19ee2d501e4558832e39e15468cecf7790761f3a2786b7a32521296"}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x42a}}, {0x63, &(0x7f0000001ac0)=@string={0x63, 0x3, "81e77eec857508e6a1fb862216c3f7e735a78dd370b590ca25a4d130b44584c818a5b87596e46b3c4337b36779ec91391da8a12bb7cf7d7432c2ff18bb5d9f81dbda89401454a0bb1351fdae42e6fa9ffe1301f29ffb054b9e8b0a8bb934cba053"}}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001bc0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001c00)={r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001c40)={0x0, @local, @private}, &(0x7f0000001c80)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000001cc0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2a, r7}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000001d00)={0x2000}) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001d80), r5) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x28, r8, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x28}}, 0x4000000) 1.532185918s ago: executing program 0 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c1000000000244e", 0x55}, {&(0x7f0000000280)="8df8ec", 0x3}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000008000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000001000)={0x0, 0x0}) ioctl$KVM_SET_XCRS(r7, 0x4188aea7, &(0x7f00000001c0)={0x5, 0x0, [{0x0, 0x0, 0x400000000007}, {0xffff, 0x0, 0x7}, {0x3ff, 0x0, 0x1}, {0x25, 0x0, 0x1000000000000004}, {0x5, 0x0, 0x1000}, {0x800400, 0x0, 0x4200000ffffffff}, {0x7, 0x0, 0x4}, {0x1, 0x0, 0xfffffffffffffff7}, {0xffff, 0x0, 0x7}, {0x1, 0x0, 0x3}, {0x4, 0x0, 0x1}, {0xfffffff7, 0x0, 0x1ff}, {0x5, 0x0, 0x743}, {0x5, 0x0, 0x7fffffffffffffff}, {0x7af6, 0x0, 0x9}, {0x2, 0x0, 0xc65e607}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000800)=@x86={0x81, 0xb, 0x9e, 0x0, 0x1, 0x0, 0x80, 0x3, 0x8, 0x6, 0x9, 0x8, 0x0, 0x3, 0x9, 0x0, 0x3, 0x5, 0x8, '\x00', 0x8, 0xd}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000a80)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x110, 0x1f8, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010102, @broadcast, 0x4}}}, {{@arp={@broadcast, @loopback, 0x0, 0x0, 0x16, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="d82d6bab149c", {[0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'vxcan1\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.349086497s ago: executing program 0 (id=34): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) fremovexattr(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="0fae0bf2dc6f710000de3e0f79f3f32e65daa0a40066660f3880760d66b9800000c00f326635000400000f30ba4200b000eeba2100b84200000f0b", 0x3b}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f00001f0000/0x1000)=nil, 0x1000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x870ed000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x6c0b, &(0x7f0000000040)={0x0, 0x1323, 0xc002, 0x6, 0x3c7}, 0x0, 0x0, 0x0) 516.735796ms ago: executing program 0 (id=35): setresgid(0xee00, 0x0, 0xee01) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000001c0)={0x0, 0x1, 0xa, 0x9}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000002c0)=""/194, &(0x7f00000003c0)=0xc2) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x4d523000) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0xe71}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB="4ab02adad89c00d12d80b14034d4f7b4dc5363edba294d6b76b25e7b44bf8e22e48e5ff673d0cf223377048c4223c413f9274750a523e1595d807f1d3a9057b6cba5b976ab68bf70604bd66aba4d6e36331f2ccc349b003f70a426b66cc6936d470d2f0de7984554e9543a882a04e55863b1b753a7e1c06a6ee99d59cca21a93c3c8cf5d36177c405756e1064b468df28695f8459da900d8eddfbe7aae00e0d88c39d814b318c3d1703d68ab10dbb037aae3ffa87216000000000000", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) 451.350469ms ago: executing program 0 (id=36): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0xffffff7f, @private2, 0x4}, {0xa, 0x4e22, 0x3, @private2, 0x40}, 0xffffffffffffffff, {[0x3ff, 0x8001, 0x8, 0x9, 0x6, 0xfdcb, 0x8000, 0xfffffff9]}}, 0x5c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080), 0x4) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000300)={{r3, &(0x7f0000000180)='\x00', 0xa8041, &(0x7f00000001c0)={@align=0x3, {0x6, 0x6, 0x6, 0x1ff}}, 0x4, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x7}, {[0x6, 0x2, 0xc8, 0x4]}, 0x3, 0x7e, &(0x7f0000000280)=""/126}) inotify_add_watch(r4, &(0x7f0000000380)='./file0\x00', 0x40000080) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f00000003c0)=0x2) read$FUSE(r4, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002500)={0x0, 0x0, 0x0}, &(0x7f0000002540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f0000002680)=0xe8) fstat(r0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002740)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@dev}}, &(0x7f0000002840)=0xe8) fstat(r1, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r4, &(0x7f00000029c0)={0x2a0, 0x0, r5, [{{0x4, 0x3, 0x4, 0x69b2, 0x9963, 0x3ff, {0x3, 0xfffffffffffffffd, 0x80000001, 0x92, 0x2, 0xffffffff, 0x100, 0x9, 0x7, 0x6000, 0x7fff, r6, r7, 0xb, 0x5}}, {0x6, 0x4, 0x1, 0x6, '\x00'}}, {{0x6, 0x1, 0x9, 0x81, 0x8, 0x2, {0x0, 0x8, 0x6, 0x8, 0x6, 0x9, 0x6, 0x2b05827c, 0x7, 0x4000, 0x4, r8, r9, 0x7ff, 0x7}}, {0x1, 0x3, 0x15, 0x5, '-]]##$.%-9^}#*\x0f,#&}{&'}}, {{0x1, 0x3, 0x391, 0x3, 0x4a89073d, 0x8, {0x4, 0xd, 0x6d3, 0xa, 0x7, 0xfffffffe000000, 0x9, 0x2, 0x8001, 0xa000, 0x771e, r10, r11, 0x9, 0xa}}, {0x2, 0x3, 0x1, 0xc, '\x00'}}, {{0x8, 0x2, 0xff, 0x5, 0xc, 0xbc5, {0x0, 0x2, 0x489, 0x4, 0x8000, 0xe, 0x0, 0x8, 0xc, 0xc000, 0xf, 0x0, r12, 0x7ff, 0x5}}, {0x0, 0x5f54, 0x2, 0x1, ')!'}}]}, 0x2a0) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002c80)='/sys/power/disk', 0x80000, 0x45) ioctl$BLKIOOPT(r13, 0x1279, &(0x7f0000002cc0)) bind$netlink(r13, &(0x7f0000002d00)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) sendmmsg$unix(r13, &(0x7f0000002d40), 0x0, 0x20004080) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000002d80)={0x10, 0xff}) write$FUSE_DIRENT(r4, &(0x7f0000002dc0)={0x30, 0xfffffffffffffffe, r5, [{0x4, 0x6a52, 0x1, 0x3, '\x00'}]}, 0x30) move_mount(r4, &(0x7f0000002e00)='./file0\x00', r4, &(0x7f0000002e40)='./file0\x00', 0x0) poll(&(0x7f0000002e80)=[{r4, 0x2}, {r1, 0x90}, {r0, 0x501}, {r13, 0x202}], 0x4, 0x2) 374.203222ms ago: executing program 0 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r1, 0x1, 0x1, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9d}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x21}, 0x0) 369.863742ms ago: executing program 0 (id=38): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x25dfdbfd, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x70bd2a, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x20, 0x8680) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x11c, r2, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe0}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a, 0x5}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0xfffd, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac14141d080002007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) getsockopt$sock_buf(r7, 0x1, 0x1a, 0x0, &(0x7f0000000480)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x138}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 85.398706ms ago: executing program 3 (id=39): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f00000033c0)={'sit0\x00', 0x0, 0x40, 0x8000, 0xf3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x200, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}) 46.257038ms ago: executing program 3 (id=40): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001001f005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.223369ms ago: executing program 3 (id=41): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000400)={0xc, {0xb, "11ff010000000000000000"}}, 0x11) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0x2b, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "d8e6b73de1565eb69b90a1694439e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b098cb09513be41f6f1260430f39123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b4"}]}, 0x158}, 0x1, 0x7}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000000000/0x1000)=nil, 0x1000}) syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ss permissive=1 [ 13.944033][ T36] audit: type=1400 audit(1789635520.510:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 21.314070][ T36] audit: type=1400 audit(1789635527.890:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.315228][ T286] cgroup: Unknown subsys name 'net' [ 21.336734][ T36] audit: type=1400 audit(1789635527.890:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.364013][ T36] audit: type=1400 audit(1789635527.920:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.364202][ T286] cgroup: Unknown subsys name 'devices' [ 21.482358][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.487966][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.579994][ T36] audit: type=1400 audit(1789635528.150:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.603210][ T36] audit: type=1400 audit(1789635528.150:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.627913][ T36] audit: type=1400 audit(1789635528.150:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.656375][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.665141][ T36] audit: type=1400 audit(1789635528.240:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.690568][ T36] audit: type=1400 audit(1789635528.240:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.723916][ T36] audit: type=1400 audit(1789635528.300:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.724398][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.749407][ T36] audit: type=1400 audit(1789635528.300:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.536908][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.544018][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.551165][ T294] bridge_slave_0: entered allmulticast mode [ 22.557372][ T294] bridge_slave_0: entered promiscuous mode [ 22.563826][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.570928][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.577997][ T294] bridge_slave_1: entered allmulticast mode [ 22.584342][ T294] bridge_slave_1: entered promiscuous mode [ 22.627110][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.634188][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.641274][ T295] bridge_slave_0: entered allmulticast mode [ 22.647440][ T295] bridge_slave_0: entered promiscuous mode [ 22.655618][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.662677][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.669716][ T295] bridge_slave_1: entered allmulticast mode [ 22.676028][ T295] bridge_slave_1: entered promiscuous mode [ 22.682120][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.689143][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.696201][ T296] bridge_slave_0: entered allmulticast mode [ 22.702343][ T296] bridge_slave_0: entered promiscuous mode [ 22.722772][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.729821][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.736899][ T296] bridge_slave_1: entered allmulticast mode [ 22.743070][ T296] bridge_slave_1: entered promiscuous mode [ 22.790699][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.797765][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.804996][ T293] bridge_slave_0: entered allmulticast mode [ 22.811375][ T293] bridge_slave_0: entered promiscuous mode [ 22.820337][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.827412][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.834635][ T293] bridge_slave_1: entered allmulticast mode [ 22.841008][ T293] bridge_slave_1: entered promiscuous mode [ 22.958511][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.965625][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.972977][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.980007][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.991567][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.998618][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.005917][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.012956][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.038104][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.045188][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.052474][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.059489][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.071862][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.078922][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.086209][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.093252][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.131837][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.139234][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.147145][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.154650][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.161954][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.169121][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.176335][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.183592][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.194221][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.201283][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.224795][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.231895][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.239423][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.246471][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.254822][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.261869][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.280516][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.287563][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.295280][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.302342][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.314442][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.321508][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.333738][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.340796][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.375257][ T296] veth0_vlan: entered promiscuous mode [ 23.389545][ T295] veth0_vlan: entered promiscuous mode [ 23.397825][ T294] veth0_vlan: entered promiscuous mode [ 23.404861][ T296] veth1_macvtap: entered promiscuous mode [ 23.434390][ T295] veth1_macvtap: entered promiscuous mode [ 23.443228][ T293] veth0_vlan: entered promiscuous mode [ 23.452093][ T294] veth1_macvtap: entered promiscuous mode [ 23.476808][ T293] veth1_macvtap: entered promiscuous mode [ 23.490953][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.609461][ T327] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.649551][ T334] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 23.711166][ T343] ======================================================= [ 23.711166][ T343] WARNING: The mand mount option has been deprecated and [ 23.711166][ T343] and is ignored by this kernel. Remove the mand [ 23.711166][ T343] option from the mount to silence this warning. [ 23.711166][ T343] ======================================================= [ 23.781911][ T316] mmap: syz.0.1 (316) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 24.000470][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.040432][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.080575][ T351] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.150421][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 24.156536][ T10] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 24.165782][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.174847][ T10] usb 2-1: config 0 descriptor?? [ 24.200412][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 24.206746][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.218479][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 24.229734][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 24.238990][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.247820][ T65] usb 3-1: config 0 descriptor?? [ 24.253626][ T350] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 24.261023][ T351] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 24.272896][ T65] hub 3-1:0.0: USB hub found [ 24.277594][ T351] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.292637][ T351] usb 1-1: config 0 interface 0 has no altsetting 0 [ 24.299285][ T351] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 24.308357][ T351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.317214][ T351] usb 1-1: config 0 descriptor?? [ 24.381637][ T10] usb 2-1: string descriptor 0 read error: -71 [ 24.388872][ T10] uvcvideo 2-1:0.0: Found multiple Units with ID 1 [ 24.395567][ T10] usb 2-1: Found UVC 0.00 device (2833:0201) [ 24.402592][ T10] usb 2-1: No valid video chain found. [ 24.408803][ T10] usb 2-1: USB disconnect, device number 2 [ 24.463657][ T65] hub 3-1:0.0: 1 port detected [ 24.725553][ T351] usbhid 1-1:0.0: can't add hid device: -71 [ 24.731641][ T351] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 24.740283][ T351] usb 1-1: USB disconnect, device number 2 [ 24.770515][ T360] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.900442][ T360] usb 4-1: device descriptor read/64, error -71 [ 25.160421][ T360] usb 4-1: device descriptor read/64, error -71 [ 25.200734][ T65] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.240538][ T393] netlink: 'syz.0.20': attribute type 4 has an invalid length. [ 25.260506][ T395] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.272643][ T351] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 25.351629][ T65] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 25.361549][ T65] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 25.372992][ T65] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 25.382137][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.390118][ T65] usb 2-1: Product: syz [ 25.394328][ T65] usb 2-1: Manufacturer: syz [ 25.398916][ T65] usb 2-1: SerialNumber: syz [ 25.404201][ T65] usb 2-1: config 0 descriptor?? [ 25.409540][ T391] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 25.416816][ T391] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 25.424128][ T360] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.560568][ T360] usb 4-1: device descriptor read/64, error -71 [ 25.633014][ T391] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 25.640361][ T391] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 25.788639][ T399] Zero length message leads to an empty skb [ 25.820444][ T360] usb 4-1: device descriptor read/64, error -71 [ 25.930496][ T360] usb usb4-port1: attempt power cycle [ 26.049221][ T391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.058049][ T391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.066378][ T10] usb 3-1: USB disconnect, device number 2 [ 26.068834][ T65] Error reading MAC address [ 26.158659][ T422] netlink: 'syz.0.30': attribute type 4 has an invalid length. [ 26.220001][ T432] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 26.300462][ T360] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.321398][ T360] usb 4-1: device descriptor read/8, error -71 [ 26.461127][ T360] usb 4-1: device descriptor read/8, error -71 [ 26.520427][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.650419][ T10] usb 3-1: device descriptor read/64, error -71 [ 26.710445][ T360] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 26.731541][ T360] usb 4-1: device descriptor read/8, error -71 [ 26.881528][ T360] usb 4-1: device descriptor read/8, error -71 [ 26.900431][ T10] usb 3-1: device descriptor read/64, error -71 [ 26.990532][ T360] usb usb4-port1: unable to enumerate USB device [ 27.150426][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.223010][ T36] kauditd_printk_skb: 101 callbacks suppressed [ 27.223027][ T36] audit: type=1400 audit(1789635533.800:175): avc: denied { read write } for pid=440 comm="syz.0.35" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.223841][ T441] fuse: Unknown parameter 'J°*ÚØœ' [ 27.229311][ T36] audit: type=1400 audit(1789635533.800:176): avc: denied { open } for pid=440 comm="syz.0.35" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.280468][ T10] usb 3-1: device descriptor read/64, error -71 [ 27.280744][ T36] audit: type=1400 audit(1789635533.800:177): avc: denied { map } for pid=440 comm="syz.0.35" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.309744][ T36] audit: type=1400 audit(1789635533.800:178): avc: denied { execute } for pid=440 comm="syz.0.35" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.333230][ T36] audit: type=1400 audit(1789635533.850:179): avc: denied { ioctl } for pid=442 comm="syz.0.36" path="socket:[4493]" dev="sockfs" ino=4493 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.357684][ T36] audit: type=1400 audit(1789635533.860:180): avc: denied { getopt } for pid=442 comm="syz.0.36" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.530479][ T10] usb 3-1: device descriptor read/64, error -71 [ 27.640643][ T10] usb usb3-port1: attempt power cycle [ 27.654625][ T453] netlink: 'syz.3.39': attribute type 7 has an invalid length. [ 27.662279][ T453] netlink: 'syz.3.39': attribute type 5 has an invalid length. [ 27.669918][ T453] netlink: 17 bytes leftover after parsing attributes in process `syz.3.39'. [ 27.699519][ T455] netlink: 'syz.3.40': attribute type 4 has an invalid length. [ 27.740876][ T36] audit: type=1400 audit(1789635534.320:181): avc: denied { mount } for pid=458 comm="syz.3.42" name="/" dev="configfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 27.745322][ T459] BUG: scheduling while atomic: syz.3.42/459/0x00000002 [ 27.770145][ T459] Modules linked in: [ 27.774107][ T459] CPU: 0 UID: 0 PID: 459 Comm: syz.3.42 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 27.774137][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.774159][ T459] Call Trace: [ 27.774167][ T459] [ 27.774176][ T459] __dump_stack+0x21/0x30 [ 27.774218][ T459] dump_stack_lvl+0x140/0x1c0 [ 27.774245][ T459] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.774271][ T459] ? is_bpf_text_address+0x17b/0x1a0 [ 27.774303][ T459] dump_stack+0x19/0x20 [ 27.774328][ T459] __schedule_bug+0x12b/0x200 [ 27.774351][ T459] ? find_proxy_task+0x2460/0x2460 [ 27.774374][ T459] __schedule+0xb85/0x20b0 [ 27.774396][ T459] ? is_bpf_text_address+0x17b/0x1a0 [ 27.774425][ T459] ? kernel_text_address+0xa9/0xe0 [ 27.774451][ T459] ? __kernel_text_address+0x11/0x40 [ 27.774478][ T459] ? __sched_text_start+0x10/0x10 [ 27.774497][ T459] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 27.774517][ T459] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 27.774538][ T459] ? __kasan_check_write+0x18/0x20 [ 27.774560][ T459] ? _raw_spin_lock+0x92/0x120 [ 27.774578][ T459] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.774595][ T459] ? stack_depot_save_flags+0x399/0x800 [ 27.774623][ T459] schedule+0xc5/0x240 [ 27.774642][ T459] schedule_preempt_disabled+0x14/0x30 [ 27.774665][ T459] __mutex_lock+0x902/0x1b90 [ 27.774690][ T459] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 27.774718][ T459] ? pointer+0xe10/0xe10 [ 27.774754][ T459] ? vsnprintf+0x19ef/0x1ad0 [ 27.774784][ T459] __mutex_lock_slowpath+0xe/0x20 [ 27.774808][ T459] mutex_lock+0x113/0x1d0 [ 27.774829][ T459] ? __cfi_mutex_lock+0x10/0x10 [ 27.774853][ T459] ? kobject_uevent_env+0x4fd/0x7e0 [ 27.774874][ T459] ? class_dir_child_ns_type+0x1d/0x70 [ 27.774900][ T459] ? __cfi_class_dir_child_ns_type+0x10/0x10 [ 27.774923][ T459] kobject_uevent_net_broadcast+0x2c6/0x5e0 [ 27.774947][ T459] kobject_uevent_env+0x551/0x7e0 [ 27.774968][ T459] kobject_uevent+0x21/0x40 [ 27.774990][ T459] device_del+0xb7f/0xcf0 [ 27.775009][ T459] ? __cfi_device_del+0x10/0x10 [ 27.775028][ T459] ? __kasan_check_write+0x18/0x20 [ 27.775048][ T459] ? kobject_put+0x1cc/0x2a0 [ 27.775066][ T459] device_destroy+0xb0/0x100 [ 27.775087][ T459] ? __cfi_device_destroy+0x10/0x10 [ 27.775105][ T459] ? __kasan_check_write+0x18/0x20 [ 27.775128][ T459] android_device_destroy+0x118/0x180 [ 27.775156][ T459] gadgets_drop+0x1d/0x30 [ 27.775175][ T459] ? __cfi_gadgets_drop+0x10/0x10 [ 27.775194][ T459] configfs_rmdir+0x8ba/0x9b0 [ 27.775224][ T459] vfs_rmdir+0x3db/0x560 [ 27.775251][ T459] do_rmdir+0x29a/0x590 [ 27.775278][ T459] ? __cfi_do_rmdir+0x10/0x10 [ 27.775307][ T459] ? __kasan_check_write+0x18/0x20 [ 27.775329][ T459] __x64_sys_rmdir+0x4b/0x60 [ 27.775357][ T459] x64_sys_call+0xaf7/0x2ee0 [ 27.775376][ T459] do_syscall_64+0x57/0xf0 [ 27.775394][ T459] ? clear_bhb_loop+0x50/0xa0 [ 27.775420][ T459] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.775444][ T459] RIP: 0033:0x7f7baf19e159 [ 27.775468][ T459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.775484][ T459] RSP: 002b:00007f7bb0076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 27.775508][ T459] RAX: ffffffffffffffda RBX: 00007f7baf425fa0 RCX: 00007f7baf19e159 [ 27.775523][ T459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 27.775537][ T459] RBP: 00007f7baf23506b R08: 0000000000000000 R09: 0000000000000000 [ 27.775551][ T459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.775563][ T459] R13: 00007f7baf426038 R14: 00007f7baf425fa0 R15: 00007ffec035a5d8 [ 27.775580][ T459] [ 27.778698][ T459] ------------[ cut here ]------------ [ 27.789671][ T36] audit: type=1400 audit(1789635534.320:182): avc: denied { search } for pid=458 comm="syz.3.42" name="/" dev="configfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.790073][ T459] WARNING: CPU: 0 PID: 459 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 27.811301][ T36] audit: type=1400 audit(1789635534.320:183): avc: denied { write } for pid=458 comm="syz.3.42" name="usb_gadget" dev="configfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.815416][ T459] Modules linked in: [ 27.815434][ T459] CPU: 0 UID: 0 PID: 459 Comm: syz.3.42 Tainted: G W syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 27.830401][ T36] audit: type=1400 audit(1789635534.320:184): avc: denied { add_name } for pid=458 comm="syz.3.42" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.834738][ T459] Tainted: [W]=WARN [ 27.977240][ T351] usb 2-1: USB disconnect, device number 3 [ 27.977357][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.260470][ T459] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 28.266657][ T459] Code: 48 83 3d 34 fe db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 4c 2f 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 28.286324][ T459] RSP: 0018:ffffc9000b837980 EFLAGS: 00010206 [ 28.292764][ T459] RAX: 000000007fffffff RBX: ffff8881f52ff5d0 RCX: 00000000000ff5d0 [ 28.300929][ T459] RDX: ffff8881f52ff5d0 RSI: 0000000000000001 RDI: 000000004083010b [ 28.308915][ T459] RBP: ffffc9000b8379e0 R08: 00000000ab7bea61 R09: 000000002d923999 [ 28.316957][ T459] R10: 000000000000000d R11: ffffffff8175a7a0 R12: 0000000093a0ff5d [ 28.324958][ T459] R13: 0000000000000000 R14: ffffc9000b8379f0 R15: 000000000000000d [ 28.333026][ T459] FS: 00007f7bb00766c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 28.341996][ T459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.348597][ T459] CR2: 00007fefa9e1d0f5 CR3: 000000013544c000 CR4: 00000000003526b0 [ 28.356626][ T459] Call Trace: [ 28.359911][ T459] [ 28.362883][ T459] ? do_syscall_64+0x57/0xf0 [ 28.367489][ T459] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.374020][ T459] kasan_save_track+0x4f/0x80 [ 28.378725][ T459] ? kasan_save_track+0x3e/0x80 [ 28.383773][ T459] ? kasan_save_free_info+0x44/0x50 [ 28.388984][ T459] ? __kasan_slab_free+0x5f/0x80 [ 28.393970][ T459] ? kfree+0x158/0x440 [ 28.398052][ T459] ? gadget_info_attr_release+0xcb/0x130 [ 28.403727][ T459] ? config_item_put+0x175/0x240 [ 28.408669][ T459] ? configfs_rmdir+0x8e8/0x9b0 [ 28.413573][ T459] ? vfs_rmdir+0x3db/0x560 [ 28.418002][ T459] ? do_rmdir+0x29a/0x590 [ 28.422383][ T459] ? __x64_sys_rmdir+0x4b/0x60 [ 28.427164][ T459] ? x64_sys_call+0xaf7/0x2ee0 [ 28.431984][ T459] ? do_syscall_64+0x57/0xf0 [ 28.436582][ T459] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.442697][ T459] kasan_save_free_info+0x44/0x50 [ 28.447732][ T459] __kasan_slab_free+0x5f/0x80 [ 28.452785][ T459] kfree+0x158/0x440 [ 28.456700][ T459] ? gadget_info_attr_release+0xcb/0x130 [ 28.462456][ T459] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 28.468540][ T459] gadget_info_attr_release+0xcb/0x130 [ 28.474066][ T459] config_item_put+0x175/0x240 [ 28.478834][ T459] ? __cfi_gadgets_drop+0x10/0x10 [ 28.483927][ T459] configfs_rmdir+0x8e8/0x9b0 [ 28.488618][ T459] vfs_rmdir+0x3db/0x560 [ 28.492934][ T459] do_rmdir+0x29a/0x590 [ 28.497105][ T459] ? __cfi_do_rmdir+0x10/0x10 [ 28.501842][ T459] ? __kasan_check_write+0x18/0x20 [ 28.506963][ T459] __x64_sys_rmdir+0x4b/0x60 [ 28.511604][ T459] x64_sys_call+0xaf7/0x2ee0 [ 28.516200][ T459] do_syscall_64+0x57/0xf0 [ 28.520668][ T459] ? clear_bhb_loop+0x50/0xa0 [ 28.525359][ T459] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.531605][ T459] RIP: 0033:0x7f7baf19e159 [ 28.536037][ T459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.555867][ T459] RSP: 002b:00007f7bb0076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 28.564343][ T459] RAX: ffffffffffffffda RBX: 00007f7baf425fa0 RCX: 00007f7baf19e159 [ 28.572352][ T459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 28.580341][ T459] RBP: 00007f7baf23506b R08: 0000000000000000 R09: 0000000000000000 [ 28.588368][ T459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.596394][ T459] R13: 00007f7baf426038 R14: 00007f7baf425fa0 R15: 00007ffec035a5d8 [ 28.604421][ T459] [ 28.607452][ T459] ---[ end trace 0000000000000000 ]--- [ 28.616042][ T459] BUG: scheduling while atomic: syz.3.42/459/0x00000000 [ 28.623127][ T459] Modules linked in: [ 28.627829][ T459] CPU: 0 UID: 0 PID: 459 Comm: syz.3.42 Tainted: G W syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 28.627864][ T459] Tainted: [W]=WARN [ 28.627871][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.627882][ T459] Call Trace: [ 28.627889][ T459] [ 28.627897][ T459] __dump_stack+0x21/0x30 [ 28.627927][ T459] dump_stack_lvl+0x140/0x1c0 [ 28.627953][ T459] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.627980][ T459] dump_stack+0x19/0x20 [ 28.628004][ T459] __schedule_bug+0x12b/0x200 [ 28.628023][ T459] ? find_proxy_task+0x2460/0x2460 [ 28.628040][ T459] ? update_load_avg+0x4f3/0x1980 [ 28.628062][ T459] ? kvm_sched_clock_read+0x15/0x30 [ 28.628085][ T459] ? sched_clock_noinstr+0xd/0x30 [ 28.628104][ T459] __schedule+0xb85/0x20b0 [ 28.628123][ T459] ? psi_group_change+0xab6/0x10a0 [ 28.628158][ T459] ? __sched_text_start+0x10/0x10 [ 28.628178][ T459] ? update_curr+0xf1/0x9c0 [ 28.628196][ T459] ? enqueue_task+0x1049/0x1100 [ 28.628217][ T459] schedule+0xc5/0x240 [ 28.628236][ T459] schedule_timeout+0xc7/0x3b0 [ 28.628261][ T459] ? __cfi_schedule_timeout+0x10/0x10 [ 28.628287][ T459] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.628305][ T459] ? activate_task+0x43b/0x480 [ 28.628323][ T459] wait_for_common+0x368/0x650 [ 28.628346][ T459] ? wait_for_completion+0x40/0x40 [ 28.628366][ T459] ? _raw_spin_lock_irq+0x93/0x120 [ 28.628384][ T459] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.628403][ T459] wait_for_completion_state+0x19/0x40 [ 28.628425][ T459] do_coredump+0x885/0x3050 [ 28.628446][ T459] ? stack_depot_save_flags+0x38/0x800 [ 28.628471][ T459] ? kasan_save_track+0x4f/0x80 [ 28.628493][ T459] ? kasan_save_track+0x3e/0x80 [ 28.628513][ T459] ? kasan_save_free_info+0x44/0x50 [ 28.628530][ T459] ? __kasan_slab_free+0x5f/0x80 [ 28.628553][ T459] ? __cfi_do_coredump+0x10/0x10 [ 28.628570][ T459] ? asm_exc_page_fault+0x2b/0x30 [ 28.628596][ T459] ? __kasan_slab_free+0x6a/0x80 [ 28.628617][ T459] ? get_signal+0xa2a/0x1490 [ 28.628640][ T459] get_signal+0x11bf/0x1490 [ 28.628663][ T459] arch_do_signal_or_restart+0xbc/0x700 [ 28.628680][ T459] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 28.628697][ T459] ? __kasan_check_write+0x18/0x20 [ 28.628714][ T459] ? fpregs_restore_userregs+0x11c/0x260 [ 28.628739][ T459] irqentry_exit_to_user_mode+0x4d/0xb0 [ 28.628766][ T459] irqentry_exit+0x16/0x60 [ 28.628789][ T459] exc_page_fault+0x65/0xc0 [ 28.628812][ T459] asm_exc_page_fault+0x2b/0x30 [ 28.628832][ T459] RIP: 0033:0x7f7baf064054 [ 28.628849][ T459] Code: 00 00 00 64 f0 83 04 25 a0 ff ff ff 01 64 48 8b 04 25 00 00 00 00 48 8d b8 d8 fe ff ff e8 74 b1 0d 00 85 c0 0f 84 ec 01 00 00 <64> f0 83 2c 25 a0 ff ff ff 01 e8 1d 93 0c 00 48 8b 4c 24 08 8b 00 [ 28.628864][ T459] RSP: 002b:00007f7bb0076050 EFLAGS: 00010206 [ 28.628881][ T459] RAX: 0000000000000000 RBX: 00007f7baf425fa0 RCX: 00007f7baf23506b [ 28.628896][ T459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 28.628908][ T459] RBP: 00007f7baf23506b R08: 0000000000000000 R09: 0000000000000000 [ 28.628921][ T459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.628933][ T459] R13: 00007f7baf426038 R14: 00007f7baf425fa0 R15: 00007ffec035a5d8 [ 28.628950][ T459] [ 29.151558][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.361726][ T459] x86/PAT: syz.3.42:459 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 29.377732][ T397] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 29.435829][ T466] fido_id[466]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 29.570629][ T10] usb 3-1: device not accepting address 5, error -71