last executing test programs: 1.012121802s ago: executing program 1 (id=2): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f00000000c0)="d3", 0x1, 0xc899) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x20402, 0xb6) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000000000087060000000000000100000000000000", @ANYRES32=r1, @ANYBLOB="00000004460000000000000000000000ffffffffffffffe100d11e3df48802c00000d9"]) 1.003839262s ago: executing program 3 (id=4): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000000000087060000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="00000004460000000000000000000000ffffffffffffffe100d11e3df48802c00000d9"]) 1.001444292s ago: executing program 2 (id=3): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000004038101014040000000001090224000100000001090400080103000700092100000001221800090581030004000000d9b1ab15e5946c43b52588e94697cdbd3a8167e632605ceec766354940ed2490fc057b0559e0c1f02554b05e372442754b22d7ca808d069bee00fb77646ab608694b275faf5b0f227eff71eb93550f83c4b0d1bdbbed22c638bede5fff7dd9d0f787cf4a660fdedb4f2e356543c2473121b5efbc78ac82f98455e111e326f6c13cbb94847c81714dff549da1f079d345852d"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f00000005c0)={@void, @val={0x2, 0x3, 0x1b, 0x30, 0x14, 0x6}, @ipv6=@generic={0x5, 0x6, "931c10", 0x28, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@hopopts={0xff, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x8, {0x0, 0x0, 0x80}}]}]}}}, 0x5a) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a10195"], 0x0}, 0x0) 965.847404ms ago: executing program 1 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x2b, 0x0, &(0x7f00000003c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)="15d65bae7c95bd2d3e07d238e9a64dfbcb28f02e2b91ae2d1327cc9a62088bd84b442b87f67cfb4223fcd65537a4721126e290c327e33b5399bf08a60431cc0a536e214bf48ffc0e294b483b755a3b723583e936a184c6fdaa2e07b6eda8e1d6c633828bc1776fcb9ce3c3b77aece94c536b986a529f6c6fb5ac3620ecae3618b61e99931457022fdadcbee18e1bdcf50888d6471f92962ebf3ee855dbd785e60584b8e4e3e69984ec37fae250b586b1bdebb7447c28e092", 0xb8, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0xc804e000) 851.514579ms ago: executing program 3 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x5600}, {r1, 0x8}], 0x2, 0x0, 0x0, 0x0) ioctl(r1, 0xc138fd01, &(0x7f0000000000)="0400000000000000000000003801") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) open(&(0x7f0000000100)='./file1\x00', 0x14b042, 0x8c) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f00000001c0)={0x7, 0x2}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') chmod(&(0x7f0000000880)='./file1\x00', 0x50) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x8}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06, 0x0, 0x1000400}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) 775.716872ms ago: executing program 1 (id=8): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3}, 0x1c) write$binfmt_script(r0, &(0x7f00000028c0)={'#! ', '', [], 0xa, "bdd92f0efe8000fffffff500b320655800b2b184ef1b05713031e573a3d16b0acc6de928"}, 0x28) 760.733854ms ago: executing program 1 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)={0x8, "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"}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x128}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) syz_ublk_setup_io_uring(0x24, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x2000000000000004) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000001740)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x40, 0xb, 0x20000003, 0xceb, 0x4, 0x7, 0x10, 0x10003, 0x8000000000000000, 0x1, 0xffffffffffff986a, 0x5, 0x6, 0x1], 0x0, 0x110b03}) munmap(&(0x7f0000ce1000/0x1000)=nil, 0x1000) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000800)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x492e015bd3f18f6d, @remote}, 0x1e, {0x2, 0x4e20, @empty}}) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="003008000000082259c5807ace200a2492d73bb627dc5626f56c0521f0278114abca5e530d389817d8f310f343649edc0fe1211c7419c50eec2dfadf8b0549121260b8359e6ad72c6ff449364bd67e1a92e8e883ffacf7fb3d687fbe46d4c143faea7a2544c2ad3eb449513f5d4ae308a05f3ea0c74f5f0b65f262b51a8c5651f674c469c969c89c47a4123ae8a9b6eeed28c8fd28c6ba1c090e4e3e6810fd0021e7192d4e0f6f6bc02040464a8ece04cf"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_usb_connect(0x3, 0x50, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e0001010080320904000004080662000705010240020004240100070582020002000424020007058302000200042403000705040200020004240471a09da63e8fa21be304eb8bee7a5c4fbd1162095c85d2095f1f0acbfc94070000b9ac6494c89601198a7264ad1c0093de8bdf852539c1e601e9a8aa1f83262def606f86670947ba23982afecdf1e3834b85cdf38da77d26905ea19769e2c4574df2e1a662f31dc6ec27142c21860643b4178d"], 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x44, &(0x7f0000000200)=ANY=[]) 618.26714ms ago: executing program 0 (id=10): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06, 0x0, 0x1000400}]}) 546.993554ms ago: executing program 0 (id=11): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0xd1a, 0x2, 0x5}}, @uexit={0x0, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x7, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0x7ac8}}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0xffe7}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0xbcd}}, @set_irq_handler={0xc8, 0x20, {0x1e, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xe, 0x3}}, @cpuid={0x64, 0x18, {0x5, 0x7fffffff}}, @code={0xa, 0x66, {"b8010000000f01d90fc7b31dee00004f0fc71fc4823906a30800000064470f01c4f3400fc773e42e36420f01cb6666410f6e22b9190b0000b806000000ba000000000f30b9b1000040b863000000ba000000000f30"}}, @nested_amd_invlpga={0x17d, 0x20, {0x26000, 0x79a7}}, @nested_load_code={0x12e, 0x4e, {0x1, "0f01c8420f01c2b9d30800000f32642e450f017dc3652e260f1bd2260f005eb6470f01f8f4c4615de97cfaaa66ba210066b8390066ef"}}, @wrmsr={0x65, 0x20, {0xca647a562a2fc6a1, 0x9}}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @out_dx={0x6a, 0x28, {0xd419, 0x6, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @uexit={0x0, 0x18, 0x4e}, @cpuid={0x64, 0x18, {0x6, 0xe5}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x0, 0x4, 0x1}}, @nested_load_code={0x12e, 0x5d, {0x3, "2e0f01c966baf80cb8b4da7186ef66bafc0cb800900000ef45f4833a000f20e035080000000f22e0c441ddd50644e100c4c265478e0400000066ba210066edc46241976ae7"}}, @in_dx={0x69, 0x20, {0x169, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_load_syzos={0x136, 0x48, {0x1, 0x7dea, [@uexit={0x0, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}]}}, @nested_amd_invlpga={0x17d, 0x20, {0xffffeffb, 0xff04}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x8f, 0x6, 0xa, 0x3}}, @in_dx={0x69, 0x20, {0x1837}}], 0x491}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000500)={[0x10000, 0x9, 0xfffffffffffffff7, 0x8, 0x1, 0x2, 0x8, 0x9, 0x2, 0x5, 0x77, 0x7, 0x8, 0xfffffffffffffff7, 0x7, 0x4], 0x1ffe, 0x1840}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x3b, 0x7f, 0x41, @rand_addr=' \x01\x00', @remote, 0x1, 0x20, 0x7, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x97, 0xc0, 0x2, 0x49, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001, 0x7, 0xfff, 0xec}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000800)={@remote, 0x0}, &(0x7f0000000840)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x128, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x20000, 0x0) write$tun(r8, &(0x7f0000000a80)={@val, @void, @ipv6=@generic={0xc, 0x6, "356ca3", 0x405, 0xff, 0xff, @empty, @dev={0xfe, 0x80, '\x00', 0x33}, {[@fragment={0x2f, 0x0, 0x5, 0x1, 0x0, 0x7, 0x65}, @routing={0x2b, 0x14, 0x2, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty]}, @dstopts={0x33, 0x7, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x1a, 0x9, [0x3, 0x3, 0x5ed, 0x29, 0x6, 0x2]}}]}, @srh={0x73, 0x6, 0x4, 0x3, 0x1, 0x10, 0x5, [@loopback, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0xff, 0x0, 0x0, 0x1, 0x0, 0x6, 0x64}, @dstopts={0x2, 0x20, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @local}, @generic={0x1, 0xb9, "3ba4c677f8bb4d1ee3b7bc25cb4052b244a7fe9c1cdbf15973b7a9776c7a26d8a84a0490b484070ea638ef8f9107f603c65dd53cb09f0cf856097de50f6f0c802c3b7800e69c8fa16470967c5410039c3e070347039adb6ace4234a3503536453163b5e5d13ce81a658891765cb0660c0e372c219bd068f3153df38526ffd0f99c3547f560ec633720c532dc7ce6d4e160a868d444847ba22448a1c291f146097ca83d1252691b79c5d49415be8436e14867f3a026e2785af0"}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x5, 0x6, [0xa7]}}]}, @hopopts={0x2, 0x1e, '\x00', [@generic={0xb, 0x3f, "67b8a04bd54dffd3acd294897ccc1b8b082bc4792ff7780bc6472e76dfc6e40f3c0831ec20afa9605453274a8e5b70713e11f936356fe3b281f55565d064f2"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x8, 0xa1, "b52cfd97064bc45c7abb43f52500086d3f7addd6eec9607d633c1f17ea171ae73f4cf565fc8bdf767cd1c8673c6b264f61417666828dc28c47b28fc2cbc793da7594877cdbef404d6665823184d55d01e911a8cce25462b54fe5f144b27bf90495cfdf67c5e46cf82b198f46582e3b9ad6f2d556c41d1fd5e86d35d0b3e694111112b959bae550c0c941c1a10b0c6fb7952e8a2274126ed1f9d1dcd165dd1f3a67"}]}], "ea552e2d912588d9842dcfbcfa8c17b5a7c1bfb821479a9fa6c7276327409382c158b362dd811636db538618d68b346401b8ec99805a658a3a9d1d9374a031cc1c6e149f82b26cf0af3a0c23e7832cd33c82c3b88bec376adc3bb4715dd81d8157fc5ae6ce3fdb6f6decf4c27f31d7971e92bf866923f1b3fe4244e3c02964451d28a10d077b0058fb08448bd290b7b8708bd4332a7b0d864c6e4a125f3ef0d37e5c86531f6184632ecfc31e9c575aa4f6895c1c7cc6674c1fc12639ce"}}}, 0x431) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x128, r3, 0x206, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r9 = accept4$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x2, 0x0, @multicast2}, &(0x7f0000001100)=0x10, 0x800) ioctl$sock_inet_SIOCGARP(r9, 0x8954, &(0x7f0000001140)={{0x2, 0x4e20, @private=0xa010101}, {0x1, @broadcast}, 0x6, {0x2, 0x4e21, @rand_addr=0x64010100}, 'team_slave_0\x00'}) stat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000001280)={{{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x3e, 0x4e24, 0x9, 0x2, 0x80, 0x60, 0x3c, r4, r10}, {0x36df, 0x1ff, 0xf59, 0xc0, 0x6, 0x3, 0x9, 0x9}, {0x5, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d5, 0xff}, 0x2, @in6=@mcast1, 0x3500, 0x2, 0x1, 0x7, 0x1, 0x6, 0x81}}, 0xe8) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r11, 0x4008ae8a, &(0x7f0000001380)={0x9, 0x0, [{0xb, 0x400, 0x1c82, 0x3, 0x3}, {0x80000007, 0x2, 0x800, 0xa, 0xce}, {0x80000019, 0xcd, 0x7fffffff, 0x0, 0x3}, {0x1, 0xb, 0x9, 0x5, 0xf}, {0x8000000d, 0x7, 0x0, 0x7, 0x9}, {0x7, 0x5, 0x8, 0x1, 0x4}, {0x4, 0x2, 0x2, 0x4}, {0xc0000001, 0x5, 0x7f, 0xd, 0xd52f}, {0x40000000, 0x7f, 0x4, 0x3, 0xfffffffd}]}) r12 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000001480)={@multicast2, @multicast1, 0x0, 0x3, [@loopback, @multicast2, @remote]}, 0x1c) accept4$inet(0xffffffffffffffff, &(0x7f00000014c0), &(0x7f0000001500)=0x10, 0x800) r13 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001540), 0x400040, 0x0) ioctl$TCXONC(r13, 0x540a, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x0, 0x87e1, 0x20000, 0x1, 0x270}, &(0x7f0000001600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5994, 0x800, 0x1, 0x16d}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x99de, 0x2, 0x3, 0x207}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x411a, 0x8000, 0x0, 0x1a4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5f07, 0x8, 0x0, 0xb2}}], 0x4, &(0x7f0000002880)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7fff}, 0x0, 0x0, '\x00', {0x3, 0x511, 0x0, &(0x7f0000001880)=@buf_512="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"}}, &(0x7f0000002900)) syz_io_uring_setup(0x1bc2, &(0x7f0000002940)={0x0, 0xf8cd, 0x8000, 0x3, 0x1ce}, &(0x7f00000029c0)=0x0, &(0x7f0000002a00), &(0x7f0000002a40)) syz_ublk_add_dev(r14, r15, 0x0, 0x0, &(0x7f0000002fc0)={0x2e, 0x42, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002f80)=@any_dev={0x1, 0x10, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x18f}}}, &(0x7f0000003040)) 538.477874ms ago: executing program 0 (id=12): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f00000004c0)=0xe8) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) r3 = geteuid() mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f0000004140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xd9f12bc8dc83872b}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x24c}}], [{@fowner_lt={'fowner<', r0}}, {@subj_user={'subj_user', 0x3d, 'fsmagic'}}, {@euid_eq={'euid', 0x3d, r3}}, {@obj_user={'obj_user', 0x3d, '*-:'}}]}}) (async) keyctl$chown(0x4, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r4, &(0x7f0000000980)="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"/304, 0x130) (async, rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) fcntl$setlease(r1, 0x400, 0x1) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x6, 0x7ff, {0x5, 0x8010001, 0x7, 0x40b, 0x6, 0x20000000, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r5, r6, 0x3d4, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000780)={&(0x7f0000000040), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8844}, 0x20000800) (async, rerun: 64) statx(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x2000, 0x800, &(0x7f00000003c0)) (async) io_setup(0xe8f4, &(0x7f00000007c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) setns(0xc9, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) (async) sendmmsg$inet6(r7, &(0x7f0000001e40)=[{{&(0x7f0000002180)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x8}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000100)='S', 0x1}], 0x1}}], 0x1, 0x240880d1) (async, rerun: 32) r8 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) (async, rerun: 64) socket(0x10, 0x1, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socket$inet_tcp(0x2, 0x1, 0x0) 408.20244ms ago: executing program 0 (id=13): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x541e, 0xff4f370c567f0000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000200)={0x0, 0xf6, "d8abae90e682ccf4d27fea422dd98be5eb2f1c6210b6902fa88493dff9321422bedf2e2907414309422cc049ac62a749118ee97531e5876a3a831cbf11fe1492aca4b6c2cb107c467ee3008244afaec208521a71b4e8b8e09aca58dbb2e19bd5d5083df2c03a4c1467ff14284b50b04b8df4530e3ee8edfd345d9687c0fbf0b7f912926efffb3097569d9f8acce08b6b44a99cafbe58fe49804223de6789a8f4aa0a4b99306020daac58fb7cecbbfcc5c27b123c040e3562ca9570ddb31192f32c4cf83acc5665aae34cb36d8d725892997520e2eaa26eb47d92fc972ccddd74226ffb3ff83e510cf7942dcda44f8d634061f9bf2598"}) (async) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000040)=0x9, 0x12) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') 303.367335ms ago: executing program 0 (id=14): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f00000000c0)="d3", 0x1, 0xc899) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0) 39.680887ms ago: executing program 0 (id=15): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000000000087060000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="00000004460000000000000000000000ffffffffffffffe100d11e3df48802c00000d9"]) 0s ago: executing program 3 (id=16): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x16) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) setns(r1, 0x24020000) syz_clone(0xb10e7180, 0x0, 0x0, 0x0, 0x0, 0x0) clock_settime(0xfffffff4, &(0x7f00000001c0)={0x0, 0x3938700}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201001ee5eec5f300000000101008020000000000000109022400010000c0020904000502030087000921ad0d4001221800090581035000881506de463fe6462d80b0f8d6803ee4b8d61f12c86c583a8788a90b5aed72a939613d0ce51a05b9567db75d6c2f274c6f28d1d9e1453d114c0f56e5e136d1e277f141bb6af778a31e4460b445e49a0d973fbce5a0d8c8795b49450d96d6391e2c91a43890a0d64f61a72a377495fc71789e64701979c8619276523f0df35f182c44ee31f1ff4b48031fdb3ec0acde729fcbfe37b991973c3df372ef3e211ad5a62ef1e1f597eef2ea5c8046fb854c0c8384fcd1e7c4eb"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) getpid() (async) syz_pidfd_open(r0, 0x0) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x16) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async) setns(r1, 0x24020000) (async) syz_clone(0xb10e7180, 0x0, 0x0, 0x0, 0x0, 0x0) (async) clock_settime(0xfffffff4, &(0x7f00000001c0)={0x0, 0x3938700}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201001ee5eec5f300000000101008020000000000000109022400010000c0020904000502030087000921ad0d4001221800090581035000881506de463fe6462d80b0f8d6803ee4b8d61f12c86c583a8788a90b5aed72a939613d0ce51a05b9567db75d6c2f274c6f28d1d9e1453d114c0f56e5e136d1e277f141bb6af778a31e4460b445e49a0d973fbce5a0d8c8795b49450d96d6391e2c91a43890a0d64f61a72a377495fc71789e64701979c8619276523f0df35f182c44ee31f1ff4b48031fdb3ec0acde729fcbfe37b991973c3df372ef3e211ad5a62ef1e1f597eef2ea5c8046fb854c0c8384fcd1e7c4eb"], 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 23.500802][ T36] audit: type=1400 audit(1790014202.900:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.501959][ T286] cgroup: Unknown subsys name 'net' [ 23.523481][ T36] audit: type=1400 audit(1790014202.900:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.551321][ T36] audit: type=1400 audit(1790014202.930:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.551547][ T286] cgroup: Unknown subsys name 'devices' [ 23.676517][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.682334][ T286] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 23.775920][ T36] audit: type=1400 audit(1790014203.180:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.798341][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.799394][ T36] audit: type=1400 audit(1790014203.180:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.822635][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.832882][ T36] audit: type=1400 audit(1790014203.180:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.865015][ T36] audit: type=1400 audit(1790014203.210:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.890429][ T36] audit: type=1400 audit(1790014203.210:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.916208][ T36] audit: type=1400 audit(1790014203.220:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.942453][ T36] audit: type=1400 audit(1790014203.220:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.753441][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.760522][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.767606][ T295] bridge_slave_0: entered allmulticast mode [ 24.773807][ T295] bridge_slave_0: entered promiscuous mode [ 24.782020][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.789105][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.796251][ T295] bridge_slave_1: entered allmulticast mode [ 24.802501][ T295] bridge_slave_1: entered promiscuous mode [ 24.808725][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.815987][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.823150][ T293] bridge_slave_0: entered allmulticast mode [ 24.829643][ T293] bridge_slave_0: entered promiscuous mode [ 24.839418][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.846517][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.853682][ T293] bridge_slave_1: entered allmulticast mode [ 24.860074][ T293] bridge_slave_1: entered promiscuous mode [ 24.872049][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.879241][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.886428][ T294] bridge_slave_0: entered allmulticast mode [ 24.892585][ T294] bridge_slave_0: entered promiscuous mode [ 24.902143][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.909232][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.916314][ T294] bridge_slave_1: entered allmulticast mode [ 24.922732][ T294] bridge_slave_1: entered promiscuous mode [ 24.950594][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.957806][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.965013][ T296] bridge_slave_0: entered allmulticast mode [ 24.971185][ T296] bridge_slave_0: entered promiscuous mode [ 24.977729][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.984804][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.991853][ T296] bridge_slave_1: entered allmulticast mode [ 24.998209][ T296] bridge_slave_1: entered promiscuous mode [ 25.160120][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.167289][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.174601][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.181644][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.190189][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.197417][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.204760][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.211885][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.228915][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.236001][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.243284][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.250354][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.276167][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.283241][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.290556][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.297615][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.333252][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.341196][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.348629][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.357195][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.364455][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.371822][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.379657][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.387598][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.400459][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.407729][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.428910][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.435983][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.443956][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.451030][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.459117][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.466272][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.475345][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.482418][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.493174][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.500364][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.541184][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.548287][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.566627][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.573684][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.595683][ T295] veth0_vlan: entered promiscuous mode [ 25.610047][ T294] veth0_vlan: entered promiscuous mode [ 25.635953][ T295] veth1_macvtap: entered promiscuous mode [ 25.647210][ T293] veth0_vlan: entered promiscuous mode [ 25.653347][ T294] veth1_macvtap: entered promiscuous mode [ 25.665096][ T296] veth0_vlan: entered promiscuous mode [ 25.689047][ T296] veth1_macvtap: entered promiscuous mode [ 25.700308][ T293] veth1_macvtap: entered promiscuous mode [ 25.732865][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.806318][ T318] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 25.825927][ T321] netlink: 'syz.0.1': attribute type 27 has an invalid length. [ 25.834823][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.839161][ T318] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 25.961459][ T330] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 25.970119][ T330] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 25.979676][ T330] kvm: requested 28495 ns i8254 timer period limited to 200000 ns [ 25.988448][ T330] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 25.997414][ T330] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 26.009501][ T330] kvm: requested 149181 ns i8254 timer period limited to 200000 ns [ 26.021084][ T330] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 26.038328][ T330] kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 26.046294][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.055722][ T330] kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 26.064134][ T330] kvm: requested 33523 ns i8254 timer period limited to 200000 ns [ 26.087777][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.205559][ T65] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.217624][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 26.224569][ T65] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.04 [ 26.234059][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.244449][ T65] usb 3-1: config 0 descriptor?? [ 26.376163][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.411131][ T352] FAULT_INJECTION: forcing a failure. [ 26.411131][ T352] name failslab, interval 1, probability 0, space 0, times 1 [ 26.425252][ T352] CPU: 1 UID: 0 PID: 352 Comm: syz.0.13 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 26.425286][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.425299][ T352] Call Trace: [ 26.425305][ T352] [ 26.425313][ T352] __dump_stack+0x21/0x30 [ 26.425346][ T352] dump_stack_lvl+0x140/0x1c0 [ 26.425373][ T352] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.425402][ T352] ? avc_has_perm+0x155/0x240 [ 26.425428][ T352] dump_stack+0x19/0x20 [ 26.425469][ T352] should_fail_ex+0x3c2/0x510 [ 26.425494][ T352] ? __seq_open_private+0x44/0x2b0 [ 26.425523][ T352] should_failslab+0xac/0x100 [ 26.425548][ T352] __kmalloc_noprof+0x69/0x510 [ 26.425569][ T352] ? selinux_file_open+0x46c/0x630 [ 26.425592][ T352] ? __seq_open_private+0x44/0x2b0 [ 26.425620][ T352] __seq_open_private+0x44/0x2b0 [ 26.425648][ T352] pid_maps_open+0x30/0xd0 [ 26.425677][ T352] ? __cfi_pid_maps_open+0x10/0x10 [ 26.425705][ T352] do_dentry_open+0x97f/0x1510 [ 26.425735][ T352] vfs_open+0x86/0x240 [ 26.425763][ T352] ? __cfi_vfs_open+0x10/0x10 [ 26.425791][ T352] ? may_open+0x352/0x430 [ 26.425818][ T352] path_openat+0x2c49/0x35a0 [ 26.425858][ T352] ? do_filp_open+0x440/0x440 [ 26.425888][ T352] do_filp_open+0x1f2/0x440 [ 26.425916][ T352] ? __cfi_do_filp_open+0x10/0x10 [ 26.425945][ T352] ? __cfi_kfree_link+0x10/0x10 [ 26.425975][ T352] ? alloc_fd+0x4c1/0x570 [ 26.426000][ T352] do_sys_openat2+0x134/0x1d0 [ 26.426030][ T352] ? do_sys_open+0x100/0x100 [ 26.426062][ T352] __x64_sys_openat+0x13a/0x170 [ 26.426092][ T352] x64_sys_call+0xe69/0x2ee0 [ 26.426111][ T352] do_syscall_64+0x57/0xf0 [ 26.426131][ T352] ? clear_bhb_loop+0x50/0xa0 [ 26.426158][ T352] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.426183][ T352] RIP: 0033:0x7f125b95e98e [ 26.426202][ T352] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 26.426219][ T352] RSP: 002b:00007f125c8adec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 26.426248][ T352] RAX: ffffffffffffffda RBX: 00007f125c8ae6c0 RCX: 00007f125b95e98e [ 26.426265][ T352] RDX: 0000000000000002 RSI: 00007f125c8adf90 RDI: ffffffffffffff9c [ 26.426281][ T352] RBP: 00007f125ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 26.426295][ T352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.426308][ T352] R13: 00007f125bc26038 R14: 00007f125bc25fa0 R15: 00007fff68a5c3c8 [ 26.426326][ T352] [ 26.766568][ T359] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 26.781688][ T296] ------------[ cut here ]------------ [ 26.787318][ T296] WARNING: CPU: 1 PID: 296 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 26.794542][ T359] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 26.795483][ T296] Modules linked in: [ 26.807820][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 26.819612][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.830012][ T296] RIP: 0010:drop_nlink+0xce/0x110 [ 26.835301][ T296] Code: 04 00 00 be 08 00 00 00 e8 0f 0d ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 72 26 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 26.855675][ T296] RSP: 0018:ffffc9000b5efc88 EFLAGS: 00010293 [ 26.861798][ T296] RAX: ffffffff81f253fe RBX: ffff8881112b3838 RCX: ffff88812abbdf00 [ 26.869943][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.877967][ T296] RBP: ffffc9000b5efcb0 R08: 0000000000000003 R09: 0000000000000004 [ 26.886082][ T296] R10: dffffc0000000000 R11: fffff520016bdf80 R12: dffffc0000000000 [ 26.894093][ T296] R13: 1ffff11022256710 R14: ffff8881112b3880 R15: 0000000000000000 [ 26.902095][ T65] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 26.902127][ T65] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 26.902152][ T65] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 26.909559][ T296] FS: 00005555714a4500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.909589][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.918303][ T65] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 26.924345][ T296] CR2: 00005555714c7958 CR3: 0000000102f48000 CR4: 00000000003526b0 [ 26.924372][ T296] Call Trace: [ 26.924380][ T296] [ 26.933730][ T65] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 26.940019][ T296] shmem_rmdir+0x5f/0x90 [ 26.949343][ T65] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 26.955508][ T296] vfs_rmdir+0x3db/0x560 [ 26.959336][ T65] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 26.961835][ T296] incfs_kill_sb+0x102/0x220 [ 26.973869][ T65] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 26.981172][ T296] deactivate_locked_super+0xd2/0x270 [ 26.981213][ T296] deactivate_super+0xb8/0xe0 [ 26.986279][ T65] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 26.993544][ T296] cleanup_mnt+0x438/0x4d0 [ 26.993578][ T296] __cleanup_mnt+0x1d/0x40 [ 26.998860][ T65] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 27.005766][ T296] task_work_run+0x1e5/0x260 [ 27.011432][ T65] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 27.015877][ T296] ? __cfi_task_work_run+0x10/0x10 [ 27.023893][ T65] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 27.027776][ T296] ? __x64_sys_umount+0x12e/0x180 [ 27.032560][ T65] steelseries 0003:1038:1410.0001: unbalanced collection at end of report description [ 27.040018][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.040044][ T296] ? __kasan_check_read+0x15/0x20 [ 27.040065][ T296] resume_user_mode_work+0x35/0x50 [ 27.040085][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 27.040114][ T296] do_syscall_64+0x63/0xf0 [ 27.048241][ T65] steelseries 0003:1038:1410.0001: parse failed [ 27.052800][ T296] ? clear_bhb_loop+0x50/0xa0 [ 27.052833][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.058330][ T65] steelseries 0003:1038:1410.0001: probe with driver steelseries failed with error -22 [ 27.065351][ T296] RIP: 0033:0x7fcced99f397 [ 27.065375][ T296] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.065392][ T296] RSP: 002b:00007ffdd6308798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.166806][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcced99f397 [ 27.174826][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd6308850 [ 27.183079][ T296] RBP: 00007ffdd6308850 R08: 00007ffdd6309850 R09: 00000000ffffffff [ 27.191197][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd63098e0 [ 27.199994][ T296] R13: 00007fcceda344bb R14: 000000000000684c R15: 00007ffdd6309920 [ 27.208433][ T296] [ 27.211670][ T296] ---[ end trace 0000000000000000 ]--- [ 27.217513][ T296] ================================================================== [ 27.225605][ T296] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 27.232052][ T296] Write of size 4 at addr 0000000000000168 by task syz-executor/296 [ 27.240116][ T296] [ 27.242452][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G W syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 27.242480][ T296] Tainted: [W]=WARN [ 27.242486][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.242496][ T296] Call Trace: [ 27.242502][ T296] [ 27.242510][ T296] __dump_stack+0x21/0x30 [ 27.242538][ T296] dump_stack_lvl+0x140/0x1c0 [ 27.242561][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.242586][ T296] print_report+0x3d/0x70 [ 27.242610][ T296] kasan_report+0x162/0x1a0 [ 27.242633][ T296] ? ihold+0x24/0x70 [ 27.242653][ T296] ? ihold+0x24/0x70 [ 27.242673][ T296] kasan_check_range+0x25a/0x2b0 [ 27.242703][ T296] __kasan_check_write+0x18/0x20 [ 27.242720][ T296] ihold+0x24/0x70 [ 27.242740][ T296] vfs_rmdir+0x25c/0x560 [ 27.242764][ T296] incfs_kill_sb+0x102/0x220 [ 27.242783][ T296] deactivate_locked_super+0xd2/0x270 [ 27.242809][ T296] deactivate_super+0xb8/0xe0 [ 27.242833][ T296] cleanup_mnt+0x438/0x4d0 [ 27.242855][ T296] __cleanup_mnt+0x1d/0x40 [ 27.242875][ T296] task_work_run+0x1e5/0x260 [ 27.242898][ T296] ? __cfi_task_work_run+0x10/0x10 [ 27.242919][ T296] ? __x64_sys_umount+0x12e/0x180 [ 27.242935][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.242951][ T296] ? __kasan_check_read+0x15/0x20 [ 27.242969][ T296] resume_user_mode_work+0x35/0x50 [ 27.242985][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 27.243009][ T296] do_syscall_64+0x63/0xf0 [ 27.243024][ T296] ? clear_bhb_loop+0x50/0xa0 [ 27.243046][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.243066][ T296] RIP: 0033:0x7fcced99f397 [ 27.243082][ T296] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.243096][ T296] RSP: 002b:00007ffdd6308798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.243116][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcced99f397 [ 27.243128][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd6308850 [ 27.243139][ T296] RBP: 00007ffdd6308850 R08: 00007ffdd6309850 R09: 00000000ffffffff [ 27.243151][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd63098e0 [ 27.243163][ T296] R13: 00007fcceda344bb R14: 000000000000684c R15: 00007ffdd6309920 [ 27.243177][ T296] [ 27.243183][ T296] ================================================================== [ 27.487420][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.500350][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.505062][ T296] Disabling lock debugging due to kernel taint [ 27.517189][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.517528][ T296] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 27.530317][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 27.537842][ T296] #PF: supervisor write access in kernel mode [ 27.537859][ T296] #PF: error_code(0x0002) - not-present page [ 27.537872][ T296] PGD 800000010f353067 P4D 800000010f353067 PUD 0 [ 27.537902][ T296] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 27.546974][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.553457][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G B W syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 27.593430][ T296] Tainted: [B]=BAD_PAGE, [W]=WARN [ 27.594962][ T45] usb 2-1: config 0 descriptor?? [ 27.598452][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.613569][ T296] RIP: 0010:ihold+0x2a/0x70 [ 27.618105][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 1d 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 cc 03 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 27.637730][ T296] RSP: 0018:ffffc9000b5efcc8 EFLAGS: 00010246 [ 27.643818][ T296] RAX: ffff88812abbdf00 RBX: 0000000000000000 RCX: ffff88812abbdf00 [ 27.651972][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.660031][ T296] RBP: ffffc9000b5efcd8 R08: ffffffff88bbb947 R09: 1ffffffff1177728 [ 27.668042][ T296] R10: dffffc0000000000 R11: fffffbfff1177729 R12: 0000000000000000 [ 27.676031][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 27.684113][ T296] FS: 00005555714a4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.693162][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.699778][ T296] CR2: 0000000000000168 CR3: 0000000102f48000 CR4: 00000000003526b0 [ 27.707758][ T296] Call Trace: [ 27.711087][ T296] [ 27.714116][ T296] vfs_rmdir+0x25c/0x560 [ 27.718380][ T296] incfs_kill_sb+0x102/0x220 [ 27.722977][ T296] deactivate_locked_super+0xd2/0x270 [ 27.728362][ T296] deactivate_super+0xb8/0xe0 [ 27.733081][ T296] cleanup_mnt+0x438/0x4d0 [ 27.737523][ T296] __cleanup_mnt+0x1d/0x40 [ 27.741948][ T296] task_work_run+0x1e5/0x260 [ 27.746543][ T296] ? __cfi_task_work_run+0x10/0x10 [ 27.751753][ T296] ? __x64_sys_umount+0x12e/0x180 [ 27.756780][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.762157][ T296] ? __kasan_check_read+0x15/0x20 [ 27.767196][ T296] resume_user_mode_work+0x35/0x50 [ 27.772304][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 27.777784][ T296] do_syscall_64+0x63/0xf0 [ 27.782201][ T296] ? clear_bhb_loop+0x50/0xa0 [ 27.786899][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.792798][ T296] RIP: 0033:0x7fcced99f397 [ 27.797254][ T296] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.816946][ T296] RSP: 002b:00007ffdd6308798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.825515][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcced99f397 [ 27.833596][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd6308850 [ 27.841665][ T296] RBP: 00007ffdd6308850 R08: 00007ffdd6309850 R09: 00000000ffffffff [ 27.849665][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd63098e0 [ 27.857650][ T296] R13: 00007fcceda344bb R14: 000000000000684c R15: 00007ffdd6309920 [ 27.865641][ T296] [ 27.868694][ T296] Modules linked in: [ 27.872703][ T296] CR2: 0000000000000168 [ 27.876856][ T296] ---[ end trace 0000000000000000 ]--- [ 27.882333][ T296] RIP: 0010:ihold+0x2a/0x70 [ 27.886855][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 1d 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 cc 03 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 27.906660][ T296] RSP: 0018:ffffc9000b5efcc8 EFLAGS: 00010246 [ 27.912815][ T296] RAX: ffff88812abbdf00 RBX: 0000000000000000 RCX: ffff88812abbdf00 [ 27.920873][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.928869][ T296] RBP: ffffc9000b5efcd8 R08: ffffffff88bbb947 R09: 1ffffffff1177728 [ 27.937003][ T296] R10: dffffc0000000000 R11: fffffbfff1177729 R12: 0000000000000000 [ 27.945190][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 27.953334][ T296] FS: 00005555714a4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.962290][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.968904][ T296] CR2: 0000000000000168 CR3: 0000000102f48000 CR4: 00000000003526b0 [ 27.976898][ T296] Kernel panic - not syncing: Fatal exception [ 27.983242][ T296] Kernel Offset: disabled [ 27.987596][ T296] Rebooting in 86400 seconds..