last executing test programs: 2.970977747s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f00000001c0), &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000380)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x2, 0x4}}}, &(0x7f0000000440)=0x0) capset(0x0, 0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000000480), r5, 0x2) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000004c0)={0x2e, 0x5, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x31, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@any_dev={0x4, 0xea1, 0x0, 0x0, 0x1000, 0x10001, 0xffffffffffffffff, 0x0, 0x14}}}, &(0x7f0000000580)) syz_ublk_setup_queues(r8, r7, &(0x7f00000005c0), &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400}}], 0x1, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) unlinkat(0xffffffffffffff9c, &(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mount$cgroup(0x0, 0x0, 0x0, 0x60812, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000002640)={{0xa, 0x4e24, 0xfa, @empty}, {0xa, 0x4e20, 0x1, @private2, 0x8}, 0x1, {[0x9, 0x3, 0x2, 0x5, 0x0, 0x1, 0x8, 0x4]}}, 0x5c) r10 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r10, 0xc080661a, &(0x7f0000000240)={@desc={0x1, 0x0, @desc1}}) 2.93628457s ago: executing program 2 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SMI(r2, 0xaeb7) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba000000009a009ab504e400b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x63}], 0x1, 0x6, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) setresuid(0xee01, 0xee01, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000200)={'bridge0\x00', &(0x7f0000000300)=@ethtool_ringparam={0x9, 0x0, 0x6}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000013, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000080)=0x8000, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f00000000c0)=0x2, 0x4) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) recvmmsg(r4, &(0x7f0000000200), 0x1, 0x40002142, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.737852581s ago: executing program 2 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x12, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) (async, rerun: 64) listen(r0, 0x0) (rerun: 64) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (rerun: 32) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000007c0)='\x00') ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffff3) (async) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x1000) (async) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) (async) bind$inet6(r2, &(0x7f0000000580)={0xa, 0x4e20, 0xb, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000005c0)=[{{&(0x7f0000000600)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$FUSE_POLL(r4, &(0x7f0000000400)={0x27}, 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000740)={r4, &(0x7f0000000640)='syztnl2\x00', 0x200000, &(0x7f0000000680)={@align=0x6, {0xb9e, 0x7f, 0x0, 0x7}}, 0x6, &(0x7f00000006c0), &(0x7f0000000700)=0x1}) (async) getpeername$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', r5, 0x3a, 0x5, 0x6, 0x57, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x7800, 0x0, 0x8}}) socketpair(0x9, 0x3, 0x7fff, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xe0088021}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x14, 0x100, 0x70bd28, 0x25dfdbfe, {0x27, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x20, 0x1, "531a1428da8b134e8e33f54145eb60581ad3204c08cacdc9ac720f5a"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "b76e32a22bb28f734eb3528bef9b6a2d2061baedad82425cad1104cf1e362c72399b930ed8ee1ea1922ede6464ff98211f2028b29471da9ca698add68ae74ca533977b5b864ed4d2f56becfe2c24ff47b4b5f4ceb183773c55db607a20de03ea280375a2c70932e5fabe5de92cdd3bebb6776fdd9db4038b6646b756446a8ea092686cad37d5aa988df7b7c485ee9a5eef0ad3"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "5c28c7e303e797b26bfd0a60babc30e96de51dbf3b49cc621ea1bf657f577b667644681c0174c017b924b2b830f31b655ad1d7742cb9e9256857ff436e2d0d133505a92b0c2701c5a32cc86928"}]}, 0x120}, 0x1, 0x0, 0x0, 0x40814}, 0xa004) (async) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304006e22"], 0x54}}, 0x20044010) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async, rerun: 64) r7 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="24000000180003041dfffd946f610500020100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0) (async) r8 = socket$inet6(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f00000003c0)=[{0x48, 0x0, 0x1, 0xffeffffe}, {0x16}]}, 0x10) (async) sendto$inet6(r8, &(0x7f0000000380)="1c000000120044c182668d867d3d94863449050f0c1000001049b23a", 0x5e, 0x0, 0x0, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18) 2.676462357s ago: executing program 2 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', 0x0, 0x0, 0x0) clock_settime(0x7, &(0x7f0000000580)={0x0, 0x989680}) mkdirat(0xffffffffffffffff, &(0x7f0000000500)='./dev\x00', 0x5f) mount(0x0, 0x0, 0x0, 0x8410, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_setup(0x2, &(0x7f0000000300)) mkdirat(r3, &(0x7f0000000540)='./proc\x00', 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a027b3ff82e875988b147043022effff"], 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x42340, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/bdi/1:0/strict_limit\x00', 0x1, 0x0) write$khugepaged_scan(r4, &(0x7f0000000180), 0x8) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000600)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$inet6(0xa, 0x802, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f00000001c0)={0x0, 0xffffffffffffff80}) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='27', 0x2) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000140)=ANY=[], 0x0) 2.331094932s ago: executing program 0 (id=14): r0 = syz_ublk_setup_io_uring(0x7d3, &(0x7f00000002c0)={0x0, 0xf9b, 0x800, 0x1, 0x8039f}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x240, &(0x7f00000000c0)={0x0, 0xfd35, 0x40000, 0x0, 0x307, 0x0, r0}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x181}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') fchdir(r3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001840)={&(0x7f0000675000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/89, 0x59, 0x1, &(0x7f0000000840)=""/4096, 0x1000}, &(0x7f0000001880)=0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)=@secondary) add_key(&(0x7f0000000500)='asymmetric\x00', 0x0, &(0x7f0000000540)="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", 0x1d8, r5) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r6, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r6}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x20010, r1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000740), 0x80000, 0x0) 2.185721857s ago: executing program 0 (id=15): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f00000004c0)='-B\xd5NI\xc5j\x9a\brX\x0e\x00\x9a<\xfe\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x7f\xac\xacvN]\xdanh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xc9qn+\xb8h\xd1A\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xab\xfb\x003\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb9\xffa\xa9\xb2\x04=\xabQ\xf7\x05\x81\x01\xe5\x18\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x182\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\b\x00\x00\x00\x00\x00\x00\x00\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16\x0e\x14\xc0\xb8\x88`W\xa9\xef\'\xe1\xee[\xac^\x00\x00\x00\x98a\xdaM\xfe\t\xfc\xfd\xb8\t\x97\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00on{\xf1\\\xb1\xf2c\x8e\xeb\xf4\xd0\xf7\x8f\xcc0\xdas\xb4\x7f\x14\xd1\xf30\xbd\xb6\x9cO%\xc4\xe5c\xbd\x99\xe3\"\xf7\xce', 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone3(0x0, 0xffffffffffffff02) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x2000007, 0x100010, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000700)='root/proc/sys\x00', 0x10000, 0x0) lseek(r3, 0x1, 0x0) getdents(r3, 0x0, 0x3f) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000000000), 0x1c) getsockopt$inet6_buf(r5, 0x29, 0x3d, 0x0, &(0x7f0000000080)=0x37) socket$nl_generic(0x10, 0x3, 0x10) 2.084468927s ago: executing program 0 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20083, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000095}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000200)='./trace\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) (rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/trace_clock\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='x86-tsc\n', 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x62, &(0x7f0000000740)=[{0x7, 0xff, 0x7, 0x5}, {0x4, 0x4, 0x3, 0x7f}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) (async) eventfd(0xe2b) (async, rerun: 64) futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x1) (async, rerun: 64) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x2, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x5, 0x3, 0x0, 0x1b, 0x6, 0xb0, 0x2, 0x5, 0x9, 0xc0, 0x6, 0x8, 0x4}, {0xac, 0xff, 0x1, 0x4, 0x83, 0xe3, 0x4, 0x8, 0x7, 0xbd, 0x4, 0x4}, {0x1, 0x5, 0x0, 0x2, 0xf, 0x2, 0x8, 0x0, 0x8, 0x2, 0x6, 0x4, 0x2000000000000}], 0x3}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) (async, rerun: 32) mount(&(0x7f0000000540)=@filename='./dev/sda1\x00', &(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='ext4\x00', 0x8410, 0x0) (async) chdir(&(0x7f0000000600)='./mnt\x00') (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000680)=@v1={0x0, @adiantum, 0x4, @desc1}) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd(0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x83, 0xe0, 0x1, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x8, 0x9, 0xc9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x95, {0x8, 0x25, 0x1, 0x81, 0x9, 0x6, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x82, 0x3, 0xa, 0x2}}}}}}}}]}}, 0x0) (async) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000340)={r7}) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003040000000403010cd7c77c8f5bc06ff3"], 0x0, 0x0, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xfffffffffffffe8e, 0x2a, 0xb2, 0x2, 0x6e, 0x9, 0x1c, 0x2, 0x5}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000006c0)=ANY=[@ANYBLOB="24000400400010000000496a1480e4953571123e1f5ab468ebbf0e81c0f087d90ffdd50de1d74fc734e813a05e54c9a9343ad074d7dc90a84db95469bf97c43c5e4a88f67594ecbee6"], &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x94}, &(0x7f0000000840)={0x40, 0xb, 0x2, '!\x00'}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000000)={0x40, 0x19, 0x2, "78d6"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x3}, 0x0, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0xc1}}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 1.96690404s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) readlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)=""/222, 0xde) syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat6\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x111101, 0x80) 1.788627548s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='=lgo=\"K', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000240)='=lgo=\"K', 0x7) (async) 1.788370988s ago: executing program 1 (id=21): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x17c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000500)={&(0x7f0000000600), 0x214000, 0x1000, 0x3, 0x1}, 0x20) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f00000006c0)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000700)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=ANY=[@ANYRESHEX=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x24044085}, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x80040, 0x90, 0x3d}, 0x18) mkdirat(r4, &(0x7f0000000680)='./file0/file0\x00', 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000300)=@arm64) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r9, &(0x7f0000000540)="a9cf32ce2730214967c5961c90e09a59f43dfc48de0e3a43acb536ab02d405928289c484cec71c043384d2dad705c73f0419b8cbdc65ff2b91b401be160acece90df79d0f8c1793b9d46e0af9cfe314b466c0329c6ee5356eb10375a3407efc483bb5cc5b8f8e47a60fa47bdb54f84126ad3ee3ddac624db28cdcd7a0157279d36d7d67a2036523d7fb487a4b7dfb26b9908476289e756dcca54b3aac18f4ebaa0ff5b33cf52dc21284052efa99bb6638e76883d72a87bf442faede01c", 0xbd) setresuid(0x0, 0xee00, 0x0) keyctl$setperm(0x5, r8, 0x30925) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)=""/152, 0x98) 1.56930334s ago: executing program 0 (id=22): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x40042, 0x0) read$snapshot(r2, &(0x7f0000000440)=""/4096, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001480), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f00000014c0), 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x3d, 0x0, &(0x7f0000001500)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000017c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000001800)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000001840)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f00000018c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}, 0xffffffffffffffff}], 0x1, 0x0, 0x0) r10 = openat$cgroup_ro(r1, &(0x7f00000003c0)='cgroup.freeze\x00', 0x275a, 0x0) sendfile(r10, r1, &(0x7f0000000000)=0x2, 0x4) ftruncate(r9, 0x400000008008976) 1.08481852s ago: executing program 3 (id=23): capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)={0x0, 0x2}) (async) setpriority(0x2, 0x0, 0xd2f4) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) dup(r0) write$cgroup_int(r0, &(0x7f0000000040)=0x8000000001cb, 0x12) 1.008581097s ago: executing program 3 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async, rerun: 64) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r3, &(0x7f00000001c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000180)) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000680), 0x88841, 0x0) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x200, 0x138, 0x1, 0x0, 0x25411, 0x0, 0x0, @by_dev={r6}, [@verity={0x0, 0x48, 0x0, 0xc8, 'verity\x00', {'1', 0x20, @ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, '512', 0x20, '4096', 0x20, 0x61, 0x20, 0xfa, 0x20, 'sha512', 0x20, @hex16=[0x30, 0x66, 0x65, 0x39, 0x61, 0x62, 0x63, 0x38, 0x30, 0x66, 0x66, 0x32, 0x39, 0x57, 0x31, 0x36, 0x65, 0x62, 0x63, 0x63, 0x62, 0x63, 0x38, 0x36, 0x63, 0x63, 0x34, 0x62, 0x38, 0x30, 0x61, 0x31], 0x20, @hex=@hex4=[0x36, 0x30, 0x64, 0x52, 0xc, 0x7, 0x31, 0x62], ' 1 ignore_zero_blocks'}}]}) 833.411755ms ago: executing program 1 (id=25): openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x0) mount(&(0x7f0000000500)=@filename='./dev/sda1\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f00000005c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x14) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000780)={0x0, 0x25, 0x0, @thr={&(0x7f0000000640)="a68b759d46afe00866e83b187c6edc9a0bbe60c2fe785cf3a9fcfdd8f8ea80cdcd52db39477db6bf4ebf20c3181aa149d1460953f3a38858601b378f36535e2cf9c50e7aa6f70204dadd7bb3268040c85b0d32363ee6b06b037e5c43287e540ebdb9a15c7183b5b246d8c5eea70d5ccaedf49b901d89c3381a430e4765e7f8db69ab5c888604ffe381e624a55238400874939f19994ecd6585ea46c71d80c743257d3736d0dbc7c1d627179a1eb87bf05d785c5ecd8cc7262e8113e470d871a526ac4f15b4736dd6b4bf3921e48902b059968847df3b7795fa30d54dff", &(0x7f0000000740)="8da125c6480fcd2b7181b1fe200967ed5e6fa0579b7883385c27bdbecdbd69651728d21e0cb8838c2b4825a5de"}}, &(0x7f00000007c0)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x1c, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x2}, @child_ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x18}}}, 0x40}]}) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000811}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffffffe, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x38}}, 0x4000021) 795.932309ms ago: executing program 1 (id=26): r0 = syz_io_uring_setup(0x8d2, &(0x7f0000000000)={0x0, 0x0, 0x3010}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x3482, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) memfd_create(0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r2, &(0x7f00000002c0)='n', 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) listen(r3, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304006e22"], 0x54}}, 0x20044010) ioctl$TCSBRKP(r1, 0x5425, 0x6) poll(&(0x7f0000000180)=[{r0, 0xd010}], 0x1, 0x9) mremap(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000071c000/0x1000)=nil) 672.564662ms ago: executing program 0 (id=27): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB='<'], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4033, 0xfc1}, {&(0x7f0000001580)=""/217, 0xd9}, {&(0x7f0000001680)=""/124, 0x7c}, {&(0x7f0000001700)=""/4084, 0xff4}, {&(0x7f0000002700)=""/250, 0xfa}, {&(0x7f0000002800)=""/293, 0x125}, {&(0x7f0000002940)=""/73, 0x49}, {&(0x7f00000029c0)=""/231, 0xe7}, {&(0x7f0000002ac0)=""/145, 0x91}], 0x9}, 0x7ff}, {{0x0, 0x0, 0x0}, 0xc00}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}], 0x8, 0x40, 0x0) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write$tun(r1, &(0x7f0000000540)=ANY=[], 0x12) 195.118021ms ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000028c0)='./file0\x00', &(0x7f0000002900), 0x90, &(0x7f0000002940)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004a00)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004a80)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f0000004ac0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000006bc0)='./file0\x00', 0x0, 0x100) syz_fuse_handle_req(r0, &(0x7f0000006c00)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008cc0)={0x78, 0x0, 0x1, {0x80000001, 0x9, 0x0, {0x5, 0x8, 0x0, 0xfffffffffffff3a2, 0x100, 0x7, 0x6, 0x8, 0x3ff, 0x2000, 0x0, r2, r3, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000640)={0x1, 0xffffffffffffff80, 0xf0, &(0x7f0000000540)=""/240}) 163.280534ms ago: executing program 1 (id=29): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x6142, 0xbc) mkdir(&(0x7f0000000300)='./bus\x00', 0xde) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1d0) memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000200021002bbd7000000000000a060000000000000000000014000100"], 0x30}}, 0x0) r1 = socket(0x10, 0x803, 0x0) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x2, 0x0, 0x2}]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001c00010000000000160000000a0009ed0700000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@allocspi={0x100, 0x16, 0x1, 0x70bd27, 0x25dfdbff, {{{@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x2, 0x4e23, 0x9, 0xa, 0x20, 0x80, 0x2f}, {@in6=@loopback, 0x4d5, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xf, 0xfffffffffffffff6, 0x0, 0x1, 0x9, 0x6, 0xff, 0xf2}, {0x4eff, 0xfff, 0x10000, 0x7}, {0xe, 0xb, 0xe7}, 0x70bd25, 0x3500, 0x8, 0x2, 0x5}, 0x4, 0xa}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x5}, 0x0) io_getevents(r2, 0x0, 0x1, &(0x7f0000000380)=[{}], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000580)=0x1000000, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') fchdir(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000280), 0x0, 0x100) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@nullb, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)) unlink(&(0x7f0000000080)='./file0/file1\x00') 162.470684ms ago: executing program 3 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000600)={0x2002, 0x40, 0xe128c53367293934}, 0x18) mkdirat(r0, &(0x7f00000005c0)='./dev\x00', 0x30ffbfd99a71ea15) pivot_root(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x8, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000002c0)=0x3, 0x4) bind$can_raw(r1, &(0x7f0000000540), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000580)=0x9b3f, 0x4) chdir(&(0x7f0000000300)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1cd042, 0x224) io_setup(0x20fe, &(0x7f0000000380)=0x0) io_submit(r3, 0x3, &(0x7f00000003c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000440)='p', 0x8200, 0x8800000}]) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r4 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000240)={@desc={0x1, 0x0, @desc1}}) 80.643163ms ago: executing program 1 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) readlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)=""/222, 0xde) syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat6\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x111101, 0x80) 13.666039ms ago: executing program 3 (id=32): fsmount(0xffffffffffffffff, 0x1, 0x1) (async) r0 = fsmount(0xffffffffffffffff, 0x1, 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@-&.'}, {}], 0xa, "c5690eae214a9e6a5c5dfed63d1c74ac0da3be7ef48ed0c5f05c73fedf4415ca19325b03d513c4030a97d7f53daecf0931b3f1cd771a03ba9b0db8aae77c95681603d7433a79fc8f7190670700da72edc9f4c227b8b944ba0fcae4955859261fa1c7ae544f41c8f2bd14d40a72146db38c8d7bd994bd946942187dd6b53171228ca21f88c7bf8ef5d463b33aaefe8fe5"}, 0xa1) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x84000) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000140)=0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000180)=0x1, 0x4) ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) (async) r4 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000200)) read$FUSE(r0, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000002280)={0x5, 0x4, 0xd000, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x2000, r2}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000002280)={0x5, 0x4, 0xd000, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x2000, r2}) r6 = accept4$tipc(r0, 0x0, &(0x7f0000002340), 0x80000) close(r6) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000002380)={0x1, {{0xa, 0x4e20, 0x40000000, @mcast1, 0xfffffff7}}, {{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x4}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000002380)={0x1, {{0xa, 0x4e20, 0x40000000, @mcast1, 0xfffffff7}}, {{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x4}}}, 0x108) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000024c0)={0x1, 0x8}, 0x2) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000002580)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002540)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bind$vsock_stream(r0, &(0x7f00000025c0)={0x28, 0x0, 0x2711, @hyper, 0x1}, 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000002600)={0x0, 0x2}) prlimit64(r5, 0xd, &(0x7f0000002640)={0x0, 0x9}, &(0x7f0000002680)) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000002940)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002900)={&(0x7f0000002700)={0x1f4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "bf9d3b0b5364102695eba724ff4cf12829742787df7fe39fd24f125776c9c4196459"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @loopback, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffc00000, @private1, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @private0, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffffff, @empty, 0x401}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe4c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x564}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000014) (async) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000002940)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002900)={&(0x7f0000002700)={0x1f4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "bf9d3b0b5364102695eba724ff4cf12829742787df7fe39fd24f125776c9c4196459"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @loopback, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffc00000, @private1, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @private0, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffffff, @empty, 0x401}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe4c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x564}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000014) ioctl$XFS_IOC_GETBMAPA(r4, 0xc020582c, &(0x7f0000002980)={0x0, 0xffff, 0x8, 0x7, 0xe7ce}) (async) ioctl$XFS_IOC_GETBMAPA(r4, 0xc020582c, &(0x7f0000002980)={0x0, 0xffff, 0x8, 0x7, 0xe7ce}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000029c0), 0x4) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000002a00)={r3}) (async) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000002a00)={r3}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000002a40)={0x1, 0x9}) fstatfs(0xffffffffffffffff, &(0x7f0000002a80)=""/226) (async) fstatfs(0xffffffffffffffff, &(0x7f0000002a80)=""/226) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000002b80)=0x8) 0s ago: executing program 3 (id=33): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000006b00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7974400921e00000000000", @ANYRESDEC=0x0]) r1 = gettid() r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0xb, 0x4, 0x10}) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xffffffff7ffffffc]}, 0x8) readv(r3, &(0x7f0000000140)=[{&(0x7f0000006700)=""/161, 0xa1}], 0x1) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000006b80)={0x4, 0x0, 0x0, 0x18b, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@snapshot={0x0, 0x2008, 0x0, 0x90, 'snapshot\x00', {@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'PO', 0x20, '16', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) tkill(r1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004600)=ANY=[@ANYBLOB="fc000000190001002bbd700000000000ff0201000000000000000000000000e7ff020000000000000000000000000001000a00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000006000000000004003c00000000000000ffffffffffffffff000000000020000000000000000000000100000000000000000a000000000000feffffffff7f4000000200000000000001000000000000000100000000000000440005000000000000000000000000000000000100000000320000000a0000000000000000000000000000000000000006000000040200"/180], 0xfc}}, 0x8001) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000004700)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000004740)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = syz_usb_connect(0x3, 0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000006880)=ANY=[], 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000006900)='./proc\x00', &(0x7f0000006940)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000006980)='./proc/sys/kernel/hostname\x00', 0x2, 0x0) write(r8, 0x0, 0x0) pselect6(0x40, &(0x7f00000069c0)={0x6, 0x7, 0xffe0000000000000, 0x300, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000006a00)={0x8}, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000006a40)={0x40, 0x2, 0x1}, 0x10) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r10, &(0x7f0000006a80)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. [ 20.056981][ T36] audit: type=1400 audit(1793468955.150:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.058119][ T286] cgroup: Unknown subsys name 'net' [ 20.079757][ T36] audit: type=1400 audit(1793468955.150:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.107215][ T36] audit: type=1400 audit(1793468955.190:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.107372][ T286] cgroup: Unknown subsys name 'devices' [ 20.214394][ T286] cgroup: Unknown subsys name 'hugetlb' [ 20.220011][ T286] cgroup: Unknown subsys name 'rlimit' [ 20.332250][ T36] audit: type=1400 audit(1793468955.420:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.355518][ T36] audit: type=1400 audit(1793468955.420:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.380340][ T36] audit: type=1400 audit(1793468955.420:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.414985][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.423844][ T36] audit: type=1400 audit(1793468955.520:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.449299][ T36] audit: type=1400 audit(1793468955.520:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.498059][ T36] audit: type=1400 audit(1793468955.590:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.498604][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.523570][ T36] audit: type=1400 audit(1793468955.590:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.393794][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.400861][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.407997][ T294] bridge_slave_0: entered allmulticast mode [ 21.414312][ T294] bridge_slave_0: entered promiscuous mode [ 21.423768][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.430810][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.437996][ T293] bridge_slave_0: entered allmulticast mode [ 21.444351][ T293] bridge_slave_0: entered promiscuous mode [ 21.452131][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.459207][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.466280][ T293] bridge_slave_1: entered allmulticast mode [ 21.472718][ T293] bridge_slave_1: entered promiscuous mode [ 21.478735][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.485837][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.492945][ T294] bridge_slave_1: entered allmulticast mode [ 21.499105][ T294] bridge_slave_1: entered promiscuous mode [ 21.554383][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.561437][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.568558][ T296] bridge_slave_0: entered allmulticast mode [ 21.574777][ T296] bridge_slave_0: entered promiscuous mode [ 21.597420][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.604541][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.611640][ T296] bridge_slave_1: entered allmulticast mode [ 21.617907][ T296] bridge_slave_1: entered promiscuous mode [ 21.624005][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.631054][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.638191][ T295] bridge_slave_0: entered allmulticast mode [ 21.644570][ T295] bridge_slave_0: entered promiscuous mode [ 21.651067][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.658159][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.665300][ T295] bridge_slave_1: entered allmulticast mode [ 21.671501][ T295] bridge_slave_1: entered promiscuous mode [ 21.804690][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.811751][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.819055][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.826092][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.839391][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.846453][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.853734][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.860838][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.877189][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.884247][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.891506][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.898543][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.927420][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.934504][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.941758][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.948816][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.975881][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.983470][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.990630][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.998387][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.005695][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.013151][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.020462][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.027843][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.050789][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.057872][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.065805][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.072881][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.080364][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.087409][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.095487][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.102507][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.110138][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.117198][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.131388][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.138450][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.165445][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.172530][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.180316][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.187391][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.217947][ T295] veth0_vlan: entered promiscuous mode [ 22.229249][ T293] veth0_vlan: entered promiscuous mode [ 22.250763][ T296] veth0_vlan: entered promiscuous mode [ 22.259387][ T294] veth0_vlan: entered promiscuous mode [ 22.275408][ T295] veth1_macvtap: entered promiscuous mode [ 22.289236][ T296] veth1_macvtap: entered promiscuous mode [ 22.297367][ T294] veth1_macvtap: entered promiscuous mode [ 22.304175][ T293] veth1_macvtap: entered promiscuous mode [ 22.343715][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.414755][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.422002][ T323] syz.0.5: attempt to access beyond end of device [ 22.422002][ T323] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 22.452616][ T323] FAT-fs (loop0): unable to read boot sector [ 22.527488][ T329] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 22.932672][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.082610][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 23.088871][ T311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 23.099814][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 23.113020][ T311] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 23.122128][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.131595][ T311] usb 3-1: config 0 descriptor?? [ 23.140017][ T311] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 24.045949][ T389] FAULT_INJECTION: forcing a failure. [ 24.045949][ T389] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 24.059113][ T389] CPU: 0 UID: 0 PID: 389 Comm: syz.2.11 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 24.059138][ T389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.059153][ T389] Call Trace: [ 24.059158][ T389] [ 24.059164][ T389] __dump_stack+0x21/0x30 [ 24.059178][ T389] dump_stack_lvl+0x140/0x1c0 [ 24.059188][ T389] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.059199][ T389] dump_stack+0x19/0x20 [ 24.059208][ T389] should_fail_ex+0x3c2/0x510 [ 24.059223][ T389] should_fail+0xf/0x20 [ 24.059237][ T389] should_fail_usercopy+0x1e/0x30 [ 24.059252][ T389] _copy_from_user+0x20/0xa0 [ 24.059262][ T389] raw_ioctl+0xb8a/0x37a0 [ 24.059275][ T389] ? handle_mm_fault+0x16fe/0x1ba0 [ 24.059286][ T389] ? __cfi_raw_ioctl+0x10/0x10 [ 24.059296][ T389] ? selinux_file_ioctl+0x732/0x1480 [ 24.059310][ T389] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 24.059326][ T389] ? __fget_files+0x2bc/0x330 [ 24.059336][ T389] ? bpf_lsm_file_ioctl+0xd/0x20 [ 24.059347][ T389] ? security_file_ioctl+0x3e/0x110 [ 24.059360][ T389] ? __cfi_raw_ioctl+0x10/0x10 [ 24.059370][ T389] __se_sys_ioctl+0x126/0x1b0 [ 24.059381][ T389] __x64_sys_ioctl+0x7f/0xa0 [ 24.059390][ T389] x64_sys_call+0x1878/0x2ee0 [ 24.059401][ T389] do_syscall_64+0x57/0xf0 [ 24.059442][ T389] ? clear_bhb_loop+0x50/0xa0 [ 24.059467][ T389] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.059487][ T389] RIP: 0033:0x7fb8a099f1eb [ 24.059512][ T389] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 24.059529][ T389] RSP: 002b:00007fb8a18ddf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 24.059553][ T389] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fb8a099f1eb [ 24.059567][ T389] RDX: 00007fb8a18defd0 RSI: 0000000041015500 RDI: 000000000000000b [ 24.059577][ T389] RBP: 00007fb8a18defd0 R08: 0000000000000001 R09: 00000000ffffffff [ 24.059585][ T389] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8a18ddfa0 [ 24.059592][ T389] R13: 0000200000000140 R14: 0000000000000002 R15: 0000000000000868 [ 24.059600][ T389] [ 24.286975][ T391] capability: warning: `syz.3.23' uses deprecated v2 capabilities in a way that may be insecure [ 24.299631][ T391] block device autoloading is deprecated and will be removed. [ 24.503947][ T395] device-mapper: table: 252:0: verity: Invalid number of feature args (-EINVAL) [ 24.513058][ T395] device-mapper: ioctl: error adding target to table [ 24.547779][ T402] Zero length message leads to an empty skb [ 25.212960][ T36] kauditd_printk_skb: 108 callbacks suppressed [ 25.212977][ T36] audit: type=1400 audit(1793468960.310:182): avc: denied { unlink } for pid=412 comm="syz.3.30" name="#1" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 25.213104][ T414] overlayfs: conflicting lowerdir path [ 25.225868][ T36] audit: type=1400 audit(1793468960.310:183): avc: denied { write } for pid=411 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.266837][ T36] audit: type=1400 audit(1793468960.350:184): avc: denied { create } for pid=412 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.286585][ T36] audit: type=1400 audit(1793468960.350:185): avc: denied { setopt } for pid=412 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.306483][ T36] audit: type=1400 audit(1793468960.350:186): avc: denied { bind } for pid=412 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.359080][ T36] audit: type=1400 audit(1793468960.450:187): avc: denied { read } for pid=421 comm="syz.3.32" dev="nsfs" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.372437][ T425] fuse: Bad value for 'user_id' [ 25.380141][ T36] audit: type=1400 audit(1793468960.450:188): avc: denied { open } for pid=421 comm="syz.3.32" path="net:[4026532511]" dev="nsfs" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.385206][ T425] fuse: Bad value for 'user_id' [ 25.469244][ T426] ================================================================== [ 25.477633][ T426] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 25.485470][ T426] Read of size 8 at addr ffff888112fac598 by task syz.3.33/426 [ 25.493051][ T426] [ 25.495373][ T426] CPU: 0 UID: 0 PID: 426 Comm: syz.3.33 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 25.495391][ T426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.495399][ T426] Call Trace: [ 25.495404][ T426] [ 25.495410][ T426] __dump_stack+0x21/0x30 [ 25.495425][ T426] dump_stack_lvl+0x140/0x1c0 [ 25.495434][ T426] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.495445][ T426] ? __cfi__printk+0x10/0x10 [ 25.495460][ T426] print_address_description+0x71/0x210 [ 25.495477][ T426] print_report+0x4a/0x70 [ 25.495491][ T426] kasan_report+0x162/0x1a0 [ 25.495503][ T426] ? snapshot_ctr+0x586/0x1350 [ 25.495514][ T426] ? snapshot_ctr+0x586/0x1350 [ 25.495524][ T426] __asan_report_load8_noabort+0x18/0x20 [ 25.495539][ T426] snapshot_ctr+0x586/0x1350 [ 25.495550][ T426] ? dm_split_args+0xa1/0x740 [ 25.495564][ T426] ? __cfi_snapshot_ctr+0x10/0x10 [ 25.495574][ T426] ? dm_split_args+0x5d0/0x740 [ 25.495588][ T426] dm_table_add_target+0x59c/0xcb0 [ 25.495603][ T426] table_load+0x2eb/0x7d0 [ 25.495615][ T426] ? __check_object_size+0x99/0x870 [ 25.495630][ T426] ? __cfi_table_load+0x10/0x10 [ 25.495642][ T426] ? __kasan_check_write+0x18/0x20 [ 25.495655][ T426] ? __cfi_table_load+0x10/0x10 [ 25.495667][ T426] dm_ctl_ioctl+0x8f3/0xde0 [ 25.495679][ T426] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 25.495693][ T426] ? __fget_files+0x2bc/0x330 [ 25.495703][ T426] ? bpf_lsm_file_ioctl+0xd/0x20 [ 25.495714][ T426] ? security_file_ioctl+0x3e/0x110 [ 25.495736][ T426] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 25.495749][ T426] __se_sys_ioctl+0x126/0x1b0 [ 25.495760][ T426] __x64_sys_ioctl+0x7f/0xa0 [ 25.495770][ T426] x64_sys_call+0x1878/0x2ee0 [ 25.495781][ T426] do_syscall_64+0x57/0xf0 [ 25.495791][ T426] ? clear_bhb_loop+0x50/0xa0 [ 25.495805][ T426] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.495817][ T426] RIP: 0033:0x7f06d7b9f559 [ 25.495828][ T426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.495836][ T426] RSP: 002b:00007f06d8a63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 25.495849][ T426] RAX: ffffffffffffffda RBX: 00007f06d7e26090 RCX: 00007f06d7b9f559 [ 25.495857][ T426] RDX: 00002000000006c0 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 25.495864][ T426] RBP: 00007f06d7c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 25.495870][ T426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.495876][ T426] R13: 00007f06d7e26128 R14: 00007f06d7e26090 R15: 00007fff20acf0a8 [ 25.495885][ T426] [ 25.495889][ T426] [ 25.756221][ T426] Allocated by task 426: [ 25.760450][ T426] kasan_save_track+0x3e/0x80 [ 25.765207][ T426] kasan_save_alloc_info+0x3a/0x50 [ 25.770313][ T426] __kasan_kmalloc+0x96/0xb0 [ 25.774891][ T426] __kmalloc_cache_node_noprof+0x225/0x430 [ 25.780695][ T426] dm_get_table_device+0x1e3/0x6c0 [ 25.785886][ T426] dm_get_device+0x32b/0x7f0 [ 25.790474][ T426] snapshot_ctr+0x292/0x1350 [ 25.795054][ T426] dm_table_add_target+0x59c/0xcb0 [ 25.800157][ T426] table_load+0x2eb/0x7d0 [ 25.804480][ T426] dm_ctl_ioctl+0x8f3/0xde0 [ 25.808972][ T426] __se_sys_ioctl+0x126/0x1b0 [ 25.813637][ T426] __x64_sys_ioctl+0x7f/0xa0 [ 25.818216][ T426] x64_sys_call+0x1878/0x2ee0 [ 25.822909][ T426] do_syscall_64+0x57/0xf0 [ 25.827327][ T426] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.833225][ T426] [ 25.835539][ T426] Freed by task 426: [ 25.839417][ T426] kasan_save_track+0x3e/0x80 [ 25.844082][ T426] kasan_save_free_info+0x44/0x50 [ 25.849097][ T426] __kasan_slab_free+0x5f/0x80 [ 25.853849][ T426] kfree+0x158/0x440 [ 25.857737][ T426] dm_put_table_device+0x298/0x2e0 [ 25.862834][ T426] dm_get_device+0x571/0x7f0 [ 25.867414][ T426] snapshot_ctr+0x435/0x1350 [ 25.871990][ T426] dm_table_add_target+0x59c/0xcb0 [ 25.877094][ T426] table_load+0x2eb/0x7d0 [ 25.881417][ T426] dm_ctl_ioctl+0x8f3/0xde0 [ 25.885912][ T426] __se_sys_ioctl+0x126/0x1b0 [ 25.890602][ T426] __x64_sys_ioctl+0x7f/0xa0 [ 25.895198][ T426] x64_sys_call+0x1878/0x2ee0 [ 25.899870][ T426] do_syscall_64+0x57/0xf0 [ 25.904275][ T426] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.910199][ T426] [ 25.912532][ T426] The buggy address belongs to the object at ffff888112fac580 [ 25.912532][ T426] which belongs to the cache kmalloc-96 of size 96 [ 25.926399][ T426] The buggy address is located 24 bytes inside of [ 25.926399][ T426] freed 96-byte region [ffff888112fac580, ffff888112fac5e0) [ 25.940013][ T426] [ 25.942325][ T426] The buggy address belongs to the physical page: [ 25.948840][ T426] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112fac [ 25.957703][ T426] flags: 0x4000000000000000(zone=1) [ 25.963066][ T426] page_type: f5(slab) [ 25.967037][ T426] raw: 4000000000000000 ffff888100041280 dead000000000122 0000000000000000 [ 25.975610][ T426] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 25.984186][ T426] page dumped because: kasan: bad access detected [ 25.990590][ T426] page_owner tracks the page as allocated [ 25.996299][ T426] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 296, tgid 296 (syz-executor), ts 25354811212, free_ts 25354798186 [ 26.015303][ T426] post_alloc_hook+0x37d/0x3b0 [ 26.020061][ T426] prep_new_page+0x2d/0x180 [ 26.024556][ T426] get_page_from_freelist+0x4aea/0x4ba0 [ 26.030098][ T426] __alloc_pages_noprof+0x35a/0x7e0 [ 26.035286][ T426] alloc_slab_page+0x6b/0x1e0 [ 26.039975][ T426] allocate_slab+0x69/0x430 [ 26.044462][ T426] ___slab_alloc+0x591/0x8c0 [ 26.049038][ T426] __kmalloc_cache_node_noprof+0x2ae/0x430 [ 26.054861][ T426] __get_vm_area_node+0x150/0x390 [ 26.059899][ T426] __vmalloc_node_range_noprof+0x340/0x1300 [ 26.065782][ T426] vzalloc_noprof+0x103/0x1d0 [ 26.070462][ T426] alloc_counters+0x75/0x520 [ 26.075049][ T426] do_ipt_get_ctl+0xab5/0x1210 [ 26.080345][ T426] nf_getsockopt+0x28b/0x2b0 [ 26.084937][ T426] ip_getsockopt+0x15b/0x200 [ 26.089536][ T426] tcp_getsockopt+0x103/0x130 [ 26.094194][ T426] page last free pid 296 tgid 296 stack trace: [ 26.100326][ T426] free_unref_page+0xb99/0xf50 [ 26.105077][ T426] __free_pages+0x6b/0x3b0 [ 26.109483][ T426] vfree+0x3ea/0x5b0 [ 26.113377][ T426] do_ipt_get_ctl+0xef6/0x1210 [ 26.118132][ T426] nf_getsockopt+0x28b/0x2b0 [ 26.122711][ T426] ip_getsockopt+0x15b/0x200 [ 26.127296][ T426] tcp_getsockopt+0x103/0x130 [ 26.131961][ T426] sock_common_getsockopt+0xaf/0xd0 [ 26.137363][ T426] do_sock_getsockopt+0x3a4/0x6c0 [ 26.142393][ T426] __x64_sys_getsockopt+0x1aa/0x250 [ 26.147581][ T426] x64_sys_call+0x10db/0x2ee0 [ 26.152243][ T426] do_syscall_64+0x57/0xf0 [ 26.156643][ T426] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.162524][ T426] [ 26.164833][ T426] Memory state around the buggy address: [ 26.170446][ T426] ffff888112fac480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 26.178490][ T426] ffff888112fac500: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 26.186538][ T426] >ffff888112fac580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 26.194576][ T426] ^ [ 26.199406][ T426] ffff888112fac600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 26.207489][ T426] ffff888112fac680: 00 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc [ 26.215652][ T426] ================================================================== [ 26.232679][ T426] Disabling lock debugging due to kernel taint [ 26.233991][ T36] audit: type=1400 audit(1793468961.320:189): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 26.244718][ T426] device-mapper: table: 252:0: device 1:7 not in table devices list [ 26.260839][ T36] audit: type=1400 audit(1793468961.320:190): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.278852][ T426] device-mapper: table: 252:0: snapshot: COW device cannot be the same as origin device (-EINVAL) [ 26.290688][ T36] audit: type=1400 audit(1793468961.320:191): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.306816][ T426] device-mapper: ioctl: error adding target to table [ 26.328891][ T426] device-mapper: table: 252:0: dm_table_destroy: dm_put_device call missing for 1:7 [ 26.346648][ T10] usb 3-1: USB disconnect, device number 2 [ 26.522677][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.673794][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 26.683538][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 26.694951][ T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 26.704068][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.712062][ T9] usb 4-1: Product: syz [ 26.716263][ T9] usb 4-1: Manufacturer: syz [ 26.720877][ T9] usb 4-1: SerialNumber: syz [ 26.933424][ T9] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 28.376331][ T10] usb 4-1: USB disconnect, device number 2 [ 28.383145][ T10] usblp0: removed